319137][ T6043] do_recvmmsg+0x55a/0x1180 [ 1760.323863][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1760.329058][ T6043] do_syscall_64+0x3d/0xb0 [ 1760.333699][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1760.339778][ T6043] [ 1760.342246][ T6043] Uninit was stored to memory at: [ 1760.347451][ T6043] ___sys_recvmsg+0x522/0x890 [ 1760.352337][ T6043] do_recvmmsg+0x55a/0x1180 [ 1760.356983][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1760.362290][ T6043] do_syscall_64+0x3d/0xb0 [ 1760.367658][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1760.373864][ T6043] [ 1760.376255][ T6043] Uninit was stored to memory at: [ 1760.381490][ T6043] ___sys_recvmsg+0x522/0x890 [ 1760.386463][ T6043] do_recvmmsg+0x55a/0x1180 [ 1760.391100][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1760.396420][ T6043] do_syscall_64+0x3d/0xb0 [ 1760.400976][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1760.407184][ T6043] [ 1760.409575][ T6043] Uninit was stored to memory at: [ 1760.414942][ T6043] ___sys_recvmsg+0x522/0x890 [ 1760.419747][ T6043] do_recvmmsg+0x55a/0x1180 [ 1760.424523][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1760.429685][ T6043] do_syscall_64+0x3d/0xb0 [ 1760.434360][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1760.440446][ T6043] [ 1760.442962][ T6043] Uninit was stored to memory at: [ 1760.448196][ T6043] ___sys_recvmsg+0x522/0x890 [ 1760.453149][ T6043] do_recvmmsg+0x55a/0x1180 [ 1760.457793][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1760.463047][ T6043] do_syscall_64+0x3d/0xb0 [ 1760.467591][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1760.473782][ T6043] [ 1760.476188][ T6043] Uninit was stored to memory at: [ 1760.481376][ T6043] ___sys_recvmsg+0x522/0x890 [ 1760.486303][ T6043] do_recvmmsg+0x55a/0x1180 [ 1760.490941][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1760.496246][ T6043] do_syscall_64+0x3d/0xb0 [ 1760.502786][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1760.508862][ T6043] [ 1760.511287][ T6043] Local variable msg_sys created at: [ 1760.516780][ T6043] do_recvmmsg+0x5c/0x1180 [ 1760.521322][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1760.870439][ T6043] not chained 1820000 origins [ 1760.875695][ T6043] CPU: 1 PID: 6043 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1760.885900][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1760.896075][ T6043] Call Trace: [ 1760.899439][ T6043] [ 1760.902451][ T6043] dump_stack_lvl+0x1c8/0x256 [ 1760.907313][ T6043] dump_stack+0x1a/0x1c [ 1760.911627][ T6043] kmsan_internal_chain_origin+0x78/0x120 [ 1760.917499][ T6043] ? filter_irq_stacks+0x5c/0x1a0 [ 1760.922702][ T6043] ? kmsan_internal_check_memory+0x94/0x530 [ 1760.928748][ T6043] ? do_recvmmsg+0x55a/0x1180 [ 1760.933560][ T6043] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1760.939525][ T6043] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1760.945497][ T6043] ? should_fail+0x3f/0x810 [ 1760.950149][ T6043] ? __stack_depot_save+0x21/0x4b0 [ 1760.955418][ T6043] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1760.961865][ T6043] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1760.969831][ T6043] __msan_chain_origin+0xbd/0x140 [ 1760.975004][ T6043] ___sys_recvmsg+0x522/0x890 [ 1760.979819][ T6043] ? do_recvmmsg+0x5bc/0x1180 [ 1760.984653][ T6043] ? kmsan_internal_check_memory+0x94/0x530 [ 1760.990714][ T6043] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1760.996682][ T6043] do_recvmmsg+0x55a/0x1180 [ 1761.001344][ T6043] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1761.007763][ T6043] ? do_syscall_64+0x3d/0xb0 [ 1761.012573][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1761.017760][ T6043] do_syscall_64+0x3d/0xb0 [ 1761.022308][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1761.028727][ T6043] RIP: 0033:0x7f6a17489279 [ 1761.033246][ T6043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1761.053111][ T6043] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1761.061685][ T6043] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1761.069775][ T6043] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1761.077854][ T6043] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1761.085938][ T6043] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1761.094022][ T6043] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1761.102166][ T6043] [ 1761.107701][ T6043] Uninit was stored to memory at: [ 1761.113188][ T6043] ___sys_recvmsg+0x522/0x890 [ 1761.117997][ T6043] do_recvmmsg+0x55a/0x1180 [ 1761.122732][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1761.127897][ T6043] do_syscall_64+0x3d/0xb0 [ 1761.132516][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1761.138607][ T6043] [ 1761.140996][ T6043] Uninit was stored to memory at: [ 1761.146269][ T6043] ___sys_recvmsg+0x522/0x890 [ 1761.151075][ T6043] do_recvmmsg+0x55a/0x1180 [ 1761.155777][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1761.160967][ T6043] do_syscall_64+0x3d/0xb0 [ 1761.165601][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1761.171741][ T6043] [ 1761.174131][ T6043] Uninit was stored to memory at: [ 1761.179316][ T6043] ___sys_recvmsg+0x522/0x890 [ 1761.184199][ T6043] do_recvmmsg+0x55a/0x1180 [ 1761.188825][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1761.194059][ T6043] do_syscall_64+0x3d/0xb0 [ 1761.198630][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1761.204769][ T6043] [ 1761.207160][ T6043] Uninit was stored to memory at: [ 1761.212431][ T6043] ___sys_recvmsg+0x522/0x890 [ 1761.217235][ T6043] do_recvmmsg+0x55a/0x1180 [ 1761.221943][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1761.227104][ T6043] do_syscall_64+0x3d/0xb0 [ 1761.231737][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1761.237808][ T6043] [ 1761.240194][ T6043] Uninit was stored to memory at: [ 1761.245462][ T6043] ___sys_recvmsg+0x522/0x890 [ 1761.250268][ T6043] do_recvmmsg+0x55a/0x1180 [ 1761.254998][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1761.260163][ T6043] do_syscall_64+0x3d/0xb0 [ 1761.264844][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1761.270917][ T6043] [ 1761.273381][ T6043] Uninit was stored to memory at: [ 1761.278569][ T6043] ___sys_recvmsg+0x522/0x890 [ 1761.283533][ T6043] do_recvmmsg+0x55a/0x1180 [ 1761.288168][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1761.293436][ T6043] do_syscall_64+0x3d/0xb0 [ 1761.297967][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1761.304122][ T6043] [ 1761.306506][ T6043] Uninit was stored to memory at: [ 1761.311769][ T6043] ___sys_recvmsg+0x522/0x890 [ 1761.316572][ T6043] do_recvmmsg+0x55a/0x1180 [ 1761.321200][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1761.326488][ T6043] do_syscall_64+0x3d/0xb0 [ 1761.331040][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1761.337242][ T6043] [ 1761.339631][ T6043] Local variable msg_sys created at: [ 1761.345187][ T6043] do_recvmmsg+0x5c/0x1180 [ 1761.349733][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1761.600674][ T6043] not chained 1830000 origins [ 1761.605746][ T6043] CPU: 1 PID: 6043 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1761.615961][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1761.626130][ T6043] Call Trace: [ 1761.629490][ T6043] [ 1761.632500][ T6043] dump_stack_lvl+0x1c8/0x256 [ 1761.637364][ T6043] dump_stack+0x1a/0x1c [ 1761.641673][ T6043] kmsan_internal_chain_origin+0x78/0x120 [ 1761.647543][ T6043] ? filter_irq_stacks+0x5c/0x1a0 [ 1761.652747][ T6043] ? kmsan_internal_check_memory+0x94/0x530 [ 1761.658795][ T6043] ? do_recvmmsg+0x55a/0x1180 [ 1761.663610][ T6043] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1761.669581][ T6043] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1761.675557][ T6043] ? should_fail+0x3f/0x810 [ 1761.680209][ T6043] ? __stack_depot_save+0x21/0x4b0 [ 1761.685466][ T6043] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1761.691872][ T6043] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1761.697846][ T6043] __msan_chain_origin+0xbd/0x140 [ 1761.703019][ T6043] ___sys_recvmsg+0x522/0x890 [ 1761.707851][ T6043] ? do_recvmmsg+0x5bc/0x1180 [ 1761.712688][ T6043] ? kmsan_internal_check_memory+0x94/0x530 [ 1761.718752][ T6043] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1761.724723][ T6043] do_recvmmsg+0x55a/0x1180 [ 1761.729387][ T6043] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1761.735795][ T6043] ? do_syscall_64+0x3d/0xb0 [ 1761.740522][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1761.745706][ T6043] do_syscall_64+0x3d/0xb0 [ 1761.750253][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1761.756324][ T6043] RIP: 0033:0x7f6a17489279 [ 1761.760843][ T6043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1761.780611][ T6043] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1761.789163][ T6043] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1761.797270][ T6043] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1761.805373][ T6043] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1761.813452][ T6043] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1761.821529][ T6043] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1761.829670][ T6043] [ 1761.835072][ T6043] Uninit was stored to memory at: [ 1761.840279][ T6043] ___sys_recvmsg+0x522/0x890 [ 1761.845430][ T6043] do_recvmmsg+0x55a/0x1180 [ 1761.850098][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1761.855348][ T6043] do_syscall_64+0x3d/0xb0 [ 1761.859894][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1761.866048][ T6043] [ 1761.868437][ T6043] Uninit was stored to memory at: [ 1761.873701][ T6043] ___sys_recvmsg+0x522/0x890 [ 1761.878590][ T6043] do_recvmmsg+0x55a/0x1180 [ 1761.883320][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1761.888476][ T6043] do_syscall_64+0x3d/0xb0 [ 1761.893098][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1761.899166][ T6043] [ 1761.901546][ T6043] Uninit was stored to memory at: [ 1761.906858][ T6043] ___sys_recvmsg+0x522/0x890 [ 1761.911738][ T6043] do_recvmmsg+0x55a/0x1180 [ 1761.916379][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1761.921529][ T6043] do_syscall_64+0x3d/0xb0 [ 1761.926178][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1761.932322][ T6043] [ 1761.934713][ T6043] Uninit was stored to memory at: [ 1761.939894][ T6043] ___sys_recvmsg+0x522/0x890 [ 1761.944825][ T6043] do_recvmmsg+0x55a/0x1180 [ 1761.949453][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1761.954734][ T6043] do_syscall_64+0x3d/0xb0 [ 1761.959284][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1761.965480][ T6043] [ 1761.967872][ T6043] Uninit was stored to memory at: [ 1761.973182][ T6043] ___sys_recvmsg+0x522/0x890 [ 1761.977984][ T6043] do_recvmmsg+0x55a/0x1180 [ 1761.982951][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1761.988113][ T6043] do_syscall_64+0x3d/0xb0 [ 1761.992764][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1761.998827][ T6043] [ 1762.001211][ T6043] Uninit was stored to memory at: [ 1762.006526][ T6043] ___sys_recvmsg+0x522/0x890 [ 1762.011324][ T6043] do_recvmmsg+0x55a/0x1180 [ 1762.016091][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1762.021353][ T6043] do_syscall_64+0x3d/0xb0 [ 1762.025966][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1762.032119][ T6043] [ 1762.034506][ T6043] Uninit was stored to memory at: [ 1762.039695][ T6043] ___sys_recvmsg+0x522/0x890 [ 1762.044633][ T6043] do_recvmmsg+0x55a/0x1180 [ 1762.049265][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1762.054550][ T6043] do_syscall_64+0x3d/0xb0 [ 1762.059092][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1762.065288][ T6043] [ 1762.067680][ T6043] Local variable msg_sys created at: [ 1762.073166][ T6043] do_recvmmsg+0x5c/0x1180 [ 1762.077707][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1762.500675][ T6043] not chained 1840000 origins [ 1762.505686][ T6043] CPU: 1 PID: 6043 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1762.515900][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1762.526060][ T6043] Call Trace: [ 1762.529420][ T6043] [ 1762.532432][ T6043] dump_stack_lvl+0x1c8/0x256 [ 1762.537296][ T6043] dump_stack+0x1a/0x1c [ 1762.541617][ T6043] kmsan_internal_chain_origin+0x78/0x120 [ 1762.547491][ T6043] ? filter_irq_stacks+0x5c/0x1a0 [ 1762.552699][ T6043] ? kmsan_internal_check_memory+0x94/0x530 [ 1762.558750][ T6043] ? do_recvmmsg+0x55a/0x1180 [ 1762.563662][ T6043] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1762.569638][ T6043] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1762.575618][ T6043] ? should_fail+0x3f/0x810 [ 1762.580272][ T6043] ? __stack_depot_save+0x21/0x4b0 [ 1762.585539][ T6043] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1762.591943][ T6043] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1762.597913][ T6043] __msan_chain_origin+0xbd/0x140 [ 1762.603111][ T6043] ___sys_recvmsg+0x522/0x890 [ 1762.607924][ T6043] ? do_recvmmsg+0x5bc/0x1180 [ 1762.612765][ T6043] ? kmsan_internal_check_memory+0x94/0x530 [ 1762.618822][ T6043] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1762.624791][ T6043] do_recvmmsg+0x55a/0x1180 [ 1762.629447][ T6043] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1762.635853][ T6043] ? do_syscall_64+0x3d/0xb0 [ 1762.640579][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1762.645849][ T6043] do_syscall_64+0x3d/0xb0 [ 1762.650398][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1762.656474][ T6043] RIP: 0033:0x7f6a17489279 [ 1762.660993][ T6043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1762.680776][ T6043] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1762.689338][ T6043] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1762.697430][ T6043] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1762.705527][ T6043] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1762.713610][ T6043] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1762.721687][ T6043] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1762.729797][ T6043] [ 1762.735974][ T6043] Uninit was stored to memory at: [ 1762.741210][ T6043] ___sys_recvmsg+0x522/0x890 [ 1762.746278][ T6043] do_recvmmsg+0x55a/0x1180 [ 1762.750912][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1762.756153][ T6043] do_syscall_64+0x3d/0xb0 [ 1762.760709][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1762.766864][ T6043] [ 1762.769246][ T6043] Uninit was stored to memory at: [ 1762.774503][ T6043] ___sys_recvmsg+0x522/0x890 [ 1762.779304][ T6043] do_recvmmsg+0x55a/0x1180 [ 1762.784008][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1762.789168][ T6043] do_syscall_64+0x3d/0xb0 [ 1762.793781][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1762.799849][ T6043] [ 1762.802311][ T6043] Uninit was stored to memory at: [ 1762.807492][ T6043] ___sys_recvmsg+0x522/0x890 [ 1762.812365][ T6043] do_recvmmsg+0x55a/0x1180 [ 1762.817027][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1762.822265][ T6043] do_syscall_64+0x3d/0xb0 [ 1762.826807][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1762.833004][ T6043] [ 1762.835412][ T6043] Uninit was stored to memory at: [ 1762.840622][ T6043] ___sys_recvmsg+0x522/0x890 [ 1762.845557][ T6043] do_recvmmsg+0x55a/0x1180 [ 1762.850189][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1762.855432][ T6043] do_syscall_64+0x3d/0xb0 [ 1762.859978][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1762.866181][ T6043] [ 1762.868565][ T6043] Uninit was stored to memory at: [ 1762.873832][ T6043] ___sys_recvmsg+0x522/0x890 [ 1762.878721][ T6043] do_recvmmsg+0x55a/0x1180 [ 1762.883466][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1762.888625][ T6043] do_syscall_64+0x3d/0xb0 [ 1762.893273][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1762.899353][ T6043] [ 1762.901863][ T6043] Uninit was stored to memory at: [ 1762.907055][ T6043] ___sys_recvmsg+0x522/0x890 [ 1762.911980][ T6043] do_recvmmsg+0x55a/0x1180 [ 1762.916625][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1762.921904][ T6043] do_syscall_64+0x3d/0xb0 [ 1762.926522][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1762.932652][ T6043] [ 1762.935039][ T6043] Uninit was stored to memory at: [ 1762.940232][ T6043] ___sys_recvmsg+0x522/0x890 [ 1762.945100][ T6043] do_recvmmsg+0x55a/0x1180 [ 1762.949754][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1762.954971][ T6043] do_syscall_64+0x3d/0xb0 [ 1762.959519][ T6043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1762.965654][ T6043] [ 1762.968042][ T6043] Local variable msg_sys created at: [ 1762.973464][ T6043] do_recvmmsg+0x5c/0x1180 [ 1762.978006][ T6043] __x64_sys_recvmmsg+0x3a7/0x4b0 22:44:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) fallocate(r2, 0x22, 0x8000000000000001, 0x200) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000400)={@rand_addr, 0x0, 0x4, 0x4, 0x7f}}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)="49e6b17a4400f34be58d3281fcf2381731e7da3b20579b1d63b15f6cdae58f18ee3fa2ee88a13f8dbb3f3e5382c3712b2c506487b9dcae424e09cf199fae8694479668b604db9e6fb8da8970c1bcd4b698aa9d7a647b6104a1e997d25e14cf1fd24264d6d87c638f7fe1b292bf797fa146e6aadac0bbf71d9cc2484c96ae6c328a8983a76ef84e194c86", 0x8a, 0x0, 0x0, 0x0) syz_clone(0x40900280, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x125) fcntl$setstatus(r3, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) io_submit(0x0, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:44:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x6e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x40}, 0x0) 22:44:50 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa05435, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2) 22:44:50 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000019b40320d812010085de01ec020109021b0001000000000904000001785e4c00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/18, 0x12) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 22:44:50 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0xa, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) 22:44:50 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:44:50 executing program 4: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:44:50 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa05435, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2) [ 1763.583173][ T3552] usb 6-1: new high-speed USB device number 85 using dummy_hcd 22:44:50 executing program 1: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) [ 1763.831990][ T3552] usb 6-1: Using ep0 maxpacket: 32 [ 1764.084472][ T3552] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 22:44:51 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa05435, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2) [ 1764.302815][ T3552] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.85 [ 1764.312233][ T3552] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1764.320610][ T3552] usb 6-1: Product: syz [ 1764.325213][ T3552] usb 6-1: Manufacturer: syz [ 1764.329991][ T3552] usb 6-1: SerialNumber: syz 22:44:51 executing program 1: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) [ 1764.493104][ T3552] usb 6-1: config 0 descriptor?? [ 1764.520888][ T6135] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 22:44:51 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa05435, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2) [ 1765.715595][ T6149] not chained 1850000 origins [ 1765.720563][ T6149] CPU: 1 PID: 6149 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1765.730782][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1765.740959][ T6149] Call Trace: [ 1765.744316][ T6149] [ 1765.747319][ T6149] dump_stack_lvl+0x1c8/0x256 [ 1765.752187][ T6149] dump_stack+0x1a/0x1c [ 1765.756497][ T6149] kmsan_internal_chain_origin+0x78/0x120 [ 1765.762370][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1765.768346][ T6149] ? update_misfit_status+0x2c/0xb30 [ 1765.773793][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1765.779751][ T6149] ? switch_mm_irqs_off+0x9a/0x980 [ 1765.785039][ T6149] ? __schedule+0x12f3/0x21d0 [ 1765.789853][ T6149] ? ___sys_recvmsg+0xf4/0x890 [ 1765.794749][ T6149] ? do_recvmmsg+0x55a/0x1180 [ 1765.799560][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1765.805534][ T6149] ? ___sys_recvmsg+0xf4/0x890 [ 1765.810428][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1765.816405][ T6149] ? should_fail+0x3f/0x810 [ 1765.821060][ T6149] ? __stack_depot_save+0x21/0x4b0 [ 1765.826319][ T6149] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1765.832728][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1765.838693][ T6149] __msan_chain_origin+0xbd/0x140 [ 1765.843867][ T6149] ___sys_recvmsg+0x522/0x890 [ 1765.848706][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1765.854668][ T6149] ? __cond_resched+0x1f/0x40 [ 1765.859494][ T6149] ? preempt_schedule_common+0x117/0x180 [ 1765.865284][ T6149] do_recvmmsg+0x55a/0x1180 [ 1765.869938][ T6149] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1765.876350][ T6149] ? do_syscall_64+0x3d/0xb0 [ 1765.881084][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1765.886264][ T6149] do_syscall_64+0x3d/0xb0 [ 1765.890809][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1765.896883][ T6149] RIP: 0033:0x7f6a17489279 [ 1765.901400][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1765.921175][ T6149] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1765.929729][ T6149] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1765.937821][ T6149] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1765.945910][ T6149] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1765.953995][ T6149] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1765.962074][ T6149] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1765.970189][ T6149] [ 1765.975860][ T6149] Uninit was stored to memory at: [ 1765.981270][ T6149] ___sys_recvmsg+0x522/0x890 [ 1765.986173][ T6149] do_recvmmsg+0x55a/0x1180 [ 1765.990804][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1765.996065][ T6149] do_syscall_64+0x3d/0xb0 [ 1766.000624][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1766.006799][ T6149] [ 1766.009199][ T6149] Uninit was stored to memory at: [ 1766.014497][ T6149] ___sys_recvmsg+0x522/0x890 [ 1766.019303][ T6149] do_recvmmsg+0x55a/0x1180 [ 1766.024019][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1766.029169][ T6149] do_syscall_64+0x3d/0xb0 [ 1766.033803][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1766.039878][ T6149] [ 1766.042345][ T6149] Uninit was stored to memory at: [ 1766.047540][ T6149] ___sys_recvmsg+0x522/0x890 [ 1766.052431][ T6149] do_recvmmsg+0x55a/0x1180 [ 1766.057092][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1766.062329][ T6149] do_syscall_64+0x3d/0xb0 [ 1766.066900][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1766.073053][ T6149] [ 1766.075445][ T6149] Uninit was stored to memory at: [ 1766.080632][ T6149] ___sys_recvmsg+0x522/0x890 [ 1766.085526][ T6149] do_recvmmsg+0x55a/0x1180 [ 1766.090154][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1766.095388][ T6149] do_syscall_64+0x3d/0xb0 [ 1766.099937][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1766.106118][ T6149] [ 1766.108503][ T6149] Uninit was stored to memory at: [ 1766.113765][ T6149] ___sys_recvmsg+0x522/0x890 [ 1766.118566][ T6149] do_recvmmsg+0x55a/0x1180 [ 1766.123285][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1766.128454][ T6149] do_syscall_64+0x3d/0xb0 [ 1766.133173][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1766.139245][ T6149] [ 1766.141736][ T6149] Uninit was stored to memory at: [ 1766.146931][ T6149] ___sys_recvmsg+0x522/0x890 [ 1766.151811][ T6149] do_recvmmsg+0x55a/0x1180 [ 1766.156465][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1766.161721][ T6149] do_syscall_64+0x3d/0xb0 [ 1766.166355][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1766.172519][ T6149] [ 1766.174904][ T6149] Uninit was stored to memory at: [ 1766.180117][ T6149] ___sys_recvmsg+0x522/0x890 [ 1766.185016][ T6149] do_recvmmsg+0x55a/0x1180 [ 1766.189651][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1766.194902][ T6149] do_syscall_64+0x3d/0xb0 [ 1766.199455][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1766.205619][ T6149] [ 1766.208008][ T6149] Local variable msg_sys created at: [ 1766.213462][ T6149] do_recvmmsg+0x5c/0x1180 [ 1766.218007][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1766.339338][ T8359] usb 6-1: USB disconnect, device number 85 [ 1766.897639][ T6149] not chained 1860000 origins [ 1766.902679][ T6149] CPU: 1 PID: 6149 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1766.912885][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1766.923048][ T6149] Call Trace: [ 1766.926401][ T6149] [ 1766.929409][ T6149] dump_stack_lvl+0x1c8/0x256 [ 1766.934275][ T6149] dump_stack+0x1a/0x1c [ 1766.938585][ T6149] kmsan_internal_chain_origin+0x78/0x120 [ 1766.944454][ T6149] ? filter_irq_stacks+0x5c/0x1a0 [ 1766.949663][ T6149] ? kmsan_internal_check_memory+0x94/0x530 [ 1766.955709][ T6149] ? do_recvmmsg+0x55a/0x1180 [ 1766.960518][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1766.966757][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1766.972743][ T6149] ? should_fail+0x3f/0x810 [ 1766.977404][ T6149] ? __stack_depot_save+0x21/0x4b0 [ 1766.982666][ T6149] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1766.989076][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1766.995044][ T6149] __msan_chain_origin+0xbd/0x140 [ 1767.000213][ T6149] ___sys_recvmsg+0x522/0x890 [ 1767.005031][ T6149] ? do_recvmmsg+0x5bc/0x1180 [ 1767.009859][ T6149] ? kmsan_internal_check_memory+0x94/0x530 [ 1767.015928][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1767.021903][ T6149] do_recvmmsg+0x55a/0x1180 [ 1767.026567][ T6149] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1767.032967][ T6149] ? do_syscall_64+0x3d/0xb0 [ 1767.037784][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1767.042966][ T6149] do_syscall_64+0x3d/0xb0 [ 1767.047520][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1767.053587][ T6149] RIP: 0033:0x7f6a17489279 [ 1767.058109][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1767.077874][ T6149] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1767.086430][ T6149] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1767.094519][ T6149] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1767.102602][ T6149] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1767.110740][ T6149] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1767.118824][ T6149] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1767.126936][ T6149] [ 1767.132563][ T6149] Uninit was stored to memory at: [ 1767.140238][ T6149] ___sys_recvmsg+0x522/0x890 [ 1767.145300][ T6149] do_recvmmsg+0x55a/0x1180 [ 1767.149934][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1767.155172][ T6149] do_syscall_64+0x3d/0xb0 [ 1767.159714][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1767.165855][ T6149] [ 1767.168240][ T6149] Uninit was stored to memory at: [ 1767.173494][ T6149] ___sys_recvmsg+0x522/0x890 [ 1767.178301][ T6149] do_recvmmsg+0x55a/0x1180 [ 1767.183006][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1767.188159][ T6149] do_syscall_64+0x3d/0xb0 [ 1767.192774][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1767.198840][ T6149] [ 1767.201234][ T6149] Uninit was stored to memory at: [ 1767.206506][ T6149] ___sys_recvmsg+0x522/0x890 [ 1767.211306][ T6149] do_recvmmsg+0x55a/0x1180 [ 1767.216032][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1767.221209][ T6149] do_syscall_64+0x3d/0xb0 [ 1767.225830][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1767.231976][ T6149] [ 1767.234366][ T6149] Uninit was stored to memory at: [ 1767.239564][ T6149] ___sys_recvmsg+0x522/0x890 [ 1767.244441][ T6149] do_recvmmsg+0x55a/0x1180 [ 1767.249066][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1767.254303][ T6149] do_syscall_64+0x3d/0xb0 [ 1767.258850][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1767.265002][ T6149] [ 1767.267395][ T6149] Uninit was stored to memory at: [ 1767.272647][ T6149] ___sys_recvmsg+0x522/0x890 [ 1767.277456][ T6149] do_recvmmsg+0x55a/0x1180 [ 1767.282160][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1767.287319][ T6149] do_syscall_64+0x3d/0xb0 [ 1767.291940][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1767.298025][ T6149] [ 1767.300412][ T6149] Uninit was stored to memory at: [ 1767.305686][ T6149] ___sys_recvmsg+0x522/0x890 [ 1767.310486][ T6149] do_recvmmsg+0x55a/0x1180 [ 1767.315195][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1767.320350][ T6149] do_syscall_64+0x3d/0xb0 [ 1767.324969][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1767.331041][ T6149] [ 1767.333491][ T6149] Uninit was stored to memory at: [ 1767.338671][ T6149] ___sys_recvmsg+0x522/0x890 [ 1767.343556][ T6149] do_recvmmsg+0x55a/0x1180 [ 1767.348180][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1767.353409][ T6149] do_syscall_64+0x3d/0xb0 [ 1767.357953][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1767.364103][ T6149] [ 1767.366489][ T6149] Local variable msg_sys created at: [ 1767.371917][ T6149] do_recvmmsg+0x5c/0x1180 [ 1767.376459][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1768.118394][ T6149] not chained 1870000 origins [ 1768.124144][ T6149] CPU: 1 PID: 6149 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1768.134358][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1768.144557][ T6149] Call Trace: [ 1768.147920][ T6149] [ 1768.150925][ T6149] dump_stack_lvl+0x1c8/0x256 [ 1768.155789][ T6149] dump_stack+0x1a/0x1c [ 1768.160106][ T6149] kmsan_internal_chain_origin+0x78/0x120 [ 1768.165977][ T6149] ? filter_irq_stacks+0x5c/0x1a0 [ 1768.171186][ T6149] ? kmsan_internal_check_memory+0x94/0x530 [ 1768.177244][ T6149] ? do_recvmmsg+0x55a/0x1180 [ 1768.182056][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1768.188053][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1768.194036][ T6149] ? should_fail+0x3f/0x810 [ 1768.198700][ T6149] ? __stack_depot_save+0x21/0x4b0 [ 1768.203975][ T6149] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1768.210398][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1768.216380][ T6149] __msan_chain_origin+0xbd/0x140 [ 1768.221576][ T6149] ___sys_recvmsg+0x522/0x890 [ 1768.226383][ T6149] ? do_recvmmsg+0x5bc/0x1180 [ 1768.231224][ T6149] ? kmsan_internal_check_memory+0x94/0x530 [ 1768.237284][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1768.243254][ T6149] do_recvmmsg+0x55a/0x1180 [ 1768.247933][ T6149] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1768.254350][ T6149] ? do_syscall_64+0x3d/0xb0 [ 1768.259087][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1768.264303][ T6149] do_syscall_64+0x3d/0xb0 [ 1768.268863][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1768.274933][ T6149] RIP: 0033:0x7f6a17489279 [ 1768.279461][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1768.299255][ T6149] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1768.307854][ T6149] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1768.315970][ T6149] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1768.324064][ T6149] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1768.332153][ T6149] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1768.340231][ T6149] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1768.348345][ T6149] [ 1768.351586][ T6149] Uninit was stored to memory at: [ 1768.356846][ T6149] ___sys_recvmsg+0x522/0x890 [ 1768.361742][ T6149] do_recvmmsg+0x55a/0x1180 [ 1768.366373][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1768.371537][ T6149] do_syscall_64+0x3d/0xb0 [ 1768.376183][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1768.382331][ T6149] [ 1768.384724][ T6149] Uninit was stored to memory at: [ 1768.389911][ T6149] ___sys_recvmsg+0x522/0x890 [ 1768.394797][ T6149] do_recvmmsg+0x55a/0x1180 [ 1768.399426][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1768.404667][ T6149] do_syscall_64+0x3d/0xb0 [ 1768.409212][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1768.415369][ T6149] [ 1768.418027][ T6149] Uninit was stored to memory at: [ 1768.423342][ T6149] ___sys_recvmsg+0x522/0x890 [ 1768.428143][ T6149] do_recvmmsg+0x55a/0x1180 [ 1768.432894][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1768.438057][ T6149] do_syscall_64+0x3d/0xb0 [ 1768.442730][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1768.448814][ T6149] [ 1768.451210][ T6149] Uninit was stored to memory at: [ 1768.456549][ T6149] ___sys_recvmsg+0x522/0x890 [ 1768.461366][ T6149] do_recvmmsg+0x55a/0x1180 [ 1768.466187][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1768.471369][ T6149] do_syscall_64+0x3d/0xb0 [ 1768.476066][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1768.482241][ T6149] [ 1768.484630][ T6149] Uninit was stored to memory at: [ 1768.489822][ T6149] ___sys_recvmsg+0x522/0x890 [ 1768.494718][ T6149] do_recvmmsg+0x55a/0x1180 [ 1768.499358][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1768.504642][ T6149] do_syscall_64+0x3d/0xb0 [ 1768.509189][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1768.515421][ T6149] [ 1768.517813][ T6149] Uninit was stored to memory at: [ 1768.523078][ T6149] ___sys_recvmsg+0x522/0x890 [ 1768.527880][ T6149] do_recvmmsg+0x55a/0x1180 [ 1768.532625][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1768.537781][ T6149] do_syscall_64+0x3d/0xb0 [ 1768.542399][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1768.548477][ T6149] [ 1768.550866][ T6149] Uninit was stored to memory at: [ 1768.556189][ T6149] ___sys_recvmsg+0x522/0x890 [ 1768.560993][ T6149] do_recvmmsg+0x55a/0x1180 [ 1768.565748][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1768.570905][ T6149] do_syscall_64+0x3d/0xb0 [ 1768.575572][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1768.581729][ T6149] [ 1768.584116][ T6149] Local variable msg_sys created at: [ 1768.589473][ T6149] do_recvmmsg+0x5c/0x1180 [ 1768.594087][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1768.866808][ T6149] not chained 1880000 origins [ 1768.871788][ T6149] CPU: 1 PID: 6149 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1768.882003][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1768.892179][ T6149] Call Trace: [ 1768.895538][ T6149] [ 1768.898552][ T6149] dump_stack_lvl+0x1c8/0x256 [ 1768.903423][ T6149] dump_stack+0x1a/0x1c [ 1768.907739][ T6149] kmsan_internal_chain_origin+0x78/0x120 [ 1768.913621][ T6149] ? filter_irq_stacks+0x5c/0x1a0 [ 1768.918829][ T6149] ? kmsan_internal_check_memory+0x94/0x530 [ 1768.924883][ T6149] ? do_recvmmsg+0x55a/0x1180 [ 1768.929882][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1768.935850][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1768.941816][ T6149] ? should_fail+0x3f/0x810 [ 1768.946468][ T6149] ? __stack_depot_save+0x21/0x4b0 [ 1768.951730][ T6149] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1768.958137][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1768.964113][ T6149] __msan_chain_origin+0xbd/0x140 [ 1768.969281][ T6149] ___sys_recvmsg+0x522/0x890 [ 1768.974093][ T6149] ? do_recvmmsg+0x5bc/0x1180 [ 1768.978959][ T6149] ? kmsan_internal_check_memory+0x94/0x530 [ 1768.985187][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1768.991160][ T6149] do_recvmmsg+0x55a/0x1180 [ 1768.995814][ T6149] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1769.002219][ T6149] ? do_syscall_64+0x3d/0xb0 [ 1769.006946][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1769.012135][ T6149] do_syscall_64+0x3d/0xb0 [ 1769.016683][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1769.022782][ T6149] RIP: 0033:0x7f6a17489279 [ 1769.027304][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1769.047086][ T6149] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1769.055648][ T6149] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1769.063786][ T6149] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1769.071867][ T6149] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1769.079945][ T6149] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1769.088024][ T6149] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1769.096135][ T6149] [ 1769.101848][ T6149] Uninit was stored to memory at: [ 1769.107056][ T6149] ___sys_recvmsg+0x522/0x890 [ 1769.112250][ T6149] do_recvmmsg+0x55a/0x1180 [ 1769.117150][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1769.122399][ T6149] do_syscall_64+0x3d/0xb0 [ 1769.126949][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1769.133106][ T6149] [ 1769.135491][ T6149] Uninit was stored to memory at: [ 1769.140676][ T6149] ___sys_recvmsg+0x522/0x890 [ 1769.145571][ T6149] do_recvmmsg+0x55a/0x1180 [ 1769.150202][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1769.155448][ T6149] do_syscall_64+0x3d/0xb0 [ 1769.159999][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1769.166151][ T6149] [ 1769.168537][ T6149] Uninit was stored to memory at: [ 1769.173798][ T6149] ___sys_recvmsg+0x522/0x890 [ 1769.178601][ T6149] do_recvmmsg+0x55a/0x1180 [ 1769.183302][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1769.188489][ T6149] do_syscall_64+0x3d/0xb0 [ 1769.193113][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1769.199181][ T6149] [ 1769.201571][ T6149] Uninit was stored to memory at: [ 1769.206839][ T6149] ___sys_recvmsg+0x522/0x890 [ 1769.211726][ T6149] do_recvmmsg+0x55a/0x1180 [ 1769.216353][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1769.221512][ T6149] do_syscall_64+0x3d/0xb0 [ 1769.226198][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1769.232341][ T6149] [ 1769.234731][ T6149] Uninit was stored to memory at: [ 1769.239925][ T6149] ___sys_recvmsg+0x522/0x890 [ 1769.244868][ T6149] do_recvmmsg+0x55a/0x1180 [ 1769.249498][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1769.254783][ T6149] do_syscall_64+0x3d/0xb0 [ 1769.259323][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1769.265476][ T6149] [ 1769.267860][ T6149] Uninit was stored to memory at: [ 1769.273175][ T6149] ___sys_recvmsg+0x522/0x890 [ 1769.277978][ T6149] do_recvmmsg+0x55a/0x1180 [ 1769.282733][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1769.287890][ T6149] do_syscall_64+0x3d/0xb0 [ 1769.292507][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1769.298572][ T6149] [ 1769.300957][ T6149] Uninit was stored to memory at: [ 1769.306270][ T6149] ___sys_recvmsg+0x522/0x890 [ 1769.311076][ T6149] do_recvmmsg+0x55a/0x1180 [ 1769.315847][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1769.321005][ T6149] do_syscall_64+0x3d/0xb0 [ 1769.325677][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1769.331816][ T6149] [ 1769.334204][ T6149] Local variable msg_sys created at: [ 1769.339561][ T6149] do_recvmmsg+0x5c/0x1180 [ 1769.344228][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1769.623962][ T6149] not chained 1890000 origins [ 1769.628764][ T6149] CPU: 1 PID: 6149 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1769.638969][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1769.649139][ T6149] Call Trace: [ 1769.652502][ T6149] [ 1769.655514][ T6149] dump_stack_lvl+0x1c8/0x256 [ 1769.660384][ T6149] dump_stack+0x1a/0x1c [ 1769.664707][ T6149] kmsan_internal_chain_origin+0x78/0x120 [ 1769.670580][ T6149] ? filter_irq_stacks+0x5c/0x1a0 [ 1769.675787][ T6149] ? kmsan_internal_check_memory+0x94/0x530 [ 1769.681838][ T6149] ? do_recvmmsg+0x55a/0x1180 [ 1769.686648][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1769.692619][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1769.698588][ T6149] ? should_fail+0x3f/0x810 [ 1769.703238][ T6149] ? __stack_depot_save+0x21/0x4b0 [ 1769.708506][ T6149] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1769.714916][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1769.720877][ T6149] __msan_chain_origin+0xbd/0x140 [ 1769.726049][ T6149] ___sys_recvmsg+0x522/0x890 [ 1769.730861][ T6149] ? do_recvmmsg+0x5bc/0x1180 [ 1769.735696][ T6149] ? kmsan_internal_check_memory+0x94/0x530 [ 1769.741747][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1769.747716][ T6149] do_recvmmsg+0x55a/0x1180 [ 1769.752368][ T6149] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1769.758766][ T6149] ? do_syscall_64+0x3d/0xb0 [ 1769.763495][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1769.768674][ T6149] do_syscall_64+0x3d/0xb0 [ 1769.773217][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1769.779286][ T6149] RIP: 0033:0x7f6a17489279 [ 1769.783807][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1769.803577][ T6149] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1769.812132][ T6149] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1769.820230][ T6149] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1769.828322][ T6149] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1769.836402][ T6149] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1769.844497][ T6149] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1769.852612][ T6149] [ 1769.858246][ T6149] Uninit was stored to memory at: [ 1769.863723][ T6149] ___sys_recvmsg+0x522/0x890 [ 1769.868532][ T6149] do_recvmmsg+0x55a/0x1180 [ 1769.873246][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1769.878404][ T6149] do_syscall_64+0x3d/0xb0 [ 1769.883030][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1769.889096][ T6149] [ 1769.891484][ T6149] Uninit was stored to memory at: [ 1769.896761][ T6149] ___sys_recvmsg+0x522/0x890 [ 1769.901565][ T6149] do_recvmmsg+0x55a/0x1180 [ 1769.906324][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1769.911486][ T6149] do_syscall_64+0x3d/0xb0 [ 1769.916187][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1769.922374][ T6149] [ 1769.924791][ T6149] Uninit was stored to memory at: [ 1769.929976][ T6149] ___sys_recvmsg+0x522/0x890 [ 1769.934858][ T6149] do_recvmmsg+0x55a/0x1180 [ 1769.939492][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1769.944724][ T6149] do_syscall_64+0x3d/0xb0 [ 1769.949266][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1769.955476][ T6149] [ 1769.957862][ T6149] Uninit was stored to memory at: [ 1769.963124][ T6149] ___sys_recvmsg+0x522/0x890 [ 1769.967926][ T6149] do_recvmmsg+0x55a/0x1180 [ 1769.972672][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1769.977830][ T6149] do_syscall_64+0x3d/0xb0 [ 1769.982500][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1769.988570][ T6149] [ 1769.990956][ T6149] Uninit was stored to memory at: [ 1769.996282][ T6149] ___sys_recvmsg+0x522/0x890 [ 1770.001084][ T6149] do_recvmmsg+0x55a/0x1180 [ 1770.005835][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1770.010992][ T6149] do_syscall_64+0x3d/0xb0 [ 1770.015606][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1770.021741][ T6149] [ 1770.024126][ T6149] Uninit was stored to memory at: [ 1770.029312][ T6149] ___sys_recvmsg+0x522/0x890 [ 1770.034241][ T6149] do_recvmmsg+0x55a/0x1180 [ 1770.038867][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1770.044100][ T6149] do_syscall_64+0x3d/0xb0 [ 1770.048641][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1770.054854][ T6149] [ 1770.057248][ T6149] Uninit was stored to memory at: [ 1770.062566][ T6149] ___sys_recvmsg+0x522/0x890 [ 1770.067367][ T6149] do_recvmmsg+0x55a/0x1180 [ 1770.072116][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1770.077271][ T6149] do_syscall_64+0x3d/0xb0 [ 1770.081885][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1770.087949][ T6149] [ 1770.090334][ T6149] Local variable msg_sys created at: [ 1770.095826][ T6149] do_recvmmsg+0x5c/0x1180 [ 1770.100374][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1770.352343][ T6149] not chained 1900000 origins [ 1770.357137][ T6149] CPU: 1 PID: 6149 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1770.367349][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1770.377518][ T6149] Call Trace: [ 1770.380876][ T6149] [ 1770.383885][ T6149] dump_stack_lvl+0x1c8/0x256 [ 1770.388748][ T6149] dump_stack+0x1a/0x1c [ 1770.393060][ T6149] kmsan_internal_chain_origin+0x78/0x120 [ 1770.398929][ T6149] ? filter_irq_stacks+0x5c/0x1a0 [ 1770.404129][ T6149] ? kmsan_internal_check_memory+0x94/0x530 [ 1770.410177][ T6149] ? do_recvmmsg+0x55a/0x1180 [ 1770.414991][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1770.420958][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1770.426925][ T6149] ? should_fail+0x3f/0x810 [ 1770.431586][ T6149] ? __stack_depot_save+0x21/0x4b0 [ 1770.436857][ T6149] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1770.443265][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1770.449230][ T6149] __msan_chain_origin+0xbd/0x140 [ 1770.454397][ T6149] ___sys_recvmsg+0x522/0x890 [ 1770.459214][ T6149] ? do_recvmmsg+0x5bc/0x1180 [ 1770.464049][ T6149] ? kmsan_internal_check_memory+0x94/0x530 [ 1770.470116][ T6149] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1770.476086][ T6149] do_recvmmsg+0x55a/0x1180 [ 1770.480758][ T6149] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1770.487167][ T6149] ? do_syscall_64+0x3d/0xb0 [ 1770.491888][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1770.497070][ T6149] do_syscall_64+0x3d/0xb0 [ 1770.501614][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1770.507679][ T6149] RIP: 0033:0x7f6a17489279 [ 1770.512194][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1770.531957][ T6149] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1770.540511][ T6149] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1770.548602][ T6149] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1770.556686][ T6149] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1770.564774][ T6149] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1770.572852][ T6149] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1770.580964][ T6149] [ 1770.586507][ T6149] Uninit was stored to memory at: [ 1770.592010][ T6149] ___sys_recvmsg+0x522/0x890 [ 1770.596815][ T6149] do_recvmmsg+0x55a/0x1180 [ 1770.601444][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1770.606695][ T6149] do_syscall_64+0x3d/0xb0 [ 1770.611242][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1770.617397][ T6149] [ 1770.619798][ T6149] Uninit was stored to memory at: [ 1770.625061][ T6149] ___sys_recvmsg+0x522/0x890 [ 1770.629863][ T6149] do_recvmmsg+0x55a/0x1180 [ 1770.634606][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1770.639766][ T6149] do_syscall_64+0x3d/0xb0 [ 1770.644383][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1770.650459][ T6149] [ 1770.652924][ T6149] Uninit was stored to memory at: [ 1770.658108][ T6149] ___sys_recvmsg+0x522/0x890 [ 1770.662979][ T6149] do_recvmmsg+0x55a/0x1180 [ 1770.667601][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1770.672821][ T6149] do_syscall_64+0x3d/0xb0 [ 1770.677389][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1770.683542][ T6149] [ 1770.685926][ T6149] Uninit was stored to memory at: [ 1770.691116][ T6149] ___sys_recvmsg+0x522/0x890 [ 1770.695995][ T6149] do_recvmmsg+0x55a/0x1180 [ 1770.700620][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1770.705850][ T6149] do_syscall_64+0x3d/0xb0 [ 1770.710390][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1770.716547][ T6149] [ 1770.718931][ T6149] Uninit was stored to memory at: [ 1770.724240][ T6149] ___sys_recvmsg+0x522/0x890 [ 1770.729041][ T6149] do_recvmmsg+0x55a/0x1180 [ 1770.733743][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1770.738894][ T6149] do_syscall_64+0x3d/0xb0 [ 1770.743511][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1770.749574][ T6149] [ 1770.752035][ T6149] Uninit was stored to memory at: [ 1770.757220][ T6149] ___sys_recvmsg+0x522/0x890 [ 1770.762140][ T6149] do_recvmmsg+0x55a/0x1180 [ 1770.766769][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1770.772032][ T6149] do_syscall_64+0x3d/0xb0 [ 1770.776575][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1770.782745][ T6149] [ 1770.785132][ T6149] Uninit was stored to memory at: [ 1770.790321][ T6149] ___sys_recvmsg+0x522/0x890 [ 1770.795286][ T6149] do_recvmmsg+0x55a/0x1180 [ 1770.799915][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1770.805197][ T6149] do_syscall_64+0x3d/0xb0 [ 1770.809738][ T6149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1770.815874][ T6149] [ 1770.818259][ T6149] Local variable msg_sys created at: [ 1770.823744][ T6149] do_recvmmsg+0x5c/0x1180 [ 1770.828279][ T6149] __x64_sys_recvmmsg+0x3a7/0x4b0 22:44:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) fallocate(r2, 0x22, 0x8000000000000001, 0x200) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000400)={@rand_addr, 0x0, 0x4, 0x4, 0x7f}}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)="49e6b17a4400f34be58d3281fcf2381731e7da3b20579b1d63b15f6cdae58f18ee3fa2ee88a13f8dbb3f3e5382c3712b2c506487b9dcae424e09cf199fae8694479668b604db9e6fb8da8970c1bcd4b698aa9d7a647b6104a1e997d25e14cf1fd24264d6d87c638f7fe1b292bf797fa146e6aadac0bbf71d9cc2484c96ae6c328a8983a76ef84e194c86", 0x8a, 0x0, 0x0, 0x0) syz_clone(0x40900280, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x125) fcntl$setstatus(r3, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) io_submit(0x0, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:44:58 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:44:58 executing program 4: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:44:58 executing program 1: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:44:58 executing program 3: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:44:58 executing program 5: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:44:59 executing program 3: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:44:59 executing program 5: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:44:59 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:44:59 executing program 4: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:44:59 executing program 1: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) [ 1772.940398][ T6231] not chained 1910000 origins [ 1772.945981][ T6231] CPU: 1 PID: 6231 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1772.956220][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1772.966396][ T6231] Call Trace: [ 1772.969763][ T6231] [ 1772.972778][ T6231] dump_stack_lvl+0x1c8/0x256 [ 1772.977654][ T6231] dump_stack+0x1a/0x1c [ 1772.981991][ T6231] kmsan_internal_chain_origin+0x78/0x120 [ 1772.987878][ T6231] ? filter_irq_stacks+0x5c/0x1a0 [ 1772.993110][ T6231] ? kmsan_internal_check_memory+0x94/0x530 [ 1772.999177][ T6231] ? do_recvmmsg+0x55a/0x1180 [ 1773.004012][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1773.010007][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1773.015992][ T6231] ? should_fail+0x3f/0x810 [ 1773.020651][ T6231] ? __stack_depot_save+0x21/0x4b0 [ 1773.025920][ T6231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1773.032335][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1773.038306][ T6231] __msan_chain_origin+0xbd/0x140 [ 1773.043476][ T6231] ___sys_recvmsg+0x522/0x890 [ 1773.048279][ T6231] ? do_recvmmsg+0x5bc/0x1180 [ 1773.053114][ T6231] ? kmsan_internal_check_memory+0x94/0x530 [ 1773.059155][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1773.065116][ T6231] do_recvmmsg+0x55a/0x1180 [ 1773.069767][ T6231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1773.076178][ T6231] ? do_syscall_64+0x3d/0xb0 [ 1773.080988][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1773.086166][ T6231] do_syscall_64+0x3d/0xb0 [ 1773.090699][ T6231] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1773.096653][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1773.102723][ T6231] RIP: 0033:0x7f6a17489279 [ 1773.107241][ T6231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1773.127000][ T6231] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1773.135541][ T6231] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1773.143713][ T6231] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1773.151785][ T6231] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1773.159856][ T6231] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1773.167924][ T6231] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1773.176046][ T6231] [ 1773.179347][ T6231] Uninit was stored to memory at: [ 1773.184621][ T6231] ___sys_recvmsg+0x522/0x890 [ 1773.189430][ T6231] do_recvmmsg+0x55a/0x1180 [ 1773.194150][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1773.199322][ T6231] do_syscall_64+0x3d/0xb0 [ 1773.203959][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1773.210042][ T6231] [ 1773.212509][ T6231] Uninit was stored to memory at: [ 1773.217701][ T6231] ___sys_recvmsg+0x522/0x890 [ 1773.222598][ T6231] do_recvmmsg+0x55a/0x1180 [ 1773.227230][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1773.232464][ T6231] do_syscall_64+0x3d/0xb0 [ 1773.237015][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1773.243201][ T6231] [ 1773.245682][ T6231] Uninit was stored to memory at: [ 1773.250887][ T6231] ___sys_recvmsg+0x522/0x890 [ 1773.255792][ T6231] do_recvmmsg+0x55a/0x1180 [ 1773.260456][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1773.265721][ T6231] do_syscall_64+0x3d/0xb0 [ 1773.270268][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1773.276423][ T6231] [ 1773.278818][ T6231] Uninit was stored to memory at: [ 1773.284087][ T6231] ___sys_recvmsg+0x522/0x890 [ 1773.288891][ T6231] do_recvmmsg+0x55a/0x1180 [ 1773.293599][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1773.298766][ T6231] do_syscall_64+0x3d/0xb0 [ 1773.303390][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1773.309506][ T6231] [ 1773.311976][ T6231] Uninit was stored to memory at: [ 1773.317170][ T6231] ___sys_recvmsg+0x522/0x890 [ 1773.322051][ T6231] do_recvmmsg+0x55a/0x1180 [ 1773.326779][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1773.332011][ T6231] do_syscall_64+0x3d/0xb0 [ 1773.336552][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1773.342699][ T6231] [ 1773.345087][ T6231] Uninit was stored to memory at: [ 1773.350352][ T6231] ___sys_recvmsg+0x522/0x890 [ 1773.355236][ T6231] do_recvmmsg+0x55a/0x1180 [ 1773.359870][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1773.365169][ T6231] do_syscall_64+0x3d/0xb0 [ 1773.369724][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1773.375940][ T6231] [ 1773.378330][ T6231] Uninit was stored to memory at: [ 1773.383652][ T6231] ___sys_recvmsg+0x522/0x890 [ 1773.388460][ T6231] do_recvmmsg+0x55a/0x1180 [ 1773.393161][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1773.398321][ T6231] do_syscall_64+0x3d/0xb0 [ 1773.403004][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1773.409087][ T6231] [ 1773.411485][ T6231] Local variable msg_sys created at: [ 1773.416981][ T6231] do_recvmmsg+0x5c/0x1180 [ 1773.421554][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 22:45:00 executing program 1: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) [ 1775.792383][ T6231] not chained 1920000 origins [ 1775.797950][ T6231] CPU: 0 PID: 6231 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1775.808165][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1775.818350][ T6231] Call Trace: [ 1775.821713][ T6231] [ 1775.824722][ T6231] dump_stack_lvl+0x1c8/0x256 [ 1775.829605][ T6231] dump_stack+0x1a/0x1c [ 1775.833915][ T6231] kmsan_internal_chain_origin+0x78/0x120 [ 1775.839780][ T6231] ? filter_irq_stacks+0x5c/0x1a0 [ 1775.844991][ T6231] ? kmsan_internal_check_memory+0x94/0x530 [ 1775.851037][ T6231] ? do_recvmmsg+0x55a/0x1180 [ 1775.855842][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1775.861812][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1775.867776][ T6231] ? should_fail+0x3f/0x810 [ 1775.872429][ T6231] ? __stack_depot_save+0x21/0x4b0 [ 1775.877690][ T6231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1775.884089][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1775.890048][ T6231] __msan_chain_origin+0xbd/0x140 [ 1775.895216][ T6231] ___sys_recvmsg+0x522/0x890 [ 1775.900024][ T6231] ? do_recvmmsg+0x5bc/0x1180 [ 1775.904855][ T6231] ? kmsan_internal_check_memory+0x94/0x530 [ 1775.910908][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1775.916881][ T6231] do_recvmmsg+0x55a/0x1180 [ 1775.921539][ T6231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1775.927943][ T6231] ? do_syscall_64+0x3d/0xb0 [ 1775.932665][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1775.937844][ T6231] do_syscall_64+0x3d/0xb0 [ 1775.942383][ T6231] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1775.948353][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1775.954420][ T6231] RIP: 0033:0x7f6a17489279 [ 1775.958939][ T6231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1775.978698][ T6231] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1775.987335][ T6231] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1775.995426][ T6231] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1776.003518][ T6231] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1776.011595][ T6231] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1776.019665][ T6231] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1776.027776][ T6231] [ 1776.062243][ T6231] Uninit was stored to memory at: [ 1776.067473][ T6231] ___sys_recvmsg+0x522/0x890 [ 1776.072283][ T6231] do_recvmmsg+0x55a/0x1180 [ 1776.076908][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1776.082060][ T6231] do_syscall_64+0x3d/0xb0 [ 1776.090688][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1776.097698][ T6231] [ 1776.100441][ T6231] Uninit was stored to memory at: [ 1776.106474][ T6231] ___sys_recvmsg+0x522/0x890 [ 1776.111995][ T6231] do_recvmmsg+0x55a/0x1180 [ 1776.117276][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1776.123198][ T6231] do_syscall_64+0x3d/0xb0 [ 1776.128318][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1776.135263][ T6231] [ 1776.138002][ T6231] Uninit was stored to memory at: [ 1776.144018][ T6231] ___sys_recvmsg+0x522/0x890 [ 1776.149454][ T6231] do_recvmmsg+0x55a/0x1180 [ 1776.154831][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1776.160675][ T6231] do_syscall_64+0x3d/0xb0 [ 1776.165932][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1776.172882][ T6231] [ 1776.175608][ T6231] Uninit was stored to memory at: [ 1776.181524][ T6231] ___sys_recvmsg+0x522/0x890 [ 1776.187086][ T6231] do_recvmmsg+0x55a/0x1180 [ 1776.192402][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1776.198245][ T6231] do_syscall_64+0x3d/0xb0 [ 1776.203493][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1776.210305][ T6231] [ 1776.213170][ T6231] Uninit was stored to memory at: [ 1776.219400][ T6231] ___sys_recvmsg+0x522/0x890 [ 1776.224976][ T6231] do_recvmmsg+0x55a/0x1180 [ 1776.230255][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1776.236293][ T6231] do_syscall_64+0x3d/0xb0 [ 1776.241473][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1776.248500][ T6231] [ 1776.251237][ T6231] Uninit was stored to memory at: [ 1776.257416][ T6231] ___sys_recvmsg+0x522/0x890 [ 1776.263045][ T6231] do_recvmmsg+0x55a/0x1180 [ 1776.268333][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1776.274316][ T6231] do_syscall_64+0x3d/0xb0 [ 1776.279476][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1776.286502][ T6231] [ 1776.289369][ T6231] Uninit was stored to memory at: [ 1776.295348][ T6231] ___sys_recvmsg+0x522/0x890 [ 1776.300803][ T6231] do_recvmmsg+0x55a/0x1180 [ 1776.306179][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1776.312152][ T6231] do_syscall_64+0x3d/0xb0 [ 1776.317317][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1776.324367][ T6231] [ 1776.327121][ T6231] Local variable msg_sys created at: [ 1776.333310][ T6231] do_recvmmsg+0x5c/0x1180 [ 1776.338482][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1776.749642][ T6231] not chained 1930000 origins [ 1776.754658][ T6231] CPU: 1 PID: 6231 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1776.764862][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1776.775031][ T6231] Call Trace: [ 1776.778386][ T6231] [ 1776.781390][ T6231] dump_stack_lvl+0x1c8/0x256 [ 1776.786251][ T6231] dump_stack+0x1a/0x1c [ 1776.790562][ T6231] kmsan_internal_chain_origin+0x78/0x120 [ 1776.796435][ T6231] ? filter_irq_stacks+0x5c/0x1a0 [ 1776.801642][ T6231] ? kmsan_internal_check_memory+0x94/0x530 [ 1776.807684][ T6231] ? do_recvmmsg+0x55a/0x1180 [ 1776.812493][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1776.818458][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1776.824426][ T6231] ? should_fail+0x3f/0x810 [ 1776.829074][ T6231] ? __stack_depot_save+0x21/0x4b0 [ 1776.834335][ T6231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1776.840742][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1776.846718][ T6231] __msan_chain_origin+0xbd/0x140 [ 1776.851882][ T6231] ___sys_recvmsg+0x522/0x890 [ 1776.856696][ T6231] ? do_recvmmsg+0x5bc/0x1180 [ 1776.861527][ T6231] ? kmsan_internal_check_memory+0x94/0x530 [ 1776.867580][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1776.873552][ T6231] do_recvmmsg+0x55a/0x1180 [ 1776.878212][ T6231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1776.884707][ T6231] ? do_syscall_64+0x3d/0xb0 [ 1776.889440][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1776.894624][ T6231] do_syscall_64+0x3d/0xb0 [ 1776.899171][ T6231] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1776.905134][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1776.911207][ T6231] RIP: 0033:0x7f6a17489279 [ 1776.915727][ T6231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1776.935494][ T6231] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1776.944049][ T6231] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1776.952141][ T6231] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1776.960218][ T6231] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1776.968298][ T6231] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1776.976384][ T6231] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1776.984497][ T6231] [ 1776.990144][ T6231] Uninit was stored to memory at: [ 1776.995604][ T6231] ___sys_recvmsg+0x522/0x890 [ 1777.000410][ T6231] do_recvmmsg+0x55a/0x1180 [ 1777.005118][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1777.010266][ T6231] do_syscall_64+0x3d/0xb0 [ 1777.014873][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1777.020938][ T6231] [ 1777.023404][ T6231] Uninit was stored to memory at: [ 1777.028589][ T6231] ___sys_recvmsg+0x522/0x890 [ 1777.033460][ T6231] do_recvmmsg+0x55a/0x1180 [ 1777.038089][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1777.043332][ T6231] do_syscall_64+0x3d/0xb0 [ 1777.047879][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1777.054036][ T6231] [ 1777.056423][ T6231] Uninit was stored to memory at: [ 1777.061688][ T6231] ___sys_recvmsg+0x522/0x890 [ 1777.066488][ T6231] do_recvmmsg+0x55a/0x1180 [ 1777.071130][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1777.076370][ T6231] do_syscall_64+0x3d/0xb0 [ 1777.080913][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1777.087067][ T6231] [ 1777.089451][ T6231] Uninit was stored to memory at: [ 1777.094708][ T6231] ___sys_recvmsg+0x522/0x890 [ 1777.099507][ T6231] do_recvmmsg+0x55a/0x1180 [ 1777.104214][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1777.109392][ T6231] do_syscall_64+0x3d/0xb0 [ 1777.114095][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1777.120164][ T6231] [ 1777.122621][ T6231] Uninit was stored to memory at: [ 1777.127809][ T6231] ___sys_recvmsg+0x522/0x890 [ 1777.132679][ T6231] do_recvmmsg+0x55a/0x1180 [ 1777.137325][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1777.142551][ T6231] do_syscall_64+0x3d/0xb0 [ 1777.147091][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1777.153220][ T6231] [ 1777.155604][ T6231] Uninit was stored to memory at: [ 1777.160799][ T6231] ___sys_recvmsg+0x522/0x890 [ 1777.165730][ T6231] do_recvmmsg+0x55a/0x1180 [ 1777.170359][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1777.175628][ T6231] do_syscall_64+0x3d/0xb0 [ 1777.180170][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1777.186319][ T6231] [ 1777.188704][ T6231] Uninit was stored to memory at: [ 1777.193954][ T6231] ___sys_recvmsg+0x522/0x890 [ 1777.198757][ T6231] do_recvmmsg+0x55a/0x1180 [ 1777.203453][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1777.208610][ T6231] do_syscall_64+0x3d/0xb0 [ 1777.213222][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1777.219286][ T6231] [ 1777.221784][ T6231] Local variable msg_sys created at: [ 1777.227149][ T6231] do_recvmmsg+0x5c/0x1180 [ 1777.231815][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1777.543888][ T6231] not chained 1940000 origins [ 1777.548719][ T6231] CPU: 1 PID: 6231 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1777.559048][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1777.569237][ T6231] Call Trace: [ 1777.572614][ T6231] [ 1777.575638][ T6231] dump_stack_lvl+0x1c8/0x256 [ 1777.580501][ T6231] dump_stack+0x1a/0x1c [ 1777.584929][ T6231] kmsan_internal_chain_origin+0x78/0x120 [ 1777.590828][ T6231] ? filter_irq_stacks+0x5c/0x1a0 [ 1777.596048][ T6231] ? kmsan_internal_check_memory+0x94/0x530 [ 1777.602134][ T6231] ? do_recvmmsg+0x55a/0x1180 [ 1777.606961][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1777.612938][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1777.618918][ T6231] ? should_fail+0x3f/0x810 [ 1777.623580][ T6231] ? __stack_depot_save+0x21/0x4b0 [ 1777.628852][ T6231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1777.635267][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1777.641235][ T6231] __msan_chain_origin+0xbd/0x140 [ 1777.646407][ T6231] ___sys_recvmsg+0x522/0x890 [ 1777.651226][ T6231] ? do_recvmmsg+0x5bc/0x1180 [ 1777.656065][ T6231] ? kmsan_internal_check_memory+0x94/0x530 [ 1777.662145][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1777.668131][ T6231] do_recvmmsg+0x55a/0x1180 [ 1777.672805][ T6231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1777.679219][ T6231] ? do_syscall_64+0x3d/0xb0 [ 1777.683952][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1777.689146][ T6231] do_syscall_64+0x3d/0xb0 [ 1777.693696][ T6231] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1777.699668][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1777.705735][ T6231] RIP: 0033:0x7f6a17489279 [ 1777.710253][ T6231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1777.730379][ T6231] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1777.738942][ T6231] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1777.747032][ T6231] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1777.755112][ T6231] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1777.763200][ T6231] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1777.771364][ T6231] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1777.779476][ T6231] [ 1777.785187][ T6231] Uninit was stored to memory at: [ 1777.792729][ T6231] ___sys_recvmsg+0x522/0x890 [ 1777.797580][ T6231] do_recvmmsg+0x55a/0x1180 [ 1777.802500][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1777.807656][ T6231] do_syscall_64+0x3d/0xb0 [ 1777.812277][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1777.818517][ T6231] [ 1777.820902][ T6231] Uninit was stored to memory at: [ 1777.826167][ T6231] ___sys_recvmsg+0x522/0x890 [ 1777.830975][ T6231] do_recvmmsg+0x55a/0x1180 [ 1777.835671][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1777.840821][ T6231] do_syscall_64+0x3d/0xb0 [ 1777.845423][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1777.851498][ T6231] [ 1777.853956][ T6231] Uninit was stored to memory at: [ 1777.859147][ T6231] ___sys_recvmsg+0x522/0x890 [ 1777.864034][ T6231] do_recvmmsg+0x55a/0x1180 [ 1777.868665][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1777.873903][ T6231] do_syscall_64+0x3d/0xb0 [ 1777.878621][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1777.884766][ T6231] [ 1777.887151][ T6231] Uninit was stored to memory at: [ 1777.892405][ T6231] ___sys_recvmsg+0x522/0x890 [ 1777.897212][ T6231] do_recvmmsg+0x55a/0x1180 [ 1777.901918][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1777.907076][ T6231] do_syscall_64+0x3d/0xb0 [ 1777.911694][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1777.917763][ T6231] [ 1777.920143][ T6231] Uninit was stored to memory at: [ 1777.925442][ T6231] ___sys_recvmsg+0x522/0x890 [ 1777.930276][ T6231] do_recvmmsg+0x55a/0x1180 [ 1777.934978][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1777.940135][ T6231] do_syscall_64+0x3d/0xb0 [ 1777.944754][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1777.950819][ T6231] [ 1777.953278][ T6231] Uninit was stored to memory at: [ 1777.958462][ T6231] ___sys_recvmsg+0x522/0x890 [ 1777.963339][ T6231] do_recvmmsg+0x55a/0x1180 [ 1777.967962][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1777.973193][ T6231] do_syscall_64+0x3d/0xb0 [ 1777.977739][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1777.983889][ T6231] [ 1777.986278][ T6231] Uninit was stored to memory at: [ 1777.991468][ T6231] ___sys_recvmsg+0x522/0x890 [ 1777.996370][ T6231] do_recvmmsg+0x55a/0x1180 [ 1778.001002][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1778.006247][ T6231] do_syscall_64+0x3d/0xb0 [ 1778.010791][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1778.016945][ T6231] [ 1778.019335][ T6231] Local variable msg_sys created at: [ 1778.024769][ T6231] do_recvmmsg+0x5c/0x1180 [ 1778.029315][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1778.314756][ T6231] not chained 1950000 origins [ 1778.319556][ T6231] CPU: 1 PID: 6231 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1778.329764][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1778.339944][ T6231] Call Trace: [ 1778.343314][ T6231] [ 1778.346322][ T6231] dump_stack_lvl+0x1c8/0x256 [ 1778.351195][ T6231] dump_stack+0x1a/0x1c [ 1778.355515][ T6231] kmsan_internal_chain_origin+0x78/0x120 [ 1778.361387][ T6231] ? filter_irq_stacks+0x5c/0x1a0 [ 1778.366600][ T6231] ? kmsan_internal_check_memory+0x94/0x530 [ 1778.372655][ T6231] ? do_recvmmsg+0x55a/0x1180 [ 1778.377472][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1778.383475][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1778.389448][ T6231] ? should_fail+0x3f/0x810 [ 1778.394102][ T6231] ? __stack_depot_save+0x21/0x4b0 [ 1778.399362][ T6231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1778.405777][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1778.411741][ T6231] __msan_chain_origin+0xbd/0x140 [ 1778.416922][ T6231] ___sys_recvmsg+0x522/0x890 [ 1778.421734][ T6231] ? do_recvmmsg+0x5bc/0x1180 [ 1778.426566][ T6231] ? kmsan_internal_check_memory+0x94/0x530 [ 1778.432727][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1778.438720][ T6231] do_recvmmsg+0x55a/0x1180 [ 1778.443469][ T6231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1778.449887][ T6231] ? do_syscall_64+0x3d/0xb0 [ 1778.454622][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1778.459811][ T6231] do_syscall_64+0x3d/0xb0 [ 1778.464365][ T6231] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1778.470343][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1778.476424][ T6231] RIP: 0033:0x7f6a17489279 [ 1778.480950][ T6231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1778.500723][ T6231] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1778.509279][ T6231] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1778.517376][ T6231] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1778.525465][ T6231] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1778.533550][ T6231] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1778.541627][ T6231] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1778.549762][ T6231] [ 1778.555202][ T6231] Uninit was stored to memory at: [ 1778.560413][ T6231] ___sys_recvmsg+0x522/0x890 [ 1778.565528][ T6231] do_recvmmsg+0x55a/0x1180 [ 1778.570167][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1778.575418][ T6231] do_syscall_64+0x3d/0xb0 [ 1778.579964][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1778.586110][ T6231] [ 1778.588501][ T6231] Uninit was stored to memory at: [ 1778.593772][ T6231] ___sys_recvmsg+0x522/0x890 [ 1778.598571][ T6231] do_recvmmsg+0x55a/0x1180 [ 1778.603272][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1778.608456][ T6231] do_syscall_64+0x3d/0xb0 [ 1778.613076][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1778.619143][ T6231] [ 1778.621526][ T6231] Uninit was stored to memory at: [ 1778.626790][ T6231] ___sys_recvmsg+0x522/0x890 [ 1778.631665][ T6231] do_recvmmsg+0x55a/0x1180 [ 1778.636290][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1778.641457][ T6231] do_syscall_64+0x3d/0xb0 [ 1778.646080][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1778.652217][ T6231] [ 1778.654602][ T6231] Uninit was stored to memory at: [ 1778.659793][ T6231] ___sys_recvmsg+0x522/0x890 [ 1778.664674][ T6231] do_recvmmsg+0x55a/0x1180 [ 1778.669310][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1778.674547][ T6231] do_syscall_64+0x3d/0xb0 [ 1778.679087][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1778.685223][ T6231] [ 1778.687611][ T6231] Uninit was stored to memory at: [ 1778.692872][ T6231] ___sys_recvmsg+0x522/0x890 [ 1778.697672][ T6231] do_recvmmsg+0x55a/0x1180 [ 1778.702418][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1778.707573][ T6231] do_syscall_64+0x3d/0xb0 [ 1778.712183][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1778.718251][ T6231] [ 1778.720636][ T6231] Uninit was stored to memory at: [ 1778.725956][ T6231] ___sys_recvmsg+0x522/0x890 [ 1778.730759][ T6231] do_recvmmsg+0x55a/0x1180 [ 1778.735521][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1778.740676][ T6231] do_syscall_64+0x3d/0xb0 [ 1778.745344][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1778.751422][ T6231] [ 1778.753937][ T6231] Uninit was stored to memory at: [ 1778.759124][ T6231] ___sys_recvmsg+0x522/0x890 [ 1778.764049][ T6231] do_recvmmsg+0x55a/0x1180 [ 1778.768673][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1778.773901][ T6231] do_syscall_64+0x3d/0xb0 [ 1778.778443][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1778.784615][ T6231] [ 1778.787026][ T6231] Local variable msg_sys created at: [ 1778.792502][ T6231] do_recvmmsg+0x5c/0x1180 [ 1778.797040][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1779.083289][ T6231] not chained 1960000 origins [ 1779.088087][ T6231] CPU: 1 PID: 6231 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1779.098292][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1779.108460][ T6231] Call Trace: [ 1779.111814][ T6231] [ 1779.114822][ T6231] dump_stack_lvl+0x1c8/0x256 [ 1779.119682][ T6231] dump_stack+0x1a/0x1c [ 1779.123993][ T6231] kmsan_internal_chain_origin+0x78/0x120 [ 1779.129869][ T6231] ? filter_irq_stacks+0x5c/0x1a0 [ 1779.135074][ T6231] ? kmsan_internal_check_memory+0x94/0x530 [ 1779.141126][ T6231] ? do_recvmmsg+0x55a/0x1180 [ 1779.145943][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1779.151919][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1779.157884][ T6231] ? should_fail+0x3f/0x810 [ 1779.162537][ T6231] ? __stack_depot_save+0x21/0x4b0 [ 1779.167804][ T6231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1779.174210][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1779.180175][ T6231] __msan_chain_origin+0xbd/0x140 [ 1779.185342][ T6231] ___sys_recvmsg+0x522/0x890 [ 1779.190156][ T6231] ? do_recvmmsg+0x5bc/0x1180 [ 1779.194987][ T6231] ? kmsan_internal_check_memory+0x94/0x530 [ 1779.201051][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1779.207015][ T6231] do_recvmmsg+0x55a/0x1180 [ 1779.211674][ T6231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1779.218077][ T6231] ? do_syscall_64+0x3d/0xb0 [ 1779.222804][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1779.227981][ T6231] do_syscall_64+0x3d/0xb0 [ 1779.232520][ T6231] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1779.238514][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1779.244584][ T6231] RIP: 0033:0x7f6a17489279 [ 1779.249102][ T6231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1779.268968][ T6231] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1779.277533][ T6231] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1779.285639][ T6231] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1779.293730][ T6231] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1779.301827][ T6231] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1779.309915][ T6231] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1779.318035][ T6231] [ 1779.327272][ T6231] Uninit was stored to memory at: [ 1779.333736][ T6231] ___sys_recvmsg+0x522/0x890 [ 1779.338549][ T6231] do_recvmmsg+0x55a/0x1180 [ 1779.343603][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1779.348765][ T6231] do_syscall_64+0x3d/0xb0 [ 1779.353394][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1779.359474][ T6231] [ 1779.361939][ T6231] Uninit was stored to memory at: [ 1779.367125][ T6231] ___sys_recvmsg+0x522/0x890 [ 1779.372012][ T6231] do_recvmmsg+0x55a/0x1180 [ 1779.376641][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1779.381871][ T6231] do_syscall_64+0x3d/0xb0 [ 1779.386416][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1779.392619][ T6231] [ 1779.395006][ T6231] Uninit was stored to memory at: [ 1779.400206][ T6231] ___sys_recvmsg+0x522/0x890 [ 1779.405141][ T6231] do_recvmmsg+0x55a/0x1180 [ 1779.409772][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1779.415063][ T6231] do_syscall_64+0x3d/0xb0 [ 1779.419605][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1779.425805][ T6231] [ 1779.428194][ T6231] Uninit was stored to memory at: [ 1779.433500][ T6231] ___sys_recvmsg+0x522/0x890 [ 1779.438304][ T6231] do_recvmmsg+0x55a/0x1180 [ 1779.443058][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1779.448218][ T6231] do_syscall_64+0x3d/0xb0 [ 1779.452879][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1779.458956][ T6231] [ 1779.461361][ T6231] Uninit was stored to memory at: [ 1779.466691][ T6231] ___sys_recvmsg+0x522/0x890 [ 1779.471500][ T6231] do_recvmmsg+0x55a/0x1180 [ 1779.476283][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1779.481446][ T6231] do_syscall_64+0x3d/0xb0 [ 1779.486144][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1779.492308][ T6231] [ 1779.494704][ T6231] Uninit was stored to memory at: [ 1779.499903][ T6231] ___sys_recvmsg+0x522/0x890 [ 1779.504849][ T6231] do_recvmmsg+0x55a/0x1180 [ 1779.509516][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1779.514819][ T6231] do_syscall_64+0x3d/0xb0 [ 1779.519366][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1779.525541][ T6231] [ 1779.527929][ T6231] Uninit was stored to memory at: [ 1779.533254][ T6231] ___sys_recvmsg+0x522/0x890 [ 1779.538057][ T6231] do_recvmmsg+0x55a/0x1180 [ 1779.542814][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1779.547976][ T6231] do_syscall_64+0x3d/0xb0 [ 1779.552648][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1779.558720][ T6231] [ 1779.561115][ T6231] Local variable msg_sys created at: [ 1779.566631][ T6231] do_recvmmsg+0x5c/0x1180 [ 1779.571182][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1779.863158][ T6231] not chained 1970000 origins [ 1779.867969][ T6231] CPU: 1 PID: 6231 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1779.878175][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1779.888339][ T6231] Call Trace: [ 1779.891694][ T6231] [ 1779.894695][ T6231] dump_stack_lvl+0x1c8/0x256 [ 1779.899558][ T6231] dump_stack+0x1a/0x1c [ 1779.903875][ T6231] kmsan_internal_chain_origin+0x78/0x120 [ 1779.909743][ T6231] ? filter_irq_stacks+0x5c/0x1a0 [ 1779.914948][ T6231] ? kmsan_internal_check_memory+0x94/0x530 [ 1779.920988][ T6231] ? do_recvmmsg+0x55a/0x1180 [ 1779.925801][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1779.931773][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1779.937739][ T6231] ? should_fail+0x3f/0x810 [ 1779.942389][ T6231] ? __stack_depot_save+0x21/0x4b0 [ 1779.947658][ T6231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1779.954067][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1779.960026][ T6231] __msan_chain_origin+0xbd/0x140 [ 1779.965229][ T6231] ___sys_recvmsg+0x522/0x890 [ 1779.970038][ T6231] ? do_recvmmsg+0x5bc/0x1180 [ 1779.974871][ T6231] ? kmsan_internal_check_memory+0x94/0x530 [ 1779.980921][ T6231] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1779.986890][ T6231] do_recvmmsg+0x55a/0x1180 [ 1779.991549][ T6231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1779.997950][ T6231] ? do_syscall_64+0x3d/0xb0 [ 1780.002677][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1780.007860][ T6231] do_syscall_64+0x3d/0xb0 [ 1780.012403][ T6231] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1780.018374][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1780.024450][ T6231] RIP: 0033:0x7f6a17489279 [ 1780.028969][ T6231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1780.048751][ T6231] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1780.057318][ T6231] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1780.065428][ T6231] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1780.073525][ T6231] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1780.081617][ T6231] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1780.089694][ T6231] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1780.097807][ T6231] [ 1780.103671][ T6231] Uninit was stored to memory at: [ 1780.108880][ T6231] ___sys_recvmsg+0x522/0x890 [ 1780.114003][ T6231] do_recvmmsg+0x55a/0x1180 [ 1780.118636][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1780.123875][ T6231] do_syscall_64+0x3d/0xb0 [ 1780.128420][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1780.134580][ T6231] [ 1780.136967][ T6231] Uninit was stored to memory at: [ 1780.142238][ T6231] ___sys_recvmsg+0x522/0x890 [ 1780.147043][ T6231] do_recvmmsg+0x55a/0x1180 [ 1780.151746][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1780.156910][ T6231] do_syscall_64+0x3d/0xb0 [ 1780.161453][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1780.167601][ T6231] [ 1780.169983][ T6231] Uninit was stored to memory at: [ 1780.175260][ T6231] ___sys_recvmsg+0x522/0x890 [ 1780.180064][ T6231] do_recvmmsg+0x55a/0x1180 [ 1780.184767][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1780.189922][ T6231] do_syscall_64+0x3d/0xb0 [ 1780.194548][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1780.200616][ T6231] [ 1780.203080][ T6231] Uninit was stored to memory at: [ 1780.208268][ T6231] ___sys_recvmsg+0x522/0x890 [ 1780.213142][ T6231] do_recvmmsg+0x55a/0x1180 [ 1780.217769][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1780.223009][ T6231] do_syscall_64+0x3d/0xb0 [ 1780.227554][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1780.233753][ T6231] [ 1780.236143][ T6231] Uninit was stored to memory at: [ 1780.241341][ T6231] ___sys_recvmsg+0x522/0x890 [ 1780.246280][ T6231] do_recvmmsg+0x55a/0x1180 [ 1780.250910][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1780.256143][ T6231] do_syscall_64+0x3d/0xb0 [ 1780.260786][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1780.267036][ T6231] [ 1780.269430][ T6231] Uninit was stored to memory at: [ 1780.274700][ T6231] ___sys_recvmsg+0x522/0x890 [ 1780.279505][ T6231] do_recvmmsg+0x55a/0x1180 [ 1780.284295][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1780.289459][ T6231] do_syscall_64+0x3d/0xb0 [ 1780.294131][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1780.300248][ T6231] [ 1780.302758][ T6231] Uninit was stored to memory at: [ 1780.307948][ T6231] ___sys_recvmsg+0x522/0x890 [ 1780.312883][ T6231] do_recvmmsg+0x55a/0x1180 [ 1780.317513][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1780.322804][ T6231] do_syscall_64+0x3d/0xb0 [ 1780.327352][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1780.333542][ T6231] [ 1780.335933][ T6231] Local variable msg_sys created at: [ 1780.341291][ T6231] do_recvmmsg+0x5c/0x1180 [ 1780.345964][ T6231] __x64_sys_recvmmsg+0x3a7/0x4b0 22:45:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) fallocate(r2, 0x22, 0x8000000000000001, 0x200) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000400)={@rand_addr, 0x0, 0x4, 0x4, 0x7f}}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)="49e6b17a4400f34be58d3281fcf2381731e7da3b20579b1d63b15f6cdae58f18ee3fa2ee88a13f8dbb3f3e5382c3712b2c506487b9dcae424e09cf199fae8694479668b604db9e6fb8da8970c1bcd4b698aa9d7a647b6104a1e997d25e14cf1fd24264d6d87c638f7fe1b292bf797fa146e6aadac0bbf71d9cc2484c96ae6c328a8983a76ef84e194c86", 0x8a, 0x0, 0x0, 0x0) syz_clone(0x40900280, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x125) fcntl$setstatus(r3, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) io_submit(0x0, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:45:07 executing program 3: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:45:07 executing program 5: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:45:07 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:45:07 executing program 1: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:45:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}}, 0x0) 22:45:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) [ 1781.602072][ T3565] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1781.973191][ T3565] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1781.993576][ T3565] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1782.006231][ T3565] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.017677][ T3565] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1782.032779][ T3565] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1782.043399][ T3565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.085718][ T3565] usb 5-1: config 0 descriptor?? 22:45:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f0000000000)=0x8) 22:45:09 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:45:09 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0xfffffffffffffffd, r1}}, 0x18) 22:45:09 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 22:45:09 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @win={{0x0, 0x0, 0x35314142}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 1782.628097][ T3565] appleir 0003:05AC:8243.003A: No inputs registered, leaving [ 1782.766067][ T3565] appleir 0003:05AC:8243.003A: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.4-1/input0 [ 1783.067976][ T6294] not chained 1980000 origins [ 1783.072987][ T6294] CPU: 1 PID: 6294 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1783.083200][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1783.093356][ T6294] Call Trace: [ 1783.096703][ T6294] [ 1783.099703][ T6294] dump_stack_lvl+0x1c8/0x256 [ 1783.104553][ T6294] dump_stack+0x1a/0x1c [ 1783.108855][ T6294] kmsan_internal_chain_origin+0x78/0x120 [ 1783.114715][ T6294] ? filter_irq_stacks+0x5c/0x1a0 [ 1783.119906][ T6294] ? kmsan_internal_check_memory+0x94/0x530 [ 1783.125943][ T6294] ? do_recvmmsg+0x55a/0x1180 [ 1783.130745][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1783.136702][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1783.142657][ T6294] ? should_fail+0x3f/0x810 [ 1783.147295][ T6294] ? __stack_depot_save+0x21/0x4b0 [ 1783.152542][ T6294] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1783.158931][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1783.164883][ T6294] __msan_chain_origin+0xbd/0x140 [ 1783.170042][ T6294] ___sys_recvmsg+0x522/0x890 [ 1783.174839][ T6294] ? do_recvmmsg+0x5bc/0x1180 [ 1783.179663][ T6294] ? kmsan_internal_check_memory+0x94/0x530 [ 1783.185702][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1783.191662][ T6294] do_recvmmsg+0x55a/0x1180 [ 1783.196337][ T6294] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1783.202734][ T6294] ? do_syscall_64+0x3d/0xb0 [ 1783.207453][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1783.212629][ T6294] do_syscall_64+0x3d/0xb0 [ 1783.217164][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1783.223223][ T6294] RIP: 0033:0x7f6a17489279 [ 1783.227735][ T6294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1783.247575][ T6294] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1783.256114][ T6294] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1783.264211][ T6294] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1783.272283][ T6294] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1783.280354][ T6294] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1783.288425][ T6294] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1783.296656][ T6294] [ 1783.302663][ T6294] Uninit was stored to memory at: [ 1783.307973][ T6294] ___sys_recvmsg+0x522/0x890 [ 1783.313206][ T6294] do_recvmmsg+0x55a/0x1180 [ 1783.317862][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1783.323136][ T6294] do_syscall_64+0x3d/0xb0 [ 1783.327691][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1783.333839][ T6294] [ 1783.336227][ T6294] Uninit was stored to memory at: [ 1783.341414][ T6294] ___sys_recvmsg+0x522/0x890 [ 1783.346330][ T6294] do_recvmmsg+0x55a/0x1180 [ 1783.350968][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1783.356229][ T6294] do_syscall_64+0x3d/0xb0 [ 1783.360796][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1783.366963][ T6294] [ 1783.369358][ T6294] Uninit was stored to memory at: [ 1783.374637][ T6294] ___sys_recvmsg+0x522/0x890 [ 1783.379448][ T6294] do_recvmmsg+0x55a/0x1180 [ 1783.384160][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1783.389325][ T6294] do_syscall_64+0x3d/0xb0 [ 1783.393968][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1783.400040][ T6294] [ 1783.402519][ T6294] Uninit was stored to memory at: [ 1783.407720][ T6294] ___sys_recvmsg+0x522/0x890 [ 1783.412622][ T6294] do_recvmmsg+0x55a/0x1180 [ 1783.417259][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1783.422499][ T6294] do_syscall_64+0x3d/0xb0 [ 1783.427050][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1783.433195][ T6294] [ 1783.435582][ T6294] Uninit was stored to memory at: [ 1783.440771][ T6294] ___sys_recvmsg+0x522/0x890 [ 1783.445654][ T6294] do_recvmmsg+0x55a/0x1180 [ 1783.450294][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1783.455530][ T6294] do_syscall_64+0x3d/0xb0 [ 1783.460078][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1783.466235][ T6294] [ 1783.468626][ T6294] Uninit was stored to memory at: [ 1783.473901][ T6294] ___sys_recvmsg+0x522/0x890 [ 1783.478708][ T6294] do_recvmmsg+0x55a/0x1180 [ 1783.483418][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1783.488581][ T6294] do_syscall_64+0x3d/0xb0 [ 1783.493235][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1783.499320][ T6294] [ 1783.501811][ T6294] Uninit was stored to memory at: [ 1783.507018][ T6294] ___sys_recvmsg+0x522/0x890 [ 1783.511916][ T6294] do_recvmmsg+0x55a/0x1180 [ 1783.516561][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1783.521826][ T6294] do_syscall_64+0x3d/0xb0 [ 1783.526374][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1783.532537][ T6294] [ 1783.534925][ T6294] Local variable msg_sys created at: [ 1783.540291][ T6294] do_recvmmsg+0x5c/0x1180 [ 1783.544941][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1783.559518][ T6322] usb 5-1: language id specifier not provided by device, defaulting to English [ 1784.470070][ T6294] not chained 1990000 origins [ 1784.475819][ T6294] CPU: 0 PID: 6294 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1784.486038][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1784.496220][ T6294] Call Trace: [ 1784.499579][ T6294] [ 1784.502584][ T6294] dump_stack_lvl+0x1c8/0x256 [ 1784.507447][ T6294] dump_stack+0x1a/0x1c [ 1784.511750][ T6294] kmsan_internal_chain_origin+0x78/0x120 [ 1784.517630][ T6294] ? filter_irq_stacks+0x5c/0x1a0 [ 1784.522844][ T6294] ? kmsan_internal_check_memory+0x94/0x530 [ 1784.528904][ T6294] ? do_recvmmsg+0x55a/0x1180 [ 1784.533714][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1784.539674][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1784.545636][ T6294] ? should_fail+0x3f/0x810 [ 1784.550281][ T6294] ? __stack_depot_save+0x21/0x4b0 [ 1784.555527][ T6294] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1784.561920][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1784.567874][ T6294] __msan_chain_origin+0xbd/0x140 [ 1784.573059][ T6294] ___sys_recvmsg+0x522/0x890 [ 1784.577856][ T6294] ? do_recvmmsg+0x5bc/0x1180 [ 1784.582681][ T6294] ? kmsan_internal_check_memory+0x94/0x530 [ 1784.588811][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1784.594774][ T6294] do_recvmmsg+0x55a/0x1180 [ 1784.599421][ T6294] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1784.605814][ T6294] ? do_syscall_64+0x3d/0xb0 [ 1784.610535][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1784.615702][ T6294] do_syscall_64+0x3d/0xb0 [ 1784.620244][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1784.626300][ T6294] RIP: 0033:0x7f6a17489279 [ 1784.630827][ T6294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1784.650587][ T6294] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1784.659126][ T6294] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1784.667210][ T6294] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1784.675286][ T6294] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1784.683375][ T6294] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1784.691446][ T6294] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1784.699545][ T6294] [ 1784.732589][ T6294] Uninit was stored to memory at: [ 1784.737819][ T6294] ___sys_recvmsg+0x522/0x890 [ 1784.742630][ T6294] do_recvmmsg+0x55a/0x1180 [ 1784.747257][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1784.752407][ T6294] do_syscall_64+0x3d/0xb0 [ 1784.769142][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1784.776180][ T6294] [ 1784.778904][ T6294] Uninit was stored to memory at: [ 1784.784894][ T6294] ___sys_recvmsg+0x522/0x890 [ 1784.790320][ T6294] do_recvmmsg+0x55a/0x1180 [ 1784.795650][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1784.801516][ T6294] do_syscall_64+0x3d/0xb0 [ 1784.806764][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1784.813771][ T6294] [ 1784.816528][ T6294] Uninit was stored to memory at: [ 1784.822422][ T6294] ___sys_recvmsg+0x522/0x890 [ 1784.827873][ T6294] do_recvmmsg+0x55a/0x1180 [ 1784.833197][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1784.839040][ T6294] do_syscall_64+0x3d/0xb0 [ 1784.844329][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1784.851199][ T6294] [ 1784.854027][ T6294] Uninit was stored to memory at: [ 1784.859937][ T6294] ___sys_recvmsg+0x522/0x890 [ 1784.865489][ T6294] do_recvmmsg+0x55a/0x1180 [ 1784.870741][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1784.876767][ T6294] do_syscall_64+0x3d/0xb0 [ 1784.882064][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1784.888956][ T6294] [ 1784.891807][ T6294] Uninit was stored to memory at: [ 1784.897747][ T6294] ___sys_recvmsg+0x522/0x890 [ 1784.903363][ T6294] do_recvmmsg+0x55a/0x1180 [ 1784.908667][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1784.914662][ T6294] do_syscall_64+0x3d/0xb0 [ 1784.919844][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1784.926831][ T6294] [ 1784.929543][ T6294] Uninit was stored to memory at: [ 1784.935573][ T6294] ___sys_recvmsg+0x522/0x890 [ 1784.941047][ T6294] do_recvmmsg+0x55a/0x1180 [ 1784.946449][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1784.952354][ T6294] do_syscall_64+0x3d/0xb0 [ 1784.957491][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1784.964477][ T6294] [ 1784.967210][ T6294] Uninit was stored to memory at: [ 1784.973239][ T6294] ___sys_recvmsg+0x522/0x890 [ 1784.978665][ T6294] do_recvmmsg+0x55a/0x1180 [ 1784.984054][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1784.989928][ T6294] do_syscall_64+0x3d/0xb0 [ 1784.995201][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1785.002134][ T6294] [ 1785.004875][ T6294] Local variable msg_sys created at: [ 1785.010928][ T6294] do_recvmmsg+0x5c/0x1180 [ 1785.016280][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1785.273749][ T3552] usb 5-1: USB disconnect, device number 61 [ 1785.607891][ T6294] not chained 2000000 origins [ 1785.615554][ T6294] CPU: 1 PID: 6294 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1785.625759][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1785.636357][ T6294] Call Trace: [ 1785.639718][ T6294] [ 1785.642723][ T6294] dump_stack_lvl+0x1c8/0x256 [ 1785.647582][ T6294] dump_stack+0x1a/0x1c [ 1785.651892][ T6294] kmsan_internal_chain_origin+0x78/0x120 [ 1785.657790][ T6294] ? filter_irq_stacks+0x5c/0x1a0 [ 1785.663005][ T6294] ? kmsan_internal_check_memory+0x94/0x530 [ 1785.669050][ T6294] ? do_recvmmsg+0x55a/0x1180 [ 1785.673858][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1785.679830][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1785.685800][ T6294] ? should_fail+0x3f/0x810 [ 1785.690446][ T6294] ? __stack_depot_save+0x21/0x4b0 [ 1785.695703][ T6294] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1785.702112][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1785.708078][ T6294] __msan_chain_origin+0xbd/0x140 [ 1785.713243][ T6294] ___sys_recvmsg+0x522/0x890 [ 1785.718053][ T6294] ? do_recvmmsg+0x5bc/0x1180 [ 1785.722886][ T6294] ? kmsan_internal_check_memory+0x94/0x530 [ 1785.729033][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1785.735004][ T6294] do_recvmmsg+0x55a/0x1180 [ 1785.739659][ T6294] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1785.746061][ T6294] ? do_syscall_64+0x3d/0xb0 [ 1785.750789][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1785.755984][ T6294] do_syscall_64+0x3d/0xb0 [ 1785.760533][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1785.766605][ T6294] RIP: 0033:0x7f6a17489279 [ 1785.771120][ T6294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1785.790882][ T6294] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1785.799435][ T6294] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1785.807523][ T6294] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1785.815603][ T6294] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1785.823683][ T6294] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1785.831756][ T6294] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1785.839866][ T6294] [ 1785.843186][ T6294] Uninit was stored to memory at: [ 1785.848400][ T6294] ___sys_recvmsg+0x522/0x890 [ 1785.853288][ T6294] do_recvmmsg+0x55a/0x1180 [ 1785.857924][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1785.863166][ T6294] do_syscall_64+0x3d/0xb0 [ 1785.867705][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1785.873849][ T6294] [ 1785.876245][ T6294] Uninit was stored to memory at: [ 1785.881440][ T6294] ___sys_recvmsg+0x522/0x890 [ 1785.886341][ T6294] do_recvmmsg+0x55a/0x1180 [ 1785.890972][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1785.896228][ T6294] do_syscall_64+0x3d/0xb0 [ 1785.900764][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1785.906906][ T6294] [ 1785.909292][ T6294] Uninit was stored to memory at: [ 1785.914546][ T6294] ___sys_recvmsg+0x522/0x890 [ 1785.919345][ T6294] do_recvmmsg+0x55a/0x1180 [ 1785.924126][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1785.929282][ T6294] do_syscall_64+0x3d/0xb0 [ 1785.933892][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1785.939966][ T6294] [ 1785.942435][ T6294] Uninit was stored to memory at: [ 1785.947619][ T6294] ___sys_recvmsg+0x522/0x890 [ 1785.952491][ T6294] do_recvmmsg+0x55a/0x1180 [ 1785.957117][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1785.962342][ T6294] do_syscall_64+0x3d/0xb0 [ 1785.966879][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1785.973037][ T6294] [ 1785.975423][ T6294] Uninit was stored to memory at: [ 1785.980608][ T6294] ___sys_recvmsg+0x522/0x890 [ 1785.985479][ T6294] do_recvmmsg+0x55a/0x1180 [ 1785.990105][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1785.995365][ T6294] do_syscall_64+0x3d/0xb0 [ 1785.999906][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1786.006069][ T6294] [ 1786.008454][ T6294] Uninit was stored to memory at: [ 1786.013712][ T6294] ___sys_recvmsg+0x522/0x890 [ 1786.018532][ T6294] do_recvmmsg+0x55a/0x1180 [ 1786.023234][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1786.028397][ T6294] do_syscall_64+0x3d/0xb0 [ 1786.033011][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1786.039073][ T6294] [ 1786.041455][ T6294] Uninit was stored to memory at: [ 1786.046717][ T6294] ___sys_recvmsg+0x522/0x890 [ 1786.051513][ T6294] do_recvmmsg+0x55a/0x1180 [ 1786.056225][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1786.061387][ T6294] do_syscall_64+0x3d/0xb0 [ 1786.066002][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1786.072140][ T6294] [ 1786.074528][ T6294] Local variable msg_sys created at: [ 1786.079883][ T6294] do_recvmmsg+0x5c/0x1180 [ 1786.084504][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1786.408744][ T6294] not chained 2010000 origins [ 1786.414702][ T6294] CPU: 0 PID: 6294 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1786.424913][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1786.435084][ T6294] Call Trace: [ 1786.438466][ T6294] [ 1786.441476][ T6294] dump_stack_lvl+0x1c8/0x256 [ 1786.446339][ T6294] dump_stack+0x1a/0x1c [ 1786.450646][ T6294] kmsan_internal_chain_origin+0x78/0x120 [ 1786.456456][ T6294] ? up_read+0x36/0x1c0 [ 1786.460720][ T6294] ? do_user_addr_fault+0xfef/0x1710 [ 1786.466107][ T6294] ? exc_page_fault+0x6d/0x140 [ 1786.470951][ T6294] ? asm_exc_page_fault+0x27/0x30 [ 1786.476091][ T6294] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1786.482510][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1786.488469][ T6294] __msan_chain_origin+0xbd/0x140 [ 1786.493618][ T6294] ___sys_recvmsg+0x522/0x890 [ 1786.498371][ T6294] ? do_recvmmsg+0x5bc/0x1180 [ 1786.503133][ T6294] ? kmsan_internal_check_memory+0x94/0x530 [ 1786.509115][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1786.515011][ T6294] do_recvmmsg+0x55a/0x1180 [ 1786.519595][ T6294] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1786.525948][ T6294] ? do_syscall_64+0x3d/0xb0 [ 1786.530669][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1786.535782][ T6294] do_syscall_64+0x3d/0xb0 [ 1786.540268][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1786.546258][ T6294] RIP: 0033:0x7f6a17489279 [ 1786.550721][ T6294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1786.570406][ T6294] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1786.578913][ T6294] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1786.587001][ T6294] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1786.595047][ T6294] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1786.603104][ T6294] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1786.611124][ T6294] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1786.619166][ T6294] [ 1786.650548][ T6294] Uninit was stored to memory at: [ 1786.655777][ T6294] ___sys_recvmsg+0x522/0x890 [ 1786.660562][ T6294] do_recvmmsg+0x55a/0x1180 [ 1786.665151][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1786.673705][ T6294] do_syscall_64+0x3d/0xb0 [ 1786.678896][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1786.685831][ T6294] [ 1786.688448][ T6294] Uninit was stored to memory at: [ 1786.694396][ T6294] ___sys_recvmsg+0x522/0x890 [ 1786.699706][ T6294] do_recvmmsg+0x55a/0x1180 [ 1786.705043][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1786.710609][ T6294] do_syscall_64+0x3d/0xb0 [ 1786.715825][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1786.722804][ T6294] [ 1786.725408][ T6294] Uninit was stored to memory at: [ 1786.730989][ T6294] ___sys_recvmsg+0x522/0x890 [ 1786.736548][ T6294] do_recvmmsg+0x55a/0x1180 [ 1786.741581][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1786.747562][ T6294] do_syscall_64+0x3d/0xb0 [ 1786.752789][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1786.759396][ T6294] [ 1786.762237][ T6294] Uninit was stored to memory at: [ 1786.767913][ T6294] ___sys_recvmsg+0x522/0x890 [ 1786.773387][ T6294] do_recvmmsg+0x55a/0x1180 [ 1786.778369][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1786.784271][ T6294] do_syscall_64+0x3d/0xb0 [ 1786.789171][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1786.796001][ T6294] [ 1786.798723][ T6294] Uninit was stored to memory at: [ 1786.804752][ T6294] ___sys_recvmsg+0x522/0x890 [ 1786.809957][ T6294] do_recvmmsg+0x55a/0x1180 [ 1786.815269][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1786.820874][ T6294] do_syscall_64+0x3d/0xb0 [ 1786.826062][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1786.833025][ T6294] [ 1786.835635][ T6294] Uninit was stored to memory at: [ 1786.841190][ T6294] ___sys_recvmsg+0x522/0x890 [ 1786.846664][ T6294] do_recvmmsg+0x55a/0x1180 [ 1786.851843][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1786.857671][ T6294] do_syscall_64+0x3d/0xb0 [ 1786.862849][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1786.869667][ T6294] [ 1786.872522][ T6294] Uninit was stored to memory at: [ 1786.878116][ T6294] ___sys_recvmsg+0x522/0x890 [ 1786.883607][ T6294] do_recvmmsg+0x55a/0x1180 [ 1786.888593][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1786.894505][ T6294] do_syscall_64+0x3d/0xb0 [ 1786.899452][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1786.906327][ T6294] [ 1786.908886][ T6294] Local variable msg_sys created at: [ 1786.915003][ T6294] do_recvmmsg+0x5c/0x1180 [ 1786.919906][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1787.241362][ T6294] not chained 2020000 origins [ 1787.246669][ T6294] CPU: 0 PID: 6294 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1787.256810][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1787.266918][ T6294] Call Trace: [ 1787.270237][ T6294] [ 1787.273200][ T6294] dump_stack_lvl+0x1c8/0x256 [ 1787.277982][ T6294] dump_stack+0x1a/0x1c [ 1787.282219][ T6294] kmsan_internal_chain_origin+0x78/0x120 [ 1787.288015][ T6294] ? filter_irq_stacks+0x5c/0x1a0 [ 1787.293138][ T6294] ? kmsan_internal_check_memory+0x94/0x530 [ 1787.299108][ T6294] ? do_recvmmsg+0x55a/0x1180 [ 1787.303882][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1787.309860][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1787.315840][ T6294] ? should_fail+0x3f/0x810 [ 1787.320511][ T6294] ? __stack_depot_save+0x21/0x4b0 [ 1787.325757][ T6294] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1787.332091][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1787.338114][ T6294] __msan_chain_origin+0xbd/0x140 [ 1787.343212][ T6294] ___sys_recvmsg+0x522/0x890 [ 1787.347970][ T6294] ? do_recvmmsg+0x5bc/0x1180 [ 1787.352773][ T6294] ? kmsan_internal_check_memory+0x94/0x530 [ 1787.358819][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1787.364751][ T6294] do_recvmmsg+0x55a/0x1180 [ 1787.369340][ T6294] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1787.375688][ T6294] ? do_syscall_64+0x3d/0xb0 [ 1787.380349][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1787.385457][ T6294] do_syscall_64+0x3d/0xb0 [ 1787.389945][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1787.395950][ T6294] RIP: 0033:0x7f6a17489279 [ 1787.400432][ T6294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1787.420142][ T6294] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1787.428674][ T6294] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1787.436711][ T6294] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1787.444744][ T6294] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1787.452798][ T6294] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1787.460888][ T6294] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1787.469010][ T6294] [ 1787.501480][ T6294] Uninit was stored to memory at: [ 1787.506714][ T6294] ___sys_recvmsg+0x522/0x890 [ 1787.511522][ T6294] do_recvmmsg+0x55a/0x1180 [ 1787.516179][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1787.521323][ T6294] do_syscall_64+0x3d/0xb0 [ 1787.537594][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1787.544561][ T6294] [ 1787.547141][ T6294] Uninit was stored to memory at: [ 1787.553109][ T6294] ___sys_recvmsg+0x522/0x890 [ 1787.558309][ T6294] do_recvmmsg+0x55a/0x1180 [ 1787.563627][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1787.569231][ T6294] do_syscall_64+0x3d/0xb0 [ 1787.574445][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1787.581259][ T6294] [ 1787.584079][ T6294] Uninit was stored to memory at: [ 1787.589705][ T6294] ___sys_recvmsg+0x522/0x890 [ 1787.595219][ T6294] do_recvmmsg+0x55a/0x1180 [ 1787.600238][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1787.606103][ T6294] do_syscall_64+0x3d/0xb0 [ 1787.610984][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1787.617878][ T6294] [ 1787.620628][ T6294] Uninit was stored to memory at: [ 1787.626602][ T6294] ___sys_recvmsg+0x522/0x890 [ 1787.632017][ T6294] do_recvmmsg+0x55a/0x1180 [ 1787.637265][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1787.643229][ T6294] do_syscall_64+0x3d/0xb0 [ 1787.648106][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1787.654978][ T6294] [ 1787.657589][ T6294] Uninit was stored to memory at: [ 1787.663601][ T6294] ___sys_recvmsg+0x522/0x890 [ 1787.668855][ T6294] do_recvmmsg+0x55a/0x1180 [ 1787.674123][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1787.679676][ T6294] do_syscall_64+0x3d/0xb0 [ 1787.684925][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1787.691474][ T6294] [ 1787.694338][ T6294] Uninit was stored to memory at: [ 1787.700166][ T6294] ___sys_recvmsg+0x522/0x890 [ 1787.705683][ T6294] do_recvmmsg+0x55a/0x1180 [ 1787.710740][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1787.716628][ T6294] do_syscall_64+0x3d/0xb0 [ 1787.721933][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1787.728748][ T6294] [ 1787.731329][ T6294] Uninit was stored to memory at: [ 1787.737261][ T6294] ___sys_recvmsg+0x522/0x890 [ 1787.742734][ T6294] do_recvmmsg+0x55a/0x1180 [ 1787.747704][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1787.753608][ T6294] do_syscall_64+0x3d/0xb0 [ 1787.758527][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1787.765385][ T6294] [ 1787.768008][ T6294] Local variable msg_sys created at: [ 1787.774168][ T6294] do_recvmmsg+0x5c/0x1180 [ 1787.779089][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1788.091194][ T6294] not chained 2030000 origins [ 1788.096576][ T6294] CPU: 0 PID: 6294 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1788.106716][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1788.116846][ T6294] Call Trace: [ 1788.120158][ T6294] [ 1788.123133][ T6294] dump_stack_lvl+0x1c8/0x256 [ 1788.127912][ T6294] dump_stack+0x1a/0x1c [ 1788.132171][ T6294] kmsan_internal_chain_origin+0x78/0x120 [ 1788.137986][ T6294] ? filter_irq_stacks+0x5c/0x1a0 [ 1788.143109][ T6294] ? kmsan_internal_check_memory+0x94/0x530 [ 1788.149081][ T6294] ? do_recvmmsg+0x55a/0x1180 [ 1788.153846][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1788.159835][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1788.165800][ T6294] ? should_fail+0x3f/0x810 [ 1788.170453][ T6294] ? __stack_depot_save+0x21/0x4b0 [ 1788.175651][ T6294] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1788.181984][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1788.187870][ T6294] __msan_chain_origin+0xbd/0x140 [ 1788.192966][ T6294] ___sys_recvmsg+0x522/0x890 [ 1788.197710][ T6294] ? do_recvmmsg+0x5bc/0x1180 [ 1788.202504][ T6294] ? kmsan_internal_check_memory+0x94/0x530 [ 1788.208559][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1788.214558][ T6294] do_recvmmsg+0x55a/0x1180 [ 1788.219200][ T6294] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1788.225629][ T6294] ? do_syscall_64+0x3d/0xb0 [ 1788.230288][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1788.235400][ T6294] do_syscall_64+0x3d/0xb0 [ 1788.239894][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1788.245884][ T6294] RIP: 0033:0x7f6a17489279 [ 1788.250344][ T6294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1788.270054][ T6294] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1788.278540][ T6294] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1788.286583][ T6294] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1788.294608][ T6294] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1788.302669][ T6294] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1788.310759][ T6294] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1788.318853][ T6294] [ 1788.351012][ T6294] Uninit was stored to memory at: [ 1788.356179][ T6294] ___sys_recvmsg+0x522/0x890 [ 1788.360921][ T6294] do_recvmmsg+0x55a/0x1180 [ 1788.365483][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1788.370578][ T6294] do_syscall_64+0x3d/0xb0 [ 1788.378817][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1788.385880][ T6294] [ 1788.388631][ T6294] Uninit was stored to memory at: [ 1788.394654][ T6294] ___sys_recvmsg+0x522/0x890 [ 1788.399795][ T6294] do_recvmmsg+0x55a/0x1180 [ 1788.405140][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1788.410769][ T6294] do_syscall_64+0x3d/0xb0 [ 1788.416096][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1788.423186][ T6294] [ 1788.425932][ T6294] Uninit was stored to memory at: [ 1788.431546][ T6294] ___sys_recvmsg+0x522/0x890 [ 1788.437145][ T6294] do_recvmmsg+0x55a/0x1180 [ 1788.442543][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1788.448348][ T6294] do_syscall_64+0x3d/0xb0 [ 1788.453576][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1788.460136][ T6294] [ 1788.462981][ T6294] Uninit was stored to memory at: [ 1788.468601][ T6294] ___sys_recvmsg+0x522/0x890 [ 1788.474095][ T6294] do_recvmmsg+0x55a/0x1180 [ 1788.479087][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1788.484979][ T6294] do_syscall_64+0x3d/0xb0 [ 1788.489901][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1788.496805][ T6294] [ 1788.499394][ T6294] Uninit was stored to memory at: [ 1788.505491][ T6294] ___sys_recvmsg+0x522/0x890 [ 1788.510946][ T6294] do_recvmmsg+0x55a/0x1180 [ 1788.516389][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1788.522360][ T6294] do_syscall_64+0x3d/0xb0 [ 1788.527502][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1788.534488][ T6294] [ 1788.537218][ T6294] Uninit was stored to memory at: [ 1788.543240][ T6294] ___sys_recvmsg+0x522/0x890 [ 1788.548734][ T6294] do_recvmmsg+0x55a/0x1180 [ 1788.554174][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1788.560030][ T6294] do_syscall_64+0x3d/0xb0 [ 1788.565379][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1788.572310][ T6294] [ 1788.575029][ T6294] Uninit was stored to memory at: [ 1788.580939][ T6294] ___sys_recvmsg+0x522/0x890 [ 1788.586568][ T6294] do_recvmmsg+0x55a/0x1180 [ 1788.591890][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1788.597710][ T6294] do_syscall_64+0x3d/0xb0 [ 1788.602970][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1788.609554][ T6294] [ 1788.612396][ T6294] Local variable msg_sys created at: [ 1788.618221][ T6294] do_recvmmsg+0x5c/0x1180 [ 1788.623455][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1788.930938][ T6294] not chained 2040000 origins [ 1788.936149][ T6294] CPU: 0 PID: 6294 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1788.946301][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1788.956419][ T6294] Call Trace: [ 1788.959730][ T6294] [ 1788.962697][ T6294] dump_stack_lvl+0x1c8/0x256 [ 1788.967479][ T6294] dump_stack+0x1a/0x1c [ 1788.971730][ T6294] kmsan_internal_chain_origin+0x78/0x120 [ 1788.977528][ T6294] ? filter_irq_stacks+0x5c/0x1a0 [ 1788.982648][ T6294] ? kmsan_internal_check_memory+0x94/0x530 [ 1788.988620][ T6294] ? do_recvmmsg+0x55a/0x1180 [ 1788.993389][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1788.999364][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1789.005317][ T6294] ? should_fail+0x3f/0x810 [ 1789.009923][ T6294] ? __stack_depot_save+0x21/0x4b0 [ 1789.015217][ T6294] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1789.021550][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1789.027466][ T6294] __msan_chain_origin+0xbd/0x140 [ 1789.032578][ T6294] ___sys_recvmsg+0x522/0x890 [ 1789.037324][ T6294] ? do_recvmmsg+0x5bc/0x1180 [ 1789.042108][ T6294] ? kmsan_internal_check_memory+0x94/0x530 [ 1789.048151][ T6294] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1789.054121][ T6294] do_recvmmsg+0x55a/0x1180 [ 1789.058782][ T6294] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1789.065164][ T6294] ? do_syscall_64+0x3d/0xb0 [ 1789.069826][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1789.074933][ T6294] do_syscall_64+0x3d/0xb0 [ 1789.079417][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1789.085405][ T6294] RIP: 0033:0x7f6a17489279 [ 1789.089866][ T6294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1789.109570][ T6294] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1789.118067][ T6294] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1789.126099][ T6294] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1789.134120][ T6294] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1789.142160][ T6294] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1789.150218][ T6294] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1789.158267][ T6294] [ 1789.191083][ T6294] Uninit was stored to memory at: [ 1789.196298][ T6294] ___sys_recvmsg+0x522/0x890 [ 1789.201087][ T6294] do_recvmmsg+0x55a/0x1180 [ 1789.205654][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1789.210741][ T6294] do_syscall_64+0x3d/0xb0 [ 1789.219128][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1789.226151][ T6294] [ 1789.228879][ T6294] Uninit was stored to memory at: [ 1789.234848][ T6294] ___sys_recvmsg+0x522/0x890 [ 1789.240027][ T6294] do_recvmmsg+0x55a/0x1180 [ 1789.245328][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1789.250921][ T6294] do_syscall_64+0x3d/0xb0 [ 1789.256205][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1789.263162][ T6294] [ 1789.265776][ T6294] Uninit was stored to memory at: [ 1789.271341][ T6294] ___sys_recvmsg+0x522/0x890 [ 1789.276906][ T6294] do_recvmmsg+0x55a/0x1180 [ 1789.282279][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1789.287866][ T6294] do_syscall_64+0x3d/0xb0 [ 1789.293102][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1789.299710][ T6294] [ 1789.302560][ T6294] Uninit was stored to memory at: [ 1789.308503][ T6294] ___sys_recvmsg+0x522/0x890 [ 1789.314165][ T6294] do_recvmmsg+0x55a/0x1180 [ 1789.319169][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1789.325032][ T6294] do_syscall_64+0x3d/0xb0 [ 1789.329955][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1789.336873][ T6294] [ 1789.339460][ T6294] Uninit was stored to memory at: [ 1789.345393][ T6294] ___sys_recvmsg+0x522/0x890 [ 1789.350579][ T6294] do_recvmmsg+0x55a/0x1180 [ 1789.355883][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1789.361500][ T6294] do_syscall_64+0x3d/0xb0 [ 1789.366782][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1789.373718][ T6294] [ 1789.376285][ T6294] Uninit was stored to memory at: [ 1789.382039][ T6294] ___sys_recvmsg+0x522/0x890 [ 1789.387226][ T6294] do_recvmmsg+0x55a/0x1180 [ 1789.392574][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1789.398423][ T6294] do_syscall_64+0x3d/0xb0 [ 1789.403688][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1789.410222][ T6294] [ 1789.413035][ T6294] Uninit was stored to memory at: [ 1789.418623][ T6294] ___sys_recvmsg+0x522/0x890 [ 1789.424130][ T6294] do_recvmmsg+0x55a/0x1180 [ 1789.429113][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1789.435004][ T6294] do_syscall_64+0x3d/0xb0 [ 1789.439895][ T6294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1789.446767][ T6294] [ 1789.449339][ T6294] Local variable msg_sys created at: [ 1789.455516][ T6294] do_recvmmsg+0x5c/0x1180 [ 1789.460676][ T6294] __x64_sys_recvmmsg+0x3a7/0x4b0 22:45:16 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x0) 22:45:16 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0) read$usbmon(r0, &(0x7f0000000580)=""/157, 0x9d) sendmsg(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x428}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 22:45:16 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @win={{0x0, 0x0, 0x35314142}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 22:45:16 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clock_gettime(0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r1, 0xfabf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) pkey_alloc(0x0, 0x2) 22:45:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 22:45:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @win={{0x0, 0x0, 0x35314142}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 22:45:17 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) [ 1790.052184][ T3552] usb 5-1: new high-speed USB device number 62 using dummy_hcd 22:45:17 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) [ 1790.412982][ T3552] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1790.424254][ T3552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1790.435941][ T3552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1790.446024][ T3552] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1790.459409][ T3552] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1790.468897][ T3552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.552457][ T8359] usb 2-1: new high-speed USB device number 61 using dummy_hcd 22:45:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @win={{0x0, 0x0, 0x35314142}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 1790.758654][ T3552] usb 5-1: config 0 descriptor?? [ 1790.842326][ T25] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1790.933325][ T8359] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1790.944677][ T8359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1790.956068][ T8359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1790.966156][ T8359] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1790.979612][ T8359] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1790.988931][ T8359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.253341][ T3552] appleir 0003:05AC:8243.003B: No inputs registered, leaving [ 1791.263982][ T25] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1791.275133][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1791.286437][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1791.297847][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1791.311170][ T25] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1791.320577][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:45:18 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) [ 1791.387054][ T3552] appleir 0003:05AC:8243.003B: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.4-1/input0 22:45:18 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @remote}}}, 0x90) 22:45:18 executing program 2: getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @remote}}}, 0x0) r0 = syz_io_uring_setup(0x3592, &(0x7f00000000c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001380), &(0x7f00000013c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x13, 0x20000000, r1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1791.494428][ T8359] usb 2-1: config 0 descriptor?? 22:45:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000006040)=[{{&(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xa, [@private, @dev]}]}}}], 0x20}}], 0x2, 0x0) [ 1791.782116][ T25] usb 6-1: config 0 descriptor?? 22:45:18 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @remote}}}, 0x90) [ 1791.901821][T27551] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1791.975838][ T6371] usb 5-1: language id specifier not provided by device, defaulting to English [ 1791.996450][ T8359] appleir 0003:05AC:8243.003C: No inputs registered, leaving [ 1792.118956][ T8359] appleir 0003:05AC:8243.003C: hiddev1,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1792.285799][ T25] appleir 0003:05AC:8243.003D: No inputs registered, leaving [ 1792.303352][T27551] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1792.314646][T27551] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1792.325917][T27551] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 22:45:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000006040)=[{{&(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xa, [@private, @dev]}]}}}], 0x20}}], 0x2, 0x0) [ 1792.339123][T27551] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1792.353243][T27551] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1792.362584][T27551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:45:19 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @remote}}}, 0x90) [ 1792.664342][ T25] appleir 0003:05AC:8243.003D: hiddev2,hidraw2: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.5-1/input0 [ 1792.820102][T27551] usb 1-1: config 0 descriptor?? 22:45:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000006040)=[{{&(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xa, [@private, @dev]}]}}}], 0x20}}], 0x2, 0x0) 22:45:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) [ 1793.321321][T27551] appleir 0003:05AC:8243.003E: No inputs registered, leaving [ 1793.406893][T27551] appleir 0003:05AC:8243.003E: hiddev3,hidraw3: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.0-1/input0 [ 1793.494300][ T3565] usb 5-1: USB disconnect, device number 62 22:45:21 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) [ 1794.057330][T27551] usb 2-1: USB disconnect, device number 61 [ 1794.102140][ T3565] usb 5-1: new high-speed USB device number 63 using dummy_hcd 22:45:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 22:45:21 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @remote}}}, 0x90) [ 1794.368429][ T25] usb 6-1: USB disconnect, device number 86 [ 1794.493260][ T3565] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1794.505831][ T3565] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1794.518481][ T3565] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1794.529713][ T3565] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1794.544601][ T3565] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1794.555140][ T3565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.643864][T27551] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1794.771907][ T3565] usb 5-1: config 0 descriptor?? [ 1795.044022][T27551] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1795.055341][T27551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.066709][T27551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.076818][T27551] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1795.090183][T27551] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1795.101358][T27551] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.112703][ T25] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1795.139401][T27551] usb 2-1: config 0 descriptor?? 22:45:22 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 22:45:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000006040)=[{{&(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xa, [@private, @dev]}]}}}], 0x20}}], 0x2, 0x0) 22:45:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) [ 1795.371444][ T3565] appleir 0003:05AC:8243.003F: No inputs registered, leaving [ 1795.374483][ T8359] usb 1-1: USB disconnect, device number 80 [ 1795.465818][ T3565] appleir 0003:05AC:8243.003F: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.4-1/input0 [ 1795.482378][ T25] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1795.482537][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.482796][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.482917][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1795.483109][ T25] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1795.483239][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.619590][ T25] usb 6-1: config 0 descriptor?? [ 1795.682682][T27551] appleir 0003:05AC:8243.0040: No inputs registered, leaving [ 1795.886070][T27551] appleir 0003:05AC:8243.0040: hiddev1,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 22:45:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x48, r1, 0xa01, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x48}}, 0x0) [ 1796.023070][ T6461] usb 5-1: language id specifier not provided by device, defaulting to English [ 1796.151838][ T25] appleir 0003:05AC:8243.0041: No inputs registered, leaving [ 1796.261911][ T8359] usb 1-1: new high-speed USB device number 81 using dummy_hcd 22:45:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3c) 22:45:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x48, r1, 0xa01, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x48}}, 0x0) 22:45:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0x3) [ 1796.623250][ T8359] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1796.636966][ T8359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1796.648212][ T8359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1796.658241][ T8359] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1796.671752][ T8359] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1796.681012][ T8359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.718254][ T25] appleir 0003:05AC:8243.0041: hiddev2,hidraw2: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.5-1/input0 22:45:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x48, r1, 0xa01, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x48}}, 0x0) [ 1797.132807][ T8359] usb 1-1: config 0 descriptor?? 22:45:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) [ 1797.621156][ T8359] appleir 0003:05AC:8243.0042: No inputs registered, leaving [ 1797.657305][ T8359] appleir 0003:05AC:8243.0042: hiddev3,hidraw3: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.0-1/input0 22:45:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) [ 1797.848314][T19519] usb 2-1: USB disconnect, device number 62 [ 1797.854062][ T3552] usb 5-1: reset high-speed USB device number 63 using dummy_hcd 22:45:25 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 22:45:25 executing program 2: r0 = syz_io_uring_setup(0x9e4, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) dup3(r4, r3, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x4c) shutdown(r3, 0x1) [ 1798.301213][ T3565] usb 6-1: USB disconnect, device number 87 [ 1798.492058][T19519] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1798.852468][T19519] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1798.864770][T19519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1798.877368][T19519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1798.888757][T19519] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1798.903644][T19519] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1798.914106][T19519] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.954941][T19519] usb 2-1: config 0 descriptor?? [ 1799.023103][ T3565] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1799.392663][ T3565] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1799.413154][ T3565] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1799.425787][ T3565] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1799.436310][ T3552] usb 5-1: USB disconnect, device number 63 [ 1799.443976][ T3565] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1799.459043][ T3565] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1799.469665][ T3565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.519268][T19519] appleir 0003:05AC:8243.0043: No inputs registered, leaving [ 1799.572571][T19519] appleir 0003:05AC:8243.0043: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1799.731163][ T3565] usb 6-1: config 0 descriptor?? 22:45:26 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) [ 1799.817884][ T8359] usb 1-1: USB disconnect, device number 81 22:45:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1}) unlink(&(0x7f0000000040)='./file0/file0\x00') 22:45:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x48, r1, 0xa01, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x48}}, 0x0) [ 1800.163538][ T6596] usb 2-1: language id specifier not provided by device, defaulting to English [ 1800.209388][ T3565] appleir 0003:05AC:8243.0044: No inputs registered, leaving 22:45:27 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12014000246b9f4013206104ecee1b7b2a0109021b000100000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x1, "fc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001980)={0x44, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001f80)={0x84, &(0x7f0000001580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) [ 1800.415689][ T3565] appleir 0003:05AC:8243.0044: hiddev1,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.5-1/input0 [ 1800.592394][ T8359] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1800.953851][ T8359] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1800.965860][ T8359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1800.977365][ T8359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1800.987402][ T8359] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1801.000783][ T8359] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1801.010310][ T8359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.044779][ T8359] usb 1-1: config 0 descriptor?? 22:45:28 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000180)="1156e67d13c771096b7e764d0ae36324041ef7269dbae80743002db225bf328cf06a73bed404721aa03e7024c348e86f91b169ee4e2456e51e01da0a8294f8966286635763c8dfe3a65d6b82a68aea685cc3a7e98a5cfa41d59ed66c13c8514d97ee2bfaf19d17184c80b4712702db280117fb7ca1d174413aea081174e2ee9968a10e44b2ae04073011fd3c3f62bfb6c6b92db9fd4f36aedd20ce613a7222083af4ef50fba4b9a4f1eb4d12d0cd2538", 0xb0}, {&(0x7f0000000480)="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", 0x183}, {&(0x7f0000000300)="27e53b2ba53513f4a4bf027acb1b2bee98ce70766485a9d88129d73ad475943379a7917914f281821b01e27916ebd99c4f11f8818cd61ae0c1681a69fdd13752858cbd793252cda0114c1217b285565e8f0c60c362402050a53db6ad98159f1f64837a936ae35d4eb5c254ea9177cf831314eef2dfcbc8297df031c70081052ed3d8b0a49ae8f3", 0x87}], 0x3, 0x0, 0x0, 0x500}, 0x0) [ 1801.103874][ T3552] usb 3-1: new high-speed USB device number 81 using dummy_hcd 22:45:28 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)) 22:45:28 executing program 4: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0x14) poll(0x0, 0x0, 0x7fff) read(r0, &(0x7f0000000140)=""/56, 0x38) 22:45:28 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2}, 0x18) [ 1801.474257][ T3552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 22:45:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x94) [ 1801.552472][ T8359] appleir 0003:05AC:8243.0045: No inputs registered, leaving [ 1801.648865][ T8359] appleir 0003:05AC:8243.0045: hiddev2,hidraw2: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.0-1/input0 [ 1801.682562][ T3552] usb 3-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=ee.ec [ 1801.693584][ T3552] usb 3-1: New USB device strings: Mfr=27, Product=123, SerialNumber=42 [ 1801.702248][ T3552] usb 3-1: Product: syz [ 1801.706606][ T3552] usb 3-1: Manufacturer: syz [ 1801.711379][ T3552] usb 3-1: SerialNumber: syz [ 1801.786093][ T25] usb 2-1: USB disconnect, device number 63 [ 1802.011924][ T3552] usb 3-1: config 0 descriptor?? 22:45:29 executing program 3: mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x04\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') [ 1802.126354][ T3552] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 1802.135978][ T3552] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) 22:45:29 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00$\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000a000100636f64656c0000001400020008000200ed"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4801000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 22:45:29 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = dup(r2) sendmsg$can_bcm(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x1d, r1}, 0x10, &(0x7f0000000680)={&(0x7f0000000600)={0x5, 0x510, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "49e2ae4f33d66db9"}}, 0x48}}, 0x0) [ 1802.518803][ T25] usb 6-1: USB disconnect, device number 88 [ 1802.723020][ T3552] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1802.758489][ T6729] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1802.768443][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1802.780597][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1802.797822][ T3552] em28xx 3-1:0.0: Config register raw data: 0xfffffffb 22:45:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}}}, 0x0) 22:45:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, &(0x7f0000000180)=0xa4ffffff) 22:45:30 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = dup(r2) sendmsg$can_bcm(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x1d, r1}, 0x10, &(0x7f0000000680)={&(0x7f0000000600)={0x5, 0x510, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "49e2ae4f33d66db9"}}, 0x48}}, 0x0) [ 1803.612212][ T3565] usb 1-1: USB disconnect, device number 82 [ 1803.932446][ T3552] em28xx 3-1:0.0: AC97 vendor ID = 0x00fc00fe [ 1804.582324][ T3552] em28xx 3-1:0.0: AC97 features = 0x0080 [ 1804.588191][ T3552] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1804.813587][ T3552] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1804.834709][ T3552] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1804.862856][ T3552] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1804.882616][ T3552] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1804.902206][ T3552] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1804.949043][ T3552] usb 3-1: USB disconnect, device number 81 22:45:32 executing program 2: r0 = epoll_create1(0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000000)={&(0x7f0000000640)={{@my=0x0}, {@my=0x0}, 0x400, "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"}, 0x418}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x30000000}) 22:45:32 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x5, 0x5) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f00000003c0)="94ef24f286e4", 0x6}], 0x2) 22:45:32 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000e30300"/16, @ANYRES64=0x0, @ANYRES64=0xea60], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000200)=0x7fffffff, 0x4) 22:45:32 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = dup(r2) sendmsg$can_bcm(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x1d, r1}, 0x10, &(0x7f0000000680)={&(0x7f0000000600)={0x5, 0x510, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "49e2ae4f33d66db9"}}, 0x48}}, 0x0) 22:45:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}}}, 0x0) 22:45:32 executing program 0: rseq(&(0x7f0000000100), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syncfs(r0) 22:45:32 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = dup(r2) sendmsg$can_bcm(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x1d, r1}, 0x10, &(0x7f0000000680)={&(0x7f0000000600)={0x5, 0x510, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "49e2ae4f33d66db9"}}, 0x48}}, 0x0) 22:45:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}}}, 0x0) 22:45:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x90) 22:45:32 executing program 0: rseq(&(0x7f0000000100), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syncfs(r0) 22:45:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}]}) 22:45:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x104, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xe1, 0x3, "91abc12404cf8d5475b993b9aa12d4aaea378042f26c43f91f68d8a90767c0bc71f60877974475de3d78ef670efff3f7311209fb8cc158fa18f18591bb90dc1e0464d31ff30a7e5b227e08a2ee0643e735c3cd21b6e743176c8eefd41693bc94e6a273643642d61840a5f275333bb1afbbd583fe318f4f9fede53e5b2e5362948561f9a734f912471f65300a734ab4fc76055ae03eceec7311bea9d533e58fd544db5f584430966667bc251a3fe19a389fae635a5a60ec0e28d8e428677abc89542a33cba0f155d8e6aafc2e55efab5e5d3b571b046e01625e968c3c4e"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x168}, 0x1, 0x0, 0x0, 0x24004044}, 0x0) 22:45:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}}}, 0x0) 22:45:33 executing program 0: rseq(&(0x7f0000000100), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syncfs(r0) 22:45:33 executing program 1: r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) read(r1, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0x9208, 0x0) read$usbmon(r1, 0x0, 0x0) tkill(r0, 0x7) 22:45:33 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 22:45:33 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001840)={r0, 0x12c7, &(0x7f0000001240)}, 0xa) 22:45:33 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000600)=r0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 22:45:33 executing program 0: rseq(&(0x7f0000000100), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syncfs(r0) 22:45:33 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 22:45:33 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mreqsrc(r0, 0x0, 0x1, 0x0, 0x6) 22:45:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="300000000000000084000000010000f7"], 0x30}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 22:45:34 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 22:45:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ptype\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) bind$packet(r1, &(0x7f0000000340)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/119, 0x77}], 0x1, 0x7, 0x0) 22:45:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000006c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466b340e28b05c93a072528230718"}]}}}}}}}}, 0x0) 22:45:34 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff010}, {0xa4}, {0x6}]}, 0x10) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="d8", 0x300}], 0x1) 22:45:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2d00330080800000ffffffffffff080211"], 0x6c}}, 0x0) 22:45:34 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) 22:45:34 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000001240)="928d7b07d99589381d752814519597754f2d6d4c65d700934339b580", 0x1c}], 0x1) 22:45:34 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 22:45:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ptype\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) bind$packet(r1, &(0x7f0000000340)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/119, 0x77}], 0x1, 0x7, 0x0) 22:45:34 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff010}, {0xa4}, {0x6}]}, 0x10) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="d8", 0x300}], 0x1) [ 1807.684139][ T6825] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 22:45:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ptype\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) bind$packet(r1, &(0x7f0000000340)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/119, 0x77}], 0x1, 0x7, 0x0) 22:45:34 executing program 3: r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x4000201f, 0x3f000002}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x8011, r1, 0x0) 22:45:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f000000e040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="ab606dbc4e35ce3ff5a0fe41899236a8255a3da9d44e888a879993f7bc86975ce8586fcbb9df", 0x26}, {&(0x7f0000000140)="de7ba2ccbe7183b3738afa3a51110e5b3de227b036af8b0cc1688bc1acf30e64a6ff9687690e5c7568d05784026b055239a3d9053e164eb8b591e9a3747f945a2627f7fc67fe213073ea53838c128a3bf4b245f40ed688325c2842a38928ca2300a17521b6a7cc9115e56d2f5d288181cca0734f6358e8db7975abd86e5e1aec1b09dc32e68733d1e8b6b9a74c95d9a94497517cce7aec98200a2759d2e8672ed17528ee00bc4993e62330465aa38b10422cd4de1cc2acf320d846a731ff93da15634bb4e35e014df7bf4f0b6a17ac4d367fbaf541698ae60c7ef2ffdead75427a8dcf8e0f6e3f881448be8b8a80f4c0b5", 0xf1}, {&(0x7f0000000380)="72ffe33de5c91f772a37ee7084d4fc4db3e93805f77f6b29f4287633f8cdc7d8a9b820672e6056ca", 0x28}], 0x3}}], 0x1, 0x0) 22:45:35 executing program 4: mq_notify(0xffffffffffffffff, 0x0) 22:45:35 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff010}, {0xa4}, {0x6}]}, 0x10) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="d8", 0x300}], 0x1) 22:45:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ptype\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) bind$packet(r1, &(0x7f0000000340)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/119, 0x77}], 0x1, 0x7, 0x0) 22:45:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 22:45:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffe04) 22:45:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f000000e040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="ab606dbc4e35ce3ff5a0fe41899236a8255a3da9d44e888a879993f7bc86975ce8586fcbb9df", 0x26}, {&(0x7f0000000140)="de7ba2ccbe7183b3738afa3a51110e5b3de227b036af8b0cc1688bc1acf30e64a6ff9687690e5c7568d05784026b055239a3d9053e164eb8b591e9a3747f945a2627f7fc67fe213073ea53838c128a3bf4b245f40ed688325c2842a38928ca2300a17521b6a7cc9115e56d2f5d288181cca0734f6358e8db7975abd86e5e1aec1b09dc32e68733d1e8b6b9a74c95d9a94497517cce7aec98200a2759d2e8672ed17528ee00bc4993e62330465aa38b10422cd4de1cc2acf320d846a731ff93da15634bb4e35e014df7bf4f0b6a17ac4d367fbaf541698ae60c7ef2ffdead75427a8dcf8e0f6e3f881448be8b8a80f4c0b5", 0xf1}, {&(0x7f0000000380)="72ffe33de5c91f772a37ee7084d4fc4db3e93805f77f6b29f4287633f8cdc7d8a9b820672e6056ca", 0x28}], 0x3}}], 0x1, 0x0) 22:45:35 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff010}, {0xa4}, {0x6}]}, 0x10) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="d8", 0x300}], 0x1) 22:45:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ptype\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) bind$packet(r1, &(0x7f0000000340)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/119, 0x77}], 0x1, 0x7, 0x0) 22:45:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getaddr={0x14}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32, @ANYBLOB="000000000c0002003c00128009000100626f6e64000000002c00028005001b00000000001f001f"], 0x5c}}, 0x0) 22:45:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 22:45:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f000000e040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="ab606dbc4e35ce3ff5a0fe41899236a8255a3da9d44e888a879993f7bc86975ce8586fcbb9df", 0x26}, {&(0x7f0000000140)="de7ba2ccbe7183b3738afa3a51110e5b3de227b036af8b0cc1688bc1acf30e64a6ff9687690e5c7568d05784026b055239a3d9053e164eb8b591e9a3747f945a2627f7fc67fe213073ea53838c128a3bf4b245f40ed688325c2842a38928ca2300a17521b6a7cc9115e56d2f5d288181cca0734f6358e8db7975abd86e5e1aec1b09dc32e68733d1e8b6b9a74c95d9a94497517cce7aec98200a2759d2e8672ed17528ee00bc4993e62330465aa38b10422cd4de1cc2acf320d846a731ff93da15634bb4e35e014df7bf4f0b6a17ac4d367fbaf541698ae60c7ef2ffdead75427a8dcf8e0f6e3f881448be8b8a80f4c0b5", 0xf1}, {&(0x7f0000000380)="72ffe33de5c91f772a37ee7084d4fc4db3e93805f77f6b29f4287633f8cdc7d8a9b820672e6056ca", 0x28}], 0x3}}], 0x1, 0x0) [ 1808.973065][ T6869] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) 22:45:36 executing program 0: r0 = socket(0xa, 0x3, 0x7) getsockopt$bt_BT_SECURITY(r0, 0x29, 0x1d, 0x0, 0x20000000) 22:45:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ptype\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) bind$packet(r1, &(0x7f0000000340)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/119, 0x77}], 0x1, 0x7, 0x0) 22:45:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 22:45:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getaddr={0x14}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32, @ANYBLOB="000000000c0002003c00128009000100626f6e64000000002c00028005001b00000000001f001f"], 0x5c}}, 0x0) 22:45:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ptype\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) bind$packet(r1, &(0x7f0000000340)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/119, 0x77}], 0x1, 0x7, 0x0) 22:45:36 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000640)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0xac2) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 22:45:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f000000e040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="ab606dbc4e35ce3ff5a0fe41899236a8255a3da9d44e888a879993f7bc86975ce8586fcbb9df", 0x26}, {&(0x7f0000000140)="de7ba2ccbe7183b3738afa3a51110e5b3de227b036af8b0cc1688bc1acf30e64a6ff9687690e5c7568d05784026b055239a3d9053e164eb8b591e9a3747f945a2627f7fc67fe213073ea53838c128a3bf4b245f40ed688325c2842a38928ca2300a17521b6a7cc9115e56d2f5d288181cca0734f6358e8db7975abd86e5e1aec1b09dc32e68733d1e8b6b9a74c95d9a94497517cce7aec98200a2759d2e8672ed17528ee00bc4993e62330465aa38b10422cd4de1cc2acf320d846a731ff93da15634bb4e35e014df7bf4f0b6a17ac4d367fbaf541698ae60c7ef2ffdead75427a8dcf8e0f6e3f881448be8b8a80f4c0b5", 0xf1}, {&(0x7f0000000380)="72ffe33de5c91f772a37ee7084d4fc4db3e93805f77f6b29f4287633f8cdc7d8a9b820672e6056ca", 0x28}], 0x3}}], 0x1, 0x0) 22:45:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) [ 1809.709524][ T6887] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) 22:45:36 executing program 2: r0 = add_key$user(&(0x7f0000000340), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="0005", 0x2, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000180)=""/140, 0x8c) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 22:45:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getaddr={0x14}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32, @ANYBLOB="000000000c0002003c00128009000100626f6e64000000002c00028005001b00000000001f001f"], 0x5c}}, 0x0) 22:45:37 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x5c, 0x13, 0x601, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x10, 0x1, "0787f40d0a1a93a1efde8daa"}]}, 0x5c}}, 0x0) 22:45:37 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000640)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0xac2) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 22:45:37 executing program 2: r0 = inotify_init1(0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./bus\x00', 0x80000285) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x8200) copy_file_range(r1, 0x0, r2, &(0x7f0000000140)=0xb0ad, 0x6, 0x0) [ 1810.297663][ T6903] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1810.353948][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1810.360585][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 22:45:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getaddr={0x14}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32, @ANYBLOB="000000000c0002003c00128009000100626f6e64000000002c00028005001b00000000001f001f"], 0x5c}}, 0x0) 22:45:37 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 22:45:37 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x2, 0x0, &(0x7f00000000c0)) [ 1810.920902][ T6914] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) 22:45:38 executing program 2: r0 = inotify_init1(0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./bus\x00', 0x80000285) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x8200) copy_file_range(r1, 0x0, r2, &(0x7f0000000140)=0xb0ad, 0x6, 0x0) 22:45:38 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffff9c, &(0x7f0000001280), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 22:45:38 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000640)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0xac2) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 22:45:38 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 22:45:38 executing program 2: r0 = inotify_init1(0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./bus\x00', 0x80000285) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x8200) copy_file_range(r1, 0x0, r2, &(0x7f0000000140)=0xb0ad, 0x6, 0x0) 22:45:38 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 22:45:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000000)={0x114, 0x3b, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private2}, @generic="9089d8d267ea67fdcb", @generic="2884c85d3fc3524377bafd1f615e3353dc8db8ad51ea63944b28efabbb46cd00faaa5a790a2905a1b5a626aa2840faf764467a0daefc183fb9aa8e65d559cb9a1e34b16050de492fb9472e9f19dd7a9e114328b99c8afb752fff438d5117b319d3dec133b20cf21e771739bda674ddba3d32a656c54fe43a76658104f89214cdd7aaf3fa78e64b5c7f88eb473e945ffb9467eb47f249076dddf81e8067d6977fb90d274ab73f6621c4fc49af7ab416b8ad55a93055777450bbc0d3a9294ef4d7eac438db1aa0457b6b74b147204cf699", @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}]}, 0x114}], 0x1}, 0x0) 22:45:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="840000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f77657200004c000200480003004400010008000100627066001c0002801800020000000000040006000c"], 0x84}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1811.873411][ T6930] netlink: 252 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1811.986561][ T6933] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:45:39 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@multiplanar_fd={0x0, 0xd, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "52c6435b"}, 0x0, 0x4, {0x0}}) 22:45:39 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 1812.180743][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 22:45:39 executing program 2: r0 = inotify_init1(0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./bus\x00', 0x80000285) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x8200) copy_file_range(r1, 0x0, r2, &(0x7f0000000140)=0xb0ad, 0x6, 0x0) 22:45:39 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 1812.274174][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1812.285276][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1812.294906][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 22:45:39 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000640)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0xac2) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 22:45:39 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) 22:45:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="840000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f77657200004c000200480003004400010008000100627066001c0002801800020000000000040006000c"], 0x84}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22:45:39 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 22:45:40 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a9358a40e10632f3f6800102030109022d000200000000090400000290c60a0009e98301f9e60000000905040000bc0000000904000184c4dfef73"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001240)={0x2c, 0x0, &(0x7f0000001140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0, 0x0}, 0x0) 22:45:40 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 22:45:40 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x200, 0x3ff, 0x0, 0x6, 0x1a, 0xc, "d970744225ae3bc3158852aecd8b29d4c08bc47222ccd9c41a160490c0123da2997eba9fe283e37c67c6e7bead01a9dfeed95f71ae2036cd2962c8135fe78cf3", "6a242ef16d3e9d7cc08543c36330b8a6f517bf1996c4ae347f72c28ca82c3cfe32aff2097a27faf41a7d64935df2e1d74239a5a55d433f22112bfb11090300fb", "f94441229fdfffbfeeb740c95c4bf5a11aa5239d83a61ed6b606a8ed1ce5bc9f", [0xd32, 0x5]}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "13615a8f7553cc1b00cdfa77169e15daa9e7602c58bc88c32f4c36b203234db91bb1349376d76717c8df27d5c64389f6d62d3a958ef9edb4b1ecb2fc00", "6842f05500821bf6e9028936903597e0bbbba122086960886f1c47f10220ce02"}) [ 1813.064905][ T6962] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1813.442478][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 22:45:40 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f0000000680)={&(0x7f00000005c0)="5d62189869378fb572", 0x9}}, 0x0) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780), 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x1}}, 0x0) io_uring_setup(0x3b25, &(0x7f0000000000)) close_range(r1, 0xffffffffffffffff, 0x0) 22:45:40 executing program 0: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1b, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) [ 1813.531940][ T25] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1813.682323][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1813.692808][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 22:45:40 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xfe9a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$sock(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) recvmmsg$unix(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1}}], 0x1, 0x0, 0x0) [ 1813.902461][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1813.912823][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 48128, setting to 64 [ 1813.924052][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1813.937160][ T25] usb 3-1: too many endpoints for config 0 interface 0 altsetting 1: 132, using maximum allowed: 30 [ 1813.948235][ T25] usb 3-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 132 22:45:41 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='yeah\x00', 0x5) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) 22:45:41 executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = gettid() r1 = getpgrp(0x0) rt_tgsigqueueinfo(r1, r0, 0x16, &(0x7f0000000100)) 22:45:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="840000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f77657200004c000200480003004400010008000100627066001c0002801800020000000000040006000c"], 0x84}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22:45:41 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x4, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000000), 0x2, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r0}) 22:45:41 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xfe9a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$sock(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) recvmmsg$unix(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1}}], 0x1, 0x0, 0x0) [ 1814.532709][ T25] usb 3-1: New USB device found, idVendor=06e1, idProduct=f332, bcdDevice=80.f6 [ 1814.542889][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.551122][ T25] usb 3-1: Product: syz [ 1814.555605][ T25] usb 3-1: Manufacturer: syz [ 1814.560403][ T25] usb 3-1: SerialNumber: syz 22:45:41 executing program 0: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xfe9a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$sock(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) recvmmsg$unix(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1}}], 0x1, 0x0, 0x0) [ 1814.840316][ T25] usb 3-1: config 0 descriptor?? [ 1815.302698][ T25] tm6000: alt 0, interface 0, class 144 [ 1815.308442][ T25] tm6000: New video device @ 480 Mbps (06e1:f332, ifnum 0) [ 1815.316034][ T25] tm6000: probing error: no IN ISOC endpoint! [ 1815.322415][ T25] tm6000: Error -19 while registering [ 1815.512672][ T25] usb 3-1: USB disconnect, device number 82 22:45:43 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x4, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000000), 0x2, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r0}) 22:45:43 executing program 3: r0 = socket(0x1d, 0x2, 0x6) getsockopt$bt_BT_SECURITY(r0, 0x6a, 0x4, 0x0, 0x20000000) 22:45:43 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x4, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000000), 0x2, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r0}) 22:45:43 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xfe9a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$sock(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) recvmmsg$unix(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1}}], 0x1, 0x0, 0x0) 22:45:43 executing program 0: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xfe9a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$sock(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) recvmmsg$unix(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1}}], 0x1, 0x0, 0x0) 22:45:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="840000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f77657200004c000200480003004400010008000100627066001c0002801800020000000000040006000c"], 0x84}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22:45:43 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x4, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000000), 0x2, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r0}) 22:45:43 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xfe9a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$sock(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) recvmmsg$unix(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1}}], 0x1, 0x0, 0x0) 22:45:43 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x4, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000000), 0x2, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r0}) 22:45:44 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x4, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000000), 0x2, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r0}) 22:45:44 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x980001}) 22:45:44 executing program 1: r0 = memfd_secret(0x0) fsetxattr(r0, &(0x7f0000000080)=@known='com.apple.FinderInfo\x00', 0x0, 0x0, 0x0) 22:45:44 executing program 0: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xfe9a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$sock(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) recvmmsg$unix(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1}}], 0x1, 0x0, 0x0) 22:45:44 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x4, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000000), 0x2, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r0}) 22:45:44 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x4, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000000), 0x2, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r0}) 22:45:44 executing program 1: unshare(0x400) r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, 0x0, 0x0) 22:45:44 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000100)={0x0, 0x1, 0x8d2e, 0x2, &(0x7f0000000040)=[{}]}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e21, 0x7fff, @private2, 0xbb0}, {0xa, 0x4e23, 0x0, @mcast2, 0x4}, 0x0, {[0x0, 0x5, 0x1, 0x0, 0x5e76, 0x80, 0x0, 0x5]}}, 0x5c) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, 0x0) io_setup(0x400, &(0x7f0000000340)) 22:45:44 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x4, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000000), 0x2, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r0}) 22:45:44 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(r0, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file1\x00', 0x0) mknodat(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 22:45:44 executing program 1: r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee6000/0x3000)=nil, &(0x7f00000014c0)=0x0, &(0x7f00000001c0)=0x0) r3 = epoll_create(0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 22:45:44 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)={0x54, 0x12, 0x905, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "09aed501"}]}, 0x54}}, 0x0) 22:45:45 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x4, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000000), 0x2, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r0}) 22:45:45 executing program 4: r0 = socket(0x29, 0x2, 0x0) sendmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000040)="e1fee83df4cc0dde388d695d63422a118a9a6535b903642c36662f80850a973680a32a8867c94827a3ff5e7293f6eee94f539815729cfd0b68ecf2939ccc9f62502e35dd59358d88862446a3a4b71d1963eabbf4a0ac57754b2b4c755a091aa5c1abde1043e6d5b75d13d677e353e003e1adc235a77602622dc47d6e2387847e95e2d9bb9df8fb5db71b81095a6dba388b72bac8f67cb684251fc49cd69f818cfb531308da73ee6d0c2f076b16e1d1c5d874d51a0430a1da7f88c48f95479b2886801800b9d81afe485e0b8b65fe481a95d96744c59596f7baeeffef7d360304dae831643529fe07e56a5d545af9d068097b0c1b375c09db", 0xfffffed5}, {&(0x7f0000000280)="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", 0xf9}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004c015) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4046cc0) 22:45:45 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1f) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8915, &(0x7f0000000000)) 22:45:45 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="930207"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000080)={0x1, 0x200}) 22:45:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x28, 0x4, @local}}}]}]}, 0x44}}, 0x0) 22:45:45 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r1, r0, 0x0) 22:45:45 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x4, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x6, 0x14, 0x0, 0x0) 22:45:45 executing program 0: r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)) 22:45:45 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) close(r0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000680)=[&(0x7f0000000500)='/proc/capi/capi20ncci\x00', &(0x7f00000005c0)='/proc/capi/capi20ncci\x00']) [ 1818.858882][ T7154] __nla_validate_parse: 11 callbacks suppressed [ 1818.859002][ T7154] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1818.875271][ T7154] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1819.006173][ T25] usb 6-1: new high-speed USB device number 89 using dummy_hcd 22:45:46 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="02000000020319", 0x7}, {&(0x7f0000000100)="c323e87bacaef4", 0x7}], 0x2) 22:45:46 executing program 2: mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x0, 0x4d032, 0xffffffffffffffff, 0x4bb71000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x1000}, 0x1}) 22:45:46 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000780)={0x2, @win={{0x0, 0x0, 0x34524742}, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0}}) [ 1819.404051][ T25] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1819.415277][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.426566][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1819.436658][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1819.450091][ T25] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1819.459502][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:45:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@getlink={0x28, 0x12, 0xffffffffffffffff, 0x0, 0x0, {}, [@IFLA_WEIGHT={0x8}]}, 0x28}}, 0x0) 22:45:46 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0d05640, &(0x7f0000000240)={0x7, @output={0x0, 0x1}}) 22:45:46 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)='p', 0x0, 0x0, 0x0}) [ 1820.071543][ T25] usb 6-1: config 0 descriptor?? [ 1820.301147][ T7199] fs-verity: sha512 using implementation "sha512-generic" [ 1820.557031][ T25] appleir 0003:05AC:8243.0046: unknown main item tag 0x0 [ 1820.568866][ T25] appleir 0003:05AC:8243.0046: No inputs registered, leaving [ 1820.601161][ T25] appleir 0003:05AC:8243.0046: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.5-1/input0 [ 1820.833740][ T3565] usb 6-1: USB disconnect, device number 89 22:45:48 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001740), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000001780)={{0x0, 0x2}}) 22:45:48 executing program 0: io_setup(0x75c6, &(0x7f0000000100)) 22:45:48 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="02000000020319", 0x7}, {&(0x7f0000000100)="c323e87bacaef4", 0x7}], 0x2) 22:45:48 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="02000000020319", 0x7}, {&(0x7f0000000100)="c323e87bacaef4", 0x7}], 0x2) 22:45:48 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)='p', 0x0, 0x0, 0x0}) 22:45:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="930207"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000080)={0x1, 0x200}) 22:45:48 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="02000000020319", 0x7}, {&(0x7f0000000100)="c323e87bacaef4", 0x7}], 0x2) 22:45:48 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="02000000020319", 0x7}, {&(0x7f0000000100)="c323e87bacaef4", 0x7}], 0x2) 22:45:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)='p', 0x0, 0x0, 0x0}) 22:45:48 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)='p', 0x0, 0x0, 0x0}) [ 1821.872621][ T3565] usb 6-1: new high-speed USB device number 90 using dummy_hcd 22:45:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000e780)={0x0, 0x0, &(0x7f000000e740)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4012, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:45:49 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="02000000020319", 0x7}, {&(0x7f0000000100)="c323e87bacaef4", 0x7}], 0x2) 22:45:49 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="02000000020319", 0x7}, {&(0x7f0000000100)="c323e87bacaef4", 0x7}], 0x2) 22:45:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)='p', 0x0, 0x0, 0x0}) [ 1822.236621][ T3565] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1822.249410][ T3565] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1822.262365][ T3565] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1822.273758][ T3565] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1822.288655][ T3565] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1822.299203][ T3565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.353415][ T3565] usb 6-1: config 0 descriptor?? 22:45:49 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)='p', 0x0, 0x0, 0x0}) 22:45:49 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mkdir(0x0, 0x0) chdir(0x0) symlink(0x0, 0x0) [ 1822.819490][ T24] audit: type=1326 audit(1660862749.865:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cbc89279 code=0x7ffc0000 [ 1822.850629][ T24] audit: type=1326 audit(1660862749.865:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa0cbc89279 code=0x7ffc0000 [ 1822.876041][ T24] audit: type=1326 audit(1660862749.865:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cbc89279 code=0x7ffc0000 [ 1822.901952][ T24] audit: type=1326 audit(1660862749.895:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa0cbc89279 code=0x7ffc0000 [ 1822.927467][ T24] audit: type=1326 audit(1660862749.925:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cbc89279 code=0x7ffc0000 22:45:50 executing program 2: syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x5, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1=0xe000002f}, {@multicast1}, {@private}, {}, {@empty}, {@broadcast}, {@remote}]}]}}}}}}}, 0x0) [ 1822.988569][ T3565] appleir 0003:05AC:8243.0047: unknown main item tag 0x0 [ 1823.110533][ T3565] appleir 0003:05AC:8243.0047: No inputs registered, leaving [ 1823.148207][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1823.398229][ T3565] appleir 0003:05AC:8243.0047: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.5-1/input0 [ 1823.524977][ T3565] usb 6-1: USB disconnect, device number 90 [ 1823.596307][ T24] audit: type=1326 audit(1660862750.025:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fa0cbc89279 code=0x7ffc0000 [ 1823.620527][ T24] audit: type=1326 audit(1660862750.025:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cbc89279 code=0x7ffc0000 [ 1823.644172][ T24] audit: type=1326 audit(1660862750.025:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cbc89279 code=0x7ffc0000 [ 1823.695582][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1823.742540][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:45:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="930207"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000080)={0x1, 0x200}) 22:45:51 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mkdir(0x0, 0x0) chdir(0x0) symlink(0x0, 0x0) 22:45:51 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x11}, 0x1c) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000180)) setsockopt$SO_TIMESTAMPING(r0, 0x6, 0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) getpeername$inet6(r0, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) 22:45:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)='p', 0x0, 0x0, 0x0}) 22:45:51 executing program 2: syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x5, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1=0xe000002f}, {@multicast1}, {@private}, {}, {@empty}, {@broadcast}, {@remote}]}]}}}}}}}, 0x0) [ 1824.230014][ T24] audit: type=1326 audit(1660862751.275:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7285 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cbc89279 code=0x7ffc0000 [ 1824.383431][ T24] audit: type=1326 audit(1660862751.315:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7285 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa0cbc89279 code=0x7ffc0000 22:45:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000e780)={0x0, 0x0, &(0x7f000000e740)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4012, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:45:51 executing program 2: syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x5, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1=0xe000002f}, {@multicast1}, {@private}, {}, {@empty}, {@broadcast}, {@remote}]}]}}}}}}}, 0x0) 22:45:51 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mkdir(0x0, 0x0) chdir(0x0) symlink(0x0, 0x0) 22:45:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@ipv4_newroute={0x40, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x8, 0x5, "e0000002"}}}}, @RTA_GATEWAY={0x8, 0x4, @multicast2=0xc000180}, @RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0x40}}, 0x0) 22:45:51 executing program 3: unshare(0x4060400) unshare(0x4020000) [ 1824.942272][ T25] usb 6-1: new high-speed USB device number 91 using dummy_hcd 22:45:52 executing program 2: syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x5, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1=0xe000002f}, {@multicast1}, {@private}, {}, {@empty}, {@broadcast}, {@remote}]}]}}}}}}}, 0x0) 22:45:52 executing program 3: unshare(0x4060400) unshare(0x4020000) [ 1825.312729][ T25] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1825.323927][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1825.335764][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1825.345818][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1825.359183][ T25] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1825.368739][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.596467][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1825.683123][ T25] usb 6-1: config 0 descriptor?? [ 1825.790740][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1825.800405][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1826.200224][ T25] appleir 0003:05AC:8243.0048: unknown main item tag 0x0 [ 1826.219127][ T25] appleir 0003:05AC:8243.0048: No inputs registered, leaving [ 1826.270598][ T25] appleir 0003:05AC:8243.0048: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.5-1/input0 [ 1826.542785][ T25] usb 6-1: USB disconnect, device number 91 22:45:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="930207"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000080)={0x1, 0x200}) 22:45:54 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mkdir(0x0, 0x0) chdir(0x0) symlink(0x0, 0x0) 22:45:54 executing program 3: unshare(0x4060400) unshare(0x4020000) 22:45:54 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000580)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x2, '\x00', 0x0}, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '$\x00@', 0x0, 0x0, 0x0, @mcast2, @mcast1}}}}}}}, 0x0) 22:45:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='|;jU', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x18, &(0x7f00000000c0)={r4}, 0x8) 22:45:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000e780)={0x0, 0x0, &(0x7f000000e740)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4012, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:45:54 executing program 1: write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xfffffd6d) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 22:45:54 executing program 3: unshare(0x4060400) unshare(0x4020000) [ 1827.518271][ T7343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1827.634569][T19519] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1827.794779][ T7343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1827.821124][ T7343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:45:55 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0xc4030, 0xffffffffffffffff, 0x0) 22:45:55 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x207204, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(0x0, 0x1a100, 0x0) unlink(&(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000005c0)={0x28, 0x2, 0x0, {0x6, 0x0, 0xcd}}, 0x28) accept4$inet(r0, &(0x7f0000000440)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setxattr$system_posix_acl(&(0x7f0000000740)='./file1\x00', &(0x7f0000000600)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="f2feff7f000000000000000002000300", @ANYRESDEC, @ANYBLOB="02000200", @ANYRES64, @ANYBLOB="3d7e4bcc", @ANYRES32=0x0, @ANYBLOB="cc8c9a89ccb369437b02db0ad77d", @ANYRES64=r0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02fb8800", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRESHEX, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="0400060019000080080002000bcf12f6dd907a2f5ba20cbef022129f59360d2b3fd3e59b1317e7e8936324411bc1a567d1e46dc03384204689a814d796c8d37f6cea313ad2f593716cc0f37b362a660561f5a07ad51e62e48e78bfa951fceecac2bea4b3d8d64b7b8d79aef5d58e22a13ef22510f476223e180c69cd5c610000000000", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="0800010065e83dfb01b6cfbd7b24662bf8d67f1e5279abc97de5a280ac153dffabe4285cc38cc92434be6d6ccd90f9891f39c3ab4d585f25bc1d235c242ed64f14a914f5cce36de0aef1e66b0cebf5f4783c8348674ab1c403983b5313f809", @ANYRES32=r3, @ANYBLOB="0cc63982", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRESHEX=r1, @ANYBLOB="10000400000000002000040000000000"], 0x94, 0x2) fstat(0xffffffffffffffff, 0x0) sched_setscheduler(r2, 0x3, &(0x7f0000000240)=0x6) r4 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000700)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500), 0x164000, &(0x7f0000000dc0)=ANY=[@ANYRES64=r3, @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESDEC=0xee00, @ANYBLOB="2c67726fc35e7d3f643d", @ANYRES64=r0, @ANYBLOB="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", @ANYRESDEC, @ANYBLOB="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", @ANYRESHEX=r4, @ANYBLOB="2c50626a5f2feed1d13d2e2f632e328d75f02e6e65742f73030000000000000142c12448c05aae08d01ef89f940d1132906cba5d96486d9c08", @ANYRESDEC=r5, @ANYBLOB]) rename(&(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000580)='./file0\x00') [ 1828.045197][T19519] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1828.058684][T19519] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1828.071359][T19519] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1828.082763][T19519] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 22:45:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='|;jU', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x18, &(0x7f00000000c0)={r4}, 0x8) [ 1828.097641][T19519] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1828.108173][T19519] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.188471][T19519] usb 6-1: config 0 descriptor?? [ 1828.698652][T19519] appleir 0003:05AC:8243.0049: unknown main item tag 0x0 [ 1828.811064][T19519] appleir 0003:05AC:8243.0049: No inputs registered, leaving [ 1829.020190][T19519] appleir 0003:05AC:8243.0049: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.5-1/input0 [ 1829.229471][ T25] usb 6-1: USB disconnect, device number 92 22:45:56 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz -'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 22:45:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='|;jU', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x18, &(0x7f00000000c0)={r4}, 0x8) 22:45:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='|;jU', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x18, &(0x7f00000000c0)={r4}, 0x8) 22:45:57 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x202e40, 0x0) fsync(r0) 22:45:57 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) 22:45:57 executing program 5: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 22:45:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000e780)={0x0, 0x0, &(0x7f000000e740)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4012, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:45:57 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz -'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 22:45:57 executing program 4: mlock2(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 22:45:57 executing program 1: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d5f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)={0x0, 0x0, 0x1, "d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:45:58 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000180)='THAWED\x00', 0x7) 22:45:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2600, 0x0) ioctl$TUNSETIFINDEX(r0, 0x5452, &(0x7f00000000c0)) 22:45:58 executing program 4: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = epoll_create(0xb734) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)="bf", 0x1}], 0x1}, 0x0) [ 1831.299777][ T7410] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:45:58 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz -'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) [ 1831.462710][ T3565] usb 2-1: new high-speed USB device number 64 using dummy_hcd 22:45:58 executing program 4: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = epoll_create(0xb734) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)="bf", 0x1}], 0x1}, 0x0) [ 1831.519533][ T7410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1831.571076][ T7410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1831.704016][ T3565] usb 2-1: Using ep0 maxpacket: 32 [ 1831.824313][ T3565] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1831.836987][ T3565] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1831.848432][ T3565] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1831.859655][ T3565] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 22:45:58 executing program 4: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = epoll_create(0xb734) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)="bf", 0x1}], 0x1}, 0x0) 22:45:58 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz -'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) [ 1831.870871][ T3565] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1831.882345][ T3565] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1831.893755][ T3565] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 4.6d [ 1831.904295][ T3565] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.134991][ T3565] usb 2-1: config 0 descriptor?? [ 1832.207568][ T3565] mos7840 2-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected 22:45:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = epoll_create(0xb734) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)="bf", 0x1}], 0x1}, 0x0) 22:46:00 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000180)='THAWED\x00', 0x7) 22:46:00 executing program 3: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x4, 0xc}, {0x2, 0xffff}, {0x4, 0x1ff}], 0x3) semop(r0, &(0x7f0000000280)=[{0x4, 0xffff}, {0x2, 0x40}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x3]) semop(r0, &(0x7f0000000200)=[{0x4, 0x7f23}], 0x1) 22:46:00 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10) [ 1833.928380][ T3565] mos7840: probe of ttyUSB0 failed with error -71 [ 1833.976531][ T3565] usb 2-1: USB disconnect, device number 64 [ 1833.998820][ T3565] mos7840 2-1:0.0: device disconnected 22:46:01 executing program 1: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d5f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)={0x0, 0x0, 0x1, "d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:46:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad490e4a6891669e7507c2e8ea8f96beef915d564c90c200", 0x18) sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}, 0x1000000}, {{0x0, 0x7, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:46:01 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8}}]}}]}}, 0x0) 22:46:01 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000180)='THAWED\x00', 0x7) 22:46:01 executing program 3: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x4, 0xc}, {0x2, 0xffff}, {0x4, 0x1ff}], 0x3) semop(r0, &(0x7f0000000280)=[{0x4, 0xffff}, {0x2, 0x40}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x3]) semop(r0, &(0x7f0000000200)=[{0x4, 0x7f23}], 0x1) 22:46:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 22:46:01 executing program 3: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x4, 0xc}, {0x2, 0xffff}, {0x4, 0x1ff}], 0x3) semop(r0, &(0x7f0000000280)=[{0x4, 0xffff}, {0x2, 0x40}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x3]) semop(r0, &(0x7f0000000200)=[{0x4, 0x7f23}], 0x1) [ 1834.832034][ T3552] usb 5-1: new high-speed USB device number 64 using dummy_hcd 22:46:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 22:46:02 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000180)='THAWED\x00', 0x7) [ 1835.063390][T19519] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1835.083191][ T3552] usb 5-1: Using ep0 maxpacket: 32 [ 1835.202993][ T3552] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1835.312298][T19519] usb 2-1: Using ep0 maxpacket: 32 [ 1835.393576][ T3552] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1835.403045][ T3552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.411258][ T3552] usb 5-1: Product: syz [ 1835.415827][ T3552] usb 5-1: Manufacturer: syz [ 1835.420601][ T3552] usb 5-1: SerialNumber: syz 22:46:02 executing program 3: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x4, 0xc}, {0x2, 0xffff}, {0x4, 0x1ff}], 0x3) semop(r0, &(0x7f0000000280)=[{0x4, 0xffff}, {0x2, 0x40}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x3]) semop(r0, &(0x7f0000000200)=[{0x4, 0x7f23}], 0x1) [ 1835.434177][T19519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1835.446790][T19519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1835.458170][T19519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1835.469333][T19519] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1835.480645][T19519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1835.492067][T19519] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1835.503650][T19519] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 4.6d [ 1835.514321][T19519] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:46:02 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 1835.561314][T19519] usb 2-1: config 0 descriptor?? [ 1835.610459][T19519] mos7840 2-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected 22:46:02 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 1835.776511][ T3552] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1836.098763][ T3552] usb 5-1: USB disconnect, device number 64 [ 1837.382961][T19519] mos7840: probe of ttyUSB0 failed with error -71 [ 1837.418500][T19519] usb 2-1: USB disconnect, device number 65 [ 1837.437550][T19519] mos7840 2-1:0.0: device disconnected 22:46:04 executing program 1: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d5f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)={0x0, 0x0, 0x1, "d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:46:04 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 22:46:04 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 22:46:04 executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d5f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)={0x0, 0x0, 0x1, "d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:46:04 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 22:46:04 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8}}]}}]}}, 0x0) 22:46:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 1838.276187][ T3552] usb 5-1: new high-speed USB device number 65 using dummy_hcd 22:46:05 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 1838.363448][ T25] usb 4-1: new high-speed USB device number 61 using dummy_hcd 22:46:05 executing program 0: unshare(0x20400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x20000) ioctl$TIOCGPGRP(r0, 0x5441, 0x0) [ 1838.542195][ T3552] usb 5-1: Using ep0 maxpacket: 32 [ 1838.551912][T27551] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1838.632051][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1838.672729][ T3552] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1838.774438][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1838.786196][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1838.796337][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1838.806295][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 22:46:05 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 22:46:05 executing program 0: unshare(0x20400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x20000) ioctl$TIOCGPGRP(r0, 0x5441, 0x0) [ 1838.816410][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1838.828273][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1838.838721][ T25] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 4.6d [ 1838.848047][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.899558][ T25] usb 4-1: config 0 descriptor?? [ 1838.923012][T27551] usb 2-1: Using ep0 maxpacket: 32 22:46:06 executing program 2: unshare(0x20400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x20000) ioctl$TIOCGPGRP(r0, 0x5441, 0x0) [ 1838.963394][ T3552] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1838.973218][ T3552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.981427][ T3552] usb 5-1: Product: syz [ 1838.987066][ T3552] usb 5-1: Manufacturer: syz [ 1838.991920][ T3552] usb 5-1: SerialNumber: syz [ 1839.042842][ T25] mos7840 4-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1839.093529][T27551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1839.104944][T27551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1839.115053][T27551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1839.127022][T27551] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1839.137268][T27551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1839.147290][T27551] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1839.157489][T27551] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 4.6d [ 1839.166827][T27551] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.222808][T27551] usb 2-1: config 0 descriptor?? [ 1839.260832][ T3552] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1839.333320][T27551] mos7840 2-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1839.519824][ T3565] usb 5-1: USB disconnect, device number 65 [ 1840.732569][ T25] mos7840: probe of ttyUSB0 failed with error -71 [ 1840.775774][ T25] usb 4-1: USB disconnect, device number 61 [ 1840.789538][ T25] mos7840 4-1:0.0: device disconnected [ 1840.806434][ T7038] udevd[7038]: setting mode of /dev/bus/usb/004/061 to 020664 failed: No such file or directory [ 1840.834808][ T7038] udevd[7038]: setting owner of /dev/bus/usb/004/061 to uid=0, gid=0 failed: No such file or directory [ 1840.993795][T27551] mos7840: probe of ttyUSB1 failed with error -71 [ 1841.062055][T27551] usb 2-1: USB disconnect, device number 66 [ 1841.077897][T27551] mos7840 2-1:0.0: device disconnected 22:46:08 executing program 1: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d5f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)={0x0, 0x0, 0x1, "d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:46:08 executing program 2: unshare(0x20400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x20000) ioctl$TIOCGPGRP(r0, 0x5441, 0x0) 22:46:08 executing program 0: unshare(0x20400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x20000) ioctl$TIOCGPGRP(r0, 0x5441, 0x0) 22:46:08 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) 22:46:08 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8}}]}}]}}, 0x0) 22:46:08 executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d5f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)={0x0, 0x0, 0x1, "d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:46:08 executing program 5: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffdf000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000000)={&(0x7f00000000c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x441, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x40305828, &(0x7f0000000140)={r2, 0x0, 0x100000000}) 22:46:09 executing program 2: unshare(0x20400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x20000) ioctl$TIOCGPGRP(r0, 0x5441, 0x0) [ 1841.972233][T27551] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1842.022368][ T8359] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1842.098813][ T3565] usb 4-1: new high-speed USB device number 62 using dummy_hcd 22:46:09 executing program 0: unshare(0x20400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x20000) ioctl$TIOCGPGRP(r0, 0x5441, 0x0) [ 1842.212393][T27551] usb 5-1: Using ep0 maxpacket: 32 [ 1842.262172][ T8359] usb 2-1: Using ep0 maxpacket: 32 [ 1842.333641][T27551] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1842.342681][ T3565] usb 4-1: Using ep0 maxpacket: 32 [ 1842.383215][ T8359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1842.394683][ T8359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1842.407176][ T8359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1842.417652][ T8359] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1842.427725][ T8359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1842.437787][ T8359] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1842.447942][ T8359] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 4.6d [ 1842.457290][ T8359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.483247][ T3565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1842.496099][ T3565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1842.515423][ T3565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 22:46:09 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x22, 0x0, 0x0) [ 1842.526692][ T3565] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1842.537977][ T3565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1842.549370][ T3565] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1842.560833][ T3565] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 4.6d [ 1842.571498][ T3565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:46:09 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x200000, 0x0, 0x8}, 0x18) [ 1842.612643][T27551] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1842.622085][T27551] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.630292][T27551] usb 5-1: Product: syz [ 1842.634810][T27551] usb 5-1: Manufacturer: syz [ 1842.639608][T27551] usb 5-1: SerialNumber: syz [ 1842.758148][T27551] usb-storage 5-1:1.0: USB Mass Storage device detected 22:46:09 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) preadv(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000040)=""/250, 0xfa}, {0x0}, {0x0}], 0x4, 0x1, 0x3) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) [ 1842.924772][ T3565] usb 4-1: config 0 descriptor?? [ 1842.991546][ T3565] mos7840 4-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1843.048777][T27551] usb 5-1: USB disconnect, device number 66 [ 1843.091244][ T8359] usb 2-1: config 0 descriptor?? [ 1843.190970][ T8359] mos7840 2-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1844.744607][ T3565] mos7840: probe of ttyUSB0 failed with error -71 [ 1844.787668][ T3565] usb 4-1: USB disconnect, device number 62 [ 1844.824369][ T3565] mos7840 4-1:0.0: device disconnected [ 1844.891037][ T8359] mos7840: probe of ttyUSB1 failed with error -71 [ 1844.993530][ T8359] usb 2-1: USB disconnect, device number 67 [ 1845.007348][ T8359] mos7840 2-1:0.0: device disconnected 22:46:12 executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d5f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)={0x0, 0x0, 0x1, "d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:46:12 executing program 5: request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0) 22:46:12 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000900)=""/173, 0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) r1 = socket(0x11, 0x800000003, 0x0) r2 = dup(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)) write$vhost_msg_v2(r0, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000080)=""/119, 0x77, 0x0, 0x0, 0x2}}, 0x48) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) 22:46:12 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) preadv(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000040)=""/250, 0xfa}, {0x0}, {0x0}], 0x4, 0x1, 0x3) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) 22:46:12 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8}}]}}]}}, 0x0) 22:46:12 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) preadv(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000040)=""/250, 0xfa}, {0x0}, {0x0}], 0x4, 0x1, 0x3) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) [ 1845.843203][ T8359] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1845.873151][ T25] usb 5-1: new high-speed USB device number 67 using dummy_hcd 22:46:13 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) preadv(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000040)=""/250, 0xfa}, {0x0}, {0x0}], 0x4, 0x1, 0x3) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) 22:46:13 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x8}]}}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1846.092107][ T8359] usb 4-1: Using ep0 maxpacket: 32 [ 1846.122460][ T25] usb 5-1: Using ep0 maxpacket: 32 22:46:13 executing program 1: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xf101fffe) [ 1846.233517][ T8359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1846.245660][ T8359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1846.256038][ T8359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1846.266024][ T8359] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1846.277324][ T8359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1846.287510][ T8359] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1846.299616][ T8359] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 4.6d [ 1846.309219][ T8359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.319254][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1846.384355][ T8359] usb 4-1: config 0 descriptor?? 22:46:13 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) preadv(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000040)=""/250, 0xfa}, {0x0}, {0x0}], 0x4, 0x1, 0x3) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) [ 1846.494107][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1846.505448][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.514771][ T25] usb 5-1: Product: syz [ 1846.519133][ T25] usb 5-1: Manufacturer: syz [ 1846.523992][ T25] usb 5-1: SerialNumber: syz 22:46:13 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) preadv(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000040)=""/250, 0xfa}, {0x0}, {0x0}], 0x4, 0x1, 0x3) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) [ 1846.556513][ T8359] mos7840 4-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected 22:46:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="8e0e1b38079b5b4b", 0x8}], 0x1) [ 1846.766371][ T25] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1847.018602][ T25] usb 5-1: USB disconnect, device number 67 [ 1848.172553][ T8359] mos7840: probe of ttyUSB0 failed with error -71 [ 1848.209824][ T8359] usb 4-1: USB disconnect, device number 63 [ 1848.223973][ T8359] mos7840 4-1:0.0: device disconnected 22:46:15 executing program 1: io_setup(0x4, &(0x7f0000000000)=0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000240)=0x0) dup3(r1, r2, 0x0) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='7', 0x1}]) 22:46:15 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000005f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) 22:46:15 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) preadv(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000040)=""/250, 0xfa}, {0x0}, {0x0}], 0x4, 0x1, 0x3) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) 22:46:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x7c}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000980)="66e37771", 0xe366}], 0x1}}], 0x1, 0x0) 22:46:15 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @dev}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x4, [@multicast2]}]}}}], 0x38}}], 0x2, 0x0) 22:46:16 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @dev}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x4, [@multicast2]}]}}}], 0x38}}], 0x2, 0x0) 22:46:16 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x3}) [ 1849.130484][ T7788] syz-executor.1 (7788): drop_caches: 2 22:46:16 executing program 2: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) openat$full(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x800000000009031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000015e000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0x208200) 22:46:16 executing program 3: futex(&(0x7f0000000100)=0x2, 0x6, 0x0, 0x0, 0x0, 0x0) 22:46:16 executing program 1: io_setup(0x4, &(0x7f0000000000)=0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000240)=0x0) dup3(r1, r2, 0x0) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='7', 0x1}]) 22:46:16 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) 22:46:16 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x3}) 22:46:16 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @dev}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x4, [@multicast2]}]}}}], 0x38}}], 0x2, 0x0) 22:46:16 executing program 5: syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1849.820560][ T7807] syz-executor.1 (7807): drop_caches: 2 22:46:17 executing program 3: syslog(0x3, &(0x7f0000000280)=""/4096, 0x1000) 22:46:17 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x3}) 22:46:17 executing program 1: io_setup(0x4, &(0x7f0000000000)=0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000240)=0x0) dup3(r1, r2, 0x0) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='7', 0x1}]) 22:46:17 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @dev}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x4, [@multicast2]}]}}}], 0x38}}], 0x2, 0x0) [ 1850.794570][ T7845] syz-executor.1 (7845): drop_caches: 2 22:46:17 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x3}) [ 1853.209704][ T7850] not chained 2050000 origins [ 1853.214773][ T7850] CPU: 1 PID: 7850 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1853.224990][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1853.235166][ T7850] Call Trace: [ 1853.238528][ T7850] [ 1853.241541][ T7850] dump_stack_lvl+0x1c8/0x256 [ 1853.246409][ T7850] dump_stack+0x1a/0x1c [ 1853.250737][ T7850] kmsan_internal_chain_origin+0x78/0x120 [ 1853.256619][ T7850] ? filter_irq_stacks+0x5c/0x1a0 [ 1853.261833][ T7850] ? kmsan_internal_check_memory+0x94/0x530 [ 1853.267887][ T7850] ? do_recvmmsg+0x55a/0x1180 [ 1853.272700][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1853.278677][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1853.284650][ T7850] ? should_fail+0x3f/0x810 [ 1853.289304][ T7850] ? __stack_depot_save+0x21/0x4b0 [ 1853.294571][ T7850] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1853.300980][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1853.306949][ T7850] __msan_chain_origin+0xbd/0x140 [ 1853.312127][ T7850] ___sys_recvmsg+0x522/0x890 [ 1853.316982][ T7850] ? do_recvmmsg+0x5bc/0x1180 [ 1853.321822][ T7850] ? kmsan_internal_check_memory+0x94/0x530 [ 1853.327878][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1853.333851][ T7850] do_recvmmsg+0x55a/0x1180 [ 1853.338521][ T7850] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1853.344934][ T7850] ? do_syscall_64+0x3d/0xb0 [ 1853.349666][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1853.354855][ T7850] do_syscall_64+0x3d/0xb0 [ 1853.359413][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1853.365502][ T7850] RIP: 0033:0x7fe15ac89279 [ 1853.370025][ T7850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1853.389812][ T7850] RSP: 002b:00007fe15bd9f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1853.398379][ T7850] RAX: ffffffffffffffda RBX: 00007fe15ad9c050 RCX: 00007fe15ac89279 [ 1853.406492][ T7850] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1853.414582][ T7850] RBP: 00007fe15ace3189 R08: 0000000000000000 R09: 0000000000000000 [ 1853.422673][ T7850] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1853.430756][ T7850] R13: 00007fe15b2cfb1f R14: 00007fe15bd9f300 R15: 0000000000022000 [ 1853.438874][ T7850] [ 1853.444500][ T7850] Uninit was stored to memory at: [ 1853.449739][ T7850] ___sys_recvmsg+0x522/0x890 [ 1853.454875][ T7850] do_recvmmsg+0x55a/0x1180 [ 1853.459519][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1853.464779][ T7850] do_syscall_64+0x3d/0xb0 [ 1853.469336][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1853.475496][ T7850] [ 1853.477898][ T7850] Uninit was stored to memory at: [ 1853.483182][ T7850] ___sys_recvmsg+0x522/0x890 [ 1853.488003][ T7850] do_recvmmsg+0x55a/0x1180 [ 1853.492742][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1853.497916][ T7850] do_syscall_64+0x3d/0xb0 [ 1853.502582][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1853.508665][ T7850] [ 1853.511061][ T7850] Uninit was stored to memory at: [ 1853.516388][ T7850] ___sys_recvmsg+0x522/0x890 [ 1853.521199][ T7850] do_recvmmsg+0x55a/0x1180 [ 1853.525919][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1853.531096][ T7850] do_syscall_64+0x3d/0xb0 [ 1853.535773][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1853.541938][ T7850] [ 1853.544342][ T7850] Uninit was stored to memory at: [ 1853.549559][ T7850] ___sys_recvmsg+0x522/0x890 [ 1853.554470][ T7850] do_recvmmsg+0x55a/0x1180 [ 1853.559111][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1853.564364][ T7850] do_syscall_64+0x3d/0xb0 [ 1853.568916][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1853.575087][ T7850] [ 1853.577483][ T7850] Uninit was stored to memory at: [ 1853.582766][ T7850] ___sys_recvmsg+0x522/0x890 [ 1853.587578][ T7850] do_recvmmsg+0x55a/0x1180 [ 1853.592316][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1853.597480][ T7850] do_syscall_64+0x3d/0xb0 [ 1853.602124][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1853.608199][ T7850] [ 1853.610592][ T7850] Uninit was stored to memory at: [ 1853.615873][ T7850] ___sys_recvmsg+0x522/0x890 [ 1853.620689][ T7850] do_recvmmsg+0x55a/0x1180 [ 1853.625422][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1853.630601][ T7850] do_syscall_64+0x3d/0xb0 [ 1853.635243][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1853.641323][ T7850] [ 1853.643851][ T7850] Uninit was stored to memory at: [ 1853.649055][ T7850] ___sys_recvmsg+0x522/0x890 [ 1853.653949][ T7850] do_recvmmsg+0x55a/0x1180 [ 1853.658588][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1853.663836][ T7850] do_syscall_64+0x3d/0xb0 [ 1853.668390][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1853.674549][ T7850] [ 1853.676955][ T7850] Local variable msg_sys created at: [ 1853.682411][ T7850] do_recvmmsg+0x5c/0x1180 [ 1853.686959][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1854.140376][ T7850] not chained 2060000 origins [ 1854.145508][ T7850] CPU: 1 PID: 7850 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1854.155740][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1854.165924][ T7850] Call Trace: [ 1854.169376][ T7850] [ 1854.172496][ T7850] dump_stack_lvl+0x1c8/0x256 [ 1854.177378][ T7850] dump_stack+0x1a/0x1c [ 1854.181716][ T7850] kmsan_internal_chain_origin+0x78/0x120 [ 1854.187619][ T7850] ? filter_irq_stacks+0x5c/0x1a0 [ 1854.192852][ T7850] ? kmsan_internal_check_memory+0x94/0x530 [ 1854.199259][ T7850] ? do_recvmmsg+0x55a/0x1180 [ 1854.204080][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1854.210063][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1854.216104][ T7850] ? should_fail+0x3f/0x810 [ 1854.220804][ T7850] ? __stack_depot_save+0x21/0x4b0 [ 1854.226078][ T7850] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1854.232497][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1854.238471][ T7850] __msan_chain_origin+0xbd/0x140 [ 1854.243659][ T7850] ___sys_recvmsg+0x522/0x890 [ 1854.248481][ T7850] ? do_recvmmsg+0x5bc/0x1180 [ 1854.253335][ T7850] ? kmsan_internal_check_memory+0x94/0x530 [ 1854.259433][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1854.265429][ T7850] do_recvmmsg+0x55a/0x1180 [ 1854.270105][ T7850] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1854.276524][ T7850] ? do_syscall_64+0x3d/0xb0 [ 1854.281267][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1854.286462][ T7850] do_syscall_64+0x3d/0xb0 [ 1854.291026][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1854.297118][ T7850] RIP: 0033:0x7fe15ac89279 [ 1854.301643][ T7850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1854.321438][ T7850] RSP: 002b:00007fe15bd9f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1854.330008][ T7850] RAX: ffffffffffffffda RBX: 00007fe15ad9c050 RCX: 00007fe15ac89279 [ 1854.338164][ T7850] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1854.346266][ T7850] RBP: 00007fe15ace3189 R08: 0000000000000000 R09: 0000000000000000 [ 1854.354357][ T7850] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1854.362441][ T7850] R13: 00007fe15b2cfb1f R14: 00007fe15bd9f300 R15: 0000000000022000 [ 1854.370570][ T7850] [ 1854.378466][ T7850] Uninit was stored to memory at: [ 1854.386743][ T7850] ___sys_recvmsg+0x522/0x890 [ 1854.391566][ T7850] do_recvmmsg+0x55a/0x1180 [ 1854.396475][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1854.401757][ T7850] do_syscall_64+0x3d/0xb0 [ 1854.406324][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1854.412488][ T7850] [ 1854.414879][ T7850] Uninit was stored to memory at: [ 1854.420100][ T7850] ___sys_recvmsg+0x522/0x890 [ 1854.425007][ T7850] do_recvmmsg+0x55a/0x1180 [ 1854.429650][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1854.434911][ T7850] do_syscall_64+0x3d/0xb0 [ 1854.439473][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1854.445642][ T7850] [ 1854.448033][ T7850] Uninit was stored to memory at: [ 1854.453327][ T7850] ___sys_recvmsg+0x522/0x890 [ 1854.458146][ T7850] do_recvmmsg+0x55a/0x1180 [ 1854.462880][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1854.468073][ T7850] do_syscall_64+0x3d/0xb0 [ 1854.472719][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1854.478800][ T7850] [ 1854.481189][ T7850] Uninit was stored to memory at: [ 1854.486517][ T7850] ___sys_recvmsg+0x522/0x890 [ 1854.491343][ T7850] do_recvmmsg+0x55a/0x1180 [ 1854.496074][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1854.501270][ T7850] do_syscall_64+0x3d/0xb0 [ 1854.505929][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1854.512086][ T7850] [ 1854.514474][ T7850] Uninit was stored to memory at: [ 1854.519654][ T7850] ___sys_recvmsg+0x522/0x890 [ 1854.524545][ T7850] do_recvmmsg+0x55a/0x1180 [ 1854.529180][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1854.534449][ T7850] do_syscall_64+0x3d/0xb0 [ 1854.539007][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1854.545173][ T7850] [ 1854.547563][ T7850] Uninit was stored to memory at: [ 1854.552836][ T7850] ___sys_recvmsg+0x522/0x890 [ 1854.557646][ T7850] do_recvmmsg+0x55a/0x1180 [ 1854.562391][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1854.567553][ T7850] do_syscall_64+0x3d/0xb0 [ 1854.572183][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1854.578277][ T7850] [ 1854.580679][ T7850] Uninit was stored to memory at: [ 1854.586042][ T7850] ___sys_recvmsg+0x522/0x890 [ 1854.590848][ T7850] do_recvmmsg+0x55a/0x1180 [ 1854.595581][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1854.600740][ T7850] do_syscall_64+0x3d/0xb0 [ 1854.605378][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1854.611449][ T7850] [ 1854.613988][ T7850] Local variable msg_sys created at: [ 1854.619355][ T7850] do_recvmmsg+0x5c/0x1180 [ 1854.623994][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1854.904588][ T7850] not chained 2070000 origins [ 1854.909392][ T7850] CPU: 1 PID: 7850 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1854.919615][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1854.929800][ T7850] Call Trace: [ 1854.933166][ T7850] [ 1854.936188][ T7850] dump_stack_lvl+0x1c8/0x256 [ 1854.941051][ T7850] dump_stack+0x1a/0x1c [ 1854.945380][ T7850] kmsan_internal_chain_origin+0x78/0x120 [ 1854.951292][ T7850] ? filter_irq_stacks+0x5c/0x1a0 [ 1854.956519][ T7850] ? kmsan_internal_check_memory+0x94/0x530 [ 1854.962573][ T7850] ? do_recvmmsg+0x55a/0x1180 [ 1854.967390][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1854.973376][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1854.979347][ T7850] ? should_fail+0x3f/0x810 [ 1854.984006][ T7850] ? __stack_depot_save+0x21/0x4b0 [ 1854.989268][ T7850] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1854.995680][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1855.001651][ T7850] __msan_chain_origin+0xbd/0x140 [ 1855.006831][ T7850] ___sys_recvmsg+0x522/0x890 [ 1855.011649][ T7850] ? do_recvmmsg+0x5bc/0x1180 [ 1855.016479][ T7850] ? kmsan_internal_check_memory+0x94/0x530 [ 1855.022542][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1855.028514][ T7850] do_recvmmsg+0x55a/0x1180 [ 1855.033351][ T7850] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1855.039758][ T7850] ? do_syscall_64+0x3d/0xb0 [ 1855.044487][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1855.049675][ T7850] do_syscall_64+0x3d/0xb0 [ 1855.054234][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1855.060313][ T7850] RIP: 0033:0x7fe15ac89279 [ 1855.064838][ T7850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1855.084626][ T7850] RSP: 002b:00007fe15bd9f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1855.093200][ T7850] RAX: ffffffffffffffda RBX: 00007fe15ad9c050 RCX: 00007fe15ac89279 [ 1855.101303][ T7850] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1855.109405][ T7850] RBP: 00007fe15ace3189 R08: 0000000000000000 R09: 0000000000000000 [ 1855.117498][ T7850] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1855.125586][ T7850] R13: 00007fe15b2cfb1f R14: 00007fe15bd9f300 R15: 0000000000022000 [ 1855.133714][ T7850] [ 1855.140547][ T7850] Uninit was stored to memory at: [ 1855.146522][ T7850] ___sys_recvmsg+0x522/0x890 [ 1855.151351][ T7850] do_recvmmsg+0x55a/0x1180 [ 1855.156074][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1855.161262][ T7850] do_syscall_64+0x3d/0xb0 [ 1855.165944][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1855.172087][ T7850] [ 1855.174483][ T7850] Uninit was stored to memory at: [ 1855.179673][ T7850] ___sys_recvmsg+0x522/0x890 [ 1855.184572][ T7850] do_recvmmsg+0x55a/0x1180 [ 1855.189203][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1855.194450][ T7850] do_syscall_64+0x3d/0xb0 [ 1855.198992][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1855.205151][ T7850] [ 1855.207537][ T7850] Uninit was stored to memory at: [ 1855.212801][ T7850] ___sys_recvmsg+0x522/0x890 [ 1855.217610][ T7850] do_recvmmsg+0x55a/0x1180 [ 1855.222330][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1855.227496][ T7850] do_syscall_64+0x3d/0xb0 [ 1855.232113][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1855.238182][ T7850] [ 1855.240571][ T7850] Uninit was stored to memory at: [ 1855.245841][ T7850] ___sys_recvmsg+0x522/0x890 [ 1855.250649][ T7850] do_recvmmsg+0x55a/0x1180 [ 1855.255388][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1855.260556][ T7850] do_syscall_64+0x3d/0xb0 [ 1855.265216][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1855.271296][ T7850] [ 1855.273812][ T7850] Uninit was stored to memory at: [ 1855.279009][ T7850] ___sys_recvmsg+0x522/0x890 [ 1855.283944][ T7850] do_recvmmsg+0x55a/0x1180 [ 1855.288660][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1855.293907][ T7850] do_syscall_64+0x3d/0xb0 [ 1855.298468][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1855.304687][ T7850] [ 1855.307254][ T7850] Uninit was stored to memory at: [ 1855.312530][ T7850] ___sys_recvmsg+0x522/0x890 [ 1855.317341][ T7850] do_recvmmsg+0x55a/0x1180 [ 1855.322112][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1855.327284][ T7850] do_syscall_64+0x3d/0xb0 [ 1855.331964][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1855.338035][ T7850] [ 1855.340430][ T7850] Uninit was stored to memory at: [ 1855.345773][ T7850] ___sys_recvmsg+0x522/0x890 [ 1855.350583][ T7850] do_recvmmsg+0x55a/0x1180 [ 1855.355476][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1855.360656][ T7850] do_syscall_64+0x3d/0xb0 [ 1855.365344][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1855.371429][ T7850] [ 1855.373979][ T7850] Local variable msg_sys created at: [ 1855.379340][ T7850] do_recvmmsg+0x5c/0x1180 [ 1855.384021][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1855.673626][ T7850] not chained 2080000 origins [ 1855.678781][ T7850] CPU: 1 PID: 7850 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1855.689011][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1855.699206][ T7850] Call Trace: [ 1855.702572][ T7850] [ 1855.705584][ T7850] dump_stack_lvl+0x1c8/0x256 [ 1855.710625][ T7850] dump_stack+0x1a/0x1c [ 1855.714956][ T7850] kmsan_internal_chain_origin+0x78/0x120 [ 1855.720838][ T7850] ? filter_irq_stacks+0x5c/0x1a0 [ 1855.726056][ T7850] ? kmsan_internal_check_memory+0x94/0x530 [ 1855.732125][ T7850] ? do_recvmmsg+0x55a/0x1180 [ 1855.736941][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1855.742914][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1855.748890][ T7850] ? should_fail+0x3f/0x810 [ 1855.753543][ T7850] ? __stack_depot_save+0x21/0x4b0 [ 1855.758809][ T7850] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1855.765218][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1855.771186][ T7850] __msan_chain_origin+0xbd/0x140 [ 1855.776358][ T7850] ___sys_recvmsg+0x522/0x890 [ 1855.781170][ T7850] ? do_recvmmsg+0x5bc/0x1180 [ 1855.786002][ T7850] ? kmsan_internal_check_memory+0x94/0x530 [ 1855.792241][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1855.798215][ T7850] do_recvmmsg+0x55a/0x1180 [ 1855.802886][ T7850] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1855.809303][ T7850] ? do_syscall_64+0x3d/0xb0 [ 1855.814040][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1855.819233][ T7850] do_syscall_64+0x3d/0xb0 [ 1855.823786][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1855.829864][ T7850] RIP: 0033:0x7fe15ac89279 [ 1855.834382][ T7850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1855.854335][ T7850] RSP: 002b:00007fe15bd9f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1855.862895][ T7850] RAX: ffffffffffffffda RBX: 00007fe15ad9c050 RCX: 00007fe15ac89279 [ 1855.870993][ T7850] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1855.879085][ T7850] RBP: 00007fe15ace3189 R08: 0000000000000000 R09: 0000000000000000 [ 1855.887180][ T7850] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1855.895437][ T7850] R13: 00007fe15b2cfb1f R14: 00007fe15bd9f300 R15: 0000000000022000 [ 1855.903549][ T7850] [ 1855.909036][ T7850] Uninit was stored to memory at: [ 1855.914615][ T7850] ___sys_recvmsg+0x522/0x890 [ 1855.919444][ T7850] do_recvmmsg+0x55a/0x1180 [ 1855.924160][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1855.929359][ T7850] do_syscall_64+0x3d/0xb0 [ 1855.934003][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1855.940091][ T7850] [ 1855.942560][ T7850] Uninit was stored to memory at: [ 1855.947749][ T7850] ___sys_recvmsg+0x522/0x890 [ 1855.952627][ T7850] do_recvmmsg+0x55a/0x1180 [ 1855.957268][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1855.962518][ T7850] do_syscall_64+0x3d/0xb0 [ 1855.967064][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1855.973221][ T7850] [ 1855.975610][ T7850] Uninit was stored to memory at: [ 1855.980803][ T7850] ___sys_recvmsg+0x522/0x890 [ 1855.985698][ T7850] do_recvmmsg+0x55a/0x1180 [ 1855.990337][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1855.995588][ T7850] do_syscall_64+0x3d/0xb0 [ 1856.000141][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1856.006290][ T7850] [ 1856.008678][ T7850] Uninit was stored to memory at: [ 1856.013951][ T7850] ___sys_recvmsg+0x522/0x890 [ 1856.018760][ T7850] do_recvmmsg+0x55a/0x1180 [ 1856.023464][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1856.028624][ T7850] do_syscall_64+0x3d/0xb0 [ 1856.033247][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1856.039328][ T7850] [ 1856.041798][ T7850] Uninit was stored to memory at: [ 1856.046991][ T7850] ___sys_recvmsg+0x522/0x890 [ 1856.051884][ T7850] do_recvmmsg+0x55a/0x1180 [ 1856.056518][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1856.061760][ T7850] do_syscall_64+0x3d/0xb0 [ 1856.066307][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1856.072486][ T7850] [ 1856.074875][ T7850] Uninit was stored to memory at: [ 1856.080060][ T7850] ___sys_recvmsg+0x522/0x890 [ 1856.084951][ T7850] do_recvmmsg+0x55a/0x1180 [ 1856.089586][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1856.094830][ T7850] do_syscall_64+0x3d/0xb0 [ 1856.099374][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1856.105519][ T7850] [ 1856.107907][ T7850] Uninit was stored to memory at: [ 1856.113180][ T7850] ___sys_recvmsg+0x522/0x890 [ 1856.117983][ T7850] do_recvmmsg+0x55a/0x1180 [ 1856.122685][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1856.127839][ T7850] do_syscall_64+0x3d/0xb0 [ 1856.132462][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1856.138535][ T7850] [ 1856.140935][ T7850] Local variable msg_sys created at: [ 1856.146378][ T7850] do_recvmmsg+0x5c/0x1180 [ 1856.150932][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1856.510339][ T7850] not chained 2090000 origins [ 1856.515369][ T7850] CPU: 1 PID: 7850 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1856.525588][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1856.535756][ T7850] Call Trace: [ 1856.539119][ T7850] [ 1856.542136][ T7850] dump_stack_lvl+0x1c8/0x256 [ 1856.547024][ T7850] dump_stack+0x1a/0x1c [ 1856.551352][ T7850] kmsan_internal_chain_origin+0x78/0x120 [ 1856.557225][ T7850] ? filter_irq_stacks+0x5c/0x1a0 [ 1856.562441][ T7850] ? kmsan_internal_check_memory+0x94/0x530 [ 1856.568515][ T7850] ? do_recvmmsg+0x55a/0x1180 [ 1856.573352][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1856.580138][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1856.586127][ T7850] ? should_fail+0x3f/0x810 [ 1856.590787][ T7850] ? __stack_depot_save+0x21/0x4b0 [ 1856.596095][ T7850] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1856.602527][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1856.608504][ T7850] __msan_chain_origin+0xbd/0x140 [ 1856.613679][ T7850] ___sys_recvmsg+0x522/0x890 [ 1856.618493][ T7850] ? do_recvmmsg+0x5bc/0x1180 [ 1856.623331][ T7850] ? kmsan_internal_check_memory+0x94/0x530 [ 1856.629491][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1856.635474][ T7850] do_recvmmsg+0x55a/0x1180 [ 1856.640131][ T7850] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1856.646544][ T7850] ? do_syscall_64+0x3d/0xb0 [ 1856.651270][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1856.656465][ T7850] do_syscall_64+0x3d/0xb0 [ 1856.661014][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1856.667086][ T7850] RIP: 0033:0x7fe15ac89279 [ 1856.671602][ T7850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1856.691374][ T7850] RSP: 002b:00007fe15bd9f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1856.699946][ T7850] RAX: ffffffffffffffda RBX: 00007fe15ad9c050 RCX: 00007fe15ac89279 [ 1856.708047][ T7850] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1856.716137][ T7850] RBP: 00007fe15ace3189 R08: 0000000000000000 R09: 0000000000000000 [ 1856.724521][ T7850] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1856.732690][ T7850] R13: 00007fe15b2cfb1f R14: 00007fe15bd9f300 R15: 0000000000022000 [ 1856.740802][ T7850] [ 1856.746093][ T7850] Uninit was stored to memory at: [ 1856.751294][ T7850] ___sys_recvmsg+0x522/0x890 [ 1856.756432][ T7850] do_recvmmsg+0x55a/0x1180 [ 1856.761073][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1856.766321][ T7850] do_syscall_64+0x3d/0xb0 [ 1856.770875][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1856.777038][ T7850] [ 1856.779425][ T7850] Uninit was stored to memory at: [ 1856.784701][ T7850] ___sys_recvmsg+0x522/0x890 [ 1856.789505][ T7850] do_recvmmsg+0x55a/0x1180 [ 1856.794211][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1856.799374][ T7850] do_syscall_64+0x3d/0xb0 [ 1856.804007][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1856.810082][ T7850] [ 1856.812567][ T7850] Uninit was stored to memory at: [ 1856.817779][ T7850] ___sys_recvmsg+0x522/0x890 [ 1856.822720][ T7850] do_recvmmsg+0x55a/0x1180 [ 1856.827353][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1856.832741][ T7850] do_syscall_64+0x3d/0xb0 [ 1856.837289][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1856.843511][ T7850] [ 1856.845896][ T7850] Uninit was stored to memory at: [ 1856.851090][ T7850] ___sys_recvmsg+0x522/0x890 [ 1856.856041][ T7850] do_recvmmsg+0x55a/0x1180 [ 1856.860691][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1856.866005][ T7850] do_syscall_64+0x3d/0xb0 [ 1856.870562][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1856.876787][ T7850] [ 1856.879178][ T7850] Uninit was stored to memory at: [ 1856.884534][ T7850] ___sys_recvmsg+0x522/0x890 [ 1856.889340][ T7850] do_recvmmsg+0x55a/0x1180 [ 1856.894038][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1856.899198][ T7850] do_syscall_64+0x3d/0xb0 [ 1856.903865][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1856.909934][ T7850] [ 1856.912454][ T7850] Uninit was stored to memory at: [ 1856.918171][ T7850] ___sys_recvmsg+0x522/0x890 [ 1856.923054][ T7850] do_recvmmsg+0x55a/0x1180 [ 1856.927762][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1856.933001][ T7850] do_syscall_64+0x3d/0xb0 [ 1856.937556][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1856.943755][ T7850] [ 1856.946142][ T7850] Uninit was stored to memory at: [ 1856.951333][ T7850] ___sys_recvmsg+0x522/0x890 [ 1856.956241][ T7850] do_recvmmsg+0x55a/0x1180 [ 1856.960878][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1856.966119][ T7850] do_syscall_64+0x3d/0xb0 [ 1856.970737][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1856.977000][ T7850] [ 1856.979398][ T7850] Local variable msg_sys created at: [ 1856.984987][ T7850] do_recvmmsg+0x5c/0x1180 [ 1856.989539][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1857.247891][ T7850] not chained 2100000 origins [ 1857.255712][ T7850] CPU: 1 PID: 7850 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1857.265951][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1857.276124][ T7850] Call Trace: [ 1857.279531][ T7850] [ 1857.282559][ T7850] dump_stack_lvl+0x1c8/0x256 [ 1857.287428][ T7850] dump_stack+0x1a/0x1c [ 1857.291758][ T7850] kmsan_internal_chain_origin+0x78/0x120 [ 1857.297644][ T7850] ? filter_irq_stacks+0x5c/0x1a0 [ 1857.303029][ T7850] ? kmsan_internal_check_memory+0x94/0x530 [ 1857.309084][ T7850] ? do_recvmmsg+0x55a/0x1180 [ 1857.313907][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1857.319888][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1857.325863][ T7850] ? should_fail+0x3f/0x810 [ 1857.330517][ T7850] ? __stack_depot_save+0x21/0x4b0 [ 1857.335777][ T7850] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1857.342189][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1857.348161][ T7850] __msan_chain_origin+0xbd/0x140 [ 1857.353335][ T7850] ___sys_recvmsg+0x522/0x890 [ 1857.358171][ T7850] ? do_recvmmsg+0x5bc/0x1180 [ 1857.363014][ T7850] ? kmsan_internal_check_memory+0x94/0x530 [ 1857.369776][ T7850] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1857.375750][ T7850] do_recvmmsg+0x55a/0x1180 [ 1857.380407][ T7850] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1857.386819][ T7850] ? do_syscall_64+0x3d/0xb0 [ 1857.391550][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1857.396740][ T7850] do_syscall_64+0x3d/0xb0 [ 1857.401289][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1857.407361][ T7850] RIP: 0033:0x7fe15ac89279 [ 1857.411888][ T7850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1857.431663][ T7850] RSP: 002b:00007fe15bd9f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1857.440216][ T7850] RAX: ffffffffffffffda RBX: 00007fe15ad9c050 RCX: 00007fe15ac89279 [ 1857.448311][ T7850] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1857.456393][ T7850] RBP: 00007fe15ace3189 R08: 0000000000000000 R09: 0000000000000000 [ 1857.464485][ T7850] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1857.472611][ T7850] R13: 00007fe15b2cfb1f R14: 00007fe15bd9f300 R15: 0000000000022000 [ 1857.480736][ T7850] [ 1857.486348][ T7850] Uninit was stored to memory at: [ 1857.491555][ T7850] ___sys_recvmsg+0x522/0x890 [ 1857.496678][ T7850] do_recvmmsg+0x55a/0x1180 [ 1857.501316][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1857.506557][ T7850] do_syscall_64+0x3d/0xb0 [ 1857.511105][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1857.517272][ T7850] [ 1857.519659][ T7850] Uninit was stored to memory at: [ 1857.524928][ T7850] ___sys_recvmsg+0x522/0x890 [ 1857.529734][ T7850] do_recvmmsg+0x55a/0x1180 [ 1857.534446][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1857.539620][ T7850] do_syscall_64+0x3d/0xb0 [ 1857.544245][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1857.550324][ T7850] [ 1857.552792][ T7850] Uninit was stored to memory at: [ 1857.557996][ T7850] ___sys_recvmsg+0x522/0x890 [ 1857.562875][ T7850] do_recvmmsg+0x55a/0x1180 [ 1857.567504][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1857.572744][ T7850] do_syscall_64+0x3d/0xb0 [ 1857.577299][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1857.583452][ T7850] [ 1857.585844][ T7850] Uninit was stored to memory at: [ 1857.591026][ T7850] ___sys_recvmsg+0x522/0x890 [ 1857.595909][ T7850] do_recvmmsg+0x55a/0x1180 [ 1857.600537][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1857.605777][ T7850] do_syscall_64+0x3d/0xb0 [ 1857.610349][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1857.616502][ T7850] [ 1857.618886][ T7850] Uninit was stored to memory at: [ 1857.624208][ T7850] ___sys_recvmsg+0x522/0x890 [ 1857.629015][ T7850] do_recvmmsg+0x55a/0x1180 [ 1857.633729][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1857.638889][ T7850] do_syscall_64+0x3d/0xb0 [ 1857.643566][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1857.649637][ T7850] [ 1857.652102][ T7850] Uninit was stored to memory at: [ 1857.657295][ T7850] ___sys_recvmsg+0x522/0x890 [ 1857.662231][ T7850] do_recvmmsg+0x55a/0x1180 [ 1857.666860][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1857.672097][ T7850] do_syscall_64+0x3d/0xb0 [ 1857.676644][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1857.682789][ T7850] [ 1857.685173][ T7850] Uninit was stored to memory at: [ 1857.690352][ T7850] ___sys_recvmsg+0x522/0x890 [ 1857.695223][ T7850] do_recvmmsg+0x55a/0x1180 [ 1857.699851][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1857.705089][ T7850] do_syscall_64+0x3d/0xb0 [ 1857.709804][ T7850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1857.715946][ T7850] [ 1857.718332][ T7850] Local variable msg_sys created at: [ 1857.723765][ T7850] do_recvmmsg+0x5c/0x1180 [ 1857.728303][ T7850] __x64_sys_recvmmsg+0x3a7/0x4b0 22:46:25 executing program 2: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) openat$full(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x800000000009031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000015e000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0x208200) 22:46:25 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59, @time}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/62, 0x3e}], 0xd, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000002c0)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0x80045300, 0x0) tkill(r0, 0x7) 22:46:25 executing program 1: io_setup(0x4, &(0x7f0000000000)=0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000240)=0x0) dup3(r1, r2, 0x0) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='7', 0x1}]) 22:46:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x101, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 22:46:25 executing program 5: syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:46:25 executing program 0: syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1858.441532][ T7859] syz-executor.1 (7859): drop_caches: 2 22:46:25 executing program 4: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) openat$full(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x800000000009031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000015e000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0x208200) 22:46:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f00000000c0)=[{0x5}, {0x84}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22:46:26 executing program 3: unshare(0x24020000) unshare(0x20020000) unshare(0x20000) 22:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="1c0000000065ffff"], 0x24}}, 0x0) 22:46:26 executing program 5: syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:46:26 executing program 0: syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1859.651297][ T7923] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:46:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="1c0000000065ffff"], 0x24}}, 0x0) 22:46:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) io_setup(0x5ff, &(0x7f0000000040)=0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_submit(r0, 0xf, &(0x7f0000000640)=[&(0x7f0000000180)={0x7000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="0210000003ffffffffff600000000000", 0x1002}]) 22:46:29 executing program 2: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) openat$full(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x800000000009031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000015e000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0x208200) 22:46:29 executing program 5: syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:46:29 executing program 0: syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1862.550624][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:46:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="1c0000000065ffff"], 0x24}}, 0x0) [ 1863.412859][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1863.895099][ T8008] not chained 2110000 origins [ 1863.899920][ T8008] CPU: 1 PID: 8008 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1863.910230][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1863.920407][ T8008] Call Trace: [ 1863.923782][ T8008] [ 1863.926794][ T8008] dump_stack_lvl+0x1c8/0x256 [ 1863.931663][ T8008] dump_stack+0x1a/0x1c [ 1863.935990][ T8008] kmsan_internal_chain_origin+0x78/0x120 [ 1863.941910][ T8008] ? filter_irq_stacks+0x5c/0x1a0 [ 1863.947132][ T8008] ? kmsan_internal_check_memory+0x94/0x530 [ 1863.953210][ T8008] ? do_recvmmsg+0x55a/0x1180 [ 1863.958030][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1863.964101][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1863.970080][ T8008] ? should_fail+0x3f/0x810 [ 1863.974740][ T8008] ? __stack_depot_save+0x21/0x4b0 [ 1863.980007][ T8008] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1863.986422][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1863.992398][ T8008] __msan_chain_origin+0xbd/0x140 [ 1863.997571][ T8008] ___sys_recvmsg+0x522/0x890 [ 1864.002388][ T8008] ? do_recvmmsg+0x5bc/0x1180 [ 1864.007225][ T8008] ? kmsan_internal_check_memory+0x94/0x530 [ 1864.013275][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1864.019334][ T8008] do_recvmmsg+0x55a/0x1180 [ 1864.024008][ T8008] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1864.030427][ T8008] ? do_syscall_64+0x3d/0xb0 [ 1864.035155][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1864.040342][ T8008] do_syscall_64+0x3d/0xb0 [ 1864.044895][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1864.050985][ T8008] RIP: 0033:0x7faec0089279 [ 1864.055507][ T8008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1864.075376][ T8008] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1864.083948][ T8008] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1864.092056][ T8008] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1864.100173][ T8008] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1864.108275][ T8008] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1864.116481][ T8008] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1864.124605][ T8008] [ 1864.131060][ T8008] Uninit was stored to memory at: [ 1864.136563][ T8008] ___sys_recvmsg+0x522/0x890 [ 1864.141382][ T8008] do_recvmmsg+0x55a/0x1180 [ 1864.146125][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1864.151299][ T8008] do_syscall_64+0x3d/0xb0 [ 1864.155941][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1864.162476][ T8008] [ 1864.164868][ T8008] Uninit was stored to memory at: [ 1864.170072][ T8008] ___sys_recvmsg+0x522/0x890 [ 1864.174984][ T8008] do_recvmmsg+0x55a/0x1180 [ 1864.179628][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1864.184893][ T8008] do_syscall_64+0x3d/0xb0 [ 1864.189443][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1864.195601][ T8008] [ 1864.197995][ T8008] Uninit was stored to memory at: [ 1864.203269][ T8008] ___sys_recvmsg+0x522/0x890 [ 1864.208079][ T8008] do_recvmmsg+0x55a/0x1180 [ 1864.212796][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1864.217960][ T8008] do_syscall_64+0x3d/0xb0 [ 1864.222616][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1864.228701][ T8008] [ 1864.231093][ T8008] Uninit was stored to memory at: [ 1864.236393][ T8008] ___sys_recvmsg+0x522/0x890 [ 1864.241204][ T8008] do_recvmmsg+0x55a/0x1180 [ 1864.245983][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1864.251179][ T8008] do_syscall_64+0x3d/0xb0 [ 1864.255813][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1864.262001][ T8008] [ 1864.264394][ T8008] Uninit was stored to memory at: [ 1864.269603][ T8008] ___sys_recvmsg+0x522/0x890 [ 1864.274514][ T8008] do_recvmmsg+0x55a/0x1180 [ 1864.279154][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1864.284405][ T8008] do_syscall_64+0x3d/0xb0 [ 1864.288959][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1864.295119][ T8008] [ 1864.297535][ T8008] Uninit was stored to memory at: [ 1864.302807][ T8008] ___sys_recvmsg+0x522/0x890 [ 1864.307649][ T8008] do_recvmmsg+0x55a/0x1180 [ 1864.312365][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1864.317535][ T8008] do_syscall_64+0x3d/0xb0 [ 1864.322171][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1864.328233][ T8008] [ 1864.330622][ T8008] Uninit was stored to memory at: [ 1864.335904][ T8008] ___sys_recvmsg+0x522/0x890 [ 1864.340712][ T8008] do_recvmmsg+0x55a/0x1180 [ 1864.345428][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1864.350598][ T8008] do_syscall_64+0x3d/0xb0 [ 1864.355273][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1864.361347][ T8008] [ 1864.363820][ T8008] Local variable msg_sys created at: [ 1864.369193][ T8008] do_recvmmsg+0x5c/0x1180 [ 1864.373822][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1865.367432][ T8008] not chained 2120000 origins [ 1865.372681][ T8008] CPU: 1 PID: 8008 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1865.382908][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1865.393083][ T8008] Call Trace: [ 1865.396446][ T8008] [ 1865.399471][ T8008] dump_stack_lvl+0x1c8/0x256 [ 1865.404342][ T8008] dump_stack+0x1a/0x1c [ 1865.408679][ T8008] kmsan_internal_chain_origin+0x78/0x120 [ 1865.414562][ T8008] ? filter_irq_stacks+0x5c/0x1a0 [ 1865.419779][ T8008] ? kmsan_internal_check_memory+0x94/0x530 [ 1865.425839][ T8008] ? do_recvmmsg+0x55a/0x1180 [ 1865.430666][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1865.436651][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1865.442635][ T8008] ? should_fail+0x3f/0x810 [ 1865.447295][ T8008] ? __stack_depot_save+0x21/0x4b0 [ 1865.452568][ T8008] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1865.458978][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1865.464945][ T8008] __msan_chain_origin+0xbd/0x140 [ 1865.470123][ T8008] ___sys_recvmsg+0x522/0x890 [ 1865.474944][ T8008] ? do_recvmmsg+0x5bc/0x1180 [ 1865.479792][ T8008] ? kmsan_internal_check_memory+0x94/0x530 [ 1865.485860][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1865.491841][ T8008] do_recvmmsg+0x55a/0x1180 [ 1865.496512][ T8008] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1865.502933][ T8008] ? do_syscall_64+0x3d/0xb0 [ 1865.507666][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1865.512858][ T8008] do_syscall_64+0x3d/0xb0 [ 1865.517418][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1865.523504][ T8008] RIP: 0033:0x7faec0089279 [ 1865.528046][ T8008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1865.547833][ T8008] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1865.556402][ T8008] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1865.564602][ T8008] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1865.572702][ T8008] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1865.580824][ T8008] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1865.588919][ T8008] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1865.597040][ T8008] [ 1865.603934][ T8008] Uninit was stored to memory at: [ 1865.609153][ T8008] ___sys_recvmsg+0x522/0x890 [ 1865.614815][ T8008] do_recvmmsg+0x55a/0x1180 [ 1865.619457][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1865.624714][ T8008] do_syscall_64+0x3d/0xb0 [ 1865.629259][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1865.635425][ T8008] [ 1865.637818][ T8008] Uninit was stored to memory at: [ 1865.643095][ T8008] ___sys_recvmsg+0x522/0x890 [ 1865.647929][ T8008] do_recvmmsg+0x55a/0x1180 [ 1865.652644][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1865.657801][ T8008] do_syscall_64+0x3d/0xb0 [ 1865.662435][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1865.668548][ T8008] [ 1865.670937][ T8008] Uninit was stored to memory at: [ 1865.676236][ T8008] ___sys_recvmsg+0x522/0x890 [ 1865.681043][ T8008] do_recvmmsg+0x55a/0x1180 [ 1865.685764][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1865.690936][ T8008] do_syscall_64+0x3d/0xb0 [ 1865.695574][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1865.701740][ T8008] [ 1865.704130][ T8008] Uninit was stored to memory at: [ 1865.709323][ T8008] ___sys_recvmsg+0x522/0x890 [ 1865.714213][ T8008] do_recvmmsg+0x55a/0x1180 [ 1865.718844][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1865.724154][ T8008] do_syscall_64+0x3d/0xb0 [ 1865.728709][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1865.734929][ T8008] [ 1865.737322][ T8008] Uninit was stored to memory at: [ 1865.742662][ T8008] ___sys_recvmsg+0x522/0x890 [ 1865.747469][ T8008] do_recvmmsg+0x55a/0x1180 [ 1865.752179][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1865.757339][ T8008] do_syscall_64+0x3d/0xb0 [ 1865.761975][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1865.768054][ T8008] [ 1865.770441][ T8008] Uninit was stored to memory at: [ 1865.775791][ T8008] ___sys_recvmsg+0x522/0x890 [ 1865.780603][ T8008] do_recvmmsg+0x55a/0x1180 [ 1865.785382][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1865.790582][ T8008] do_syscall_64+0x3d/0xb0 [ 1865.795269][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1865.801354][ T8008] [ 1865.803882][ T8008] Uninit was stored to memory at: [ 1865.809075][ T8008] ___sys_recvmsg+0x522/0x890 [ 1865.814009][ T8008] do_recvmmsg+0x55a/0x1180 [ 1865.818642][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1865.823881][ T8008] do_syscall_64+0x3d/0xb0 [ 1865.828427][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1865.834684][ T8008] [ 1865.837080][ T8008] Local variable msg_sys created at: [ 1865.842532][ T8008] do_recvmmsg+0x5c/0x1180 [ 1865.847082][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1866.867636][ T8008] not chained 2130000 origins [ 1866.872629][ T8008] CPU: 1 PID: 8008 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1866.882843][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1866.893016][ T8008] Call Trace: [ 1866.896375][ T8008] [ 1866.899383][ T8008] dump_stack_lvl+0x1c8/0x256 [ 1866.904248][ T8008] dump_stack+0x1a/0x1c [ 1866.908565][ T8008] kmsan_internal_chain_origin+0x78/0x120 [ 1866.914443][ T8008] ? filter_irq_stacks+0x5c/0x1a0 [ 1866.919656][ T8008] ? kmsan_internal_check_memory+0x94/0x530 [ 1866.925702][ T8008] ? do_recvmmsg+0x55a/0x1180 [ 1866.930518][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1866.936495][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1866.942477][ T8008] ? should_fail+0x3f/0x810 [ 1866.947135][ T8008] ? __stack_depot_save+0x21/0x4b0 [ 1866.952395][ T8008] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1866.958802][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1866.964773][ T8008] __msan_chain_origin+0xbd/0x140 [ 1866.969947][ T8008] ___sys_recvmsg+0x522/0x890 [ 1866.974760][ T8008] ? do_recvmmsg+0x5bc/0x1180 [ 1866.979597][ T8008] ? kmsan_internal_check_memory+0x94/0x530 [ 1866.985656][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1866.991661][ T8008] do_recvmmsg+0x55a/0x1180 [ 1866.996323][ T8008] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1867.002733][ T8008] ? do_syscall_64+0x3d/0xb0 [ 1867.007468][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1867.012665][ T8008] do_syscall_64+0x3d/0xb0 [ 1867.017216][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1867.023295][ T8008] RIP: 0033:0x7faec0089279 [ 1867.027812][ T8008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1867.047586][ T8008] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1867.056161][ T8008] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1867.064260][ T8008] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1867.072349][ T8008] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1867.080436][ T8008] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1867.088519][ T8008] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1867.096646][ T8008] [ 1867.102656][ T8008] Uninit was stored to memory at: [ 1867.107866][ T8008] ___sys_recvmsg+0x522/0x890 [ 1867.113087][ T8008] do_recvmmsg+0x55a/0x1180 [ 1867.117720][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1867.122969][ T8008] do_syscall_64+0x3d/0xb0 [ 1867.127519][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1867.133689][ T8008] [ 1867.136075][ T8008] Uninit was stored to memory at: [ 1867.141277][ T8008] ___sys_recvmsg+0x522/0x890 [ 1867.146165][ T8008] do_recvmmsg+0x55a/0x1180 [ 1867.150801][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1867.157340][ T8008] do_syscall_64+0x3d/0xb0 [ 1867.161959][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1867.168057][ T8008] [ 1867.170443][ T8008] Uninit was stored to memory at: [ 1867.175723][ T8008] ___sys_recvmsg+0x522/0x890 [ 1867.180531][ T8008] do_recvmmsg+0x55a/0x1180 [ 1867.185245][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1867.190401][ T8008] do_syscall_64+0x3d/0xb0 [ 1867.195022][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1867.201094][ T8008] [ 1867.203567][ T8008] Uninit was stored to memory at: [ 1867.208765][ T8008] ___sys_recvmsg+0x522/0x890 [ 1867.213644][ T8008] do_recvmmsg+0x55a/0x1180 [ 1867.218275][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1867.223516][ T8008] do_syscall_64+0x3d/0xb0 [ 1867.228069][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1867.234222][ T8008] [ 1867.236612][ T8008] Uninit was stored to memory at: [ 1867.241928][ T8008] ___sys_recvmsg+0x522/0x890 [ 1867.246734][ T8008] do_recvmmsg+0x55a/0x1180 [ 1867.251364][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1867.256667][ T8008] do_syscall_64+0x3d/0xb0 [ 1867.261214][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1867.267438][ T8008] [ 1867.269833][ T8008] Uninit was stored to memory at: [ 1867.275158][ T8008] ___sys_recvmsg+0x522/0x890 [ 1867.279965][ T8008] do_recvmmsg+0x55a/0x1180 [ 1867.284684][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1867.289846][ T8008] do_syscall_64+0x3d/0xb0 [ 1867.294518][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1867.300604][ T8008] [ 1867.303113][ T8008] Uninit was stored to memory at: [ 1867.308308][ T8008] ___sys_recvmsg+0x522/0x890 [ 1867.313233][ T8008] do_recvmmsg+0x55a/0x1180 [ 1867.317863][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1867.323147][ T8008] do_syscall_64+0x3d/0xb0 [ 1867.327686][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1867.333830][ T8008] [ 1867.336256][ T8008] Local variable msg_sys created at: [ 1867.341754][ T8008] do_recvmmsg+0x5c/0x1180 [ 1867.346298][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1867.642981][ T8008] not chained 2140000 origins [ 1867.647796][ T8008] CPU: 1 PID: 8008 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1867.658004][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1867.668174][ T8008] Call Trace: [ 1867.671537][ T8008] [ 1867.674550][ T8008] dump_stack_lvl+0x1c8/0x256 [ 1867.679421][ T8008] dump_stack+0x1a/0x1c [ 1867.683744][ T8008] kmsan_internal_chain_origin+0x78/0x120 [ 1867.689620][ T8008] ? filter_irq_stacks+0x5c/0x1a0 [ 1867.694832][ T8008] ? kmsan_internal_check_memory+0x94/0x530 [ 1867.700879][ T8008] ? do_recvmmsg+0x55a/0x1180 [ 1867.705692][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1867.711663][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1867.717628][ T8008] ? should_fail+0x3f/0x810 [ 1867.722284][ T8008] ? __stack_depot_save+0x21/0x4b0 [ 1867.727556][ T8008] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1867.733967][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1867.739932][ T8008] __msan_chain_origin+0xbd/0x140 [ 1867.745104][ T8008] ___sys_recvmsg+0x522/0x890 [ 1867.749916][ T8008] ? do_recvmmsg+0x5bc/0x1180 [ 1867.754744][ T8008] ? kmsan_internal_check_memory+0x94/0x530 [ 1867.760799][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1867.766772][ T8008] do_recvmmsg+0x55a/0x1180 [ 1867.772479][ T8008] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1867.778890][ T8008] ? do_syscall_64+0x3d/0xb0 [ 1867.783624][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1867.788818][ T8008] do_syscall_64+0x3d/0xb0 [ 1867.793371][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1867.799457][ T8008] RIP: 0033:0x7faec0089279 [ 1867.803979][ T8008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1867.823753][ T8008] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1867.832308][ T8008] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1867.840407][ T8008] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1867.848499][ T8008] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1867.856671][ T8008] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1867.864755][ T8008] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1867.872869][ T8008] [ 1867.880338][ T8008] Uninit was stored to memory at: [ 1867.886347][ T8008] ___sys_recvmsg+0x522/0x890 [ 1867.891169][ T8008] do_recvmmsg+0x55a/0x1180 [ 1867.895899][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1867.901082][ T8008] do_syscall_64+0x3d/0xb0 [ 1867.905708][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1867.911857][ T8008] [ 1867.914261][ T8008] Uninit was stored to memory at: [ 1867.919465][ T8008] ___sys_recvmsg+0x522/0x890 [ 1867.924357][ T8008] do_recvmmsg+0x55a/0x1180 [ 1867.929030][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1867.934273][ T8008] do_syscall_64+0x3d/0xb0 [ 1867.938819][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1867.944977][ T8008] [ 1867.947367][ T8008] Uninit was stored to memory at: [ 1867.952644][ T8008] ___sys_recvmsg+0x522/0x890 [ 1867.957454][ T8008] do_recvmmsg+0x55a/0x1180 [ 1867.962168][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1867.967326][ T8008] do_syscall_64+0x3d/0xb0 [ 1867.971946][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1867.978021][ T8008] [ 1867.980408][ T8008] Uninit was stored to memory at: [ 1867.985780][ T8008] ___sys_recvmsg+0x522/0x890 [ 1867.990590][ T8008] do_recvmmsg+0x55a/0x1180 [ 1867.995299][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1868.000469][ T8008] do_syscall_64+0x3d/0xb0 [ 1868.005108][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1868.011214][ T8008] [ 1868.013684][ T8008] Uninit was stored to memory at: [ 1868.018880][ T8008] ___sys_recvmsg+0x522/0x890 [ 1868.023773][ T8008] do_recvmmsg+0x55a/0x1180 [ 1868.028409][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1868.033654][ T8008] do_syscall_64+0x3d/0xb0 [ 1868.038193][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1868.044358][ T8008] [ 1868.046757][ T8008] Uninit was stored to memory at: [ 1868.052025][ T8008] ___sys_recvmsg+0x522/0x890 [ 1868.056843][ T8008] do_recvmmsg+0x55a/0x1180 [ 1868.061478][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1868.066768][ T8008] do_syscall_64+0x3d/0xb0 [ 1868.071356][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1868.077543][ T8008] [ 1868.079933][ T8008] Uninit was stored to memory at: [ 1868.085212][ T8008] ___sys_recvmsg+0x522/0x890 [ 1868.090017][ T8008] do_recvmmsg+0x55a/0x1180 [ 1868.094721][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1868.099885][ T8008] do_syscall_64+0x3d/0xb0 [ 1868.104519][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1868.110587][ T8008] [ 1868.113061][ T8008] Local variable msg_sys created at: [ 1868.118423][ T8008] do_recvmmsg+0x5c/0x1180 [ 1868.123055][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1868.690375][ T8008] not chained 2150000 origins [ 1868.696185][ T8008] CPU: 0 PID: 8008 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1868.706385][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1868.716497][ T8008] Call Trace: [ 1868.719837][ T8008] [ 1868.722841][ T8008] dump_stack_lvl+0x1c8/0x256 [ 1868.727633][ T8008] dump_stack+0x1a/0x1c [ 1868.731874][ T8008] kmsan_internal_chain_origin+0x78/0x120 [ 1868.737681][ T8008] ? filter_irq_stacks+0x5c/0x1a0 [ 1868.742810][ T8008] ? kmsan_internal_check_memory+0x94/0x530 [ 1868.748792][ T8008] ? do_recvmmsg+0x55a/0x1180 [ 1868.753563][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1868.759535][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1868.765507][ T8008] ? should_fail+0x3f/0x810 [ 1868.770144][ T8008] ? __stack_depot_save+0x21/0x4b0 [ 1868.775337][ T8008] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1868.781689][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1868.787585][ T8008] __msan_chain_origin+0xbd/0x140 [ 1868.792736][ T8008] ___sys_recvmsg+0x522/0x890 [ 1868.797512][ T8008] ? do_recvmmsg+0x5bc/0x1180 [ 1868.802314][ T8008] ? kmsan_internal_check_memory+0x94/0x530 [ 1868.808389][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1868.814365][ T8008] do_recvmmsg+0x55a/0x1180 [ 1868.818972][ T8008] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1868.825325][ T8008] ? do_syscall_64+0x3d/0xb0 [ 1868.830015][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1868.835152][ T8008] do_syscall_64+0x3d/0xb0 [ 1868.839671][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1868.845701][ T8008] RIP: 0033:0x7faec0089279 [ 1868.850178][ T8008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1868.869889][ T8008] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1868.878385][ T8008] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1868.886440][ T8008] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1868.894497][ T8008] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1868.902549][ T8008] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1868.910638][ T8008] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1868.918763][ T8008] [ 1868.951558][ T8008] Uninit was stored to memory at: [ 1868.956744][ T8008] ___sys_recvmsg+0x522/0x890 [ 1868.961496][ T8008] do_recvmmsg+0x55a/0x1180 [ 1868.966072][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1868.971279][ T8008] do_syscall_64+0x3d/0xb0 [ 1868.979890][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1868.986928][ T8008] [ 1868.989679][ T8008] Uninit was stored to memory at: [ 1868.995747][ T8008] ___sys_recvmsg+0x522/0x890 [ 1869.000975][ T8008] do_recvmmsg+0x55a/0x1180 [ 1869.006262][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1869.012166][ T8008] do_syscall_64+0x3d/0xb0 [ 1869.017066][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1869.024017][ T8008] [ 1869.026778][ T8008] Uninit was stored to memory at: [ 1869.032796][ T8008] ___sys_recvmsg+0x522/0x890 [ 1869.038272][ T8008] do_recvmmsg+0x55a/0x1180 [ 1869.043682][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1869.049516][ T8008] do_syscall_64+0x3d/0xb0 [ 1869.054759][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1869.061348][ T8008] [ 1869.064229][ T8008] Uninit was stored to memory at: [ 1869.069860][ T8008] ___sys_recvmsg+0x522/0x890 [ 1869.075333][ T8008] do_recvmmsg+0x55a/0x1180 [ 1869.080474][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1869.086383][ T8008] do_syscall_64+0x3d/0xb0 [ 1869.091317][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1869.098202][ T8008] [ 1869.100810][ T8008] Uninit was stored to memory at: [ 1869.106783][ T8008] ___sys_recvmsg+0x522/0x890 [ 1869.112400][ T8008] do_recvmmsg+0x55a/0x1180 [ 1869.117728][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1869.123680][ T8008] do_syscall_64+0x3d/0xb0 [ 1869.128845][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1869.135809][ T8008] [ 1869.138416][ T8008] Uninit was stored to memory at: [ 1869.144380][ T8008] ___sys_recvmsg+0x522/0x890 [ 1869.149827][ T8008] do_recvmmsg+0x55a/0x1180 [ 1869.155192][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1869.160769][ T8008] do_syscall_64+0x3d/0xb0 [ 1869.166068][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1869.173036][ T8008] [ 1869.175782][ T8008] Uninit was stored to memory at: [ 1869.181405][ T8008] ___sys_recvmsg+0x522/0x890 [ 1869.186917][ T8008] do_recvmmsg+0x55a/0x1180 [ 1869.192229][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1869.197817][ T8008] do_syscall_64+0x3d/0xb0 [ 1869.203066][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1869.209669][ T8008] [ 1869.212493][ T8008] Local variable msg_sys created at: [ 1869.218307][ T8008] do_recvmmsg+0x5c/0x1180 [ 1869.223515][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1869.803479][ T8008] not chained 2160000 origins [ 1869.809010][ T8008] CPU: 0 PID: 8008 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1869.819223][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1869.829480][ T8008] Call Trace: [ 1869.832840][ T8008] [ 1869.835851][ T8008] dump_stack_lvl+0x1c8/0x256 [ 1869.840714][ T8008] dump_stack+0x1a/0x1c [ 1869.845036][ T8008] kmsan_internal_chain_origin+0x78/0x120 [ 1869.850918][ T8008] ? filter_irq_stacks+0x5c/0x1a0 [ 1869.856129][ T8008] ? kmsan_internal_check_memory+0x94/0x530 [ 1869.862194][ T8008] ? do_recvmmsg+0x55a/0x1180 [ 1869.867006][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1869.872976][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1869.878942][ T8008] ? should_fail+0x3f/0x810 [ 1869.883590][ T8008] ? __stack_depot_save+0x21/0x4b0 [ 1869.888846][ T8008] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1869.895251][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1869.901209][ T8008] __msan_chain_origin+0xbd/0x140 [ 1869.906376][ T8008] ___sys_recvmsg+0x522/0x890 [ 1869.911188][ T8008] ? do_recvmmsg+0x5bc/0x1180 [ 1869.916015][ T8008] ? kmsan_internal_check_memory+0x94/0x530 [ 1869.922082][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1869.928057][ T8008] do_recvmmsg+0x55a/0x1180 [ 1869.932718][ T8008] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1869.939125][ T8008] ? do_syscall_64+0x3d/0xb0 [ 1869.943849][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1869.949035][ T8008] do_syscall_64+0x3d/0xb0 [ 1869.953596][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1869.959670][ T8008] RIP: 0033:0x7faec0089279 [ 1869.964192][ T8008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1869.983970][ T8008] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1869.992524][ T8008] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1870.000623][ T8008] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1870.008711][ T8008] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1870.016805][ T8008] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1870.025151][ T8008] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1870.033262][ T8008] [ 1870.067039][ T8008] Uninit was stored to memory at: [ 1870.072273][ T8008] ___sys_recvmsg+0x522/0x890 [ 1870.077078][ T8008] do_recvmmsg+0x55a/0x1180 [ 1870.081705][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1870.086858][ T8008] do_syscall_64+0x3d/0xb0 [ 1870.095405][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1870.102424][ T8008] [ 1870.105158][ T8008] Uninit was stored to memory at: [ 1870.111068][ T8008] ___sys_recvmsg+0x522/0x890 [ 1870.116681][ T8008] do_recvmmsg+0x55a/0x1180 [ 1870.122006][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1870.127840][ T8008] do_syscall_64+0x3d/0xb0 [ 1870.133073][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1870.139938][ T8008] [ 1870.142756][ T8008] Uninit was stored to memory at: [ 1870.148600][ T8008] ___sys_recvmsg+0x522/0x890 [ 1870.154173][ T8008] do_recvmmsg+0x55a/0x1180 [ 1870.159476][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1870.165434][ T8008] do_syscall_64+0x3d/0xb0 [ 1870.170608][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1870.177583][ T8008] [ 1870.180321][ T8008] Uninit was stored to memory at: [ 1870.186401][ T8008] ___sys_recvmsg+0x522/0x890 [ 1870.191937][ T8008] do_recvmmsg+0x55a/0x1180 [ 1870.197217][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1870.203195][ T8008] do_syscall_64+0x3d/0xb0 [ 1870.208355][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1870.215270][ T8008] [ 1870.218056][ T8008] Uninit was stored to memory at: [ 1870.224104][ T8008] ___sys_recvmsg+0x522/0x890 [ 1870.229545][ T8008] do_recvmmsg+0x55a/0x1180 [ 1870.235000][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1870.240827][ T8008] do_syscall_64+0x3d/0xb0 [ 1870.246135][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1870.253066][ T8008] [ 1870.255807][ T8008] Uninit was stored to memory at: [ 1870.261640][ T8008] ___sys_recvmsg+0x522/0x890 [ 1870.267218][ T8008] do_recvmmsg+0x55a/0x1180 [ 1870.272723][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1870.278619][ T8008] do_syscall_64+0x3d/0xb0 [ 1870.283921][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1870.290832][ T8008] [ 1870.293755][ T8008] Uninit was stored to memory at: [ 1870.299683][ T8008] ___sys_recvmsg+0x522/0x890 [ 1870.305305][ T8008] do_recvmmsg+0x55a/0x1180 [ 1870.310601][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1870.316600][ T8008] do_syscall_64+0x3d/0xb0 [ 1870.321886][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1870.328765][ T8008] [ 1870.331513][ T8008] Local variable msg_sys created at: [ 1870.337744][ T8008] do_recvmmsg+0x5c/0x1180 [ 1870.343049][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1870.938109][ T8008] not chained 2170000 origins [ 1870.943712][ T8008] CPU: 0 PID: 8008 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1870.953928][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1870.964104][ T8008] Call Trace: [ 1870.967463][ T8008] [ 1870.970479][ T8008] dump_stack_lvl+0x1c8/0x256 [ 1870.975352][ T8008] dump_stack+0x1a/0x1c [ 1870.979673][ T8008] kmsan_internal_chain_origin+0x78/0x120 [ 1870.985547][ T8008] ? filter_irq_stacks+0x5c/0x1a0 [ 1870.990760][ T8008] ? kmsan_internal_check_memory+0x94/0x530 [ 1870.996806][ T8008] ? do_recvmmsg+0x55a/0x1180 [ 1871.001675][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1871.007661][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1871.013640][ T8008] ? should_fail+0x3f/0x810 [ 1871.018299][ T8008] ? __stack_depot_save+0x21/0x4b0 [ 1871.023571][ T8008] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1871.029982][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1871.035948][ T8008] __msan_chain_origin+0xbd/0x140 [ 1871.041123][ T8008] ___sys_recvmsg+0x522/0x890 [ 1871.045976][ T8008] ? do_recvmmsg+0x785/0x1180 [ 1871.050796][ T8008] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1871.056768][ T8008] do_recvmmsg+0x55a/0x1180 [ 1871.061426][ T8008] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1871.067840][ T8008] ? do_syscall_64+0x3d/0xb0 [ 1871.072570][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1871.077758][ T8008] do_syscall_64+0x3d/0xb0 [ 1871.082307][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1871.088358][ T8008] RIP: 0033:0x7faec0089279 [ 1871.092825][ T8008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1871.112526][ T8008] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1871.121016][ T8008] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1871.129056][ T8008] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1871.137094][ T8008] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1871.145126][ T8008] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1871.153173][ T8008] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1871.161288][ T8008] [ 1871.193716][ T8008] Uninit was stored to memory at: [ 1871.198903][ T8008] ___sys_recvmsg+0x522/0x890 [ 1871.203666][ T8008] do_recvmmsg+0x55a/0x1180 [ 1871.208280][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1871.213378][ T8008] do_syscall_64+0x3d/0xb0 [ 1871.245135][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1871.252198][ T8008] [ 1871.254969][ T8008] Uninit was stored to memory at: [ 1871.260933][ T8008] ___sys_recvmsg+0x522/0x890 [ 1871.266531][ T8008] do_recvmmsg+0x55a/0x1180 [ 1871.271955][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1871.277800][ T8008] do_syscall_64+0x3d/0xb0 [ 1871.283086][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1871.289961][ T8008] [ 1871.292860][ T8008] Uninit was stored to memory at: [ 1871.298487][ T8008] ___sys_recvmsg+0x522/0x890 [ 1871.304123][ T8008] do_recvmmsg+0x55a/0x1180 [ 1871.309168][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1871.315147][ T8008] do_syscall_64+0x3d/0xb0 [ 1871.320232][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1871.327263][ T8008] [ 1871.330035][ T8008] Uninit was stored to memory at: [ 1871.336111][ T8008] ___sys_recvmsg+0x522/0x890 [ 1871.341368][ T8008] do_recvmmsg+0x55a/0x1180 [ 1871.346784][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1871.352817][ T8008] do_syscall_64+0x3d/0xb0 [ 1871.357761][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1871.364697][ T8008] [ 1871.367302][ T8008] Uninit was stored to memory at: [ 1871.373348][ T8008] ___sys_recvmsg+0x522/0x890 [ 1871.378588][ T8008] do_recvmmsg+0x55a/0x1180 [ 1871.383914][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1871.389779][ T8008] do_syscall_64+0x3d/0xb0 [ 1871.395112][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1871.402156][ T8008] [ 1871.404746][ T8008] Uninit was stored to memory at: [ 1871.410315][ T8008] ___sys_recvmsg+0x522/0x890 [ 1871.415817][ T8008] do_recvmmsg+0x55a/0x1180 [ 1871.420864][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1871.426772][ T8008] do_syscall_64+0x3d/0xb0 [ 1871.431875][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1871.438696][ T8008] [ 1871.441288][ T8008] Uninit was stored to memory at: [ 1871.447320][ T8008] ___sys_recvmsg+0x522/0x890 [ 1871.452918][ T8008] do_recvmmsg+0x55a/0x1180 [ 1871.457942][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1871.463868][ T8008] do_syscall_64+0x3d/0xb0 [ 1871.469011][ T8008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1871.476044][ T8008] [ 1871.478783][ T8008] Local variable msg_sys created at: [ 1871.484952][ T8008] do_recvmmsg+0x5c/0x1180 [ 1871.489904][ T8008] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1871.789084][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1871.797818][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 22:46:39 executing program 4: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) openat$full(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x800000000009031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000015e000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0x208200) 22:46:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="1c0000000065ffff"], 0x24}}, 0x0) 22:46:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="1c0000000065ffff"], 0x24}}, 0x0) 22:46:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000017c0)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="91410aa2c1db7468d7010000011b804c7ed0ace302f5acd41d8bdcd2f4a01967ef82838dcefe6970ae3316a775ed29e6a3d9"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'veth0_to_bridge\x00'}) close(r0) 22:46:39 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0104307, &(0x7f0000000040)=0x7fffffff) 22:46:39 executing program 2: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) openat$full(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x800000000009031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000015e000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0x208200) [ 1872.180462][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:46:39 executing program 0: socket(0x22, 0x0, 0x22) [ 1872.435805][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 22:46:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="1c0000000065ffff"], 0x24}}, 0x0) 22:46:40 executing program 0: socket(0x22, 0x0, 0x22) 22:46:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="1c0000000065ffff"], 0x24}}, 0x0) [ 1873.165647][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:46:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000017c0)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="91410aa2c1db7468d7010000011b804c7ed0ace302f5acd41d8bdcd2f4a01967ef82838dcefe6970ae3316a775ed29e6a3d9"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'veth0_to_bridge\x00'}) close(r0) 22:46:40 executing program 0: socket(0x22, 0x0, 0x22) [ 1873.647410][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1875.845312][ T8319] not chained 2180000 origins [ 1875.850214][ T8319] CPU: 1 PID: 8319 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1875.860434][ T8319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1875.870614][ T8319] Call Trace: [ 1875.873979][ T8319] [ 1875.876989][ T8319] dump_stack_lvl+0x1c8/0x256 [ 1875.881861][ T8319] dump_stack+0x1a/0x1c [ 1875.886187][ T8319] kmsan_internal_chain_origin+0x78/0x120 [ 1875.892073][ T8319] ? filter_irq_stacks+0x5c/0x1a0 [ 1875.897314][ T8319] ? kmsan_internal_check_memory+0x94/0x530 [ 1875.903401][ T8319] ? do_recvmmsg+0x55a/0x1180 [ 1875.908251][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1875.916248][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1875.922249][ T8319] ? should_fail+0x3f/0x810 [ 1875.926915][ T8319] ? __stack_depot_save+0x21/0x4b0 [ 1875.932195][ T8319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1875.938623][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1875.944620][ T8319] __msan_chain_origin+0xbd/0x140 [ 1875.950249][ T8319] ___sys_recvmsg+0x522/0x890 [ 1875.955074][ T8319] ? do_recvmmsg+0x5bc/0x1180 [ 1875.959917][ T8319] ? kmsan_internal_check_memory+0x94/0x530 [ 1875.965982][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1875.971963][ T8319] do_recvmmsg+0x55a/0x1180 [ 1875.976633][ T8319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1875.983048][ T8319] ? do_syscall_64+0x3d/0xb0 [ 1875.987790][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1875.992984][ T8319] do_syscall_64+0x3d/0xb0 [ 1875.997545][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1876.003631][ T8319] RIP: 0033:0x7fe15ac89279 [ 1876.008159][ T8319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1876.027941][ T8319] RSP: 002b:00007fe15bd9f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1876.036549][ T8319] RAX: ffffffffffffffda RBX: 00007fe15ad9c050 RCX: 00007fe15ac89279 [ 1876.044699][ T8319] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1876.052796][ T8319] RBP: 00007fe15ace3189 R08: 0000000000000000 R09: 0000000000000000 [ 1876.060893][ T8319] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1876.068990][ T8319] R13: 00007fe15b2cfb1f R14: 00007fe15bd9f300 R15: 0000000000022000 [ 1876.077117][ T8319] [ 1876.082812][ T8319] Uninit was stored to memory at: [ 1876.088075][ T8319] ___sys_recvmsg+0x522/0x890 [ 1876.095518][ T8319] do_recvmmsg+0x55a/0x1180 [ 1876.100165][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1876.105625][ T8319] do_syscall_64+0x3d/0xb0 [ 1876.110190][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1876.116407][ T8319] [ 1876.118807][ T8319] Uninit was stored to memory at: [ 1876.124084][ T8319] ___sys_recvmsg+0x522/0x890 [ 1876.128891][ T8319] do_recvmmsg+0x55a/0x1180 [ 1876.133696][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1876.138870][ T8319] do_syscall_64+0x3d/0xb0 [ 1876.143508][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1876.149587][ T8319] [ 1876.152075][ T8319] Uninit was stored to memory at: [ 1876.157273][ T8319] ___sys_recvmsg+0x522/0x890 [ 1876.162165][ T8319] do_recvmmsg+0x55a/0x1180 [ 1876.166821][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1876.172082][ T8319] do_syscall_64+0x3d/0xb0 [ 1876.176635][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1876.182788][ T8319] [ 1876.185180][ T8319] Uninit was stored to memory at: [ 1876.190422][ T8319] ___sys_recvmsg+0x522/0x890 [ 1876.195346][ T8319] do_recvmmsg+0x55a/0x1180 [ 1876.199993][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1876.205251][ T8319] do_syscall_64+0x3d/0xb0 [ 1876.209807][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1876.215972][ T8319] [ 1876.218368][ T8319] Uninit was stored to memory at: [ 1876.223658][ T8319] ___sys_recvmsg+0x522/0x890 [ 1876.228466][ T8319] do_recvmmsg+0x55a/0x1180 [ 1876.233463][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1876.238644][ T8319] do_syscall_64+0x3d/0xb0 [ 1876.243272][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1876.249366][ T8319] [ 1876.251842][ T8319] Uninit was stored to memory at: [ 1876.257043][ T8319] ___sys_recvmsg+0x522/0x890 [ 1876.261940][ T8319] do_recvmmsg+0x55a/0x1180 [ 1876.266578][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1876.271837][ T8319] do_syscall_64+0x3d/0xb0 [ 1876.276391][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1876.282566][ T8319] [ 1876.284960][ T8319] Uninit was stored to memory at: [ 1876.290152][ T8319] ___sys_recvmsg+0x522/0x890 [ 1876.295108][ T8319] do_recvmmsg+0x55a/0x1180 [ 1876.299747][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1876.304999][ T8319] do_syscall_64+0x3d/0xb0 [ 1876.309599][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1876.315770][ T8319] [ 1876.318186][ T8319] Local variable msg_sys created at: [ 1876.323980][ T8319] do_recvmmsg+0x5c/0x1180 [ 1876.328707][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1876.545530][ T8320] not chained 2190000 origins [ 1876.550359][ T8320] CPU: 1 PID: 8320 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1876.560577][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1876.570755][ T8320] Call Trace: [ 1876.574131][ T8320] [ 1876.577145][ T8320] dump_stack_lvl+0x1c8/0x256 [ 1876.582021][ T8320] dump_stack+0x1a/0x1c [ 1876.586348][ T8320] kmsan_internal_chain_origin+0x78/0x120 [ 1876.592233][ T8320] ? filter_irq_stacks+0x5c/0x1a0 [ 1876.597444][ T8320] ? kmsan_internal_check_memory+0x94/0x530 [ 1876.603511][ T8320] ? do_recvmmsg+0x55a/0x1180 [ 1876.608338][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1876.614319][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1876.620320][ T8320] ? should_fail+0x3f/0x810 [ 1876.625001][ T8320] ? __stack_depot_save+0x21/0x4b0 [ 1876.630293][ T8320] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1876.636718][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1876.642702][ T8320] __msan_chain_origin+0xbd/0x140 [ 1876.647887][ T8320] ___sys_recvmsg+0x522/0x890 [ 1876.652719][ T8320] ? do_recvmmsg+0x5bc/0x1180 [ 1876.657563][ T8320] ? kmsan_internal_check_memory+0x94/0x530 [ 1876.663628][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1876.669608][ T8320] do_recvmmsg+0x55a/0x1180 [ 1876.674281][ T8320] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1876.680704][ T8320] ? do_syscall_64+0x3d/0xb0 [ 1876.685443][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1876.690641][ T8320] do_syscall_64+0x3d/0xb0 [ 1876.695375][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1876.701457][ T8320] RIP: 0033:0x7faec0089279 [ 1876.706013][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1876.725886][ T8320] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1876.734461][ T8320] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1876.742583][ T8320] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1876.750673][ T8320] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1876.758763][ T8320] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1876.766855][ T8320] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1876.774984][ T8320] [ 1876.780752][ T8320] Uninit was stored to memory at: [ 1876.786285][ T8320] ___sys_recvmsg+0x522/0x890 [ 1876.791094][ T8320] do_recvmmsg+0x55a/0x1180 [ 1876.795818][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1876.801075][ T8320] do_syscall_64+0x3d/0xb0 [ 1876.805706][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1876.811861][ T8320] [ 1876.814250][ T8320] Uninit was stored to memory at: [ 1876.819447][ T8320] ___sys_recvmsg+0x522/0x890 [ 1876.824349][ T8320] do_recvmmsg+0x55a/0x1180 [ 1876.828984][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1876.834226][ T8320] do_syscall_64+0x3d/0xb0 [ 1876.838771][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1876.844933][ T8320] [ 1876.847328][ T8320] Uninit was stored to memory at: [ 1876.852608][ T8320] ___sys_recvmsg+0x522/0x890 [ 1876.857417][ T8320] do_recvmmsg+0x55a/0x1180 [ 1876.862132][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1876.867314][ T8320] do_syscall_64+0x3d/0xb0 [ 1876.872033][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1876.878112][ T8320] [ 1876.880503][ T8320] Uninit was stored to memory at: [ 1876.885793][ T8320] ___sys_recvmsg+0x522/0x890 [ 1876.890603][ T8320] do_recvmmsg+0x55a/0x1180 [ 1876.895323][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1876.900494][ T8320] do_syscall_64+0x3d/0xb0 [ 1876.905128][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1876.911201][ T8320] [ 1876.913667][ T8320] Uninit was stored to memory at: [ 1876.918862][ T8320] ___sys_recvmsg+0x522/0x890 [ 1876.923760][ T8320] do_recvmmsg+0x55a/0x1180 [ 1876.928434][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1876.933680][ T8320] do_syscall_64+0x3d/0xb0 [ 1876.938227][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1876.944380][ T8320] [ 1876.946814][ T8320] Uninit was stored to memory at: [ 1876.952098][ T8320] ___sys_recvmsg+0x522/0x890 [ 1876.956905][ T8320] do_recvmmsg+0x55a/0x1180 [ 1876.961535][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1876.966779][ T8320] do_syscall_64+0x3d/0xb0 [ 1876.971328][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1876.977494][ T8320] [ 1876.979885][ T8320] Uninit was stored to memory at: [ 1876.985166][ T8320] ___sys_recvmsg+0x522/0x890 [ 1876.989979][ T8320] do_recvmmsg+0x55a/0x1180 [ 1876.994710][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1876.999881][ T8320] do_syscall_64+0x3d/0xb0 [ 1877.004526][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1877.010602][ T8320] [ 1877.013081][ T8320] Local variable msg_sys created at: [ 1877.018438][ T8320] do_recvmmsg+0x5c/0x1180 [ 1877.023076][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1877.227035][ T8320] not chained 2200000 origins [ 1877.232986][ T8320] CPU: 0 PID: 8320 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1877.243212][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1877.253402][ T8320] Call Trace: [ 1877.256767][ T8320] [ 1877.259864][ T8320] dump_stack_lvl+0x1c8/0x256 [ 1877.264744][ T8320] dump_stack+0x1a/0x1c [ 1877.269063][ T8320] kmsan_internal_chain_origin+0x78/0x120 [ 1877.275190][ T8320] ? filter_irq_stacks+0x5c/0x1a0 [ 1877.280403][ T8320] ? kmsan_internal_check_memory+0x94/0x530 [ 1877.286454][ T8320] ? do_recvmmsg+0x55a/0x1180 [ 1877.291278][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1877.297268][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1877.303353][ T8320] ? should_fail+0x3f/0x810 [ 1877.308007][ T8320] ? __stack_depot_save+0x21/0x4b0 [ 1877.313288][ T8320] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1877.319710][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1877.325691][ T8320] __msan_chain_origin+0xbd/0x140 [ 1877.330876][ T8320] ___sys_recvmsg+0x522/0x890 [ 1877.335692][ T8320] ? do_recvmmsg+0x5bc/0x1180 [ 1877.340526][ T8320] ? kmsan_internal_check_memory+0x94/0x530 [ 1877.346585][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1877.352577][ T8320] do_recvmmsg+0x55a/0x1180 [ 1877.357246][ T8320] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1877.363779][ T8320] ? do_syscall_64+0x3d/0xb0 [ 1877.368515][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1877.373702][ T8320] do_syscall_64+0x3d/0xb0 [ 1877.378251][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1877.384334][ T8320] RIP: 0033:0x7faec0089279 [ 1877.388856][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1877.408646][ T8320] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1877.417206][ T8320] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1877.425310][ T8320] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1877.433399][ T8320] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1877.441496][ T8320] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1877.449598][ T8320] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1877.457723][ T8320] [ 1877.492035][ T8320] Uninit was stored to memory at: [ 1877.497275][ T8320] ___sys_recvmsg+0x522/0x890 [ 1877.502092][ T8320] do_recvmmsg+0x55a/0x1180 [ 1877.506733][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1877.511980][ T8320] do_syscall_64+0x3d/0xb0 [ 1877.520601][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1877.527674][ T8320] [ 1877.530425][ T8320] Uninit was stored to memory at: [ 1877.535215][ T8319] not chained 2210000 origins [ 1877.536416][ T8320] ___sys_recvmsg+0x522/0x890 [ 1877.540187][ T8319] CPU: 1 PID: 8319 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1877.540278][ T8319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1877.540327][ T8319] Call Trace: [ 1877.540354][ T8319] [ 1877.540381][ T8319] dump_stack_lvl+0x1c8/0x256 [ 1877.540517][ T8319] dump_stack+0x1a/0x1c [ 1877.540637][ T8319] kmsan_internal_chain_origin+0x78/0x120 [ 1877.545986][ T8320] do_recvmmsg+0x55a/0x1180 [ 1877.555397][ T8319] ? filter_irq_stacks+0x5c/0x1a0 [ 1877.555533][ T8319] ? kmsan_internal_check_memory+0x94/0x530 [ 1877.555644][ T8319] ? do_recvmmsg+0x55a/0x1180 [ 1877.555729][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1877.555848][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1877.555964][ T8319] ? should_fail+0x3f/0x810 [ 1877.556068][ T8319] ? __stack_depot_save+0x21/0x4b0 [ 1877.556189][ T8319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1877.556304][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1877.556415][ T8319] __msan_chain_origin+0xbd/0x140 [ 1877.556514][ T8319] ___sys_recvmsg+0x522/0x890 [ 1877.556603][ T8319] ? do_recvmmsg+0x5bc/0x1180 [ 1877.567972][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1877.570175][ T8319] ? kmsan_internal_check_memory+0x94/0x530 [ 1877.570304][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1877.570421][ T8319] do_recvmmsg+0x55a/0x1180 [ 1877.573944][ T8320] do_syscall_64+0x3d/0xb0 [ 1877.578161][ T8319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1877.578293][ T8319] ? do_syscall_64+0x3d/0xb0 [ 1877.578383][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1877.578498][ T8319] do_syscall_64+0x3d/0xb0 [ 1877.578582][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1877.583456][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1877.588564][ T8319] RIP: 0033:0x7fe15ac89279 [ 1877.588626][ T8319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1877.588712][ T8319] RSP: 002b:00007fe15bd9f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1877.588791][ T8319] RAX: ffffffffffffffda RBX: 00007fe15ad9c050 RCX: 00007fe15ac89279 [ 1877.588856][ T8319] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1877.588911][ T8319] RBP: 00007fe15ace3189 R08: 0000000000000000 R09: 0000000000000000 [ 1877.588966][ T8319] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1877.589017][ T8319] R13: 00007fe15b2cfb1f R14: 00007fe15bd9f300 R15: 0000000000022000 [ 1877.589100][ T8319] [ 1877.589921][ T8319] Uninit was stored to memory at: [ 1877.594342][ T8320] [ 1877.598955][ T8319] ___sys_recvmsg+0x522/0x890 [ 1877.599040][ T8319] do_recvmmsg+0x55a/0x1180 [ 1877.599124][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1877.599211][ T8319] do_syscall_64+0x3d/0xb0 [ 1877.599292][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1877.599416][ T8319] [ 1877.599430][ T8319] Uninit was stored to memory at: [ 1877.599537][ T8319] ___sys_recvmsg+0x522/0x890 [ 1877.606115][ T8320] Uninit was stored to memory at: [ 1877.610113][ T8319] do_recvmmsg+0x55a/0x1180 [ 1877.610195][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1877.610281][ T8319] do_syscall_64+0x3d/0xb0 [ 1877.610359][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1877.610481][ T8319] [ 1877.610495][ T8319] Uninit was stored to memory at: [ 1877.610604][ T8319] ___sys_recvmsg+0x522/0x890 [ 1877.617360][ T8320] ___sys_recvmsg+0x522/0x890 [ 1877.622555][ T8319] do_recvmmsg+0x55a/0x1180 [ 1877.622637][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1877.622722][ T8319] do_syscall_64+0x3d/0xb0 [ 1877.622800][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1877.622922][ T8319] [ 1877.622936][ T8319] Uninit was stored to memory at: [ 1877.623043][ T8319] ___sys_recvmsg+0x522/0x890 [ 1877.623129][ T8319] do_recvmmsg+0x55a/0x1180 [ 1877.628214][ T8320] do_recvmmsg+0x55a/0x1180 [ 1877.628337][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1877.628473][ T8320] do_syscall_64+0x3d/0xb0 [ 1877.628573][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1877.628740][ T8320] [ 1877.628754][ T8320] Uninit was stored to memory at: [ 1877.628933][ T8320] ___sys_recvmsg+0x522/0x890 [ 1877.629062][ T8320] do_recvmmsg+0x55a/0x1180 [ 1877.629188][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1877.629321][ T8320] do_syscall_64+0x3d/0xb0 [ 1877.629421][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1877.629590][ T8320] [ 1877.629603][ T8320] Uninit was stored to memory at: [ 1877.629786][ T8320] ___sys_recvmsg+0x522/0x890 [ 1877.635030][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1877.635123][ T8319] do_syscall_64+0x3d/0xb0 [ 1877.635201][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1877.635323][ T8319] [ 1877.635337][ T8319] Uninit was stored to memory at: [ 1877.635444][ T8319] ___sys_recvmsg+0x522/0x890 [ 1877.642486][ T8320] do_recvmmsg+0x55a/0x1180 [ 1877.647545][ T8319] do_recvmmsg+0x55a/0x1180 [ 1877.647626][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1877.647712][ T8319] do_syscall_64+0x3d/0xb0 [ 1877.647789][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1877.647911][ T8319] [ 1877.647924][ T8319] Uninit was stored to memory at: [ 1877.648033][ T8319] ___sys_recvmsg+0x522/0x890 [ 1877.648118][ T8319] do_recvmmsg+0x55a/0x1180 [ 1877.648197][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1877.653926][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1877.657981][ T8319] do_syscall_64+0x3d/0xb0 [ 1877.658060][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1877.658187][ T8319] [ 1877.658201][ T8319] Uninit was stored to memory at: [ 1877.658308][ T8319] ___sys_recvmsg+0x522/0x890 [ 1877.658388][ T8319] do_recvmmsg+0x55a/0x1180 [ 1877.658466][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1877.663821][ T8320] do_syscall_64+0x3d/0xb0 [ 1877.668262][ T8319] do_syscall_64+0x3d/0xb0 [ 1877.668339][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1877.668462][ T8319] [ 1877.668479][ T8319] Local variable msg_sys created at: [ 1877.668506][ T8319] do_recvmmsg+0x5c/0x1180 [ 1877.668579][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1878.114969][ T8319] not chained 2220000 origins [ 1878.119820][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1878.124133][ T8319] CPU: 1 PID: 8319 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1878.124225][ T8319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1878.124273][ T8319] Call Trace: [ 1878.130854][ T8320] [ 1878.132491][ T8319] [ 1878.132518][ T8319] dump_stack_lvl+0x1c8/0x256 [ 1878.132656][ T8319] dump_stack+0x1a/0x1c [ 1878.132770][ T8319] kmsan_internal_chain_origin+0x78/0x120 [ 1878.138472][ T8320] Uninit was stored to memory at: [ 1878.142528][ T8319] ? filter_irq_stacks+0x5c/0x1a0 [ 1878.142665][ T8319] ? kmsan_internal_check_memory+0x94/0x530 [ 1878.142772][ T8319] ? do_recvmmsg+0x55a/0x1180 [ 1878.142862][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1878.142979][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1878.143095][ T8319] ? should_fail+0x3f/0x810 [ 1878.148324][ T8320] ___sys_recvmsg+0x522/0x890 [ 1878.152664][ T8319] ? __stack_depot_save+0x21/0x4b0 [ 1878.152768][ T8319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1878.152883][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1878.152993][ T8319] __msan_chain_origin+0xbd/0x140 [ 1878.153092][ T8319] ___sys_recvmsg+0x522/0x890 [ 1878.153181][ T8319] ? do_recvmmsg+0x5bc/0x1180 [ 1878.153291][ T8319] ? kmsan_internal_check_memory+0x94/0x530 [ 1878.158227][ T8320] do_recvmmsg+0x55a/0x1180 [ 1878.162119][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1878.162237][ T8319] do_recvmmsg+0x55a/0x1180 [ 1878.162345][ T8319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1878.162462][ T8319] ? do_syscall_64+0x3d/0xb0 [ 1878.162552][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1878.162663][ T8319] do_syscall_64+0x3d/0xb0 [ 1878.169269][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1878.170919][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1878.171049][ T8319] RIP: 0033:0x7fe15ac89279 [ 1878.171114][ T8319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1878.177263][ T8320] do_syscall_64+0x3d/0xb0 [ 1878.180951][ T8319] RSP: 002b:00007fe15bd9f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1878.181035][ T8319] RAX: ffffffffffffffda RBX: 00007fe15ad9c050 RCX: 00007fe15ac89279 [ 1878.181102][ T8319] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1878.181165][ T8319] RBP: 00007fe15ace3189 R08: 0000000000000000 R09: 0000000000000000 [ 1878.181221][ T8319] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1878.181273][ T8319] R13: 00007fe15b2cfb1f R14: 00007fe15bd9f300 R15: 0000000000022000 [ 1878.181358][ T8319] [ 1878.183651][ T8319] Uninit was stored to memory at: [ 1878.187156][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1878.191234][ T8319] ___sys_recvmsg+0x522/0x890 [ 1878.191316][ T8319] do_recvmmsg+0x55a/0x1180 [ 1878.191395][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1878.191480][ T8319] do_syscall_64+0x3d/0xb0 [ 1878.191558][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1878.198336][ T8320] [ 1878.208474][ T8319] [ 1878.208489][ T8319] Uninit was stored to memory at: [ 1878.208606][ T8319] ___sys_recvmsg+0x522/0x890 [ 1878.208694][ T8319] do_recvmmsg+0x55a/0x1180 [ 1878.208773][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1878.208859][ T8319] do_syscall_64+0x3d/0xb0 [ 1878.208938][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1878.209061][ T8319] [ 1878.209075][ T8319] Uninit was stored to memory at: [ 1878.209187][ T8319] ___sys_recvmsg+0x522/0x890 [ 1878.209267][ T8319] do_recvmmsg+0x55a/0x1180 [ 1878.209345][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1878.209431][ T8319] do_syscall_64+0x3d/0xb0 [ 1878.209508][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1878.209629][ T8319] [ 1878.209643][ T8319] Uninit was stored to memory at: [ 1878.209748][ T8319] ___sys_recvmsg+0x522/0x890 [ 1878.221062][ T8320] Uninit was stored to memory at: [ 1878.223235][ T8319] do_recvmmsg+0x55a/0x1180 [ 1878.223319][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1878.223404][ T8319] do_syscall_64+0x3d/0xb0 [ 1878.223482][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1878.226298][ T8320] ___sys_recvmsg+0x522/0x890 [ 1878.228799][ T8319] [ 1878.228813][ T8319] Uninit was stored to memory at: [ 1878.228921][ T8319] ___sys_recvmsg+0x522/0x890 [ 1878.229001][ T8319] do_recvmmsg+0x55a/0x1180 [ 1878.229078][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1878.234433][ T8320] do_recvmmsg+0x55a/0x1180 [ 1878.238023][ T8319] do_syscall_64+0x3d/0xb0 [ 1878.238101][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1878.238229][ T8319] [ 1878.238243][ T8319] Uninit was stored to memory at: [ 1878.238351][ T8319] ___sys_recvmsg+0x522/0x890 [ 1878.238431][ T8319] do_recvmmsg+0x55a/0x1180 [ 1878.244963][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1878.249290][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1878.249376][ T8319] do_syscall_64+0x3d/0xb0 [ 1878.249453][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1878.249575][ T8319] [ 1878.249590][ T8319] Uninit was stored to memory at: [ 1878.249695][ T8319] ___sys_recvmsg+0x522/0x890 [ 1878.249776][ T8319] do_recvmmsg+0x55a/0x1180 [ 1878.249854][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1878.255557][ T8320] do_syscall_64+0x3d/0xb0 [ 1878.260867][ T8319] do_syscall_64+0x3d/0xb0 [ 1878.260946][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1878.261068][ T8319] [ 1878.261085][ T8319] Local variable msg_sys created at: [ 1878.261117][ T8319] do_recvmmsg+0x5c/0x1180 [ 1878.261191][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1878.721291][ T8319] not chained 2230000 origins [ 1878.727508][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1878.729505][ T8319] CPU: 1 PID: 8319 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1878.729596][ T8319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1878.729644][ T8319] Call Trace: [ 1878.729673][ T8319] [ 1878.729702][ T8319] dump_stack_lvl+0x1c8/0x256 [ 1878.735622][ T8320] [ 1878.739514][ T8319] dump_stack+0x1a/0x1c [ 1878.739642][ T8319] kmsan_internal_chain_origin+0x78/0x120 [ 1878.739749][ T8319] ? filter_irq_stacks+0x5c/0x1a0 [ 1878.739883][ T8319] ? kmsan_internal_check_memory+0x94/0x530 [ 1878.739989][ T8319] ? do_recvmmsg+0x55a/0x1180 [ 1878.745224][ T8320] Local variable msg_sys created at: [ 1878.749592][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1878.749724][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1878.749840][ T8319] ? should_fail+0x3f/0x810 [ 1878.749945][ T8319] ? __stack_depot_save+0x21/0x4b0 [ 1878.750053][ T8319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1878.755180][ T8320] do_recvmmsg+0x5c/0x1180 [ 1878.758973][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1878.759104][ T8319] __msan_chain_origin+0xbd/0x140 [ 1878.759207][ T8319] ___sys_recvmsg+0x522/0x890 [ 1878.759295][ T8319] ? do_recvmmsg+0x5bc/0x1180 [ 1878.759406][ T8319] ? kmsan_internal_check_memory+0x94/0x530 [ 1878.766509][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1878.768015][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1878.768147][ T8319] do_recvmmsg+0x55a/0x1180 [ 1878.768270][ T8319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1878.940715][ T8319] ? do_syscall_64+0x3d/0xb0 [ 1878.945470][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1878.950658][ T8319] do_syscall_64+0x3d/0xb0 [ 1878.955206][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1878.961277][ T8319] RIP: 0033:0x7fe15ac89279 [ 1878.965804][ T8319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1878.985579][ T8319] RSP: 002b:00007fe15bd9f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1878.994139][ T8319] RAX: ffffffffffffffda RBX: 00007fe15ad9c050 RCX: 00007fe15ac89279 [ 1879.002234][ T8319] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1879.010315][ T8319] RBP: 00007fe15ace3189 R08: 0000000000000000 R09: 0000000000000000 [ 1879.018405][ T8319] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1879.026492][ T8319] R13: 00007fe15b2cfb1f R14: 00007fe15bd9f300 R15: 0000000000022000 [ 1879.034620][ T8319] [ 1879.040290][ T8319] Uninit was stored to memory at: [ 1879.045795][ T8319] ___sys_recvmsg+0x522/0x890 [ 1879.050603][ T8319] do_recvmmsg+0x55a/0x1180 [ 1879.055308][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1879.060484][ T8319] do_syscall_64+0x3d/0xb0 [ 1879.065127][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1879.071202][ T8319] [ 1879.073673][ T8319] Uninit was stored to memory at: [ 1879.078865][ T8319] ___sys_recvmsg+0x522/0x890 [ 1879.083745][ T8319] do_recvmmsg+0x55a/0x1180 [ 1879.088381][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1879.093649][ T8319] do_syscall_64+0x3d/0xb0 [ 1879.098201][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1879.104354][ T8319] [ 1879.106738][ T8319] Uninit was stored to memory at: [ 1879.111998][ T8319] ___sys_recvmsg+0x522/0x890 [ 1879.116909][ T8319] do_recvmmsg+0x55a/0x1180 [ 1879.121537][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1879.126782][ T8319] do_syscall_64+0x3d/0xb0 [ 1879.131331][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1879.137527][ T8319] [ 1879.139917][ T8319] Uninit was stored to memory at: [ 1879.145202][ T8319] ___sys_recvmsg+0x522/0x890 [ 1879.150011][ T8319] do_recvmmsg+0x55a/0x1180 [ 1879.154727][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1879.159893][ T8319] do_syscall_64+0x3d/0xb0 [ 1879.164536][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1879.170610][ T8319] [ 1879.173080][ T8319] Uninit was stored to memory at: [ 1879.178279][ T8319] ___sys_recvmsg+0x522/0x890 [ 1879.183172][ T8319] do_recvmmsg+0x55a/0x1180 [ 1879.187802][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1879.193040][ T8319] do_syscall_64+0x3d/0xb0 [ 1879.197621][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1879.203771][ T8319] [ 1879.206163][ T8319] Uninit was stored to memory at: [ 1879.211353][ T8319] ___sys_recvmsg+0x522/0x890 [ 1879.216248][ T8319] do_recvmmsg+0x55a/0x1180 [ 1879.220881][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1879.226125][ T8319] do_syscall_64+0x3d/0xb0 [ 1879.230670][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1879.236845][ T8319] [ 1879.239265][ T8319] Uninit was stored to memory at: [ 1879.244549][ T8319] ___sys_recvmsg+0x522/0x890 [ 1879.249354][ T8319] do_recvmmsg+0x55a/0x1180 [ 1879.254069][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1879.259236][ T8319] do_syscall_64+0x3d/0xb0 [ 1879.263863][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1879.269929][ T8319] [ 1879.272404][ T8319] Local variable msg_sys created at: [ 1879.277768][ T8319] do_recvmmsg+0x5c/0x1180 [ 1879.282391][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1879.398660][ T8320] not chained 2240000 origins [ 1879.403678][ T8320] CPU: 1 PID: 8320 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1879.413898][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1879.424177][ T8320] Call Trace: [ 1879.427586][ T8320] [ 1879.430603][ T8320] dump_stack_lvl+0x1c8/0x256 [ 1879.435466][ T8320] dump_stack+0x1a/0x1c [ 1879.439836][ T8320] kmsan_internal_chain_origin+0x78/0x120 [ 1879.445753][ T8320] ? filter_irq_stacks+0x5c/0x1a0 [ 1879.450971][ T8320] ? kmsan_internal_check_memory+0x94/0x530 [ 1879.457031][ T8320] ? do_recvmmsg+0x55a/0x1180 [ 1879.461845][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1879.467823][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1879.473802][ T8320] ? should_fail+0x3f/0x810 [ 1879.478465][ T8320] ? __stack_depot_save+0x21/0x4b0 [ 1879.483738][ T8320] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1879.490155][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1879.496137][ T8320] __msan_chain_origin+0xbd/0x140 [ 1879.501329][ T8320] ___sys_recvmsg+0x522/0x890 [ 1879.506142][ T8320] ? do_recvmmsg+0x5bc/0x1180 [ 1879.510985][ T8320] ? kmsan_internal_check_memory+0x94/0x530 [ 1879.517051][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1879.523024][ T8320] do_recvmmsg+0x55a/0x1180 [ 1879.527688][ T8320] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1879.534098][ T8320] ? do_syscall_64+0x3d/0xb0 [ 1879.538825][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1879.544019][ T8320] do_syscall_64+0x3d/0xb0 [ 1879.548603][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1879.554681][ T8320] RIP: 0033:0x7faec0089279 [ 1879.559205][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1879.578987][ T8320] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1879.587554][ T8320] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1879.595655][ T8320] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1879.603740][ T8320] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1879.611826][ T8320] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1879.619913][ T8320] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1879.628031][ T8320] [ 1879.634767][ T8320] Uninit was stored to memory at: [ 1879.639995][ T8320] ___sys_recvmsg+0x522/0x890 [ 1879.645616][ T8320] do_recvmmsg+0x55a/0x1180 [ 1879.650259][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1879.655508][ T8320] do_syscall_64+0x3d/0xb0 [ 1879.660055][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1879.666211][ T8320] [ 1879.668628][ T8320] Uninit was stored to memory at: [ 1879.673898][ T8320] ___sys_recvmsg+0x522/0x890 [ 1879.678729][ T8320] do_recvmmsg+0x55a/0x1180 [ 1879.683441][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1879.688600][ T8320] do_syscall_64+0x3d/0xb0 [ 1879.693232][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1879.699310][ T8320] [ 1879.701824][ T8320] Uninit was stored to memory at: [ 1879.707023][ T8320] ___sys_recvmsg+0x522/0x890 [ 1879.711963][ T8320] do_recvmmsg+0x55a/0x1180 [ 1879.716597][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1879.721876][ T8320] do_syscall_64+0x3d/0xb0 [ 1879.726430][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1879.732640][ T8320] [ 1879.735038][ T8320] Uninit was stored to memory at: [ 1879.740225][ T8320] ___sys_recvmsg+0x522/0x890 [ 1879.745111][ T8320] do_recvmmsg+0x55a/0x1180 [ 1879.749738][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1879.754972][ T8320] do_syscall_64+0x3d/0xb0 [ 1879.759514][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1879.765661][ T8320] [ 1879.768048][ T8320] Uninit was stored to memory at: [ 1879.773294][ T8320] ___sys_recvmsg+0x522/0x890 [ 1879.778102][ T8320] do_recvmmsg+0x55a/0x1180 [ 1879.782859][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1879.788033][ T8320] do_syscall_64+0x3d/0xb0 [ 1879.792655][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1879.798726][ T8320] [ 1879.801112][ T8320] Uninit was stored to memory at: [ 1879.806442][ T8320] ___sys_recvmsg+0x522/0x890 [ 1879.811246][ T8320] do_recvmmsg+0x55a/0x1180 [ 1879.815966][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1879.821130][ T8320] do_syscall_64+0x3d/0xb0 [ 1879.825812][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1879.832022][ T8320] [ 1879.834408][ T8320] Uninit was stored to memory at: [ 1879.839602][ T8320] ___sys_recvmsg+0x522/0x890 [ 1879.844527][ T8320] do_recvmmsg+0x55a/0x1180 [ 1879.849159][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1879.854455][ T8320] do_syscall_64+0x3d/0xb0 [ 1879.859010][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1879.865228][ T8320] [ 1879.867627][ T8320] Local variable msg_sys created at: [ 1879.873076][ T8320] do_recvmmsg+0x5c/0x1180 [ 1879.877627][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1880.065521][ T8319] not chained 2250000 origins [ 1880.070328][ T8319] CPU: 1 PID: 8319 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1880.080546][ T8319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1880.090737][ T8319] Call Trace: [ 1880.094100][ T8319] [ 1880.097110][ T8319] dump_stack_lvl+0x1c8/0x256 [ 1880.101977][ T8319] dump_stack+0x1a/0x1c [ 1880.106291][ T8319] kmsan_internal_chain_origin+0x78/0x120 [ 1880.112159][ T8319] ? filter_irq_stacks+0x5c/0x1a0 [ 1880.117370][ T8319] ? kmsan_internal_check_memory+0x94/0x530 [ 1880.123422][ T8319] ? do_recvmmsg+0x55a/0x1180 [ 1880.128239][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1880.134214][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1880.140185][ T8319] ? should_fail+0x3f/0x810 [ 1880.144838][ T8319] ? __stack_depot_save+0x21/0x4b0 [ 1880.150110][ T8319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1880.156529][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1880.162496][ T8319] __msan_chain_origin+0xbd/0x140 [ 1880.167662][ T8319] ___sys_recvmsg+0x522/0x890 [ 1880.172480][ T8319] ? do_recvmmsg+0x5bc/0x1180 [ 1880.177311][ T8319] ? kmsan_internal_check_memory+0x94/0x530 [ 1880.183362][ T8319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1880.189332][ T8319] do_recvmmsg+0x55a/0x1180 [ 1880.193993][ T8319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1880.200399][ T8319] ? do_syscall_64+0x3d/0xb0 [ 1880.205159][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1880.210343][ T8319] do_syscall_64+0x3d/0xb0 [ 1880.214891][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1880.220968][ T8319] RIP: 0033:0x7fe15ac89279 [ 1880.225484][ T8319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1880.245251][ T8319] RSP: 002b:00007fe15bd9f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1880.253808][ T8319] RAX: ffffffffffffffda RBX: 00007fe15ad9c050 RCX: 00007fe15ac89279 [ 1880.261916][ T8319] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1880.270003][ T8319] RBP: 00007fe15ace3189 R08: 0000000000000000 R09: 0000000000000000 [ 1880.278084][ T8319] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1880.286163][ T8319] R13: 00007fe15b2cfb1f R14: 00007fe15bd9f300 R15: 0000000000022000 [ 1880.294289][ T8319] [ 1880.299691][ T8319] Uninit was stored to memory at: [ 1880.305162][ T8319] ___sys_recvmsg+0x522/0x890 [ 1880.309975][ T8319] do_recvmmsg+0x55a/0x1180 [ 1880.314689][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1880.319851][ T8319] do_syscall_64+0x3d/0xb0 [ 1880.324518][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1880.330602][ T8319] [ 1880.333084][ T8319] Uninit was stored to memory at: [ 1880.338276][ T8319] ___sys_recvmsg+0x522/0x890 [ 1880.343159][ T8319] do_recvmmsg+0x55a/0x1180 [ 1880.347790][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1880.353030][ T8319] do_syscall_64+0x3d/0xb0 [ 1880.357577][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1880.363727][ T8319] [ 1880.366115][ T8319] Uninit was stored to memory at: [ 1880.371303][ T8319] ___sys_recvmsg+0x522/0x890 [ 1880.376216][ T8319] do_recvmmsg+0x55a/0x1180 [ 1880.380850][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1880.386153][ T8319] do_syscall_64+0x3d/0xb0 [ 1880.390703][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1880.396925][ T8319] [ 1880.399316][ T8319] Uninit was stored to memory at: [ 1880.404647][ T8319] ___sys_recvmsg+0x522/0x890 [ 1880.409466][ T8319] do_recvmmsg+0x55a/0x1180 [ 1880.414240][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1880.419400][ T8319] do_syscall_64+0x3d/0xb0 [ 1880.424032][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1880.430192][ T8319] [ 1880.432719][ T8319] Uninit was stored to memory at: [ 1880.437907][ T8319] ___sys_recvmsg+0x522/0x890 [ 1880.442839][ T8319] do_recvmmsg+0x55a/0x1180 [ 1880.447482][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1880.452735][ T8319] do_syscall_64+0x3d/0xb0 [ 1880.457290][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1880.463526][ T8319] [ 1880.465918][ T8319] Uninit was stored to memory at: [ 1880.471111][ T8319] ___sys_recvmsg+0x522/0x890 [ 1880.476061][ T8319] do_recvmmsg+0x55a/0x1180 [ 1880.480716][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1880.485979][ T8319] do_syscall_64+0x3d/0xb0 [ 1880.490531][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1880.496769][ T8319] [ 1880.499162][ T8319] Uninit was stored to memory at: [ 1880.504445][ T8319] ___sys_recvmsg+0x522/0x890 [ 1880.509266][ T8319] do_recvmmsg+0x55a/0x1180 [ 1880.514040][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1880.519210][ T8319] do_syscall_64+0x3d/0xb0 [ 1880.523883][ T8319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1880.529952][ T8319] [ 1880.532489][ T8319] Local variable msg_sys created at: [ 1880.537852][ T8319] do_recvmmsg+0x5c/0x1180 [ 1880.542530][ T8319] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1880.684007][ T8320] not chained 2260000 origins [ 1880.688815][ T8320] CPU: 1 PID: 8320 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1880.699045][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1880.709219][ T8320] Call Trace: [ 1880.712578][ T8320] [ 1880.715588][ T8320] dump_stack_lvl+0x1c8/0x256 [ 1880.720455][ T8320] dump_stack+0x1a/0x1c [ 1880.724779][ T8320] kmsan_internal_chain_origin+0x78/0x120 [ 1880.730653][ T8320] ? filter_irq_stacks+0x5c/0x1a0 [ 1880.735862][ T8320] ? kmsan_internal_check_memory+0x94/0x530 [ 1880.741913][ T8320] ? do_recvmmsg+0x55a/0x1180 [ 1880.746723][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1880.752726][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1880.758718][ T8320] ? should_fail+0x3f/0x810 [ 1880.763369][ T8320] ? __stack_depot_save+0x21/0x4b0 [ 1880.768630][ T8320] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1880.775126][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1880.781092][ T8320] __msan_chain_origin+0xbd/0x140 [ 1880.786271][ T8320] ___sys_recvmsg+0x522/0x890 [ 1880.791087][ T8320] ? do_recvmmsg+0x5bc/0x1180 [ 1880.795923][ T8320] ? kmsan_internal_check_memory+0x94/0x530 [ 1880.801986][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1880.807958][ T8320] do_recvmmsg+0x55a/0x1180 [ 1880.812626][ T8320] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1880.819026][ T8320] ? do_syscall_64+0x3d/0xb0 [ 1880.823754][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1880.828939][ T8320] do_syscall_64+0x3d/0xb0 [ 1880.833491][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1880.839745][ T8320] RIP: 0033:0x7faec0089279 [ 1880.844265][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1880.864043][ T8320] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1880.872605][ T8320] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1880.880700][ T8320] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1880.888779][ T8320] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1880.896882][ T8320] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1880.904959][ T8320] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1880.913173][ T8320] [ 1880.918596][ T8320] Uninit was stored to memory at: [ 1880.924057][ T8320] ___sys_recvmsg+0x522/0x890 [ 1880.928951][ T8320] do_recvmmsg+0x55a/0x1180 [ 1880.933672][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1880.938831][ T8320] do_syscall_64+0x3d/0xb0 [ 1880.943481][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1880.949549][ T8320] [ 1880.952010][ T8320] Uninit was stored to memory at: [ 1880.957288][ T8320] ___sys_recvmsg+0x522/0x890 [ 1880.962170][ T8320] do_recvmmsg+0x55a/0x1180 [ 1880.966802][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1880.972034][ T8320] do_syscall_64+0x3d/0xb0 [ 1880.976582][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1880.982728][ T8320] [ 1880.985121][ T8320] Uninit was stored to memory at: [ 1880.990309][ T8320] ___sys_recvmsg+0x522/0x890 [ 1880.995196][ T8320] do_recvmmsg+0x55a/0x1180 [ 1881.001728][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1881.006934][ T8320] do_syscall_64+0x3d/0xb0 [ 1881.011518][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1881.017661][ T8320] [ 1881.020077][ T8320] Uninit was stored to memory at: [ 1881.025459][ T8320] ___sys_recvmsg+0x522/0x890 [ 1881.030259][ T8320] do_recvmmsg+0x55a/0x1180 [ 1881.034968][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1881.040141][ T8320] do_syscall_64+0x3d/0xb0 [ 1881.044773][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1881.050852][ T8320] [ 1881.053334][ T8320] Uninit was stored to memory at: [ 1881.058531][ T8320] ___sys_recvmsg+0x522/0x890 [ 1881.063426][ T8320] do_recvmmsg+0x55a/0x1180 [ 1881.068064][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1881.073312][ T8320] do_syscall_64+0x3d/0xb0 [ 1881.077852][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1881.084074][ T8320] [ 1881.086460][ T8320] Uninit was stored to memory at: [ 1881.091893][ T8320] ___sys_recvmsg+0x522/0x890 [ 1881.096700][ T8320] do_recvmmsg+0x55a/0x1180 [ 1881.101334][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1881.106645][ T8320] do_syscall_64+0x3d/0xb0 [ 1881.111195][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1881.117413][ T8320] [ 1881.119800][ T8320] Uninit was stored to memory at: [ 1881.125078][ T8320] ___sys_recvmsg+0x522/0x890 [ 1881.129887][ T8320] do_recvmmsg+0x55a/0x1180 [ 1881.134658][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1881.139833][ T8320] do_syscall_64+0x3d/0xb0 [ 1881.144521][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1881.150591][ T8320] [ 1881.153121][ T8320] Local variable msg_sys created at: [ 1881.158562][ T8320] do_recvmmsg+0x5c/0x1180 [ 1881.163189][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1881.302208][ T8320] not chained 2270000 origins [ 1881.307015][ T8320] CPU: 1 PID: 8320 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1881.317224][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1881.327487][ T8320] Call Trace: [ 1881.330862][ T8320] [ 1881.333874][ T8320] dump_stack_lvl+0x1c8/0x256 [ 1881.338736][ T8320] dump_stack+0x1a/0x1c [ 1881.343054][ T8320] kmsan_internal_chain_origin+0x78/0x120 [ 1881.348947][ T8320] ? filter_irq_stacks+0x5c/0x1a0 [ 1881.354155][ T8320] ? kmsan_internal_check_memory+0x94/0x530 [ 1881.360213][ T8320] ? do_recvmmsg+0x55a/0x1180 [ 1881.365119][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1881.371096][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1881.377072][ T8320] ? should_fail+0x3f/0x810 [ 1881.381726][ T8320] ? __stack_depot_save+0x21/0x4b0 [ 1881.386984][ T8320] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1881.393596][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1881.399576][ T8320] __msan_chain_origin+0xbd/0x140 [ 1881.404750][ T8320] ___sys_recvmsg+0x522/0x890 [ 1881.409573][ T8320] ? do_recvmmsg+0x5bc/0x1180 [ 1881.414413][ T8320] ? kmsan_internal_check_memory+0x94/0x530 [ 1881.420485][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1881.426470][ T8320] do_recvmmsg+0x55a/0x1180 [ 1881.431137][ T8320] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1881.437550][ T8320] ? do_syscall_64+0x3d/0xb0 [ 1881.442295][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1881.447589][ T8320] do_syscall_64+0x3d/0xb0 [ 1881.452151][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1881.458225][ T8320] RIP: 0033:0x7faec0089279 [ 1881.462763][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1881.482556][ T8320] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1881.491122][ T8320] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1881.499224][ T8320] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1881.507307][ T8320] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1881.515397][ T8320] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1881.523474][ T8320] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1881.531607][ T8320] [ 1881.539523][ T8320] Uninit was stored to memory at: [ 1881.545618][ T8320] ___sys_recvmsg+0x522/0x890 [ 1881.550437][ T8320] do_recvmmsg+0x55a/0x1180 [ 1881.555172][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1881.560430][ T8320] do_syscall_64+0x3d/0xb0 [ 1881.565098][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1881.571169][ T8320] [ 1881.573698][ T8320] Uninit was stored to memory at: [ 1881.578898][ T8320] ___sys_recvmsg+0x522/0x890 [ 1881.583811][ T8320] do_recvmmsg+0x55a/0x1180 [ 1881.588461][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1881.593718][ T8320] do_syscall_64+0x3d/0xb0 [ 1881.598263][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1881.604520][ T8320] [ 1881.606907][ T8320] Uninit was stored to memory at: [ 1881.612172][ T8320] ___sys_recvmsg+0x522/0x890 [ 1881.616977][ T8320] do_recvmmsg+0x55a/0x1180 [ 1881.621704][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1881.626865][ T8320] do_syscall_64+0x3d/0xb0 [ 1881.631421][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1881.637646][ T8320] [ 1881.640437][ T8320] Uninit was stored to memory at: [ 1881.645723][ T8320] ___sys_recvmsg+0x522/0x890 [ 1881.650528][ T8320] do_recvmmsg+0x55a/0x1180 [ 1881.655301][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1881.660660][ T8320] do_syscall_64+0x3d/0xb0 [ 1881.665374][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1881.671555][ T8320] [ 1881.674109][ T8320] Uninit was stored to memory at: [ 1881.679331][ T8320] ___sys_recvmsg+0x522/0x890 [ 1881.684298][ T8320] do_recvmmsg+0x55a/0x1180 [ 1881.688946][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1881.694295][ T8320] do_syscall_64+0x3d/0xb0 [ 1881.698842][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1881.705205][ T8320] [ 1881.707598][ T8320] Uninit was stored to memory at: [ 1881.712918][ T8320] ___sys_recvmsg+0x522/0x890 [ 1881.717725][ T8320] do_recvmmsg+0x55a/0x1180 [ 1881.722509][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1881.727679][ T8320] do_syscall_64+0x3d/0xb0 [ 1881.732334][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1881.738413][ T8320] [ 1881.740807][ T8320] Uninit was stored to memory at: [ 1881.746150][ T8320] ___sys_recvmsg+0x522/0x890 [ 1881.750955][ T8320] do_recvmmsg+0x55a/0x1180 [ 1881.755687][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1881.760857][ T8320] do_syscall_64+0x3d/0xb0 [ 1881.765492][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1881.771569][ T8320] [ 1881.774056][ T8320] Local variable msg_sys created at: [ 1881.779447][ T8320] do_recvmmsg+0x5c/0x1180 [ 1881.784165][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1882.006404][ T8320] not chained 2280000 origins [ 1882.011210][ T8320] CPU: 1 PID: 8320 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1882.021426][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1882.031639][ T8320] Call Trace: [ 1882.034993][ T8320] [ 1882.037997][ T8320] dump_stack_lvl+0x1c8/0x256 [ 1882.042871][ T8320] dump_stack+0x1a/0x1c [ 1882.047192][ T8320] kmsan_internal_chain_origin+0x78/0x120 [ 1882.053070][ T8320] ? filter_irq_stacks+0x5c/0x1a0 [ 1882.058274][ T8320] ? kmsan_internal_check_memory+0x94/0x530 [ 1882.064323][ T8320] ? do_recvmmsg+0x55a/0x1180 [ 1882.069134][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1882.075103][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1882.081071][ T8320] ? should_fail+0x3f/0x810 [ 1882.085729][ T8320] ? __stack_depot_save+0x21/0x4b0 [ 1882.090989][ T8320] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1882.097397][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1882.103363][ T8320] __msan_chain_origin+0xbd/0x140 [ 1882.108549][ T8320] ___sys_recvmsg+0x522/0x890 [ 1882.113355][ T8320] ? do_recvmmsg+0x5bc/0x1180 [ 1882.118207][ T8320] ? kmsan_internal_check_memory+0x94/0x530 [ 1882.124265][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1882.130239][ T8320] do_recvmmsg+0x55a/0x1180 [ 1882.134927][ T8320] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1882.141431][ T8320] ? do_syscall_64+0x3d/0xb0 [ 1882.146194][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1882.151407][ T8320] do_syscall_64+0x3d/0xb0 [ 1882.155973][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1882.162070][ T8320] RIP: 0033:0x7faec0089279 [ 1882.166596][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1882.186379][ T8320] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1882.194935][ T8320] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1882.203032][ T8320] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1882.211117][ T8320] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1882.219201][ T8320] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1882.227280][ T8320] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1882.235395][ T8320] [ 1882.241338][ T8320] Uninit was stored to memory at: [ 1882.246814][ T8320] ___sys_recvmsg+0x522/0x890 [ 1882.251706][ T8320] do_recvmmsg+0x55a/0x1180 [ 1882.256338][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1882.261499][ T8320] do_syscall_64+0x3d/0xb0 [ 1882.266130][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1882.272276][ T8320] [ 1882.274671][ T8320] Uninit was stored to memory at: [ 1882.279863][ T8320] ___sys_recvmsg+0x522/0x890 [ 1882.284753][ T8320] do_recvmmsg+0x55a/0x1180 [ 1882.289376][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1882.294624][ T8320] do_syscall_64+0x3d/0xb0 [ 1882.299169][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1882.305331][ T8320] [ 1882.307722][ T8320] Uninit was stored to memory at: [ 1882.312994][ T8320] ___sys_recvmsg+0x522/0x890 [ 1882.317799][ T8320] do_recvmmsg+0x55a/0x1180 [ 1882.322534][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1882.327701][ T8320] do_syscall_64+0x3d/0xb0 [ 1882.332320][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1882.338434][ T8320] [ 1882.340825][ T8320] Uninit was stored to memory at: [ 1882.346108][ T8320] ___sys_recvmsg+0x522/0x890 [ 1882.350919][ T8320] do_recvmmsg+0x55a/0x1180 [ 1882.355729][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1882.360947][ T8320] do_syscall_64+0x3d/0xb0 [ 1882.365578][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1882.371734][ T8320] [ 1882.374118][ T8320] Uninit was stored to memory at: [ 1882.379313][ T8320] ___sys_recvmsg+0x522/0x890 [ 1882.384208][ T8320] do_recvmmsg+0x55a/0x1180 [ 1882.388842][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1882.394090][ T8320] do_syscall_64+0x3d/0xb0 [ 1882.398644][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1882.404850][ T8320] [ 1882.407241][ T8320] Uninit was stored to memory at: [ 1882.412510][ T8320] ___sys_recvmsg+0x522/0x890 [ 1882.417318][ T8320] do_recvmmsg+0x55a/0x1180 [ 1882.422086][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1882.427244][ T8320] do_syscall_64+0x3d/0xb0 [ 1882.431868][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1882.437940][ T8320] [ 1882.440325][ T8320] Uninit was stored to memory at: [ 1882.445602][ T8320] ___sys_recvmsg+0x522/0x890 [ 1882.450415][ T8320] do_recvmmsg+0x55a/0x1180 [ 1882.455199][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1882.460365][ T8320] do_syscall_64+0x3d/0xb0 [ 1882.465054][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1882.471130][ T8320] [ 1882.473658][ T8320] Local variable msg_sys created at: [ 1882.479017][ T8320] do_recvmmsg+0x5c/0x1180 [ 1882.483646][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1882.908843][ T8320] not chained 2290000 origins [ 1882.913789][ T8320] CPU: 1 PID: 8320 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1882.924004][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1882.934178][ T8320] Call Trace: [ 1882.937544][ T8320] [ 1882.940562][ T8320] dump_stack_lvl+0x1c8/0x256 [ 1882.945433][ T8320] dump_stack+0x1a/0x1c [ 1882.949782][ T8320] kmsan_internal_chain_origin+0x78/0x120 [ 1882.955672][ T8320] ? filter_irq_stacks+0x5c/0x1a0 [ 1882.960891][ T8320] ? kmsan_internal_check_memory+0x94/0x530 [ 1882.966948][ T8320] ? do_recvmmsg+0x55a/0x1180 [ 1882.971766][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1882.977752][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1882.983730][ T8320] ? should_fail+0x3f/0x810 [ 1882.988409][ T8320] ? __stack_depot_save+0x21/0x4b0 [ 1882.993670][ T8320] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1883.000067][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1883.006021][ T8320] __msan_chain_origin+0xbd/0x140 [ 1883.011183][ T8320] ___sys_recvmsg+0x522/0x890 [ 1883.015983][ T8320] ? do_recvmmsg+0x5bc/0x1180 [ 1883.020804][ T8320] ? kmsan_internal_check_memory+0x94/0x530 [ 1883.026846][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1883.032812][ T8320] do_recvmmsg+0x55a/0x1180 [ 1883.037458][ T8320] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1883.043860][ T8320] ? do_syscall_64+0x3d/0xb0 [ 1883.048578][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1883.053769][ T8320] do_syscall_64+0x3d/0xb0 [ 1883.058306][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1883.064376][ T8320] RIP: 0033:0x7faec0089279 [ 1883.068887][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1883.088642][ T8320] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1883.097190][ T8320] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1883.105272][ T8320] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1883.113347][ T8320] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1883.121421][ T8320] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1883.129495][ T8320] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1883.137603][ T8320] [ 1883.143457][ T8320] Uninit was stored to memory at: [ 1883.148674][ T8320] ___sys_recvmsg+0x522/0x890 [ 1883.153841][ T8320] do_recvmmsg+0x55a/0x1180 [ 1883.158509][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1883.163755][ T8320] do_syscall_64+0x3d/0xb0 [ 1883.170296][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1883.176459][ T8320] [ 1883.178854][ T8320] Uninit was stored to memory at: [ 1883.184120][ T8320] ___sys_recvmsg+0x522/0x890 [ 1883.188924][ T8320] do_recvmmsg+0x55a/0x1180 [ 1883.193629][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1883.198787][ T8320] do_syscall_64+0x3d/0xb0 [ 1883.203418][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1883.209504][ T8320] [ 1883.211975][ T8320] Uninit was stored to memory at: [ 1883.217171][ T8320] ___sys_recvmsg+0x522/0x890 [ 1883.222063][ T8320] do_recvmmsg+0x55a/0x1180 [ 1883.226696][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1883.231954][ T8320] do_syscall_64+0x3d/0xb0 [ 1883.236510][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1883.242675][ T8320] [ 1883.245068][ T8320] Uninit was stored to memory at: [ 1883.250258][ T8320] ___sys_recvmsg+0x522/0x890 [ 1883.255143][ T8320] do_recvmmsg+0x55a/0x1180 [ 1883.259777][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1883.265056][ T8320] do_syscall_64+0x3d/0xb0 [ 1883.269612][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1883.275791][ T8320] [ 1883.278186][ T8320] Uninit was stored to memory at: [ 1883.283459][ T8320] ___sys_recvmsg+0x522/0x890 [ 1883.288267][ T8320] do_recvmmsg+0x55a/0x1180 [ 1883.292995][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1883.298168][ T8320] do_syscall_64+0x3d/0xb0 [ 1883.302807][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1883.308893][ T8320] [ 1883.311287][ T8320] Uninit was stored to memory at: [ 1883.316569][ T8320] ___sys_recvmsg+0x522/0x890 [ 1883.321373][ T8320] do_recvmmsg+0x55a/0x1180 [ 1883.326107][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1883.331272][ T8320] do_syscall_64+0x3d/0xb0 [ 1883.335904][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1883.342083][ T8320] [ 1883.344474][ T8320] Uninit was stored to memory at: [ 1883.349670][ T8320] ___sys_recvmsg+0x522/0x890 [ 1883.354564][ T8320] do_recvmmsg+0x55a/0x1180 [ 1883.359202][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1883.364439][ T8320] do_syscall_64+0x3d/0xb0 [ 1883.368988][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1883.375145][ T8320] [ 1883.377539][ T8320] Local variable msg_sys created at: [ 1883.382992][ T8320] do_recvmmsg+0x5c/0x1180 [ 1883.387536][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1883.689959][ T8320] not chained 2300000 origins [ 1883.695484][ T8320] CPU: 0 PID: 8320 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1883.705688][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1883.715804][ T8320] Call Trace: [ 1883.719125][ T8320] [ 1883.722091][ T8320] dump_stack_lvl+0x1c8/0x256 [ 1883.726895][ T8320] dump_stack+0x1a/0x1c [ 1883.731155][ T8320] kmsan_internal_chain_origin+0x78/0x120 [ 1883.736971][ T8320] ? up_read+0x36/0x1c0 [ 1883.741234][ T8320] ? do_user_addr_fault+0xfef/0x1710 [ 1883.746649][ T8320] ? exc_page_fault+0x6d/0x140 [ 1883.751517][ T8320] ? asm_exc_page_fault+0x27/0x30 [ 1883.756700][ T8320] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1883.763126][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1883.769094][ T8320] __msan_chain_origin+0xbd/0x140 [ 1883.774256][ T8320] ___sys_recvmsg+0x522/0x890 [ 1883.779010][ T8320] ? do_recvmmsg+0x5bc/0x1180 [ 1883.783771][ T8320] ? kmsan_internal_check_memory+0x94/0x530 [ 1883.789756][ T8320] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1883.795670][ T8320] do_recvmmsg+0x55a/0x1180 [ 1883.800258][ T8320] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1883.806611][ T8320] ? do_syscall_64+0x3d/0xb0 [ 1883.811319][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1883.816450][ T8320] do_syscall_64+0x3d/0xb0 [ 1883.820956][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1883.826946][ T8320] RIP: 0033:0x7faec0089279 [ 1883.831426][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1883.851144][ T8320] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1883.859647][ T8320] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1883.867687][ T8320] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1883.875752][ T8320] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1883.883816][ T8320] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1883.891841][ T8320] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1883.899886][ T8320] [ 1883.926798][ T8320] Uninit was stored to memory at: [ 1883.932017][ T8320] ___sys_recvmsg+0x522/0x890 [ 1883.936834][ T8320] do_recvmmsg+0x55a/0x1180 [ 1883.941451][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1883.946563][ T8320] do_syscall_64+0x3d/0xb0 [ 1883.954085][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1883.960962][ T8320] [ 1883.963867][ T8320] Uninit was stored to memory at: [ 1883.969812][ T8320] ___sys_recvmsg+0x522/0x890 [ 1883.975375][ T8320] do_recvmmsg+0x55a/0x1180 [ 1883.980437][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1883.986346][ T8320] do_syscall_64+0x3d/0xb0 [ 1883.991298][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1883.998202][ T8320] [ 1884.000814][ T8320] Uninit was stored to memory at: [ 1884.007112][ T8320] ___sys_recvmsg+0x522/0x890 [ 1884.012693][ T8320] do_recvmmsg+0x55a/0x1180 [ 1884.017729][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1884.023680][ T8320] do_syscall_64+0x3d/0xb0 [ 1884.028852][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1884.035504][ T8320] [ 1884.038078][ T8320] Uninit was stored to memory at: [ 1884.044088][ T8320] ___sys_recvmsg+0x522/0x890 [ 1884.049516][ T8320] do_recvmmsg+0x55a/0x1180 [ 1884.054829][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1884.060471][ T8320] do_syscall_64+0x3d/0xb0 [ 1884.065714][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1884.072725][ T8320] [ 1884.075445][ T8320] Uninit was stored to memory at: [ 1884.081204][ T8320] ___sys_recvmsg+0x522/0x890 [ 1884.086684][ T8320] do_recvmmsg+0x55a/0x1180 [ 1884.091913][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1884.097758][ T8320] do_syscall_64+0x3d/0xb0 [ 1884.103038][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1884.109592][ T8320] [ 1884.112434][ T8320] Uninit was stored to memory at: [ 1884.118138][ T8320] ___sys_recvmsg+0x522/0x890 [ 1884.123687][ T8320] do_recvmmsg+0x55a/0x1180 [ 1884.128747][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1884.134689][ T8320] do_syscall_64+0x3d/0xb0 [ 1884.139622][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1884.146565][ T8320] [ 1884.149304][ T8320] Uninit was stored to memory at: [ 1884.155330][ T8320] ___sys_recvmsg+0x522/0x890 [ 1884.160544][ T8320] do_recvmmsg+0x55a/0x1180 [ 1884.165841][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1884.171447][ T8320] do_syscall_64+0x3d/0xb0 [ 1884.176697][ T8320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1884.183722][ T8320] [ 1884.186459][ T8320] Local variable msg_sys created at: [ 1884.192320][ T8320] do_recvmmsg+0x5c/0x1180 [ 1884.197214][ T8320] __x64_sys_recvmmsg+0x3a7/0x4b0 22:46:51 executing program 4: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) openat$full(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x800000000009031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000015e000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0x208200) 22:46:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @rand_addr=0x64010101, {[@lsrr={0x83, 0x7, 0x4, [@empty]}, @timestamp={0x44, 0x18, 0x9, 0x3, 0x0, [0x0, 0x0, 0x0, 0x2, 0x0]}]}}}}}}, 0x0) 22:46:51 executing program 0: socket(0x22, 0x0, 0x22) 22:46:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "000000000100", "aa319b4fbfc2251ed01858bf4d347d58", '\x00', "ff67a4bd00"}, 0x28) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 22:46:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000017c0)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="91410aa2c1db7468d7010000011b804c7ed0ace302f5acd41d8bdcd2f4a01967ef82838dcefe6970ae3316a775ed29e6a3d9"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'veth0_to_bridge\x00'}) close(r0) 22:46:51 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) listen(r0, 0x50) 22:46:52 executing program 0: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000100)="74115727975ca48e8b345f589fde80d1c07dbd2fcba0b3ef8e4c75412cdc2974a2d82de2af93b955f3a14ffd5e8c49b00431", 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) open$dir(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000280)="9032078758d22a5929f6259c8eb48f004c2288103348bcd399670a490ab7f80b1c6f0ea1fde2573223e165f167f0c8b3d3", &(0x7f0000000400)=""/130, 0x0, 0x0, 0x21c}, 0x38) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:46:52 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) listen(r0, 0x50) 22:46:52 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) listen(r0, 0x50) 22:46:52 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) listen(r0, 0x50) 22:46:52 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) listen(r0, 0x50) 22:46:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000017c0)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="91410aa2c1db7468d7010000011b804c7ed0ace302f5acd41d8bdcd2f4a01967ef82838dcefe6970ae3316a775ed29e6a3d9"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'veth0_to_bridge\x00'}) close(r0) [ 1887.499462][ T8374] not chained 2310000 origins [ 1887.504609][ T8374] CPU: 1 PID: 8374 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1887.514823][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1887.524991][ T8374] Call Trace: [ 1887.528351][ T8374] [ 1887.531362][ T8374] dump_stack_lvl+0x1c8/0x256 [ 1887.536248][ T8374] dump_stack+0x1a/0x1c [ 1887.540570][ T8374] kmsan_internal_chain_origin+0x78/0x120 [ 1887.546448][ T8374] ? filter_irq_stacks+0x5c/0x1a0 [ 1887.551659][ T8374] ? kmsan_internal_check_memory+0x94/0x530 [ 1887.557748][ T8374] ? do_recvmmsg+0x55a/0x1180 [ 1887.562576][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1887.568570][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1887.574555][ T8374] ? should_fail+0x3f/0x810 [ 1887.579215][ T8374] ? __stack_depot_save+0x21/0x4b0 [ 1887.584479][ T8374] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1887.590901][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1887.596874][ T8374] __msan_chain_origin+0xbd/0x140 [ 1887.602046][ T8374] ___sys_recvmsg+0x522/0x890 [ 1887.606854][ T8374] ? do_recvmmsg+0x5bc/0x1180 [ 1887.611707][ T8374] ? kmsan_internal_check_memory+0x94/0x530 [ 1887.617773][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1887.623747][ T8374] do_recvmmsg+0x55a/0x1180 [ 1887.628414][ T8374] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1887.634837][ T8374] ? do_syscall_64+0x3d/0xb0 [ 1887.639569][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1887.644754][ T8374] do_syscall_64+0x3d/0xb0 [ 1887.649308][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1887.655380][ T8374] RIP: 0033:0x7faec0089279 [ 1887.659904][ T8374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1887.679689][ T8374] RSP: 002b:00007faec116d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1887.688250][ T8374] RAX: ffffffffffffffda RBX: 00007faec019c120 RCX: 00007faec0089279 [ 1887.696357][ T8374] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1887.704449][ T8374] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1887.712552][ T8374] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1887.720650][ T8374] R13: 00007faec06cfb1f R14: 00007faec116d300 R15: 0000000000022000 [ 1887.728775][ T8374] [ 1887.734297][ T8374] Uninit was stored to memory at: [ 1887.739514][ T8374] ___sys_recvmsg+0x522/0x890 [ 1887.744659][ T8374] do_recvmmsg+0x55a/0x1180 [ 1887.749296][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1887.754549][ T8374] do_syscall_64+0x3d/0xb0 [ 1887.759095][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1887.765256][ T8374] [ 1887.767647][ T8374] Uninit was stored to memory at: [ 1887.772919][ T8374] ___sys_recvmsg+0x522/0x890 [ 1887.777724][ T8374] do_recvmmsg+0x55a/0x1180 [ 1887.782435][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1887.787599][ T8374] do_syscall_64+0x3d/0xb0 [ 1887.792225][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1887.798304][ T8374] [ 1887.800693][ T8374] Uninit was stored to memory at: [ 1887.805992][ T8374] ___sys_recvmsg+0x522/0x890 [ 1887.810823][ T8374] do_recvmmsg+0x55a/0x1180 [ 1887.815538][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1887.820693][ T8374] do_syscall_64+0x3d/0xb0 [ 1887.825322][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1887.831401][ T8374] [ 1887.833874][ T8374] Uninit was stored to memory at: [ 1887.839067][ T8374] ___sys_recvmsg+0x522/0x890 [ 1887.843957][ T8374] do_recvmmsg+0x55a/0x1180 [ 1887.848593][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1887.853838][ T8374] do_syscall_64+0x3d/0xb0 [ 1887.858390][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1887.864553][ T8374] [ 1887.866944][ T8374] Uninit was stored to memory at: [ 1887.872217][ T8374] ___sys_recvmsg+0x522/0x890 [ 1887.877022][ T8374] do_recvmmsg+0x55a/0x1180 [ 1887.881736][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1887.886897][ T8374] do_syscall_64+0x3d/0xb0 [ 1887.891445][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1887.897613][ T8374] [ 1887.900003][ T8374] Uninit was stored to memory at: [ 1887.905278][ T8374] ___sys_recvmsg+0x522/0x890 [ 1887.910085][ T8374] do_recvmmsg+0x55a/0x1180 [ 1887.914797][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1887.919964][ T8374] do_syscall_64+0x3d/0xb0 [ 1887.924593][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1887.930699][ T8374] [ 1887.933166][ T8374] Uninit was stored to memory at: [ 1887.938357][ T8374] ___sys_recvmsg+0x522/0x890 [ 1887.943251][ T8374] do_recvmmsg+0x55a/0x1180 [ 1887.947882][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1887.953120][ T8374] do_syscall_64+0x3d/0xb0 [ 1887.957664][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1887.963815][ T8374] [ 1887.966207][ T8374] Local variable msg_sys created at: [ 1887.971566][ T8374] do_recvmmsg+0x5c/0x1180 [ 1887.976202][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1888.325379][ T8374] not chained 2320000 origins [ 1888.330198][ T8374] CPU: 1 PID: 8374 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1888.340415][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1888.350598][ T8374] Call Trace: [ 1888.353959][ T8374] [ 1888.356969][ T8374] dump_stack_lvl+0x1c8/0x256 [ 1888.361836][ T8374] dump_stack+0x1a/0x1c [ 1888.366157][ T8374] kmsan_internal_chain_origin+0x78/0x120 [ 1888.372044][ T8374] ? filter_irq_stacks+0x5c/0x1a0 [ 1888.377258][ T8374] ? kmsan_internal_check_memory+0x94/0x530 [ 1888.383319][ T8374] ? do_recvmmsg+0x55a/0x1180 [ 1888.388128][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1888.394102][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1888.400074][ T8374] ? should_fail+0x3f/0x810 [ 1888.404752][ T8374] ? __stack_depot_save+0x21/0x4b0 [ 1888.410017][ T8374] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1888.416429][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1888.422403][ T8374] __msan_chain_origin+0xbd/0x140 [ 1888.427578][ T8374] ___sys_recvmsg+0x522/0x890 [ 1888.432390][ T8374] ? do_recvmmsg+0x5bc/0x1180 [ 1888.437234][ T8374] ? kmsan_internal_check_memory+0x94/0x530 [ 1888.443296][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1888.449280][ T8374] do_recvmmsg+0x55a/0x1180 [ 1888.453964][ T8374] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1888.460399][ T8374] ? do_syscall_64+0x3d/0xb0 [ 1888.465138][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1888.470329][ T8374] do_syscall_64+0x3d/0xb0 [ 1888.474909][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1888.480982][ T8374] RIP: 0033:0x7faec0089279 [ 1888.485515][ T8374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1888.505294][ T8374] RSP: 002b:00007faec116d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1888.513871][ T8374] RAX: ffffffffffffffda RBX: 00007faec019c120 RCX: 00007faec0089279 [ 1888.521985][ T8374] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1888.530076][ T8374] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1888.538168][ T8374] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1888.546270][ T8374] R13: 00007faec06cfb1f R14: 00007faec116d300 R15: 0000000000022000 [ 1888.554393][ T8374] [ 1888.560117][ T8374] Uninit was stored to memory at: [ 1888.565618][ T8374] ___sys_recvmsg+0x522/0x890 [ 1888.570427][ T8374] do_recvmmsg+0x55a/0x1180 [ 1888.575139][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1888.580309][ T8374] do_syscall_64+0x3d/0xb0 [ 1888.584958][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1888.591035][ T8374] [ 1888.593510][ T8374] Uninit was stored to memory at: [ 1888.598710][ T8374] ___sys_recvmsg+0x522/0x890 [ 1888.603598][ T8374] do_recvmmsg+0x55a/0x1180 [ 1888.608231][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1888.613483][ T8374] do_syscall_64+0x3d/0xb0 [ 1888.618029][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1888.624230][ T8374] [ 1888.626621][ T8374] Uninit was stored to memory at: [ 1888.631885][ T8374] ___sys_recvmsg+0x522/0x890 [ 1888.636698][ T8374] do_recvmmsg+0x55a/0x1180 [ 1888.641335][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1888.646640][ T8374] do_syscall_64+0x3d/0xb0 [ 1888.651187][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1888.657345][ T8374] [ 1888.659736][ T8374] Uninit was stored to memory at: [ 1888.665055][ T8374] ___sys_recvmsg+0x522/0x890 [ 1888.669866][ T8374] do_recvmmsg+0x55a/0x1180 [ 1888.674643][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1888.679812][ T8374] do_syscall_64+0x3d/0xb0 [ 1888.684505][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1888.690583][ T8374] [ 1888.693107][ T8374] Uninit was stored to memory at: [ 1888.698328][ T8374] ___sys_recvmsg+0x522/0x890 [ 1888.703223][ T8374] do_recvmmsg+0x55a/0x1180 [ 1888.707856][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1888.713148][ T8374] do_syscall_64+0x3d/0xb0 [ 1888.717694][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1888.723898][ T8374] [ 1888.726292][ T8374] Uninit was stored to memory at: [ 1888.731483][ T8374] ___sys_recvmsg+0x522/0x890 [ 1888.736433][ T8374] do_recvmmsg+0x55a/0x1180 [ 1888.741084][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1888.746400][ T8374] do_syscall_64+0x3d/0xb0 [ 1888.750947][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1888.757103][ T8374] [ 1888.759495][ T8374] Uninit was stored to memory at: [ 1888.764817][ T8374] ___sys_recvmsg+0x522/0x890 [ 1888.769631][ T8374] do_recvmmsg+0x55a/0x1180 [ 1888.774397][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1888.779566][ T8374] do_syscall_64+0x3d/0xb0 [ 1888.784230][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1888.790306][ T8374] [ 1888.792817][ T8374] Local variable msg_sys created at: [ 1888.798177][ T8374] do_recvmmsg+0x5c/0x1180 [ 1888.802850][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1889.131578][ T8374] not chained 2330000 origins [ 1889.136673][ T8374] CPU: 1 PID: 8374 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1889.146886][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1889.157054][ T8374] Call Trace: [ 1889.160413][ T8374] [ 1889.163430][ T8374] dump_stack_lvl+0x1c8/0x256 [ 1889.168325][ T8374] dump_stack+0x1a/0x1c [ 1889.172643][ T8374] kmsan_internal_chain_origin+0x78/0x120 [ 1889.178526][ T8374] ? filter_irq_stacks+0x5c/0x1a0 [ 1889.183736][ T8374] ? kmsan_internal_check_memory+0x94/0x530 [ 1889.189792][ T8374] ? do_recvmmsg+0x55a/0x1180 [ 1889.194603][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1889.200575][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1889.206545][ T8374] ? should_fail+0x3f/0x810 [ 1889.211199][ T8374] ? __stack_depot_save+0x21/0x4b0 [ 1889.216473][ T8374] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1889.222890][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1889.228866][ T8374] __msan_chain_origin+0xbd/0x140 [ 1889.234050][ T8374] ___sys_recvmsg+0x522/0x890 [ 1889.238871][ T8374] ? do_recvmmsg+0x5bc/0x1180 [ 1889.243712][ T8374] ? kmsan_internal_check_memory+0x94/0x530 [ 1889.249771][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1889.255750][ T8374] do_recvmmsg+0x55a/0x1180 [ 1889.260442][ T8374] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1889.266870][ T8374] ? do_syscall_64+0x3d/0xb0 [ 1889.271606][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1889.276796][ T8374] do_syscall_64+0x3d/0xb0 [ 1889.281348][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1889.287423][ T8374] RIP: 0033:0x7faec0089279 [ 1889.291941][ T8374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1889.311730][ T8374] RSP: 002b:00007faec116d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1889.320304][ T8374] RAX: ffffffffffffffda RBX: 00007faec019c120 RCX: 00007faec0089279 [ 1889.328448][ T8374] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1889.336543][ T8374] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1889.344644][ T8374] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1889.352736][ T8374] R13: 00007faec06cfb1f R14: 00007faec116d300 R15: 0000000000022000 [ 1889.360860][ T8374] [ 1889.366341][ T8374] Uninit was stored to memory at: [ 1889.371557][ T8374] ___sys_recvmsg+0x522/0x890 [ 1889.376708][ T8374] do_recvmmsg+0x55a/0x1180 [ 1889.381342][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1889.386603][ T8374] do_syscall_64+0x3d/0xb0 [ 1889.391147][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1889.397302][ T8374] [ 1889.399691][ T8374] Uninit was stored to memory at: [ 1889.404961][ T8374] ___sys_recvmsg+0x522/0x890 [ 1889.409767][ T8374] do_recvmmsg+0x55a/0x1180 [ 1889.414481][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1889.419642][ T8374] do_syscall_64+0x3d/0xb0 [ 1889.424264][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1889.430352][ T8374] [ 1889.432815][ T8374] Uninit was stored to memory at: [ 1889.437996][ T8374] ___sys_recvmsg+0x522/0x890 [ 1889.442868][ T8374] do_recvmmsg+0x55a/0x1180 [ 1889.447504][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1889.452753][ T8374] do_syscall_64+0x3d/0xb0 [ 1889.457295][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1889.463451][ T8374] [ 1889.465848][ T8374] Uninit was stored to memory at: [ 1889.471034][ T8374] ___sys_recvmsg+0x522/0x890 [ 1889.475956][ T8374] do_recvmmsg+0x55a/0x1180 [ 1889.480605][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1889.485860][ T8374] do_syscall_64+0x3d/0xb0 [ 1889.490411][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1889.496580][ T8374] [ 1889.498972][ T8374] Uninit was stored to memory at: [ 1889.504250][ T8374] ___sys_recvmsg+0x522/0x890 [ 1889.509056][ T8374] do_recvmmsg+0x55a/0x1180 [ 1889.513766][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1889.518956][ T8374] do_syscall_64+0x3d/0xb0 [ 1889.523608][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1889.529681][ T8374] [ 1889.532152][ T8374] Uninit was stored to memory at: [ 1889.537346][ T8374] ___sys_recvmsg+0x522/0x890 [ 1889.542251][ T8374] do_recvmmsg+0x55a/0x1180 [ 1889.546884][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1889.552124][ T8374] do_syscall_64+0x3d/0xb0 [ 1889.556674][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1889.562828][ T8374] [ 1889.565219][ T8374] Uninit was stored to memory at: [ 1889.570409][ T8374] ___sys_recvmsg+0x522/0x890 [ 1889.575299][ T8374] do_recvmmsg+0x55a/0x1180 [ 1889.579923][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1889.585153][ T8374] do_syscall_64+0x3d/0xb0 [ 1889.589695][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1889.595845][ T8374] [ 1889.598237][ T8374] Local variable msg_sys created at: [ 1889.603679][ T8374] do_recvmmsg+0x5c/0x1180 [ 1889.608222][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1889.898485][ T8374] not chained 2340000 origins [ 1889.903509][ T8374] CPU: 1 PID: 8374 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1889.913809][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1889.923979][ T8374] Call Trace: [ 1889.927337][ T8374] [ 1889.930348][ T8374] dump_stack_lvl+0x1c8/0x256 [ 1889.935214][ T8374] dump_stack+0x1a/0x1c [ 1889.939534][ T8374] kmsan_internal_chain_origin+0x78/0x120 [ 1889.945408][ T8374] ? filter_irq_stacks+0x5c/0x1a0 [ 1889.950617][ T8374] ? kmsan_internal_check_memory+0x94/0x530 [ 1889.956661][ T8374] ? do_recvmmsg+0x55a/0x1180 [ 1889.961482][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1889.967460][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1889.973436][ T8374] ? should_fail+0x3f/0x810 [ 1889.978089][ T8374] ? __stack_depot_save+0x21/0x4b0 [ 1889.983348][ T8374] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1889.989762][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1889.995727][ T8374] __msan_chain_origin+0xbd/0x140 [ 1890.000896][ T8374] ___sys_recvmsg+0x522/0x890 [ 1890.005703][ T8374] ? do_recvmmsg+0x5bc/0x1180 [ 1890.010539][ T8374] ? kmsan_internal_check_memory+0x94/0x530 [ 1890.016595][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1890.022569][ T8374] do_recvmmsg+0x55a/0x1180 [ 1890.027257][ T8374] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1890.033682][ T8374] ? do_syscall_64+0x3d/0xb0 [ 1890.038412][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1890.043600][ T8374] do_syscall_64+0x3d/0xb0 [ 1890.048147][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1890.054247][ T8374] RIP: 0033:0x7faec0089279 [ 1890.058765][ T8374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1890.078556][ T8374] RSP: 002b:00007faec116d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1890.087113][ T8374] RAX: ffffffffffffffda RBX: 00007faec019c120 RCX: 00007faec0089279 [ 1890.095215][ T8374] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1890.103492][ T8374] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1890.111600][ T8374] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1890.119679][ T8374] R13: 00007faec06cfb1f R14: 00007faec116d300 R15: 0000000000022000 [ 1890.127792][ T8374] [ 1890.136886][ T8374] Uninit was stored to memory at: [ 1890.143358][ T8374] ___sys_recvmsg+0x522/0x890 [ 1890.148178][ T8374] do_recvmmsg+0x55a/0x1180 [ 1890.152894][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1890.158053][ T8374] do_syscall_64+0x3d/0xb0 [ 1890.162675][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1890.169357][ T8374] [ 1890.171832][ T8374] Uninit was stored to memory at: [ 1890.177028][ T8374] ___sys_recvmsg+0x522/0x890 [ 1890.181906][ T8374] do_recvmmsg+0x55a/0x1180 [ 1890.186537][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1890.191770][ T8374] do_syscall_64+0x3d/0xb0 [ 1890.196312][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1890.202465][ T8374] [ 1890.204858][ T8374] Uninit was stored to memory at: [ 1890.210049][ T8374] ___sys_recvmsg+0x522/0x890 [ 1890.214947][ T8374] do_recvmmsg+0x55a/0x1180 [ 1890.219583][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1890.224827][ T8374] do_syscall_64+0x3d/0xb0 [ 1890.229372][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1890.235528][ T8374] [ 1890.237916][ T8374] Uninit was stored to memory at: [ 1890.243183][ T8374] ___sys_recvmsg+0x522/0x890 [ 1890.248017][ T8374] do_recvmmsg+0x55a/0x1180 [ 1890.254563][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1890.259725][ T8374] do_syscall_64+0x3d/0xb0 [ 1890.264349][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1890.270423][ T8374] [ 1890.272890][ T8374] Uninit was stored to memory at: [ 1890.278085][ T8374] ___sys_recvmsg+0x522/0x890 [ 1890.282972][ T8374] do_recvmmsg+0x55a/0x1180 [ 1890.287606][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1890.292837][ T8374] do_syscall_64+0x3d/0xb0 [ 1890.297379][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1890.303538][ T8374] [ 1890.305945][ T8374] Uninit was stored to memory at: [ 1890.311142][ T8374] ___sys_recvmsg+0x522/0x890 [ 1890.316065][ T8374] do_recvmmsg+0x55a/0x1180 [ 1890.320720][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1890.326043][ T8374] do_syscall_64+0x3d/0xb0 [ 1890.330598][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1890.336760][ T8374] [ 1890.339162][ T8374] Uninit was stored to memory at: [ 1890.344484][ T8374] ___sys_recvmsg+0x522/0x890 [ 1890.349299][ T8374] do_recvmmsg+0x55a/0x1180 [ 1890.354018][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1890.359186][ T8374] do_syscall_64+0x3d/0xb0 [ 1890.363877][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1890.369972][ T8374] [ 1890.372498][ T8374] Local variable msg_sys created at: [ 1890.377860][ T8374] do_recvmmsg+0x5c/0x1180 [ 1890.382485][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1890.647006][ T8374] not chained 2350000 origins [ 1890.652520][ T8374] CPU: 0 PID: 8374 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1890.662737][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1890.672859][ T8374] Call Trace: [ 1890.676193][ T8374] [ 1890.679159][ T8374] dump_stack_lvl+0x1c8/0x256 [ 1890.683950][ T8374] dump_stack+0x1a/0x1c [ 1890.688201][ T8374] kmsan_internal_chain_origin+0x78/0x120 [ 1890.694073][ T8374] ? filter_irq_stacks+0x5c/0x1a0 [ 1890.699302][ T8374] ? kmsan_internal_check_memory+0x94/0x530 [ 1890.705308][ T8374] ? do_recvmmsg+0x55a/0x1180 [ 1890.710088][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1890.716043][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1890.722032][ T8374] ? should_fail+0x3f/0x810 [ 1890.726662][ T8374] ? __stack_depot_save+0x21/0x4b0 [ 1890.731861][ T8374] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1890.738207][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1890.744112][ T8374] __msan_chain_origin+0xbd/0x140 [ 1890.749219][ T8374] ___sys_recvmsg+0x522/0x890 [ 1890.754031][ T8374] ? do_recvmmsg+0x5bc/0x1180 [ 1890.758830][ T8374] ? kmsan_internal_check_memory+0x94/0x530 [ 1890.764861][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1890.770841][ T8374] do_recvmmsg+0x55a/0x1180 [ 1890.775485][ T8374] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1890.781824][ T8374] ? do_syscall_64+0x3d/0xb0 [ 1890.786490][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1890.791629][ T8374] do_syscall_64+0x3d/0xb0 [ 1890.796132][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1890.802140][ T8374] RIP: 0033:0x7faec0089279 [ 1890.806623][ T8374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1890.826329][ T8374] RSP: 002b:00007faec116d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1890.834818][ T8374] RAX: ffffffffffffffda RBX: 00007faec019c120 RCX: 00007faec0089279 [ 1890.842891][ T8374] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1890.850922][ T8374] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1890.858970][ T8374] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1890.867040][ T8374] R13: 00007faec06cfb1f R14: 00007faec116d300 R15: 0000000000022000 [ 1890.875143][ T8374] [ 1890.908030][ T8374] Uninit was stored to memory at: [ 1890.913322][ T8374] ___sys_recvmsg+0x522/0x890 [ 1890.918068][ T8374] do_recvmmsg+0x55a/0x1180 [ 1890.922642][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1890.927749][ T8374] do_syscall_64+0x3d/0xb0 [ 1890.936088][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1890.943182][ T8374] [ 1890.945927][ T8374] Uninit was stored to memory at: [ 1890.951562][ T8374] ___sys_recvmsg+0x522/0x890 [ 1890.956979][ T8374] do_recvmmsg+0x55a/0x1180 [ 1890.962197][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1890.967829][ T8374] do_syscall_64+0x3d/0xb0 [ 1890.973070][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1890.979877][ T8374] [ 1890.982809][ T8374] Uninit was stored to memory at: [ 1890.988455][ T8374] ___sys_recvmsg+0x522/0x890 [ 1890.994044][ T8374] do_recvmmsg+0x55a/0x1180 [ 1890.999350][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1891.005372][ T8374] do_syscall_64+0x3d/0xb0 [ 1891.010325][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1891.017224][ T8374] [ 1891.019837][ T8374] Uninit was stored to memory at: [ 1891.025823][ T8374] ___sys_recvmsg+0x522/0x890 [ 1891.031052][ T8374] do_recvmmsg+0x55a/0x1180 [ 1891.036363][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1891.043134][ T8374] do_syscall_64+0x3d/0xb0 [ 1891.048310][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1891.055258][ T8374] [ 1891.057851][ T8374] Uninit was stored to memory at: [ 1891.063748][ T8374] ___sys_recvmsg+0x522/0x890 [ 1891.068948][ T8374] do_recvmmsg+0x55a/0x1180 [ 1891.074337][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1891.079946][ T8374] do_syscall_64+0x3d/0xb0 [ 1891.085150][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1891.094174][ T8374] [ 1891.096792][ T8374] Uninit was stored to memory at: [ 1891.102741][ T8374] ___sys_recvmsg+0x522/0x890 [ 1891.108190][ T8374] do_recvmmsg+0x55a/0x1180 [ 1891.113728][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1891.119621][ T8374] do_syscall_64+0x3d/0xb0 [ 1891.124649][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1891.131137][ T8374] [ 1891.134003][ T8374] Uninit was stored to memory at: [ 1891.139668][ T8374] ___sys_recvmsg+0x522/0x890 [ 1891.145178][ T8374] do_recvmmsg+0x55a/0x1180 [ 1891.150202][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1891.156176][ T8374] do_syscall_64+0x3d/0xb0 [ 1891.161133][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1891.168034][ T8374] [ 1891.170726][ T8374] Local variable msg_sys created at: [ 1891.176829][ T8374] do_recvmmsg+0x5c/0x1180 [ 1891.182125][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1891.495575][ T8374] not chained 2360000 origins [ 1891.500769][ T8374] CPU: 0 PID: 8374 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1891.510931][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1891.521047][ T8374] Call Trace: [ 1891.524365][ T8374] [ 1891.527333][ T8374] dump_stack_lvl+0x1c8/0x256 [ 1891.532114][ T8374] dump_stack+0x1a/0x1c [ 1891.536359][ T8374] kmsan_internal_chain_origin+0x78/0x120 [ 1891.542252][ T8374] ? filter_irq_stacks+0x5c/0x1a0 [ 1891.547383][ T8374] ? kmsan_internal_check_memory+0x94/0x530 [ 1891.553383][ T8374] ? do_recvmmsg+0x55a/0x1180 [ 1891.558200][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1891.564242][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1891.570145][ T8374] ? should_fail+0x3f/0x810 [ 1891.574730][ T8374] ? __stack_depot_save+0x21/0x4b0 [ 1891.579932][ T8374] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1891.586265][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1891.592162][ T8374] __msan_chain_origin+0xbd/0x140 [ 1891.597260][ T8374] ___sys_recvmsg+0x522/0x890 [ 1891.602072][ T8374] ? do_recvmmsg+0x5bc/0x1180 [ 1891.606896][ T8374] ? kmsan_internal_check_memory+0x94/0x530 [ 1891.612930][ T8374] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1891.618828][ T8374] do_recvmmsg+0x55a/0x1180 [ 1891.623412][ T8374] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1891.629741][ T8374] ? do_syscall_64+0x3d/0xb0 [ 1891.634400][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1891.639508][ T8374] do_syscall_64+0x3d/0xb0 [ 1891.643997][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1891.649994][ T8374] RIP: 0033:0x7faec0089279 [ 1891.654467][ T8374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1891.674436][ T8374] RSP: 002b:00007faec116d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1891.682942][ T8374] RAX: ffffffffffffffda RBX: 00007faec019c120 RCX: 00007faec0089279 [ 1891.690973][ T8374] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1891.699090][ T8374] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1891.707150][ T8374] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1891.715256][ T8374] R13: 00007faec06cfb1f R14: 00007faec116d300 R15: 0000000000022000 [ 1891.723313][ T8374] [ 1891.755751][ T8374] Uninit was stored to memory at: [ 1891.760994][ T8374] ___sys_recvmsg+0x522/0x890 [ 1891.765813][ T8374] do_recvmmsg+0x55a/0x1180 [ 1891.770444][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1891.775620][ T8374] do_syscall_64+0x3d/0xb0 [ 1891.790808][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1891.797813][ T8374] [ 1891.800386][ T8374] Uninit was stored to memory at: [ 1891.806358][ T8374] ___sys_recvmsg+0x522/0x890 [ 1891.811778][ T8374] do_recvmmsg+0x55a/0x1180 [ 1891.817035][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1891.822991][ T8374] do_syscall_64+0x3d/0xb0 [ 1891.827899][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1891.834741][ T8374] [ 1891.837355][ T8374] Uninit was stored to memory at: [ 1891.843391][ T8374] ___sys_recvmsg+0x522/0x890 [ 1891.848836][ T8374] do_recvmmsg+0x55a/0x1180 [ 1891.854208][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1891.859816][ T8374] do_syscall_64+0x3d/0xb0 [ 1891.865062][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1891.871763][ T8374] [ 1891.874505][ T8374] Uninit was stored to memory at: [ 1891.880120][ T8374] ___sys_recvmsg+0x522/0x890 [ 1891.885631][ T8374] do_recvmmsg+0x55a/0x1180 [ 1891.890667][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1891.896575][ T8374] do_syscall_64+0x3d/0xb0 [ 1891.901513][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1891.908515][ T8374] [ 1891.911085][ T8374] Uninit was stored to memory at: [ 1891.917095][ T8374] ___sys_recvmsg+0x522/0x890 [ 1891.922673][ T8374] do_recvmmsg+0x55a/0x1180 [ 1891.927666][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1891.933621][ T8374] do_syscall_64+0x3d/0xb0 [ 1891.938782][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1891.945743][ T8374] [ 1891.948360][ T8374] Uninit was stored to memory at: [ 1891.954251][ T8374] ___sys_recvmsg+0x522/0x890 [ 1891.959438][ T8374] do_recvmmsg+0x55a/0x1180 [ 1891.964765][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1891.970628][ T8374] do_syscall_64+0x3d/0xb0 [ 1891.976024][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1891.983084][ T8374] [ 1891.985834][ T8374] Uninit was stored to memory at: [ 1891.991470][ T8374] ___sys_recvmsg+0x522/0x890 [ 1891.996979][ T8374] do_recvmmsg+0x55a/0x1180 [ 1892.002353][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1892.007942][ T8374] do_syscall_64+0x3d/0xb0 [ 1892.013128][ T8374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1892.019684][ T8374] [ 1892.022544][ T8374] Local variable msg_sys created at: [ 1892.028607][ T8374] do_recvmmsg+0x5c/0x1180 [ 1892.033817][ T8374] __x64_sys_recvmmsg+0x3a7/0x4b0 22:46:59 executing program 5: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000001240)='net/ptype\x00') pread64(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x33) 22:46:59 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) listen(r0, 0x50) 22:46:59 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000000)="ce", 0x34000, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 22:46:59 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) listen(r0, 0x50) 22:46:59 executing program 0: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000100)="74115727975ca48e8b345f589fde80d1c07dbd2fcba0b3ef8e4c75412cdc2974a2d82de2af93b955f3a14ffd5e8c49b00431", 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) open$dir(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000280)="9032078758d22a5929f6259c8eb48f004c2288103348bcd399670a490ab7f80b1c6f0ea1fde2573223e165f167f0c8b3d3", &(0x7f0000000400)=""/130, 0x0, 0x0, 0x21c}, 0x38) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:46:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x1}) 22:47:00 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) ustat(0x1f, &(0x7f0000000680)) 22:47:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000380)=""/36, 0x24}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000006c0)="d8d4606e8d70402cd1edbafe040151ebafc7416c9878b826acaed2f48a7342ac1595d8c568", 0x25}], 0x1}}], 0x1, 0x0) 22:47:00 executing program 5: madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 22:47:00 executing program 0: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000100)="74115727975ca48e8b345f589fde80d1c07dbd2fcba0b3ef8e4c75412cdc2974a2d82de2af93b955f3a14ffd5e8c49b00431", 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) open$dir(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000280)="9032078758d22a5929f6259c8eb48f004c2288103348bcd399670a490ab7f80b1c6f0ea1fde2573223e165f167f0c8b3d3", &(0x7f0000000400)=""/130, 0x0, 0x0, 0x21c}, 0x38) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:47:00 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) 22:47:00 executing program 4: set_mempolicy(0x3, &(0x7f00000000c0)=0xffff, 0x5) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x41) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:47:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}]}, 0x4c}}, 0x0) 22:47:00 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0xfffffffffffffffe) [ 1894.775785][ T8382] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 22:47:02 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000000)="ce", 0x34000, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 22:47:02 executing program 2: ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000240)={0x0, 0x1, "ae"}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=@base={0x1, 0xa, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000300), &(0x7f00000001c0)=@tcp6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000240), 0x0}, 0x20) 22:47:02 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @win={{0x0, 0x0, 0x3231564e}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 22:47:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}]}, 0x4c}}, 0x0) 22:47:02 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r2, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf6, 0x0, &(0x7f00000000c0)) 22:47:02 executing program 0: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000100)="74115727975ca48e8b345f589fde80d1c07dbd2fcba0b3ef8e4c75412cdc2974a2d82de2af93b955f3a14ffd5e8c49b00431", 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) open$dir(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000280)="9032078758d22a5929f6259c8eb48f004c2288103348bcd399670a490ab7f80b1c6f0ea1fde2573223e165f167f0c8b3d3", &(0x7f0000000400)=""/130, 0x0, 0x0, 0x21c}, 0x38) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:47:02 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000000)="ce", 0x34000, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 22:47:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}]}, 0x4c}}, 0x0) 22:47:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}]}, 0x4c}}, 0x0) 22:47:02 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r2, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf6, 0x0, &(0x7f00000000c0)) 22:47:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}]}, 0x4c}}, 0x0) 22:47:03 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r2, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf6, 0x0, &(0x7f00000000c0)) [ 1898.281836][ T8458] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1898.436373][ T8482] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 22:47:06 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000000)="ce", 0x34000, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 22:47:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}]}, 0x4c}}, 0x0) 22:47:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0xb1c661d318500c51) fcntl$setownex(r0, 0xf, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000280)=""/225, 0xe1}], 0x1, 0x0, 0x0) 22:47:06 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r2, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf6, 0x0, &(0x7f00000000c0)) 22:47:06 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r2, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf6, 0x0, &(0x7f00000000c0)) 22:47:07 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x484}, {&(0x7f0000000fc0)=""/4096, 0x3e0}, {&(0x7f0000000400)=""/106, 0x191}, {&(0x7f0000000740)=""/73, 0x444}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x4ac}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 22:47:07 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000000)="ce", 0x34000, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 22:47:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}]}, 0x4c}}, 0x0) 22:47:07 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r2, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf6, 0x0, &(0x7f00000000c0)) 22:47:07 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r2, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf6, 0x0, &(0x7f00000000c0)) 22:47:07 executing program 4: setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0180000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="9b42072ebb"], 0x20000600}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) dup(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) 22:47:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000e80)={&(0x7f00000008c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000900)="bb", 0x1}, {0x0}, {0x0}], 0x3}, 0x0) [ 1902.824112][ T8525] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1902.974132][ T8538] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 22:47:11 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000000)="ce", 0x34000, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 22:47:11 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCEXCL(r0, 0x5428) 22:47:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{}, {0x44}, {0x6}]}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)='4', 0x1}], 0x1) 22:47:11 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x200, 0x22801) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)) 22:47:11 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x484}, {&(0x7f0000000fc0)=""/4096, 0x3e0}, {&(0x7f0000000400)=""/106, 0x191}, {&(0x7f0000000740)=""/73, 0x444}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x4ac}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 22:47:11 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000500)) 22:47:11 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000000)="ce", 0x34000, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 22:47:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x8970, &(0x7f00000002c0)="ee3a") 22:47:11 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x80002, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000001c0)=0x2) [ 1904.949318][ T8617] binder: 8615:8617 ioctl c018620c 20000500 returned -1 22:47:12 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000240)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x1}, 0x18) 22:47:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x74) 22:47:12 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d429735f00010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x2, "f2c5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) [ 1906.066136][ T8359] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1906.664893][ T8359] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=29.d4 [ 1906.674271][ T8359] usb 1-1: New USB device strings: Mfr=115, Product=95, SerialNumber=0 [ 1906.682852][ T8359] usb 1-1: Product: syz [ 1906.687208][ T8359] usb 1-1: Manufacturer: syz [ 1906.759943][ T8359] usb 1-1: config 0 descriptor?? [ 1907.232239][ T8359] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1907.884397][ T25] usb 1-1: USB disconnect, device number 83 22:47:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0xa, 0x1a, @empty}, @IFLA_BOND_MODE={0x5}]}}}]}, 0x44}}, 0x0) 22:47:15 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x484}, {&(0x7f0000000fc0)=""/4096, 0x3e0}, {&(0x7f0000000400)=""/106, 0x191}, {&(0x7f0000000740)=""/73, 0x444}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x4ac}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 22:47:15 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000001380)={&(0x7f0000001140)=@id, 0x10, &(0x7f0000001280)=[{&(0x7f0000001180)="b0", 0x1}], 0x1, &(0x7f00000012c0)="6f86a500e04d6a3a26b9f34192000045461f05f090a78e8f17f165e74abe974009c4150e2e", 0x25}, 0x2000c8c1) 22:47:15 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) [ 1908.986028][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1908.996113][ T8680] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) 22:47:16 executing program 1: sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) 22:47:16 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x40}, [@alu={0x4, 0x0, 0xc, 0x1, 0x6, 0x50, 0xfffffffffffffff0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4000000a}, @call={0x85, 0x0, 0x0, 0x51}, @cb_func, @jmp={0x5, 0x0, 0x2, 0x4, 0x4, 0x30}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x70e7}, @exit]}, &(0x7f0000000100)='syzkaller\x00', 0x1f, 0x5e, &(0x7f0000000440)=""/94, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xf}, 0x10}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x57, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000540)={r3, 0x9, 0x7, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c000000100000012bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008002800f20e000008001b00000000004c002b8008000800", @ANYRES32=r4, @ANYBLOB="080003000000000008000800", @ANYRES32=r3, @ANYBLOB="01000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="080003000500000008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x24024010}, 0x2404c001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r0, @ANYRESDEC=r4], 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x0) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000011, 0x0, 0x2811fdff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00a778a581910fb6a824e419699db50da03f3db27297e49a5a41546ee55e4c07b68ec68ed693e867cdc14aa33d83cf4ca8867a874d8ae16007c64208410c4c46295b7c4c58cb5709bb7be4f06d3ccbf2db332dac4bb7874926bd02ee034d81df4f7a6fb6dbe5de511718ed0cb93cb36292a752ada92bd3eaf40308a4e31ddf1ca5da0ea3f7ef041b93865305aa6fc553886f6b66f5abdb15c9cd8b08df54bf2502c1e7d09e63ba6465d892ebf50dbe8e03b8880d351c8f844da23fc163d642e1805c15", @ANYRES64=r7, @ANYRES64=r7, @ANYRESDEC=r7]) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1909.541518][ T8688] not chained 2370000 origins [ 1909.547268][ T8688] CPU: 0 PID: 8688 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1909.557502][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1909.567664][ T8688] Call Trace: [ 1909.571014][ T8688] [ 1909.574012][ T8688] dump_stack_lvl+0x1c8/0x256 [ 1909.578868][ T8688] dump_stack+0x1a/0x1c [ 1909.583175][ T8688] kmsan_internal_chain_origin+0x78/0x120 [ 1909.589036][ T8688] ? filter_irq_stacks+0x5c/0x1a0 [ 1909.594247][ T8688] ? kmsan_internal_check_memory+0x94/0x530 [ 1909.600370][ T8688] ? do_recvmmsg+0x55a/0x1180 [ 1909.605196][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1909.611710][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1909.617693][ T8688] ? should_fail+0x3f/0x810 [ 1909.622343][ T8688] ? __stack_depot_save+0x21/0x4b0 [ 1909.627593][ T8688] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1909.634003][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1909.639967][ T8688] __msan_chain_origin+0xbd/0x140 [ 1909.645126][ T8688] ___sys_recvmsg+0x522/0x890 [ 1909.649945][ T8688] ? do_recvmmsg+0x5bc/0x1180 [ 1909.654811][ T8688] ? kmsan_internal_check_memory+0x94/0x530 [ 1909.660892][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1909.666860][ T8688] do_recvmmsg+0x55a/0x1180 [ 1909.671528][ T8688] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1909.678021][ T8688] ? do_syscall_64+0x3d/0xb0 [ 1909.682739][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1909.687909][ T8688] do_syscall_64+0x3d/0xb0 [ 1909.692445][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1909.698541][ T8688] RIP: 0033:0x7f6a17489279 [ 1909.703061][ T8688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1909.722819][ T8688] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1909.731362][ T8688] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1909.739442][ T8688] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1909.747514][ T8688] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1909.755587][ T8688] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1909.763653][ T8688] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1909.771750][ T8688] [ 1909.805262][ T8688] Uninit was stored to memory at: [ 1909.810581][ T8688] ___sys_recvmsg+0x522/0x890 [ 1909.815390][ T8688] do_recvmmsg+0x55a/0x1180 [ 1909.820033][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1909.825206][ T8688] do_syscall_64+0x3d/0xb0 [ 1909.833846][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1909.840760][ T8688] [ 1909.843675][ T8688] Uninit was stored to memory at: [ 1909.849703][ T8688] ___sys_recvmsg+0x522/0x890 [ 1909.855295][ T8688] do_recvmmsg+0x55a/0x1180 [ 1909.860595][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1909.866767][ T8688] do_syscall_64+0x3d/0xb0 [ 1909.872078][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1909.879002][ T8688] [ 1909.881917][ T8688] Uninit was stored to memory at: [ 1909.887875][ T8688] ___sys_recvmsg+0x522/0x890 [ 1909.893551][ T8688] do_recvmmsg+0x55a/0x1180 [ 1909.898811][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1909.906207][ T8688] do_syscall_64+0x3d/0xb0 [ 1909.911385][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1909.918580][ T8688] [ 1909.921340][ T8688] Uninit was stored to memory at: [ 1909.927453][ T8688] ___sys_recvmsg+0x522/0x890 [ 1909.933076][ T8688] do_recvmmsg+0x55a/0x1180 [ 1909.938308][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1909.944543][ T8688] do_syscall_64+0x3d/0xb0 [ 1909.949737][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1909.956806][ T8688] [ 1909.959577][ T8688] Uninit was stored to memory at: [ 1909.965598][ T8688] ___sys_recvmsg+0x522/0x890 [ 1909.971072][ T8688] do_recvmmsg+0x55a/0x1180 [ 1909.978740][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1909.984736][ T8688] do_syscall_64+0x3d/0xb0 [ 1909.989886][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1909.997026][ T8688] [ 1909.999788][ T8688] Uninit was stored to memory at: 22:47:17 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xcf, 0x29, 0x4b, 0x40, 0xecec, 0x6978, 0x1212, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x4}}]}}]}}, 0x0) 22:47:17 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/180, 0xb4) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000240)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000140)) 22:47:17 executing program 1: syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) [ 1910.005891][ T8688] ___sys_recvmsg+0x522/0x890 [ 1910.011350][ T8688] do_recvmmsg+0x55a/0x1180 [ 1910.016780][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1910.022795][ T8688] do_syscall_64+0x3d/0xb0 [ 1910.027993][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1910.034988][ T8688] [ 1910.037732][ T8688] Uninit was stored to memory at: [ 1910.043620][ T8688] ___sys_recvmsg+0x522/0x890 [ 1910.049043][ T8688] do_recvmmsg+0x55a/0x1180 [ 1910.054462][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1910.060541][ T8688] do_syscall_64+0x3d/0xb0 [ 1910.065851][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1910.072920][ T8688] [ 1910.075683][ T8688] Local variable msg_sys created at: [ 1910.081897][ T8688] do_recvmmsg+0x5c/0x1180 [ 1910.087083][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 22:47:17 executing program 2: r0 = fsopen(&(0x7f0000000040)='adfs\x00', 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 22:47:17 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x484}, {&(0x7f0000000fc0)=""/4096, 0x3e0}, {&(0x7f0000000400)=""/106, 0x191}, {&(0x7f0000000740)=""/73, 0x444}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x4ac}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 1910.442135][ T25] usb 4-1: new high-speed USB device number 64 using dummy_hcd 22:47:17 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendto(r0, 0x0, 0xfffffffffffffe7f, 0x0, 0x0, 0x0) [ 1910.982712][ T25] usb 4-1: New USB device found, idVendor=ecec, idProduct=6978, bcdDevice=12.12 [ 1910.992153][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.000349][ T25] usb 4-1: Product: syz [ 1911.004849][ T25] usb 4-1: Manufacturer: syz [ 1911.011460][ T25] usb 4-1: SerialNumber: syz 22:47:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024001d0f000001000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b0001006d756c7469710000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) 22:47:18 executing program 4: r0 = syz_io_uring_setup(0xccd, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000300), 0x9, 0x0, 0x13}, 0x0, 0x6142}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100001"], 0x28}}, 0x0) io_uring_enter(r0, 0x7c3, 0x0, 0x0, 0x0, 0x0) [ 1911.204481][ T25] usb 4-1: config 0 descriptor?? [ 1911.250294][ T25] usb-storage 4-1:0.0: USB Mass Storage device detected 22:47:18 executing program 5: unshare(0xe040400) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x937e, &(0x7f0000000540)) [ 1911.492570][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1911.553905][ T25] usb 4-1: USB disconnect, device number 64 [ 1911.768222][T19519] usb 2-1: new high-speed USB device number 68 using dummy_hcd 22:47:18 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2020000000800213, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) 22:47:19 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_secret(0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) [ 1912.052253][T19519] usb 2-1: Using ep0 maxpacket: 8 [ 1912.178356][T19519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1912.190890][T19519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1912.202102][T19519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024 [ 1912.215111][T19519] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1912.542723][T19519] usb 2-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86 [ 1912.553349][T19519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.562770][T19519] usb 2-1: Product: syz [ 1912.567772][T19519] usb 2-1: Manufacturer: syz [ 1912.573383][T19519] usb 2-1: SerialNumber: syz [ 1912.639536][T19519] usb 2-1: config 0 descriptor?? [ 1913.009217][ T8688] not chained 2380000 origins [ 1913.014238][ T8688] CPU: 1 PID: 8688 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1913.024459][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1913.034783][ T8688] Call Trace: [ 1913.038166][ T8688] [ 1913.041177][ T8688] dump_stack_lvl+0x1c8/0x256 [ 1913.046068][ T8688] dump_stack+0x1a/0x1c [ 1913.050403][ T8688] kmsan_internal_chain_origin+0x78/0x120 [ 1913.056282][ T8688] ? filter_irq_stacks+0x5c/0x1a0 [ 1913.061494][ T8688] ? kmsan_internal_check_memory+0x94/0x530 [ 1913.067542][ T8688] ? do_recvmmsg+0x55a/0x1180 [ 1913.072358][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1913.078338][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1913.084318][ T8688] ? should_fail+0x3f/0x810 [ 1913.088982][ T8688] ? __stack_depot_save+0x21/0x4b0 [ 1913.094259][ T8688] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1913.100668][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1913.106639][ T8688] __msan_chain_origin+0xbd/0x140 [ 1913.112605][ T8688] ___sys_recvmsg+0x522/0x890 [ 1913.117419][ T8688] ? do_recvmmsg+0x5bc/0x1180 [ 1913.122260][ T8688] ? kmsan_internal_check_memory+0x94/0x530 [ 1913.128315][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1913.134287][ T8688] do_recvmmsg+0x55a/0x1180 [ 1913.138951][ T8688] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1913.145369][ T8688] ? do_syscall_64+0x3d/0xb0 [ 1913.150106][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1913.155296][ T8688] do_syscall_64+0x3d/0xb0 [ 1913.159855][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1913.165933][ T8688] RIP: 0033:0x7f6a17489279 [ 1913.170463][ T8688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1913.190249][ T8688] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1913.198815][ T8688] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1913.206915][ T8688] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1913.215011][ T8688] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1913.223101][ T8688] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1913.231186][ T8688] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1913.239326][ T8688] [ 1913.246338][ T8688] Uninit was stored to memory at: [ 1913.251560][ T8688] ___sys_recvmsg+0x522/0x890 [ 1913.257160][ T8688] do_recvmmsg+0x55a/0x1180 [ 1913.261888][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1913.267050][ T8688] do_syscall_64+0x3d/0xb0 [ 1913.271673][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1913.277747][ T8688] [ 1913.280134][ T8688] Uninit was stored to memory at: [ 1913.285415][ T8688] ___sys_recvmsg+0x522/0x890 [ 1913.290232][ T8688] do_recvmmsg+0x55a/0x1180 [ 1913.294943][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1913.300112][ T8688] do_syscall_64+0x3d/0xb0 [ 1913.304739][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1913.310812][ T8688] [ 1913.313279][ T8688] Uninit was stored to memory at: [ 1913.318466][ T8688] ___sys_recvmsg+0x522/0x890 [ 1913.323361][ T8688] do_recvmmsg+0x55a/0x1180 [ 1913.327995][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1913.333235][ T8688] do_syscall_64+0x3d/0xb0 [ 1913.337780][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1913.344032][ T8688] [ 1913.346446][ T8688] Uninit was stored to memory at: [ 1913.351843][ T8688] ___sys_recvmsg+0x522/0x890 [ 1913.356661][ T8688] do_recvmmsg+0x55a/0x1180 [ 1913.361297][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1913.366562][ T8688] do_syscall_64+0x3d/0xb0 [ 1913.371107][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1913.377265][ T8688] [ 1913.379742][ T8688] Uninit was stored to memory at: [ 1913.385018][ T8688] ___sys_recvmsg+0x522/0x890 [ 1913.389822][ T8688] do_recvmmsg+0x55a/0x1180 [ 1913.394536][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1913.399694][ T8688] do_syscall_64+0x3d/0xb0 [ 1913.404320][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1913.410394][ T8688] [ 1913.412865][ T8688] Uninit was stored to memory at: [ 1913.418068][ T8688] ___sys_recvmsg+0x522/0x890 [ 1913.422949][ T8688] do_recvmmsg+0x55a/0x1180 [ 1913.427595][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1913.432842][ T8688] do_syscall_64+0x3d/0xb0 [ 1913.437393][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1913.443546][ T8688] [ 1913.445935][ T8688] Uninit was stored to memory at: [ 1913.451147][ T8688] ___sys_recvmsg+0x522/0x890 [ 1913.456048][ T8688] do_recvmmsg+0x55a/0x1180 [ 1913.460695][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1913.465943][ T8688] do_syscall_64+0x3d/0xb0 [ 1913.470495][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1913.476659][ T8688] [ 1913.479055][ T8688] Local variable msg_sys created at: [ 1913.484503][ T8688] do_recvmmsg+0x5c/0x1180 [ 1913.489070][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1913.595232][T19519] usb 2-1: USB disconnect, device number 68 [ 1914.274040][ T8688] not chained 2390000 origins [ 1914.278845][ T8688] CPU: 1 PID: 8688 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1914.289667][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1914.299840][ T8688] Call Trace: [ 1914.303207][ T8688] [ 1914.306228][ T8688] dump_stack_lvl+0x1c8/0x256 [ 1914.311112][ T8688] dump_stack+0x1a/0x1c [ 1914.315455][ T8688] kmsan_internal_chain_origin+0x78/0x120 [ 1914.321334][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1914.327353][ T8688] ? update_misfit_status+0x2c/0xb30 [ 1914.332820][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1914.338881][ T8688] ? do_recvmmsg+0x55a/0x1180 [ 1914.343699][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1914.349671][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1914.355672][ T8688] ? should_fail+0x3f/0x810 [ 1914.360336][ T8688] ? __stack_depot_save+0x21/0x4b0 [ 1914.365603][ T8688] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1914.372009][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1914.377972][ T8688] __msan_chain_origin+0xbd/0x140 [ 1914.383144][ T8688] ___sys_recvmsg+0x522/0x890 [ 1914.388088][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1914.394147][ T8688] ? __cond_resched+0x1f/0x40 [ 1914.398969][ T8688] ? preempt_schedule_common+0x117/0x180 [ 1914.404757][ T8688] do_recvmmsg+0x55a/0x1180 [ 1914.409429][ T8688] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1914.415835][ T8688] ? do_syscall_64+0x3d/0xb0 [ 1914.420564][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1914.425754][ T8688] do_syscall_64+0x3d/0xb0 [ 1914.430306][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1914.436391][ T8688] RIP: 0033:0x7f6a17489279 [ 1914.440926][ T8688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1914.460731][ T8688] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1914.469293][ T8688] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1914.477404][ T8688] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1914.485503][ T8688] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1914.493592][ T8688] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1914.501673][ T8688] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1914.509799][ T8688] [ 1914.515488][ T8688] Uninit was stored to memory at: [ 1914.520700][ T8688] ___sys_recvmsg+0x522/0x890 [ 1914.525850][ T8688] do_recvmmsg+0x55a/0x1180 [ 1914.530482][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1914.535725][ T8688] do_syscall_64+0x3d/0xb0 [ 1914.540271][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1914.546415][ T8688] [ 1914.548807][ T8688] Uninit was stored to memory at: [ 1914.554070][ T8688] ___sys_recvmsg+0x522/0x890 [ 1914.558875][ T8688] do_recvmmsg+0x55a/0x1180 [ 1914.563585][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1914.568746][ T8688] do_syscall_64+0x3d/0xb0 [ 1914.573366][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1914.579444][ T8688] [ 1914.581902][ T8688] Uninit was stored to memory at: [ 1914.587086][ T8688] ___sys_recvmsg+0x522/0x890 [ 1914.591961][ T8688] do_recvmmsg+0x55a/0x1180 [ 1914.596604][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1914.601831][ T8688] do_syscall_64+0x3d/0xb0 [ 1914.606371][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1914.612513][ T8688] [ 1914.614898][ T8688] Uninit was stored to memory at: [ 1914.620080][ T8688] ___sys_recvmsg+0x522/0x890 [ 1914.624958][ T8688] do_recvmmsg+0x55a/0x1180 [ 1914.629581][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1914.634801][ T8688] do_syscall_64+0x3d/0xb0 [ 1914.639338][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1914.645487][ T8688] [ 1914.647871][ T8688] Uninit was stored to memory at: [ 1914.653123][ T8688] ___sys_recvmsg+0x522/0x890 [ 1914.657914][ T8688] do_recvmmsg+0x55a/0x1180 [ 1914.662619][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1914.667778][ T8688] do_syscall_64+0x3d/0xb0 [ 1914.672391][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1914.678467][ T8688] [ 1914.680857][ T8688] Uninit was stored to memory at: [ 1914.686183][ T8688] ___sys_recvmsg+0x522/0x890 [ 1914.690987][ T8688] do_recvmmsg+0x55a/0x1180 [ 1914.695750][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1914.700989][ T8688] do_syscall_64+0x3d/0xb0 [ 1914.705604][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1914.711799][ T8688] [ 1914.714184][ T8688] Uninit was stored to memory at: [ 1914.719802][ T8688] ___sys_recvmsg+0x522/0x890 [ 1914.724816][ T8688] do_recvmmsg+0x55a/0x1180 [ 1914.729455][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1914.734735][ T8688] do_syscall_64+0x3d/0xb0 [ 1914.739283][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1914.745436][ T8688] [ 1914.747848][ T8688] Local variable msg_sys created at: [ 1914.753331][ T8688] do_recvmmsg+0x5c/0x1180 [ 1914.757878][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1915.293475][ T8688] not chained 2400000 origins [ 1915.299033][ T8688] CPU: 0 PID: 8688 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1915.309247][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1915.319420][ T8688] Call Trace: [ 1915.322781][ T8688] [ 1915.325785][ T8688] dump_stack_lvl+0x1c8/0x256 [ 1915.330645][ T8688] dump_stack+0x1a/0x1c [ 1915.334954][ T8688] kmsan_internal_chain_origin+0x78/0x120 [ 1915.340827][ T8688] ? filter_irq_stacks+0x5c/0x1a0 [ 1915.346037][ T8688] ? kmsan_internal_check_memory+0x94/0x530 [ 1915.352088][ T8688] ? do_recvmmsg+0x55a/0x1180 [ 1915.356907][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1915.362901][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1915.368873][ T8688] ? should_fail+0x3f/0x810 [ 1915.373525][ T8688] ? __stack_depot_save+0x21/0x4b0 [ 1915.378780][ T8688] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1915.385187][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1915.391145][ T8688] __msan_chain_origin+0xbd/0x140 [ 1915.396314][ T8688] ___sys_recvmsg+0x522/0x890 [ 1915.401128][ T8688] ? do_recvmmsg+0x5bc/0x1180 [ 1915.405964][ T8688] ? kmsan_internal_check_memory+0x94/0x530 [ 1915.412011][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1915.417984][ T8688] do_recvmmsg+0x55a/0x1180 [ 1915.422649][ T8688] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1915.429062][ T8688] ? do_syscall_64+0x3d/0xb0 [ 1915.433791][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1915.438983][ T8688] do_syscall_64+0x3d/0xb0 [ 1915.443534][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1915.449602][ T8688] RIP: 0033:0x7f6a17489279 [ 1915.454126][ T8688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1915.473907][ T8688] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1915.482462][ T8688] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1915.490564][ T8688] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1915.498656][ T8688] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1915.506737][ T8688] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1915.514819][ T8688] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1915.522933][ T8688] [ 1915.557175][ T8688] Uninit was stored to memory at: [ 1915.562410][ T8688] ___sys_recvmsg+0x522/0x890 [ 1915.567242][ T8688] do_recvmmsg+0x55a/0x1180 [ 1915.571870][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1915.577024][ T8688] do_syscall_64+0x3d/0xb0 [ 1915.586154][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1915.593236][ T8688] [ 1915.595993][ T8688] Uninit was stored to memory at: [ 1915.601944][ T8688] ___sys_recvmsg+0x522/0x890 [ 1915.607392][ T8688] do_recvmmsg+0x55a/0x1180 [ 1915.612711][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1915.618530][ T8688] do_syscall_64+0x3d/0xb0 [ 1915.623771][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1915.630606][ T8688] [ 1915.633460][ T8688] Uninit was stored to memory at: [ 1915.639366][ T8688] ___sys_recvmsg+0x522/0x890 [ 1915.644891][ T8688] do_recvmmsg+0x55a/0x1180 [ 1915.650127][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1915.656069][ T8688] do_syscall_64+0x3d/0xb0 [ 1915.661248][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1915.668261][ T8688] [ 1915.671005][ T8688] Uninit was stored to memory at: [ 1915.677054][ T8688] ___sys_recvmsg+0x522/0x890 [ 1915.682640][ T8688] do_recvmmsg+0x55a/0x1180 [ 1915.687919][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1915.693890][ T8688] do_syscall_64+0x3d/0xb0 [ 1915.699057][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1915.706161][ T8688] [ 1915.708901][ T8688] Uninit was stored to memory at: [ 1915.714946][ T8688] ___sys_recvmsg+0x522/0x890 [ 1915.720425][ T8688] do_recvmmsg+0x55a/0x1180 [ 1915.725863][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1915.731759][ T8688] do_syscall_64+0x3d/0xb0 [ 1915.736894][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1915.743844][ T8688] [ 1915.746574][ T8688] Uninit was stored to memory at: [ 1915.752617][ T8688] ___sys_recvmsg+0x522/0x890 [ 1915.758059][ T8688] do_recvmmsg+0x55a/0x1180 [ 1915.763475][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1915.769319][ T8688] do_syscall_64+0x3d/0xb0 [ 1915.774587][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1915.781404][ T8688] [ 1915.784279][ T8688] Uninit was stored to memory at: [ 1915.790225][ T8688] ___sys_recvmsg+0x522/0x890 [ 1915.795804][ T8688] do_recvmmsg+0x55a/0x1180 [ 1915.801055][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1915.807006][ T8688] do_syscall_64+0x3d/0xb0 [ 1915.812303][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1915.819208][ T8688] [ 1915.822085][ T8688] Local variable msg_sys created at: [ 1915.828128][ T8688] do_recvmmsg+0x5c/0x1180 [ 1915.833437][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1916.282580][ T8688] not chained 2410000 origins [ 1916.287381][ T8688] CPU: 1 PID: 8688 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1916.297608][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1916.307774][ T8688] Call Trace: [ 1916.311128][ T8688] [ 1916.314134][ T8688] dump_stack_lvl+0x1c8/0x256 [ 1916.318996][ T8688] dump_stack+0x1a/0x1c [ 1916.323308][ T8688] kmsan_internal_chain_origin+0x78/0x120 [ 1916.329175][ T8688] ? filter_irq_stacks+0x5c/0x1a0 [ 1916.334370][ T8688] ? kmsan_internal_check_memory+0x94/0x530 [ 1916.340407][ T8688] ? do_recvmmsg+0x55a/0x1180 [ 1916.345207][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1916.351182][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1916.357138][ T8688] ? should_fail+0x3f/0x810 [ 1916.361780][ T8688] ? __stack_depot_save+0x21/0x4b0 [ 1916.367032][ T8688] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1916.373423][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1916.379373][ T8688] __msan_chain_origin+0xbd/0x140 [ 1916.384531][ T8688] ___sys_recvmsg+0x522/0x890 [ 1916.389348][ T8688] ? do_recvmmsg+0x5bc/0x1180 [ 1916.394168][ T8688] ? kmsan_internal_check_memory+0x94/0x530 [ 1916.400212][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1916.406167][ T8688] do_recvmmsg+0x55a/0x1180 [ 1916.410814][ T8688] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1916.417219][ T8688] ? do_syscall_64+0x3d/0xb0 [ 1916.421943][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1916.427114][ T8688] do_syscall_64+0x3d/0xb0 [ 1916.431655][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1916.437711][ T8688] RIP: 0033:0x7f6a17489279 [ 1916.442223][ T8688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1916.462014][ T8688] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1916.470562][ T8688] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1916.478650][ T8688] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1916.486745][ T8688] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1916.494828][ T8688] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1916.502907][ T8688] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1916.511016][ T8688] [ 1916.517809][ T8688] Uninit was stored to memory at: [ 1916.523732][ T8688] ___sys_recvmsg+0x522/0x890 [ 1916.528545][ T8688] do_recvmmsg+0x55a/0x1180 [ 1916.533262][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1916.538448][ T8688] do_syscall_64+0x3d/0xb0 [ 1916.543060][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1916.549137][ T8688] [ 1916.551703][ T8688] Uninit was stored to memory at: [ 1916.556900][ T8688] ___sys_recvmsg+0x522/0x890 [ 1916.561798][ T8688] do_recvmmsg+0x55a/0x1180 [ 1916.566458][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1916.571713][ T8688] do_syscall_64+0x3d/0xb0 [ 1916.576273][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1916.582427][ T8688] [ 1916.584811][ T8688] Uninit was stored to memory at: [ 1916.590000][ T8688] ___sys_recvmsg+0x522/0x890 [ 1916.594882][ T8688] do_recvmmsg+0x55a/0x1180 [ 1916.599520][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1916.604845][ T8688] do_syscall_64+0x3d/0xb0 [ 1916.609392][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1916.615542][ T8688] [ 1916.617936][ T8688] Uninit was stored to memory at: [ 1916.623205][ T8688] ___sys_recvmsg+0x522/0x890 [ 1916.628005][ T8688] do_recvmmsg+0x55a/0x1180 [ 1916.632703][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1916.637871][ T8688] do_syscall_64+0x3d/0xb0 [ 1916.642504][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1916.648662][ T8688] [ 1916.651056][ T8688] Uninit was stored to memory at: [ 1916.656333][ T8688] ___sys_recvmsg+0x522/0x890 [ 1916.661151][ T8688] do_recvmmsg+0x55a/0x1180 [ 1916.665849][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1916.671016][ T8688] do_syscall_64+0x3d/0xb0 [ 1916.675649][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1916.681797][ T8688] [ 1916.684186][ T8688] Uninit was stored to memory at: [ 1916.689371][ T8688] ___sys_recvmsg+0x522/0x890 [ 1916.694243][ T8688] do_recvmmsg+0x55a/0x1180 [ 1916.698899][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1916.704137][ T8688] do_syscall_64+0x3d/0xb0 [ 1916.708676][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1916.714820][ T8688] [ 1916.717209][ T8688] Uninit was stored to memory at: [ 1916.722469][ T8688] ___sys_recvmsg+0x522/0x890 [ 1916.727270][ T8688] do_recvmmsg+0x55a/0x1180 [ 1916.731976][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1916.737129][ T8688] do_syscall_64+0x3d/0xb0 [ 1916.741746][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1916.747821][ T8688] [ 1916.750209][ T8688] Local variable msg_sys created at: [ 1916.755633][ T8688] do_recvmmsg+0x5c/0x1180 [ 1916.760175][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1917.354651][ T8688] not chained 2420000 origins [ 1917.366696][ T8688] CPU: 0 PID: 8688 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1917.376907][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1917.387023][ T8688] Call Trace: [ 1917.390336][ T8688] [ 1917.393300][ T8688] dump_stack_lvl+0x1c8/0x256 [ 1917.398087][ T8688] dump_stack+0x1a/0x1c [ 1917.402329][ T8688] kmsan_internal_chain_origin+0x78/0x120 [ 1917.408144][ T8688] ? filter_irq_stacks+0x5c/0x1a0 [ 1917.413296][ T8688] ? kmsan_internal_check_memory+0x94/0x530 [ 1917.419609][ T8688] ? do_recvmmsg+0x55a/0x1180 [ 1917.424431][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1917.430345][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1917.436259][ T8688] ? should_fail+0x3f/0x810 [ 1917.440889][ T8688] ? __stack_depot_save+0x21/0x4b0 [ 1917.446117][ T8688] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1917.452468][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1917.458361][ T8688] __msan_chain_origin+0xbd/0x140 [ 1917.463499][ T8688] ___sys_recvmsg+0x522/0x890 [ 1917.468318][ T8688] ? do_recvmmsg+0x5bc/0x1180 [ 1917.473154][ T8688] ? kmsan_internal_check_memory+0x94/0x530 [ 1917.479209][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1917.485164][ T8688] do_recvmmsg+0x55a/0x1180 [ 1917.489755][ T8688] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1917.496087][ T8688] ? do_syscall_64+0x3d/0xb0 [ 1917.500770][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1917.505881][ T8688] do_syscall_64+0x3d/0xb0 [ 1917.510363][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1917.516376][ T8688] RIP: 0033:0x7f6a17489279 [ 1917.520890][ T8688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1917.540584][ T8688] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1917.549069][ T8688] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1917.557102][ T8688] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1917.565153][ T8688] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1917.573344][ T8688] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1917.581414][ T8688] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1917.589471][ T8688] [ 1917.618684][ T8688] Uninit was stored to memory at: [ 1917.623912][ T8688] ___sys_recvmsg+0x522/0x890 [ 1917.628744][ T8688] do_recvmmsg+0x55a/0x1180 [ 1917.633378][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1917.638557][ T8688] do_syscall_64+0x3d/0xb0 [ 1917.643043][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1917.652758][ T8688] [ 1917.655155][ T8688] Uninit was stored to memory at: [ 1917.660931][ T8688] ___sys_recvmsg+0x522/0x890 [ 1917.666457][ T8688] do_recvmmsg+0x55a/0x1180 [ 1917.671484][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1917.677461][ T8688] do_syscall_64+0x3d/0xb0 [ 1917.682723][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1917.689259][ T8688] [ 1917.692095][ T8688] Uninit was stored to memory at: [ 1917.697851][ T8688] ___sys_recvmsg+0x522/0x890 [ 1917.703363][ T8688] do_recvmmsg+0x55a/0x1180 [ 1917.708395][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1917.714347][ T8688] do_syscall_64+0x3d/0xb0 [ 1917.719531][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1917.727084][ T8688] [ 1917.729815][ T8688] Uninit was stored to memory at: [ 1917.735814][ T8688] ___sys_recvmsg+0x522/0x890 [ 1917.741049][ T8688] do_recvmmsg+0x55a/0x1180 [ 1917.746357][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1917.752318][ T8688] do_syscall_64+0x3d/0xb0 [ 1917.757240][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1917.764172][ T8688] [ 1917.766776][ T8688] Uninit was stored to memory at: [ 1917.772776][ T8688] ___sys_recvmsg+0x522/0x890 [ 1917.778009][ T8688] do_recvmmsg+0x55a/0x1180 [ 1917.783361][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1917.788961][ T8688] do_syscall_64+0x3d/0xb0 [ 1917.794187][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1917.800737][ T8688] [ 1917.803553][ T8688] Uninit was stored to memory at: [ 1917.809170][ T8688] ___sys_recvmsg+0x522/0x890 [ 1917.814703][ T8688] do_recvmmsg+0x55a/0x1180 [ 1917.819723][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1917.825665][ T8688] do_syscall_64+0x3d/0xb0 [ 1917.830557][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1917.837472][ T8688] [ 1917.840202][ T8688] Uninit was stored to memory at: [ 1917.846271][ T8688] ___sys_recvmsg+0x522/0x890 [ 1917.851517][ T8688] do_recvmmsg+0x55a/0x1180 [ 1917.856719][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1917.862608][ T8688] do_syscall_64+0x3d/0xb0 [ 1917.867531][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1917.874482][ T8688] [ 1917.877231][ T8688] Local variable msg_sys created at: [ 1917.883409][ T8688] do_recvmmsg+0x5c/0x1180 [ 1917.888302][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1918.294164][ T8688] not chained 2430000 origins [ 1918.299740][ T8688] CPU: 0 PID: 8688 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1918.309944][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1918.320106][ T8688] Call Trace: [ 1918.323473][ T8688] [ 1918.326480][ T8688] dump_stack_lvl+0x1c8/0x256 [ 1918.332387][ T8688] dump_stack+0x1a/0x1c [ 1918.336700][ T8688] kmsan_internal_chain_origin+0x78/0x120 [ 1918.342572][ T8688] ? filter_irq_stacks+0x5c/0x1a0 [ 1918.347773][ T8688] ? kmsan_internal_check_memory+0x94/0x530 [ 1918.353824][ T8688] ? do_recvmmsg+0x55a/0x1180 [ 1918.358637][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1918.364618][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1918.370590][ T8688] ? should_fail+0x3f/0x810 [ 1918.375246][ T8688] ? __stack_depot_save+0x21/0x4b0 [ 1918.380501][ T8688] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1918.386913][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1918.392880][ T8688] __msan_chain_origin+0xbd/0x140 [ 1918.398056][ T8688] ___sys_recvmsg+0x522/0x890 [ 1918.402887][ T8688] ? do_recvmmsg+0x5bc/0x1180 [ 1918.407748][ T8688] ? kmsan_internal_check_memory+0x94/0x530 [ 1918.413829][ T8688] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1918.419816][ T8688] do_recvmmsg+0x55a/0x1180 [ 1918.424483][ T8688] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1918.430889][ T8688] ? do_syscall_64+0x3d/0xb0 [ 1918.435620][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1918.440803][ T8688] do_syscall_64+0x3d/0xb0 [ 1918.445350][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1918.451419][ T8688] RIP: 0033:0x7f6a17489279 [ 1918.455938][ T8688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1918.475751][ T8688] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1918.484309][ T8688] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1918.492410][ T8688] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1918.500493][ T8688] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1918.508571][ T8688] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1918.516635][ T8688] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1918.524748][ T8688] [ 1918.558998][ T8688] Uninit was stored to memory at: [ 1918.564232][ T8688] ___sys_recvmsg+0x522/0x890 [ 1918.569047][ T8688] do_recvmmsg+0x55a/0x1180 [ 1918.573706][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1918.578862][ T8688] do_syscall_64+0x3d/0xb0 [ 1918.605076][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1918.612138][ T8688] [ 1918.614883][ T8688] Uninit was stored to memory at: [ 1918.620854][ T8688] ___sys_recvmsg+0x522/0x890 [ 1918.626426][ T8688] do_recvmmsg+0x55a/0x1180 [ 1918.631733][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1918.637575][ T8688] do_syscall_64+0x3d/0xb0 [ 1918.642816][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1918.649692][ T8688] [ 1918.652535][ T8688] Uninit was stored to memory at: [ 1918.658486][ T8688] ___sys_recvmsg+0x522/0x890 [ 1918.664035][ T8688] do_recvmmsg+0x55a/0x1180 [ 1918.669290][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1918.675272][ T8688] do_syscall_64+0x3d/0xb0 [ 1918.680453][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1918.687418][ T8688] [ 1918.690144][ T8688] Uninit was stored to memory at: [ 1918.696247][ T8688] ___sys_recvmsg+0x522/0x890 [ 1918.701786][ T8688] do_recvmmsg+0x55a/0x1180 [ 1918.707093][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1918.713083][ T8688] do_syscall_64+0x3d/0xb0 [ 1918.718263][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1918.725306][ T8688] [ 1918.728066][ T8688] Uninit was stored to memory at: [ 1918.734117][ T8688] ___sys_recvmsg+0x522/0x890 [ 1918.739604][ T8688] do_recvmmsg+0x55a/0x1180 [ 1918.745004][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1918.750840][ T8688] do_syscall_64+0x3d/0xb0 [ 1918.756163][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1918.763136][ T8688] [ 1918.765883][ T8688] Uninit was stored to memory at: [ 1918.771977][ T8688] ___sys_recvmsg+0x522/0x890 [ 1918.777437][ T8688] do_recvmmsg+0x55a/0x1180 [ 1918.782852][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1918.788715][ T8688] do_syscall_64+0x3d/0xb0 [ 1918.794517][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1918.801366][ T8688] [ 1918.804248][ T8688] Uninit was stored to memory at: [ 1918.810192][ T8688] ___sys_recvmsg+0x522/0x890 [ 1918.815773][ T8688] do_recvmmsg+0x55a/0x1180 [ 1918.821064][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1918.827047][ T8688] do_syscall_64+0x3d/0xb0 [ 1918.832356][ T8688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1918.839151][ T8688] [ 1918.842014][ T8688] Local variable msg_sys created at: [ 1918.848064][ T8688] do_recvmmsg+0x5c/0x1180 [ 1918.853340][ T8688] __x64_sys_recvmmsg+0x3a7/0x4b0 22:47:26 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x40}, [@alu={0x4, 0x0, 0xc, 0x1, 0x6, 0x50, 0xfffffffffffffff0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4000000a}, @call={0x85, 0x0, 0x0, 0x51}, @cb_func, @jmp={0x5, 0x0, 0x2, 0x4, 0x4, 0x30}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x70e7}, @exit]}, &(0x7f0000000100)='syzkaller\x00', 0x1f, 0x5e, &(0x7f0000000440)=""/94, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xf}, 0x10}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x57, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000540)={r3, 0x9, 0x7, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c000000100000012bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008002800f20e000008001b00000000004c002b8008000800", @ANYRES32=r4, @ANYBLOB="080003000000000008000800", @ANYRES32=r3, @ANYBLOB="01000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="080003000500000008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x24024010}, 0x2404c001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r0, @ANYRESDEC=r4], 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x0) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000011, 0x0, 0x2811fdff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00a778a581910fb6a824e419699db50da03f3db27297e49a5a41546ee55e4c07b68ec68ed693e867cdc14aa33d83cf4ca8867a874d8ae16007c64208410c4c46295b7c4c58cb5709bb7be4f06d3ccbf2db332dac4bb7874926bd02ee034d81df4f7a6fb6dbe5de511718ed0cb93cb36292a752ada92bd3eaf40308a4e31ddf1ca5da0ea3f7ef041b93865305aa6fc553886f6b66f5abdb15c9cd8b08df54bf2502c1e7d09e63ba6465d892ebf50dbe8e03b8880d351c8f844da23fc163d642e1805c15", @ANYRES64=r7, @ANYRES64=r7, @ANYRESDEC=r7]) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:47:26 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xcf, 0x29, 0x4b, 0x40, 0xecec, 0x6978, 0x1212, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x4}}]}}]}}, 0x0) 22:47:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024001d0f000001000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b0001006d756c7469710000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) 22:47:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024001d0f000001000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b0001006d756c7469710000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) 22:47:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x39, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\b\x06'}]}]}, 0x24}}, 0x0) 22:47:26 executing program 1: syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) [ 1919.410268][ T8829] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1919.449680][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1919.666624][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:47:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x39, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\b\x06'}]}]}, 0x24}}, 0x0) [ 1919.834632][T27551] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1919.842941][ T25] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1920.092451][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 1920.116585][ T8914] openvswitch: netlink: Missing key (keys=40, expected=2000) 22:47:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024001d0f000001000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b0001006d756c7469710000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) 22:47:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x39, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\b\x06'}]}]}, 0x24}}, 0x0) [ 1920.223179][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1920.236330][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1920.247117][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024 [ 1920.258609][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 22:47:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024001d0f000001000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b0001006d756c7469710000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) [ 1920.554541][T27551] usb 4-1: New USB device found, idVendor=ecec, idProduct=6978, bcdDevice=12.12 [ 1920.564356][T27551] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.572838][T27551] usb 4-1: Product: syz [ 1920.577194][T27551] usb 4-1: Manufacturer: syz [ 1920.582131][T27551] usb 4-1: SerialNumber: syz [ 1920.656535][ T8938] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1920.710093][T27551] usb 4-1: config 0 descriptor?? [ 1920.755101][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1920.784922][T27551] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1920.861335][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1920.876124][ T25] usb 2-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86 [ 1920.885692][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.894045][ T25] usb 2-1: Product: syz [ 1920.898394][ T25] usb 2-1: Manufacturer: syz [ 1920.903395][ T25] usb 2-1: SerialNumber: syz 22:47:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x39, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\b\x06'}]}]}, 0x24}}, 0x0) [ 1921.225411][T27551] usb 4-1: USB disconnect, device number 65 [ 1921.273930][ T25] usb 2-1: config 0 descriptor?? [ 1921.398541][ T9030] openvswitch: netlink: Missing key (keys=40, expected=2000) 22:47:28 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xcf, 0x29, 0x4b, 0x40, 0xecec, 0x6978, 0x1212, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x4}}]}}]}}, 0x0) [ 1921.832280][ T25] usb 2-1: USB disconnect, device number 69 [ 1922.218881][ T9055] udevd[9055]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1922.312773][ T3570] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1922.758341][ T8911] not chained 2440000 origins [ 1922.763900][ T8911] CPU: 0 PID: 8911 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1922.774079][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1922.784199][ T8911] Call Trace: [ 1922.787562][ T8911] [ 1922.790560][ T8911] dump_stack_lvl+0x1c8/0x256 [ 1922.795350][ T8911] dump_stack+0x1a/0x1c [ 1922.799654][ T8911] kmsan_internal_chain_origin+0x78/0x120 [ 1922.805536][ T8911] ? filter_irq_stacks+0x5c/0x1a0 [ 1922.810745][ T8911] ? kmsan_internal_check_memory+0x94/0x530 [ 1922.816802][ T8911] ? do_recvmmsg+0x55a/0x1180 [ 1922.821576][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1922.827553][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1922.833544][ T8911] ? should_fail+0x3f/0x810 [ 1922.838184][ T8911] ? __stack_depot_save+0x21/0x4b0 [ 1922.843408][ T8911] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1922.849983][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1922.855905][ T8911] __msan_chain_origin+0xbd/0x140 [ 1922.861062][ T8911] ___sys_recvmsg+0x522/0x890 [ 1922.865877][ T8911] ? do_recvmmsg+0x5bc/0x1180 [ 1922.870715][ T8911] ? kmsan_internal_check_memory+0x94/0x530 [ 1922.876772][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1922.882772][ T8911] do_recvmmsg+0x55a/0x1180 [ 1922.887432][ T8911] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1922.893833][ T8911] ? do_syscall_64+0x3d/0xb0 [ 1922.898503][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1922.903686][ T8911] do_syscall_64+0x3d/0xb0 [ 1922.908231][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1922.914302][ T8911] RIP: 0033:0x7f6a17489279 [ 1922.918807][ T8911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1922.938523][ T8911] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1922.947043][ T8911] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1922.955106][ T8911] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1922.963162][ T8911] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1922.971246][ T8911] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1922.979337][ T8911] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1922.987455][ T8911] [ 1923.016831][ T8911] Uninit was stored to memory at: [ 1923.022074][ T8911] ___sys_recvmsg+0x522/0x890 [ 1923.026895][ T8911] do_recvmmsg+0x55a/0x1180 [ 1923.031552][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1923.036735][ T8911] do_syscall_64+0x3d/0xb0 [ 1923.041278][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1923.050958][ T8911] [ 1923.053863][ T8911] Uninit was stored to memory at: [ 1923.059559][ T8911] ___sys_recvmsg+0x522/0x890 [ 1923.065070][ T8911] do_recvmmsg+0x55a/0x1180 [ 1923.070291][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1923.076215][ T8911] do_syscall_64+0x3d/0xb0 [ 1923.081186][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1923.088206][ T8911] [ 1923.090858][ T8911] Uninit was stored to memory at: [ 1923.096898][ T8911] ___sys_recvmsg+0x522/0x890 [ 1923.102427][ T8911] do_recvmmsg+0x55a/0x1180 [ 1923.111178][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1923.117205][ T8911] do_syscall_64+0x3d/0xb0 [ 1923.122454][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1923.129136][ T8911] [ 1923.131918][ T8911] Uninit was stored to memory at: [ 1923.137874][ T8911] ___sys_recvmsg+0x522/0x890 [ 1923.143554][ T8911] do_recvmmsg+0x55a/0x1180 [ 1923.148595][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1923.154594][ T8911] do_syscall_64+0x3d/0xb0 [ 1923.159533][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1923.166491][ T8911] [ 1923.169127][ T8911] Uninit was stored to memory at: [ 1923.175104][ T8911] ___sys_recvmsg+0x522/0x890 [ 1923.180385][ T8911] do_recvmmsg+0x55a/0x1180 [ 1923.185793][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1923.191472][ T8911] do_syscall_64+0x3d/0xb0 [ 1923.196796][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1923.203742][ T8911] [ 1923.206419][ T8911] Uninit was stored to memory at: [ 1923.212593][ T8911] ___sys_recvmsg+0x522/0x890 [ 1923.218061][ T8911] do_recvmmsg+0x55a/0x1180 [ 1923.223400][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1923.229237][ T8911] do_syscall_64+0x3d/0xb0 [ 1923.234481][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1923.241130][ T8911] [ 1923.244081][ T8911] Uninit was stored to memory at: [ 1923.249854][ T8911] ___sys_recvmsg+0x522/0x890 [ 1923.255377][ T8911] do_recvmmsg+0x55a/0x1180 [ 1923.260664][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1923.266630][ T8911] do_syscall_64+0x3d/0xb0 [ 1923.271809][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1923.278720][ T8911] [ 1923.281337][ T8911] Local variable msg_sys created at: [ 1923.287499][ T8911] do_recvmmsg+0x5c/0x1180 [ 1923.292850][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1923.353299][ T3570] usb 4-1: New USB device found, idVendor=ecec, idProduct=6978, bcdDevice=12.12 [ 1923.363863][ T3570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.373228][ T3570] usb 4-1: Product: syz [ 1923.378242][ T3570] usb 4-1: Manufacturer: syz [ 1923.383879][ T3570] usb 4-1: SerialNumber: syz [ 1923.398227][ T3570] usb 4-1: config 0 descriptor?? [ 1923.457304][ T3570] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1923.734621][ T3570] usb 4-1: USB disconnect, device number 66 [ 1924.000573][ T8911] not chained 2450000 origins [ 1924.006180][ T8911] CPU: 0 PID: 8911 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1924.016398][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1924.026574][ T8911] Call Trace: [ 1924.029929][ T8911] [ 1924.032948][ T8911] dump_stack_lvl+0x1c8/0x256 [ 1924.037818][ T8911] dump_stack+0x1a/0x1c [ 1924.042134][ T8911] kmsan_internal_chain_origin+0x78/0x120 [ 1924.048034][ T8911] ? filter_irq_stacks+0x5c/0x1a0 [ 1924.053262][ T8911] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1924.059672][ T8911] ? __this_cpu_preempt_check+0x13/0x20 [ 1924.065376][ T8911] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1924.071356][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1924.077341][ T8911] ? should_fail+0x3f/0x810 [ 1924.081997][ T8911] ? kmsan_get_metadata+0xe5/0x230 [ 1924.087262][ T8911] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1924.093666][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1924.099629][ T8911] __msan_chain_origin+0xbd/0x140 [ 1924.104802][ T8911] ___sys_recvmsg+0x522/0x890 [ 1924.109613][ T8911] ? do_recvmmsg+0x5bc/0x1180 [ 1924.114459][ T8911] ? kmsan_internal_check_memory+0x94/0x530 [ 1924.120517][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1924.126500][ T8911] do_recvmmsg+0x55a/0x1180 [ 1924.131166][ T8911] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1924.137573][ T8911] ? do_syscall_64+0x3d/0xb0 [ 1924.142299][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1924.147493][ T8911] do_syscall_64+0x3d/0xb0 [ 1924.152128][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1924.158208][ T8911] RIP: 0033:0x7f6a17489279 [ 1924.162818][ T8911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1924.182586][ T8911] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1924.191140][ T8911] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1924.199234][ T8911] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1924.207313][ T8911] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1924.215399][ T8911] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1924.223489][ T8911] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1924.231606][ T8911] [ 1924.265631][ T8911] Uninit was stored to memory at: [ 1924.270883][ T8911] ___sys_recvmsg+0x522/0x890 [ 1924.275693][ T8911] do_recvmmsg+0x55a/0x1180 [ 1924.280321][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1924.285486][ T8911] do_syscall_64+0x3d/0xb0 [ 1924.294463][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1924.301503][ T8911] [ 1924.304453][ T8911] Uninit was stored to memory at: [ 1924.310295][ T8911] ___sys_recvmsg+0x522/0x890 [ 1924.315884][ T8911] do_recvmmsg+0x55a/0x1180 [ 1924.321175][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1924.327152][ T8911] do_syscall_64+0x3d/0xb0 [ 1924.332450][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1924.339291][ T8911] [ 1924.342103][ T8911] Uninit was stored to memory at: [ 1924.348067][ T8911] ___sys_recvmsg+0x522/0x890 [ 1924.353705][ T8911] do_recvmmsg+0x55a/0x1180 [ 1924.358986][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1924.364851][ T8911] do_syscall_64+0x3d/0xb0 [ 1924.370065][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1924.377073][ T8911] [ 1924.379791][ T8911] Uninit was stored to memory at: [ 1924.385722][ T8911] ___sys_recvmsg+0x522/0x890 [ 1924.391168][ T8911] do_recvmmsg+0x55a/0x1180 [ 1924.396573][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1924.402506][ T8911] do_syscall_64+0x3d/0xb0 [ 1924.407670][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1924.414684][ T8911] [ 1924.417443][ T8911] Uninit was stored to memory at: [ 1924.423409][ T8911] ___sys_recvmsg+0x522/0x890 [ 1924.428870][ T8911] do_recvmmsg+0x55a/0x1180 [ 1924.434299][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1924.440187][ T8911] do_syscall_64+0x3d/0xb0 [ 1924.445499][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1924.452977][ T8911] [ 1924.455718][ T8911] Uninit was stored to memory at: [ 1924.461819][ T8911] ___sys_recvmsg+0x522/0x890 [ 1924.467274][ T8911] do_recvmmsg+0x55a/0x1180 [ 1924.472646][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1924.478515][ T8911] do_syscall_64+0x3d/0xb0 [ 1924.483804][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1924.490676][ T8911] [ 1924.493591][ T8911] Uninit was stored to memory at: [ 1924.499551][ T8911] ___sys_recvmsg+0x522/0x890 [ 1924.505162][ T8911] do_recvmmsg+0x55a/0x1180 [ 1924.510463][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1924.516535][ T8911] do_syscall_64+0x3d/0xb0 [ 1924.521779][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1924.528651][ T8911] [ 1924.531407][ T8911] Local variable msg_sys created at: [ 1924.537597][ T8911] do_recvmmsg+0x5c/0x1180 [ 1924.542895][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1924.969164][ T8911] not chained 2460000 origins [ 1924.974321][ T8911] CPU: 1 PID: 8911 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1924.984557][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1924.994722][ T8911] Call Trace: [ 1924.998100][ T8911] [ 1925.001133][ T8911] dump_stack_lvl+0x1c8/0x256 [ 1925.006008][ T8911] dump_stack+0x1a/0x1c [ 1925.010329][ T8911] kmsan_internal_chain_origin+0x78/0x120 [ 1925.016212][ T8911] ? filter_irq_stacks+0x5c/0x1a0 [ 1925.021422][ T8911] ? kmsan_internal_check_memory+0x94/0x530 [ 1925.027469][ T8911] ? do_recvmmsg+0x55a/0x1180 [ 1925.032280][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1925.038249][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1925.044213][ T8911] ? should_fail+0x3f/0x810 [ 1925.048875][ T8911] ? __stack_depot_save+0x21/0x4b0 [ 1925.054410][ T8911] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1925.060818][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1925.066793][ T8911] __msan_chain_origin+0xbd/0x140 [ 1925.071988][ T8911] ___sys_recvmsg+0x522/0x890 [ 1925.076811][ T8911] ? do_recvmmsg+0x5bc/0x1180 [ 1925.081652][ T8911] ? kmsan_internal_check_memory+0x94/0x530 [ 1925.087717][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1925.093716][ T8911] do_recvmmsg+0x55a/0x1180 [ 1925.098747][ T8911] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1925.105166][ T8911] ? do_syscall_64+0x3d/0xb0 [ 1925.109900][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1925.115103][ T8911] do_syscall_64+0x3d/0xb0 [ 1925.119655][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1925.125725][ T8911] RIP: 0033:0x7f6a17489279 [ 1925.130244][ T8911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1925.150037][ T8911] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1925.158601][ T8911] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1925.166697][ T8911] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1925.174779][ T8911] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1925.182863][ T8911] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1925.190950][ T8911] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1925.199148][ T8911] [ 1925.204761][ T8911] Uninit was stored to memory at: [ 1925.209973][ T8911] ___sys_recvmsg+0x522/0x890 [ 1925.215064][ T8911] do_recvmmsg+0x55a/0x1180 [ 1925.219695][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1925.224937][ T8911] do_syscall_64+0x3d/0xb0 [ 1925.229483][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1925.235628][ T8911] [ 1925.238021][ T8911] Uninit was stored to memory at: [ 1925.243286][ T8911] ___sys_recvmsg+0x522/0x890 [ 1925.248102][ T8911] do_recvmmsg+0x55a/0x1180 [ 1925.252816][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1925.257988][ T8911] do_syscall_64+0x3d/0xb0 [ 1925.262612][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1925.268680][ T8911] [ 1925.271069][ T8911] Uninit was stored to memory at: [ 1925.276366][ T8911] ___sys_recvmsg+0x522/0x890 [ 1925.281172][ T8911] do_recvmmsg+0x55a/0x1180 [ 1925.285881][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1925.291046][ T8911] do_syscall_64+0x3d/0xb0 [ 1925.295703][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1925.301853][ T8911] [ 1925.304244][ T8911] Uninit was stored to memory at: [ 1925.309433][ T8911] ___sys_recvmsg+0x522/0x890 [ 1925.314350][ T8911] do_recvmmsg+0x55a/0x1180 [ 1925.318993][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1925.324274][ T8911] do_syscall_64+0x3d/0xb0 [ 1925.328824][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1925.334978][ T8911] [ 1925.337373][ T8911] Uninit was stored to memory at: [ 1925.342629][ T8911] ___sys_recvmsg+0x522/0x890 [ 1925.347461][ T8911] do_recvmmsg+0x55a/0x1180 [ 1925.352180][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1925.357344][ T8911] do_syscall_64+0x3d/0xb0 [ 1925.361969][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1925.368043][ T8911] [ 1925.370434][ T8911] Uninit was stored to memory at: [ 1925.375705][ T8911] ___sys_recvmsg+0x522/0x890 [ 1925.380505][ T8911] do_recvmmsg+0x55a/0x1180 [ 1925.385207][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1925.390363][ T8911] do_syscall_64+0x3d/0xb0 [ 1925.394979][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1925.401059][ T8911] [ 1925.403538][ T8911] Uninit was stored to memory at: [ 1925.408721][ T8911] ___sys_recvmsg+0x522/0x890 [ 1925.413597][ T8911] do_recvmmsg+0x55a/0x1180 [ 1925.418261][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1925.423491][ T8911] do_syscall_64+0x3d/0xb0 [ 1925.428062][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1925.434202][ T8911] [ 1925.436592][ T8911] Local variable msg_sys created at: [ 1925.442023][ T8911] do_recvmmsg+0x5c/0x1180 [ 1925.446569][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1925.898854][ T8911] not chained 2470000 origins [ 1925.903928][ T8911] CPU: 1 PID: 8911 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1925.914145][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1925.924313][ T8911] Call Trace: [ 1925.927667][ T8911] [ 1925.930674][ T8911] dump_stack_lvl+0x1c8/0x256 [ 1925.935539][ T8911] dump_stack+0x1a/0x1c [ 1925.939852][ T8911] kmsan_internal_chain_origin+0x78/0x120 [ 1925.945810][ T8911] ? filter_irq_stacks+0x5c/0x1a0 [ 1925.951022][ T8911] ? kmsan_internal_check_memory+0x94/0x530 [ 1925.957067][ T8911] ? do_recvmmsg+0x55a/0x1180 [ 1925.961881][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1925.967851][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1925.973823][ T8911] ? should_fail+0x3f/0x810 [ 1925.978476][ T8911] ? __stack_depot_save+0x21/0x4b0 [ 1925.983736][ T8911] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1925.990139][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1925.996100][ T8911] __msan_chain_origin+0xbd/0x140 [ 1926.001291][ T8911] ___sys_recvmsg+0x522/0x890 [ 1926.006113][ T8911] ? do_recvmmsg+0x5bc/0x1180 [ 1926.010950][ T8911] ? kmsan_internal_check_memory+0x94/0x530 [ 1926.017008][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1926.022973][ T8911] do_recvmmsg+0x55a/0x1180 [ 1926.027625][ T8911] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1926.034024][ T8911] ? do_syscall_64+0x3d/0xb0 [ 1926.038744][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1926.043917][ T8911] do_syscall_64+0x3d/0xb0 [ 1926.048461][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1926.054521][ T8911] RIP: 0033:0x7f6a17489279 [ 1926.059033][ T8911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1926.078789][ T8911] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1926.087329][ T8911] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1926.095441][ T8911] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1926.103520][ T8911] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1926.111594][ T8911] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1926.119669][ T8911] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1926.127775][ T8911] [ 1926.133640][ T8911] Uninit was stored to memory at: [ 1926.138855][ T8911] ___sys_recvmsg+0x522/0x890 [ 1926.144017][ T8911] do_recvmmsg+0x55a/0x1180 [ 1926.148644][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1926.153879][ T8911] do_syscall_64+0x3d/0xb0 [ 1926.158428][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1926.164577][ T8911] [ 1926.166962][ T8911] Uninit was stored to memory at: [ 1926.172229][ T8911] ___sys_recvmsg+0x522/0x890 [ 1926.177039][ T8911] do_recvmmsg+0x55a/0x1180 [ 1926.181740][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1926.186894][ T8911] do_syscall_64+0x3d/0xb0 [ 1926.191446][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1926.197630][ T8911] [ 1926.200020][ T8911] Uninit was stored to memory at: [ 1926.205372][ T8911] ___sys_recvmsg+0x522/0x890 [ 1926.210179][ T8911] do_recvmmsg+0x55a/0x1180 [ 1926.214883][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1926.220045][ T8911] do_syscall_64+0x3d/0xb0 [ 1926.224666][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1926.230738][ T8911] [ 1926.233204][ T8911] Uninit was stored to memory at: [ 1926.238394][ T8911] ___sys_recvmsg+0x522/0x890 [ 1926.243277][ T8911] do_recvmmsg+0x55a/0x1180 [ 1926.247913][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1926.253232][ T8911] do_syscall_64+0x3d/0xb0 [ 1926.257776][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1926.263919][ T8911] [ 1926.266302][ T8911] Uninit was stored to memory at: [ 1926.271492][ T8911] ___sys_recvmsg+0x522/0x890 [ 1926.276383][ T8911] do_recvmmsg+0x55a/0x1180 [ 1926.281035][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1926.286299][ T8911] do_syscall_64+0x3d/0xb0 [ 1926.290861][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1926.297018][ T8911] [ 1926.299412][ T8911] Uninit was stored to memory at: [ 1926.304679][ T8911] ___sys_recvmsg+0x522/0x890 [ 1926.309919][ T8911] do_recvmmsg+0x55a/0x1180 [ 1926.314635][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1926.319796][ T8911] do_syscall_64+0x3d/0xb0 [ 1926.324420][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1926.330498][ T8911] [ 1926.332988][ T8911] Uninit was stored to memory at: [ 1926.338201][ T8911] ___sys_recvmsg+0x522/0x890 [ 1926.343080][ T8911] do_recvmmsg+0x55a/0x1180 [ 1926.347714][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1926.352949][ T8911] do_syscall_64+0x3d/0xb0 [ 1926.357492][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1926.363642][ T8911] [ 1926.366036][ T8911] Local variable msg_sys created at: [ 1926.371401][ T8911] do_recvmmsg+0x5c/0x1180 [ 1926.376016][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1926.736125][ T8911] not chained 2480000 origins [ 1926.740950][ T8911] CPU: 1 PID: 8911 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1926.751164][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1926.761340][ T8911] Call Trace: [ 1926.764704][ T8911] [ 1926.767712][ T8911] dump_stack_lvl+0x1c8/0x256 [ 1926.772574][ T8911] dump_stack+0x1a/0x1c [ 1926.776898][ T8911] kmsan_internal_chain_origin+0x78/0x120 [ 1926.782771][ T8911] ? filter_irq_stacks+0x5c/0x1a0 [ 1926.787980][ T8911] ? kmsan_internal_check_memory+0x94/0x530 [ 1926.794035][ T8911] ? do_recvmmsg+0x55a/0x1180 [ 1926.798848][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1926.804817][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1926.810785][ T8911] ? should_fail+0x3f/0x810 [ 1926.815440][ T8911] ? __stack_depot_save+0x21/0x4b0 [ 1926.820713][ T8911] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1926.827123][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1926.833092][ T8911] __msan_chain_origin+0xbd/0x140 [ 1926.838263][ T8911] ___sys_recvmsg+0x522/0x890 [ 1926.843073][ T8911] ? do_recvmmsg+0x5bc/0x1180 [ 1926.847912][ T8911] ? kmsan_internal_check_memory+0x94/0x530 [ 1926.853967][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1926.859936][ T8911] do_recvmmsg+0x55a/0x1180 [ 1926.864597][ T8911] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1926.871003][ T8911] ? do_syscall_64+0x3d/0xb0 [ 1926.875731][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1926.880920][ T8911] do_syscall_64+0x3d/0xb0 [ 1926.885475][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1926.891546][ T8911] RIP: 0033:0x7f6a17489279 [ 1926.896077][ T8911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1926.915886][ T8911] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1926.924444][ T8911] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1926.932548][ T8911] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1926.941240][ T8911] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1926.949331][ T8911] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1926.957410][ T8911] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1926.965535][ T8911] [ 1926.972426][ T8911] Uninit was stored to memory at: [ 1926.977651][ T8911] ___sys_recvmsg+0x522/0x890 [ 1926.983286][ T8911] do_recvmmsg+0x55a/0x1180 [ 1926.987924][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1926.993158][ T8911] do_syscall_64+0x3d/0xb0 [ 1926.997702][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1927.003856][ T8911] [ 1927.006245][ T8911] Uninit was stored to memory at: [ 1927.011470][ T8911] ___sys_recvmsg+0x522/0x890 [ 1927.016363][ T8911] do_recvmmsg+0x55a/0x1180 [ 1927.021003][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1927.026237][ T8911] do_syscall_64+0x3d/0xb0 [ 1927.030789][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1927.036946][ T8911] [ 1927.039335][ T8911] Uninit was stored to memory at: [ 1927.044597][ T8911] ___sys_recvmsg+0x522/0x890 [ 1927.049396][ T8911] do_recvmmsg+0x55a/0x1180 [ 1927.054106][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1927.059262][ T8911] do_syscall_64+0x3d/0xb0 [ 1927.063879][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1927.069949][ T8911] [ 1927.072410][ T8911] Uninit was stored to memory at: [ 1927.077602][ T8911] ___sys_recvmsg+0x522/0x890 [ 1927.082485][ T8911] do_recvmmsg+0x55a/0x1180 [ 1927.087120][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1927.092349][ T8911] do_syscall_64+0x3d/0xb0 [ 1927.096896][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1927.103048][ T8911] [ 1927.105435][ T8911] Uninit was stored to memory at: [ 1927.110633][ T8911] ___sys_recvmsg+0x522/0x890 [ 1927.115579][ T8911] do_recvmmsg+0x55a/0x1180 [ 1927.120220][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1927.125510][ T8911] do_syscall_64+0x3d/0xb0 [ 1927.130062][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1927.136236][ T8911] [ 1927.138631][ T8911] Uninit was stored to memory at: [ 1927.143901][ T8911] ___sys_recvmsg+0x522/0x890 [ 1927.148718][ T8911] do_recvmmsg+0x55a/0x1180 [ 1927.153488][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1927.158653][ T8911] do_syscall_64+0x3d/0xb0 [ 1927.163331][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1927.169409][ T8911] [ 1927.171933][ T8911] Uninit was stored to memory at: [ 1927.177129][ T8911] ___sys_recvmsg+0x522/0x890 [ 1927.182064][ T8911] do_recvmmsg+0x55a/0x1180 [ 1927.186693][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1927.191920][ T8911] do_syscall_64+0x3d/0xb0 [ 1927.196473][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1927.202617][ T8911] [ 1927.205045][ T8911] Local variable msg_sys created at: [ 1927.210404][ T8911] do_recvmmsg+0x5c/0x1180 [ 1927.215030][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1927.566348][ T8911] not chained 2490000 origins [ 1927.571857][ T8911] CPU: 0 PID: 8911 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1927.582057][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1927.592181][ T8911] Call Trace: [ 1927.595498][ T8911] [ 1927.598483][ T8911] dump_stack_lvl+0x1c8/0x256 [ 1927.603330][ T8911] dump_stack+0x1a/0x1c [ 1927.607578][ T8911] kmsan_internal_chain_origin+0x78/0x120 [ 1927.613489][ T8911] ? filter_irq_stacks+0x5c/0x1a0 [ 1927.618619][ T8911] ? kmsan_internal_check_memory+0x94/0x530 [ 1927.624613][ T8911] ? do_recvmmsg+0x55a/0x1180 [ 1927.629425][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1927.635413][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1927.641395][ T8911] ? should_fail+0x3f/0x810 [ 1927.646042][ T8911] ? __stack_depot_save+0x21/0x4b0 [ 1927.651252][ T8911] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1927.657583][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1927.663479][ T8911] __msan_chain_origin+0xbd/0x140 [ 1927.668595][ T8911] ___sys_recvmsg+0x522/0x890 [ 1927.673361][ T8911] ? do_recvmmsg+0x5bc/0x1180 [ 1927.678200][ T8911] ? kmsan_internal_check_memory+0x94/0x530 [ 1927.684257][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1927.690154][ T8911] do_recvmmsg+0x55a/0x1180 [ 1927.694756][ T8911] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1927.701116][ T8911] ? do_syscall_64+0x3d/0xb0 [ 1927.705822][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1927.710937][ T8911] do_syscall_64+0x3d/0xb0 [ 1927.715427][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1927.721427][ T8911] RIP: 0033:0x7f6a17489279 [ 1927.725939][ T8911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1927.745774][ T8911] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1927.754261][ T8911] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1927.762293][ T8911] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1927.770320][ T8911] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1927.778369][ T8911] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1927.786460][ T8911] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1927.794556][ T8911] [ 1927.828637][ T8911] Uninit was stored to memory at: [ 1927.833879][ T8911] ___sys_recvmsg+0x522/0x890 [ 1927.838672][ T8911] do_recvmmsg+0x55a/0x1180 [ 1927.843242][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1927.848332][ T8911] do_syscall_64+0x3d/0xb0 [ 1927.856470][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1927.863547][ T8911] [ 1927.866232][ T8911] Uninit was stored to memory at: [ 1927.872114][ T8911] ___sys_recvmsg+0x522/0x890 [ 1927.877339][ T8911] do_recvmmsg+0x55a/0x1180 [ 1927.882681][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1927.888230][ T8911] do_syscall_64+0x3d/0xb0 [ 1927.893444][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1927.900293][ T8911] [ 1927.903181][ T8911] Uninit was stored to memory at: [ 1927.908801][ T8911] ___sys_recvmsg+0x522/0x890 [ 1927.914335][ T8911] do_recvmmsg+0x55a/0x1180 [ 1927.919377][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1927.925294][ T8911] do_syscall_64+0x3d/0xb0 [ 1927.930492][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1927.937430][ T8911] [ 1927.940022][ T8911] Uninit was stored to memory at: [ 1927.946034][ T8911] ___sys_recvmsg+0x522/0x890 [ 1927.951241][ T8911] do_recvmmsg+0x55a/0x1180 [ 1927.956584][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1927.962565][ T8911] do_syscall_64+0x3d/0xb0 [ 1927.967788][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1927.974875][ T8911] [ 1927.977749][ T8911] Uninit was stored to memory at: [ 1927.983779][ T8911] ___sys_recvmsg+0x522/0x890 [ 1927.988944][ T8911] do_recvmmsg+0x55a/0x1180 [ 1927.994278][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1927.999895][ T8911] do_syscall_64+0x3d/0xb0 [ 1928.005093][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1928.011790][ T8911] [ 1928.014542][ T8911] Uninit was stored to memory at: [ 1928.020442][ T8911] ___sys_recvmsg+0x522/0x890 [ 1928.025938][ T8911] do_recvmmsg+0x55a/0x1180 [ 1928.030974][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1928.036953][ T8911] do_syscall_64+0x3d/0xb0 [ 1928.042204][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1928.048745][ T8911] [ 1928.051336][ T8911] Uninit was stored to memory at: [ 1928.057319][ T8911] ___sys_recvmsg+0x522/0x890 [ 1928.062843][ T8911] do_recvmmsg+0x55a/0x1180 [ 1928.067819][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1928.073761][ T8911] do_syscall_64+0x3d/0xb0 [ 1928.078949][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1928.085909][ T8911] [ 1928.088476][ T8911] Local variable msg_sys created at: [ 1928.094729][ T8911] do_recvmmsg+0x5c/0x1180 [ 1928.099700][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1928.446527][ T8911] not chained 2500000 origins [ 1928.451349][ T8911] CPU: 1 PID: 8911 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1928.461575][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1928.471751][ T8911] Call Trace: [ 1928.475121][ T8911] [ 1928.478150][ T8911] dump_stack_lvl+0x1c8/0x256 [ 1928.483051][ T8911] dump_stack+0x1a/0x1c [ 1928.487374][ T8911] kmsan_internal_chain_origin+0x78/0x120 [ 1928.493309][ T8911] ? filter_irq_stacks+0x5c/0x1a0 [ 1928.498523][ T8911] ? kmsan_internal_check_memory+0x94/0x530 [ 1928.504584][ T8911] ? do_recvmmsg+0x55a/0x1180 [ 1928.509407][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1928.515396][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1928.521386][ T8911] ? should_fail+0x3f/0x810 [ 1928.526044][ T8911] ? __stack_depot_save+0x21/0x4b0 [ 1928.531320][ T8911] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1928.537741][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1928.543728][ T8911] __msan_chain_origin+0xbd/0x140 [ 1928.548910][ T8911] ___sys_recvmsg+0x522/0x890 [ 1928.553734][ T8911] ? do_recvmmsg+0x5bc/0x1180 [ 1928.558578][ T8911] ? kmsan_internal_check_memory+0x94/0x530 [ 1928.564642][ T8911] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1928.570627][ T8911] do_recvmmsg+0x55a/0x1180 [ 1928.575321][ T8911] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1928.581751][ T8911] ? do_syscall_64+0x3d/0xb0 [ 1928.586504][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1928.591698][ T8911] do_syscall_64+0x3d/0xb0 [ 1928.596283][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1928.602373][ T8911] RIP: 0033:0x7f6a17489279 [ 1928.606902][ T8911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1928.626671][ T8911] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1928.635232][ T8911] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1928.643328][ T8911] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1928.651436][ T8911] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1928.659520][ T8911] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1928.667605][ T8911] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1928.675729][ T8911] [ 1928.681362][ T8911] Uninit was stored to memory at: [ 1928.686834][ T8911] ___sys_recvmsg+0x522/0x890 [ 1928.691729][ T8911] do_recvmmsg+0x55a/0x1180 [ 1928.696395][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1928.701675][ T8911] do_syscall_64+0x3d/0xb0 [ 1928.706221][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1928.712371][ T8911] [ 1928.714771][ T8911] Uninit was stored to memory at: [ 1928.719990][ T8911] ___sys_recvmsg+0x522/0x890 [ 1928.724883][ T8911] do_recvmmsg+0x55a/0x1180 [ 1928.729514][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1928.734750][ T8911] do_syscall_64+0x3d/0xb0 [ 1928.739319][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1928.745492][ T8911] [ 1928.747914][ T8911] Uninit was stored to memory at: [ 1928.753197][ T8911] ___sys_recvmsg+0x522/0x890 [ 1928.758003][ T8911] do_recvmmsg+0x55a/0x1180 [ 1928.762728][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1928.767897][ T8911] do_syscall_64+0x3d/0xb0 [ 1928.772538][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1928.778611][ T8911] [ 1928.781012][ T8911] Uninit was stored to memory at: [ 1928.786290][ T8911] ___sys_recvmsg+0x522/0x890 [ 1928.791128][ T8911] do_recvmmsg+0x55a/0x1180 [ 1928.795844][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1928.801032][ T8911] do_syscall_64+0x3d/0xb0 [ 1928.805660][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1928.811802][ T8911] [ 1928.814195][ T8911] Uninit was stored to memory at: [ 1928.819401][ T8911] ___sys_recvmsg+0x522/0x890 [ 1928.824317][ T8911] do_recvmmsg+0x55a/0x1180 [ 1928.828969][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1928.834325][ T8911] do_syscall_64+0x3d/0xb0 [ 1928.838904][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1928.845075][ T8911] [ 1928.847474][ T8911] Uninit was stored to memory at: [ 1928.852756][ T8911] ___sys_recvmsg+0x522/0x890 [ 1928.857566][ T8911] do_recvmmsg+0x55a/0x1180 [ 1928.862280][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1928.867452][ T8911] do_syscall_64+0x3d/0xb0 [ 1928.872085][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1928.878167][ T8911] [ 1928.880561][ T8911] Uninit was stored to memory at: [ 1928.885840][ T8911] ___sys_recvmsg+0x522/0x890 [ 1928.890644][ T8911] do_recvmmsg+0x55a/0x1180 [ 1928.895415][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1928.900579][ T8911] do_syscall_64+0x3d/0xb0 [ 1928.905210][ T8911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1928.911279][ T8911] [ 1928.913808][ T8911] Local variable msg_sys created at: [ 1928.919175][ T8911] do_recvmmsg+0x5c/0x1180 [ 1928.923850][ T8911] __x64_sys_recvmmsg+0x3a7/0x4b0 22:47:36 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x40}, [@alu={0x4, 0x0, 0xc, 0x1, 0x6, 0x50, 0xfffffffffffffff0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4000000a}, @call={0x85, 0x0, 0x0, 0x51}, @cb_func, @jmp={0x5, 0x0, 0x2, 0x4, 0x4, 0x30}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x70e7}, @exit]}, &(0x7f0000000100)='syzkaller\x00', 0x1f, 0x5e, &(0x7f0000000440)=""/94, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xf}, 0x10}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x57, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000540)={r3, 0x9, 0x7, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c000000100000012bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008002800f20e000008001b00000000004c002b8008000800", @ANYRES32=r4, @ANYBLOB="080003000000000008000800", @ANYRES32=r3, @ANYBLOB="01000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="080003000500000008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x24024010}, 0x2404c001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r0, @ANYRESDEC=r4], 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x0) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000011, 0x0, 0x2811fdff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00a778a581910fb6a824e419699db50da03f3db27297e49a5a41546ee55e4c07b68ec68ed693e867cdc14aa33d83cf4ca8867a874d8ae16007c64208410c4c46295b7c4c58cb5709bb7be4f06d3ccbf2db332dac4bb7874926bd02ee034d81df4f7a6fb6dbe5de511718ed0cb93cb36292a752ada92bd3eaf40308a4e31ddf1ca5da0ea3f7ef041b93865305aa6fc553886f6b66f5abdb15c9cd8b08df54bf2502c1e7d09e63ba6465d892ebf50dbe8e03b8880d351c8f844da23fc163d642e1805c15", @ANYRES64=r7, @ANYRES64=r7, @ANYRESDEC=r7]) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:47:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024001d0f000001000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b0001006d756c7469710000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) 22:47:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024001d0f000001000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b0001006d756c7469710000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) 22:47:36 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x40}, [@alu={0x4, 0x0, 0xc, 0x1, 0x6, 0x50, 0xfffffffffffffff0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4000000a}, @call={0x85, 0x0, 0x0, 0x51}, @cb_func, @jmp={0x5, 0x0, 0x2, 0x4, 0x4, 0x30}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x70e7}, @exit]}, &(0x7f0000000100)='syzkaller\x00', 0x1f, 0x5e, &(0x7f0000000440)=""/94, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xf}, 0x10}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x57, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000540)={r3, 0x9, 0x7, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c000000100000012bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008002800f20e000008001b00000000004c002b8008000800", @ANYRES32=r4, @ANYBLOB="080003000000000008000800", @ANYRES32=r3, @ANYBLOB="01000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="080003000500000008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x24024010}, 0x2404c001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r0, @ANYRESDEC=r4], 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x0) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000011, 0x0, 0x2811fdff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00a778a581910fb6a824e419699db50da03f3db27297e49a5a41546ee55e4c07b68ec68ed693e867cdc14aa33d83cf4ca8867a874d8ae16007c64208410c4c46295b7c4c58cb5709bb7be4f06d3ccbf2db332dac4bb7874926bd02ee034d81df4f7a6fb6dbe5de511718ed0cb93cb36292a752ada92bd3eaf40308a4e31ddf1ca5da0ea3f7ef041b93865305aa6fc553886f6b66f5abdb15c9cd8b08df54bf2502c1e7d09e63ba6465d892ebf50dbe8e03b8880d351c8f844da23fc163d642e1805c15", @ANYRES64=r7, @ANYRES64=r7, @ANYRESDEC=r7]) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:47:36 executing program 1: syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 22:47:36 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xcf, 0x29, 0x4b, 0x40, 0xecec, 0x6978, 0x1212, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x4}}]}}]}}, 0x0) [ 1929.248317][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1929.389898][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1929.472731][ T25] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1929.480871][T27551] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1929.742570][T27551] usb 2-1: Using ep0 maxpacket: 8 [ 1929.872794][T27551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1929.884024][T27551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1929.894148][T27551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024 [ 1929.905568][T27551] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1930.054322][ T25] usb 4-1: New USB device found, idVendor=ecec, idProduct=6978, bcdDevice=12.12 [ 1930.066225][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.074767][ T25] usb 4-1: Product: syz [ 1930.079191][ T25] usb 4-1: Manufacturer: syz [ 1930.084028][ T25] usb 4-1: SerialNumber: syz 22:47:37 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) [ 1930.294139][ T25] usb 4-1: config 0 descriptor?? [ 1930.346444][ T25] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1930.355112][T27551] usb 2-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86 [ 1930.366518][T27551] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.375115][T27551] usb 2-1: Product: syz [ 1930.379473][T27551] usb 2-1: Manufacturer: syz [ 1930.384345][T27551] usb 2-1: SerialNumber: syz 22:47:37 executing program 2: syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) [ 1930.480341][T27551] usb 2-1: config 0 descriptor?? [ 1930.687201][ T25] usb 4-1: USB disconnect, device number 67 [ 1930.712605][ T9094] udevd[9094]: setting owner of /dev/bus/usb/004/067 to uid=0, gid=0 failed: No such file or directory [ 1930.732180][ T8359] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1930.932320][T19519] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1930.995799][ T8359] usb 6-1: Using ep0 maxpacket: 8 [ 1931.044126][T27551] usb 2-1: USB disconnect, device number 70 [ 1931.122948][ T8359] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1931.135529][ T8359] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1931.145578][ T8359] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024 [ 1931.157027][ T8359] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1931.190469][T19519] usb 3-1: Using ep0 maxpacket: 8 [ 1931.312842][T19519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1931.325325][T19519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1931.336604][T19519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024 [ 1931.349427][T19519] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1931.527719][ T9218] udevd[9218]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1931.553251][ T8359] usb 6-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86 [ 1931.562690][ T8359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.570920][ T8359] usb 6-1: Product: syz [ 1931.575841][ T8359] usb 6-1: Manufacturer: syz [ 1931.580632][ T8359] usb 6-1: SerialNumber: syz 22:47:38 executing program 1: syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) [ 1931.884170][T19519] usb 3-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86 [ 1931.894771][T19519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.904154][T19519] usb 3-1: Product: syz [ 1931.909157][T19519] usb 3-1: Manufacturer: syz [ 1931.914698][T19519] usb 3-1: SerialNumber: syz [ 1931.917338][ T8359] usb 6-1: config 0 descriptor?? [ 1932.033052][T19519] usb 3-1: config 0 descriptor?? 22:47:39 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) [ 1932.437417][ T8359] usb 6-1: USB disconnect, device number 93 [ 1932.538385][ T25] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1932.574123][ T3570] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1932.688827][T19519] usb 3-1: USB disconnect, device number 83 [ 1932.793136][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 1932.862437][ T3570] usb 2-1: Using ep0 maxpacket: 8 [ 1932.904662][ T9096] not chained 2510000 origins [ 1932.909558][ T9096] CPU: 1 PID: 9096 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1932.919770][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1932.929949][ T9096] Call Trace: [ 1932.933320][ T9096] [ 1932.936336][ T9096] dump_stack_lvl+0x1c8/0x256 [ 1932.941203][ T9096] dump_stack+0x1a/0x1c [ 1932.945528][ T9096] kmsan_internal_chain_origin+0x78/0x120 [ 1932.951406][ T9096] ? filter_irq_stacks+0x5c/0x1a0 [ 1932.956622][ T9096] ? kmsan_internal_check_memory+0x94/0x530 [ 1932.962683][ T9096] ? do_recvmmsg+0x55a/0x1180 [ 1932.967505][ T9096] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1932.973488][ T9096] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1932.979487][ T9096] ? should_fail+0x3f/0x810 [ 1932.983685][ T3570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1932.984095][ T9096] ? __stack_depot_save+0x21/0x4b0 [ 1932.984204][ T9096] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1932.996400][ T3570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1933.000127][ T9096] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1933.000243][ T9096] __msan_chain_origin+0xbd/0x140 [ 1933.000344][ T9096] ___sys_recvmsg+0x522/0x890 [ 1933.000431][ T9096] ? do_recvmmsg+0x5bc/0x1180 [ 1933.000544][ T9096] ? kmsan_internal_check_memory+0x94/0x530 [ 1933.000656][ T9096] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1933.007856][ T3570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024 [ 1933.016658][ T9096] do_recvmmsg+0x55a/0x1180 [ 1933.016774][ T9096] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1933.016894][ T9096] ? do_syscall_64+0x3d/0xb0 [ 1933.016990][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1933.017102][ T9096] do_syscall_64+0x3d/0xb0 [ 1933.017188][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1933.017320][ T9096] RIP: 0033:0x7faec0089279 [ 1933.017379][ T9096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1933.017465][ T9096] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1933.017547][ T9096] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1933.017613][ T9096] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1933.017668][ T9096] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1933.017724][ T9096] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1933.017774][ T9096] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1933.017857][ T9096] [ 1933.021238][ T9096] Uninit was stored to memory at: [ 1933.024531][ T3570] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1933.029150][ T9096] ___sys_recvmsg+0x522/0x890 [ 1933.029233][ T9096] do_recvmmsg+0x55a/0x1180 [ 1933.029317][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1933.029402][ T9096] do_syscall_64+0x3d/0xb0 [ 1933.029480][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1933.029605][ T9096] [ 1933.029619][ T9096] Uninit was stored to memory at: [ 1933.029724][ T9096] ___sys_recvmsg+0x522/0x890 [ 1933.029803][ T9096] do_recvmmsg+0x55a/0x1180 [ 1933.029880][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1933.029969][ T9096] do_syscall_64+0x3d/0xb0 [ 1933.030046][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1933.030167][ T9096] [ 1933.030182][ T9096] Uninit was stored to memory at: [ 1933.030284][ T9096] ___sys_recvmsg+0x522/0x890 [ 1933.030364][ T9096] do_recvmmsg+0x55a/0x1180 [ 1933.030442][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1933.030528][ T9096] do_syscall_64+0x3d/0xb0 [ 1933.030603][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1933.030726][ T9096] [ 1933.030740][ T9096] Uninit was stored to memory at: [ 1933.030845][ T9096] ___sys_recvmsg+0x522/0x890 [ 1933.030930][ T9096] do_recvmmsg+0x55a/0x1180 [ 1933.031010][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1933.031095][ T9096] do_syscall_64+0x3d/0xb0 [ 1933.031171][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1933.031295][ T9096] [ 1933.031308][ T9096] Uninit was stored to memory at: [ 1933.031414][ T9096] ___sys_recvmsg+0x522/0x890 [ 1933.031494][ T9096] do_recvmmsg+0x55a/0x1180 [ 1933.031573][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1933.031743][ T9096] do_syscall_64+0x3d/0xb0 [ 1933.031818][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1933.031947][ T9096] [ 1933.031962][ T9096] Uninit was stored to memory at: [ 1933.032061][ T9096] ___sys_recvmsg+0x522/0x890 [ 1933.032141][ T9096] do_recvmmsg+0x55a/0x1180 [ 1933.032219][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1933.032306][ T9096] do_syscall_64+0x3d/0xb0 [ 1933.032381][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1933.032504][ T9096] [ 1933.032517][ T9096] Uninit was stored to memory at: [ 1933.032624][ T9096] ___sys_recvmsg+0x522/0x890 [ 1933.032704][ T9096] do_recvmmsg+0x55a/0x1180 [ 1933.032781][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1933.032868][ T9096] do_syscall_64+0x3d/0xb0 [ 1933.032950][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1933.033072][ T9096] [ 1933.033089][ T9096] Local variable msg_sys created at: [ 1933.033116][ T9096] do_recvmmsg+0x5c/0x1180 [ 1933.033191][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1933.040832][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1933.446109][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 22:47:40 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 22:47:40 executing program 2: syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) [ 1933.456052][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024 [ 1933.467516][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1933.486343][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1933.493012][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 [ 1933.859951][ T3570] usb 2-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86 [ 1933.870596][ T3570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.880132][ T3570] usb 2-1: Product: syz [ 1933.885262][ T3570] usb 2-1: Manufacturer: syz [ 1933.890812][ T3570] usb 2-1: SerialNumber: syz [ 1933.977464][ T9233] udevd[9233]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1934.072048][ T8359] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1934.126871][ T3570] usb 2-1: config 0 descriptor?? [ 1934.165218][T19519] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1934.322133][ T8359] usb 6-1: Using ep0 maxpacket: 8 [ 1934.442556][T19519] usb 3-1: Using ep0 maxpacket: 8 [ 1934.443094][ T8359] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1934.460862][ T8359] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1934.471195][ T8359] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024 [ 1934.482659][ T8359] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1934.516747][ T9096] not chained 2520000 origins [ 1934.522077][ T9096] CPU: 1 PID: 9096 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1934.532283][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1934.542454][ T9096] Call Trace: [ 1934.545810][ T9096] [ 1934.548816][ T9096] dump_stack_lvl+0x1c8/0x256 [ 1934.553685][ T9096] dump_stack+0x1a/0x1c [ 1934.558001][ T9096] kmsan_internal_chain_origin+0x78/0x120 [ 1934.563879][ T9096] ? filter_irq_stacks+0x5c/0x1a0 [ 1934.569092][ T9096] ? kmsan_internal_check_memory+0x94/0x530 [ 1934.575138][ T9096] ? do_recvmmsg+0x55a/0x1180 [ 1934.579956][ T9096] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1934.580316][T19519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1934.585896][ T9096] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1934.586020][ T9096] ? should_fail+0x3f/0x810 [ 1934.586125][ T9096] ? __stack_depot_save+0x21/0x4b0 [ 1934.586227][ T9096] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1934.586342][ T9096] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1934.586453][ T9096] __msan_chain_origin+0xbd/0x140 [ 1934.586551][ T9096] ___sys_recvmsg+0x522/0x890 [ 1934.586637][ T9096] ? do_recvmmsg+0x5bc/0x1180 [ 1934.586745][ T9096] ? kmsan_internal_check_memory+0x94/0x530 [ 1934.586855][ T9096] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1934.599054][T19519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1934.603514][ T9096] do_recvmmsg+0x55a/0x1180 [ 1934.603627][ T9096] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1934.603746][ T9096] ? do_syscall_64+0x3d/0xb0 [ 1934.603839][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1934.603956][ T9096] do_syscall_64+0x3d/0xb0 [ 1934.604042][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1934.604173][ T9096] RIP: 0033:0x7faec0089279 [ 1934.604234][ T9096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1934.609297][T19519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024 [ 1934.613820][ T9096] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1934.613902][ T9096] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1934.613976][ T9096] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1934.614032][ T9096] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1934.614087][ T9096] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1934.614140][ T9096] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1934.614224][ T9096] [ 1934.617031][ T9096] Uninit was stored to memory at: [ 1934.621527][T19519] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1934.626951][ T9096] ___sys_recvmsg+0x522/0x890 [ 1934.627036][ T9096] do_recvmmsg+0x55a/0x1180 [ 1934.627115][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1934.812028][ T9096] do_syscall_64+0x3d/0xb0 [ 1934.816583][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1934.822728][ T9096] [ 1934.825144][ T9096] Uninit was stored to memory at: [ 1934.830599][ T9096] ___sys_recvmsg+0x522/0x890 [ 1934.835480][ T9096] do_recvmmsg+0x55a/0x1180 [ 1934.840116][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1934.845351][ T9096] do_syscall_64+0x3d/0xb0 [ 1934.849902][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1934.856065][ T9096] [ 1934.858451][ T9096] Uninit was stored to memory at: [ 1934.863715][ T9096] ___sys_recvmsg+0x522/0x890 [ 1934.868522][ T9096] do_recvmmsg+0x55a/0x1180 [ 1934.873227][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1934.878389][ T9096] do_syscall_64+0x3d/0xb0 [ 1934.883019][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1934.889092][ T9096] [ 1934.891480][ T9096] Uninit was stored to memory at: [ 1934.896751][ T9096] ___sys_recvmsg+0x522/0x890 [ 1934.901658][ T9096] do_recvmmsg+0x55a/0x1180 [ 1934.906308][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1934.911464][ T9096] do_syscall_64+0x3d/0xb0 [ 1934.916088][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1934.922254][ T9096] [ 1934.924645][ T9096] Uninit was stored to memory at: [ 1934.929910][ T9096] ___sys_recvmsg+0x522/0x890 [ 1934.934797][ T9096] do_recvmmsg+0x55a/0x1180 [ 1934.939432][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1934.944672][ T9096] do_syscall_64+0x3d/0xb0 [ 1934.949216][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1934.955374][ T9096] [ 1934.957761][ T9096] Uninit was stored to memory at: [ 1934.963033][ T9096] ___sys_recvmsg+0x522/0x890 [ 1934.967839][ T9096] do_recvmmsg+0x55a/0x1180 [ 1934.972581][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1934.977824][ T9096] do_syscall_64+0x3d/0xb0 [ 1934.982467][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1934.988540][ T9096] [ 1934.990933][ T9096] Uninit was stored to memory at: [ 1934.996241][ T9096] ___sys_recvmsg+0x522/0x890 [ 1935.001044][ T9096] do_recvmmsg+0x55a/0x1180 [ 1935.005752][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1935.010907][ T9096] do_syscall_64+0x3d/0xb0 [ 1935.015536][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1935.021687][ T9096] [ 1935.024075][ T9096] Local variable msg_sys created at: [ 1935.029434][ T9096] do_recvmmsg+0x5c/0x1180 [ 1935.034059][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1935.076288][ T9118] udevd[9118]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1935.172613][ T25] usb 4-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86 [ 1935.184620][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.193169][ T25] usb 4-1: Product: syz [ 1935.197513][ T25] usb 4-1: Manufacturer: syz [ 1935.202358][ T25] usb 4-1: SerialNumber: syz [ 1935.216883][ T8359] usb 6-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86 [ 1935.226347][ T8359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.234676][ T8359] usb 6-1: Product: syz [ 1935.239038][ T8359] usb 6-1: Manufacturer: syz [ 1935.243897][ T8359] usb 6-1: SerialNumber: syz [ 1935.376337][ T3565] usb 2-1: USB disconnect, device number 71 [ 1935.442819][T19519] usb 3-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86 [ 1935.453473][T19519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.463042][T19519] usb 3-1: Product: syz [ 1935.468053][T19519] usb 3-1: Manufacturer: syz [ 1935.473582][T19519] usb 3-1: SerialNumber: syz [ 1935.523303][ T25] usb 4-1: config 0 descriptor?? [ 1935.613672][ T8359] usb 6-1: config 0 descriptor?? [ 1935.623926][ T25] usb 4-1: can't set config #0, error -71 [ 1935.732659][ T25] usb 4-1: USB disconnect, device number 68 [ 1935.837745][T19519] usb 3-1: config 0 descriptor?? [ 1936.338914][ T9159] not chained 2530000 origins [ 1936.344146][ T9159] CPU: 1 PID: 9159 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1936.354364][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1936.364537][ T9159] Call Trace: [ 1936.367901][ T9159] [ 1936.370912][ T9159] dump_stack_lvl+0x1c8/0x256 [ 1936.375783][ T9159] dump_stack+0x1a/0x1c [ 1936.380104][ T9159] kmsan_internal_chain_origin+0x78/0x120 [ 1936.385988][ T9159] ? filter_irq_stacks+0x5c/0x1a0 [ 1936.391212][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1936.397277][ T9159] ? do_recvmmsg+0x55a/0x1180 [ 1936.402120][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1936.408098][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1936.414083][ T9159] ? should_fail+0x3f/0x810 [ 1936.419960][ T9159] ? __stack_depot_save+0x21/0x4b0 [ 1936.425235][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1936.431644][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1936.437620][ T9159] __msan_chain_origin+0xbd/0x140 [ 1936.442791][ T9159] ___sys_recvmsg+0x522/0x890 [ 1936.447618][ T9159] ? do_recvmmsg+0x5bc/0x1180 [ 1936.452474][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1936.458550][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1936.464536][ T9159] do_recvmmsg+0x55a/0x1180 [ 1936.469199][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1936.475611][ T9159] ? do_syscall_64+0x3d/0xb0 [ 1936.480353][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1936.485548][ T9159] do_syscall_64+0x3d/0xb0 [ 1936.490110][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1936.496208][ T9159] RIP: 0033:0x7f6a17489279 [ 1936.500728][ T9159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1936.520503][ T9159] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1936.529061][ T9159] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1936.537169][ T9159] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1936.545253][ T9159] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1936.553340][ T9159] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1936.561425][ T9159] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1936.565418][ T3565] usb 3-1: USB disconnect, device number 84 [ 1936.569497][ T9159] [ 1936.572354][ T9159] Uninit was stored to memory at: [ 1936.585993][ T9159] ___sys_recvmsg+0x522/0x890 [ 1936.590817][ T9159] do_recvmmsg+0x55a/0x1180 [ 1936.595559][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1936.600719][ T9159] do_syscall_64+0x3d/0xb0 [ 1936.605366][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1936.611460][ T9159] [ 1936.613925][ T9159] Uninit was stored to memory at: [ 1936.619123][ T9159] ___sys_recvmsg+0x522/0x890 [ 1936.624024][ T9159] do_recvmmsg+0x55a/0x1180 [ 1936.628654][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1936.633902][ T9159] do_syscall_64+0x3d/0xb0 [ 1936.638453][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1936.644649][ T9159] [ 1936.647038][ T9159] Uninit was stored to memory at: [ 1936.652353][ T9159] ___sys_recvmsg+0x522/0x890 [ 1936.657158][ T9159] do_recvmmsg+0x55a/0x1180 [ 1936.661872][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1936.667039][ T9159] do_syscall_64+0x3d/0xb0 [ 1936.671693][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1936.677762][ T9159] [ 1936.680147][ T9159] Uninit was stored to memory at: [ 1936.685419][ T9159] ___sys_recvmsg+0x522/0x890 [ 1936.690227][ T9159] do_recvmmsg+0x55a/0x1180 [ 1936.694952][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1936.700124][ T9159] do_syscall_64+0x3d/0xb0 [ 1936.704764][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1936.710837][ T9159] [ 1936.713309][ T9159] Uninit was stored to memory at: [ 1936.718496][ T9159] ___sys_recvmsg+0x522/0x890 [ 1936.723386][ T9159] do_recvmmsg+0x55a/0x1180 [ 1936.728016][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1936.733250][ T9159] do_syscall_64+0x3d/0xb0 [ 1936.737797][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1936.743941][ T9159] [ 1936.746332][ T9159] Uninit was stored to memory at: [ 1936.751522][ T9159] ___sys_recvmsg+0x522/0x890 [ 1936.756419][ T9159] do_recvmmsg+0x55a/0x1180 [ 1936.761046][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1936.766286][ T9159] do_syscall_64+0x3d/0xb0 [ 1936.770838][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1936.777021][ T9159] [ 1936.779412][ T9159] Uninit was stored to memory at: [ 1936.784668][ T9159] ___sys_recvmsg+0x522/0x890 [ 1936.789481][ T9159] do_recvmmsg+0x55a/0x1180 [ 1936.794188][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1936.799345][ T9159] do_syscall_64+0x3d/0xb0 [ 1936.803969][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1936.810038][ T9159] [ 1936.812503][ T9159] Local variable msg_sys created at: [ 1936.817861][ T9159] do_recvmmsg+0x5c/0x1180 [ 1936.822485][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1936.966882][ T8359] usb 6-1: USB disconnect, device number 94 [ 1937.162046][ T9335] udevd[9335]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1937.740071][ T9364] udevd[9364]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1937.937078][ T9364] udevd[9364]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1938.398290][ T9096] not chained 2540000 origins [ 1938.403204][ T9096] CPU: 1 PID: 9096 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1938.413414][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1938.423584][ T9096] Call Trace: [ 1938.426940][ T9096] [ 1938.429944][ T9096] dump_stack_lvl+0x1c8/0x256 [ 1938.434816][ T9096] dump_stack+0x1a/0x1c [ 1938.439150][ T9096] kmsan_internal_chain_origin+0x78/0x120 [ 1938.445032][ T9096] ? filter_irq_stacks+0x5c/0x1a0 [ 1938.450236][ T9096] ? kmsan_internal_check_memory+0x94/0x530 [ 1938.456285][ T9096] ? do_recvmmsg+0x55a/0x1180 [ 1938.461120][ T9096] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1938.467104][ T9096] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1938.473079][ T9096] ? should_fail+0x3f/0x810 [ 1938.477734][ T9096] ? __stack_depot_save+0x21/0x4b0 [ 1938.482998][ T9096] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1938.489406][ T9096] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1938.495372][ T9096] __msan_chain_origin+0xbd/0x140 [ 1938.500544][ T9096] ___sys_recvmsg+0x522/0x890 [ 1938.505357][ T9096] ? do_recvmmsg+0x5bc/0x1180 [ 1938.510195][ T9096] ? kmsan_internal_check_memory+0x94/0x530 [ 1938.516249][ T9096] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1938.522238][ T9096] do_recvmmsg+0x55a/0x1180 [ 1938.526951][ T9096] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1938.533408][ T9096] ? do_syscall_64+0x3d/0xb0 [ 1938.538138][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1938.543324][ T9096] do_syscall_64+0x3d/0xb0 [ 1938.547880][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1938.553955][ T9096] RIP: 0033:0x7faec0089279 [ 1938.558476][ T9096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1938.578253][ T9096] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1938.586811][ T9096] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1938.594907][ T9096] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1938.603000][ T9096] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1938.611088][ T9096] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1938.619169][ T9096] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1938.627287][ T9096] [ 1938.632756][ T9096] Uninit was stored to memory at: [ 1938.637979][ T9096] ___sys_recvmsg+0x522/0x890 [ 1938.643138][ T9096] do_recvmmsg+0x55a/0x1180 [ 1938.647763][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1938.653003][ T9096] do_syscall_64+0x3d/0xb0 [ 1938.657567][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1938.663721][ T9096] [ 1938.666114][ T9096] Uninit was stored to memory at: [ 1938.671300][ T9096] ___sys_recvmsg+0x522/0x890 [ 1938.676203][ T9096] do_recvmmsg+0x55a/0x1180 [ 1938.680842][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1938.686088][ T9096] do_syscall_64+0x3d/0xb0 [ 1938.690629][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1938.696776][ T9096] [ 1938.699166][ T9096] Uninit was stored to memory at: [ 1938.704438][ T9096] ___sys_recvmsg+0x522/0x890 [ 1938.709272][ T9096] do_recvmmsg+0x55a/0x1180 [ 1938.713980][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1938.719149][ T9096] do_syscall_64+0x3d/0xb0 [ 1938.723769][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1938.729841][ T9096] [ 1938.732302][ T9096] Uninit was stored to memory at: [ 1938.737493][ T9096] ___sys_recvmsg+0x522/0x890 [ 1938.742373][ T9096] do_recvmmsg+0x55a/0x1180 [ 1938.747016][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1938.752257][ T9096] do_syscall_64+0x3d/0xb0 [ 1938.756797][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1938.762954][ T9096] [ 1938.765340][ T9096] Uninit was stored to memory at: [ 1938.770528][ T9096] ___sys_recvmsg+0x522/0x890 [ 1938.775436][ T9096] do_recvmmsg+0x55a/0x1180 [ 1938.780063][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1938.785297][ T9096] do_syscall_64+0x3d/0xb0 [ 1938.789840][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1938.795997][ T9096] [ 1938.798383][ T9096] Uninit was stored to memory at: [ 1938.803655][ T9096] ___sys_recvmsg+0x522/0x890 [ 1938.808475][ T9096] do_recvmmsg+0x55a/0x1180 [ 1938.813205][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1938.818365][ T9096] do_syscall_64+0x3d/0xb0 [ 1938.822994][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1938.829062][ T9096] [ 1938.831445][ T9096] Uninit was stored to memory at: [ 1938.836721][ T9096] ___sys_recvmsg+0x522/0x890 [ 1938.841524][ T9096] do_recvmmsg+0x55a/0x1180 [ 1938.846224][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1938.851388][ T9096] do_syscall_64+0x3d/0xb0 [ 1938.856022][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1938.862191][ T9096] [ 1938.864580][ T9096] Local variable msg_sys created at: [ 1938.869939][ T9096] do_recvmmsg+0x5c/0x1180 [ 1938.874563][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1939.357846][ T9096] not chained 2550000 origins [ 1939.362808][ T9096] CPU: 1 PID: 9096 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1939.373023][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1939.383194][ T9096] Call Trace: [ 1939.386557][ T9096] [ 1939.389565][ T9096] dump_stack_lvl+0x1c8/0x256 [ 1939.394450][ T9096] dump_stack+0x1a/0x1c [ 1939.398767][ T9096] kmsan_internal_chain_origin+0x78/0x120 [ 1939.404663][ T9096] ? filter_irq_stacks+0x5c/0x1a0 [ 1939.409883][ T9096] ? kmsan_internal_check_memory+0x94/0x530 [ 1939.415947][ T9096] ? do_recvmmsg+0x55a/0x1180 [ 1939.420758][ T9096] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1939.426730][ T9096] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1939.432702][ T9096] ? should_fail+0x3f/0x810 [ 1939.437356][ T9096] ? __stack_depot_save+0x21/0x4b0 [ 1939.442640][ T9096] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1939.449040][ T9096] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1939.455005][ T9096] __msan_chain_origin+0xbd/0x140 [ 1939.460188][ T9096] ___sys_recvmsg+0x522/0x890 [ 1939.465003][ T9096] ? do_recvmmsg+0x5bc/0x1180 [ 1939.469842][ T9096] ? kmsan_internal_check_memory+0x94/0x530 [ 1939.475902][ T9096] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1939.482048][ T9096] do_recvmmsg+0x55a/0x1180 [ 1939.486708][ T9096] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1939.493116][ T9096] ? do_syscall_64+0x3d/0xb0 [ 1939.497842][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1939.503023][ T9096] do_syscall_64+0x3d/0xb0 [ 1939.507569][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1939.513641][ T9096] RIP: 0033:0x7faec0089279 [ 1939.518157][ T9096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1939.537925][ T9096] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1939.546480][ T9096] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1939.554572][ T9096] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1939.562654][ T9096] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1939.570734][ T9096] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1939.578813][ T9096] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1939.586945][ T9096] [ 1939.592381][ T9096] Uninit was stored to memory at: [ 1939.597589][ T9096] ___sys_recvmsg+0x522/0x890 [ 1939.602733][ T9096] do_recvmmsg+0x55a/0x1180 [ 1939.607364][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1939.612719][ T9096] do_syscall_64+0x3d/0xb0 [ 1939.617270][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1939.623409][ T9096] [ 1939.625796][ T9096] Uninit was stored to memory at: [ 1939.630987][ T9096] ___sys_recvmsg+0x522/0x890 [ 1939.635864][ T9096] do_recvmmsg+0x55a/0x1180 [ 1939.640499][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1939.645751][ T9096] do_syscall_64+0x3d/0xb0 [ 1939.650296][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1939.656455][ T9096] [ 1939.658856][ T9096] Uninit was stored to memory at: [ 1939.664129][ T9096] ___sys_recvmsg+0x522/0x890 [ 1939.668932][ T9096] do_recvmmsg+0x55a/0x1180 [ 1939.673638][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1939.678796][ T9096] do_syscall_64+0x3d/0xb0 [ 1939.683415][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1939.689508][ T9096] [ 1939.691962][ T9096] Uninit was stored to memory at: [ 1939.697146][ T9096] ___sys_recvmsg+0x522/0x890 [ 1939.702028][ T9096] do_recvmmsg+0x55a/0x1180 [ 1939.706661][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1939.711891][ T9096] do_syscall_64+0x3d/0xb0 [ 1939.716438][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1939.722598][ T9096] [ 1939.724982][ T9096] Uninit was stored to memory at: [ 1939.730191][ T9096] ___sys_recvmsg+0x522/0x890 [ 1939.735071][ T9096] do_recvmmsg+0x55a/0x1180 [ 1939.739701][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1939.744928][ T9096] do_syscall_64+0x3d/0xb0 [ 1939.749478][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1939.755630][ T9096] [ 1939.758016][ T9096] Uninit was stored to memory at: [ 1939.763339][ T9096] ___sys_recvmsg+0x522/0x890 [ 1939.768128][ T9096] do_recvmmsg+0x55a/0x1180 [ 1939.772834][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1939.777998][ T9096] do_syscall_64+0x3d/0xb0 [ 1939.782621][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1939.788688][ T9096] [ 1939.791072][ T9096] Uninit was stored to memory at: [ 1939.796360][ T9096] ___sys_recvmsg+0x522/0x890 [ 1939.801165][ T9096] do_recvmmsg+0x55a/0x1180 [ 1939.805866][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1939.811019][ T9096] do_syscall_64+0x3d/0xb0 [ 1939.815638][ T9096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1939.821776][ T9096] [ 1939.824166][ T9096] Local variable msg_sys created at: [ 1939.829530][ T9096] do_recvmmsg+0x5c/0x1180 [ 1939.834146][ T9096] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1941.129764][ T9159] not chained 2560000 origins [ 1941.134963][ T9159] CPU: 1 PID: 9159 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1941.145172][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1941.155334][ T9159] Call Trace: [ 1941.158693][ T9159] [ 1941.161697][ T9159] dump_stack_lvl+0x1c8/0x256 [ 1941.166554][ T9159] dump_stack+0x1a/0x1c [ 1941.170866][ T9159] kmsan_internal_chain_origin+0x78/0x120 [ 1941.176741][ T9159] ? filter_irq_stacks+0x5c/0x1a0 [ 1941.181955][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1941.188007][ T9159] ? do_recvmmsg+0x55a/0x1180 [ 1941.192816][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1941.198871][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1941.204838][ T9159] ? should_fail+0x3f/0x810 [ 1941.209517][ T9159] ? __stack_depot_save+0x21/0x4b0 [ 1941.214771][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1941.221184][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1941.227147][ T9159] __msan_chain_origin+0xbd/0x140 [ 1941.232319][ T9159] ___sys_recvmsg+0x522/0x890 [ 1941.237133][ T9159] ? do_recvmmsg+0x5bc/0x1180 [ 1941.241962][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1941.248012][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1941.253999][ T9159] do_recvmmsg+0x55a/0x1180 [ 1941.258655][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1941.265059][ T9159] ? do_syscall_64+0x3d/0xb0 [ 1941.269790][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1941.274969][ T9159] do_syscall_64+0x3d/0xb0 [ 1941.279515][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1941.285584][ T9159] RIP: 0033:0x7f6a17489279 [ 1941.290103][ T9159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1941.309872][ T9159] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1941.318436][ T9159] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1941.326531][ T9159] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1941.334616][ T9159] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1941.342706][ T9159] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1941.350780][ T9159] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1941.358891][ T9159] [ 1941.364538][ T9159] Uninit was stored to memory at: [ 1941.369740][ T9159] ___sys_recvmsg+0x522/0x890 [ 1941.374797][ T9159] do_recvmmsg+0x55a/0x1180 [ 1941.379433][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1941.384670][ T9159] do_syscall_64+0x3d/0xb0 [ 1941.389212][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1941.395354][ T9159] [ 1941.397738][ T9159] Uninit was stored to memory at: [ 1941.403007][ T9159] ___sys_recvmsg+0x522/0x890 [ 1941.407804][ T9159] do_recvmmsg+0x55a/0x1180 [ 1941.412504][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1941.417657][ T9159] do_syscall_64+0x3d/0xb0 [ 1941.422271][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1941.428339][ T9159] [ 1941.430727][ T9159] Uninit was stored to memory at: [ 1941.436010][ T9159] ___sys_recvmsg+0x522/0x890 [ 1941.440839][ T9159] do_recvmmsg+0x55a/0x1180 [ 1941.445637][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1941.450800][ T9159] do_syscall_64+0x3d/0xb0 [ 1941.455434][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1941.461512][ T9159] [ 1941.463991][ T9159] Uninit was stored to memory at: [ 1941.469182][ T9159] ___sys_recvmsg+0x522/0x890 [ 1941.474066][ T9159] do_recvmmsg+0x55a/0x1180 [ 1941.478698][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1941.483928][ T9159] do_syscall_64+0x3d/0xb0 [ 1941.488470][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1941.494639][ T9159] [ 1941.497069][ T9159] Uninit was stored to memory at: [ 1941.502337][ T9159] ___sys_recvmsg+0x522/0x890 [ 1941.507141][ T9159] do_recvmmsg+0x55a/0x1180 [ 1941.511843][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1941.517004][ T9159] do_syscall_64+0x3d/0xb0 [ 1941.521564][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1941.527706][ T9159] [ 1941.530093][ T9159] Uninit was stored to memory at: [ 1941.535355][ T9159] ___sys_recvmsg+0x522/0x890 [ 1941.540159][ T9159] do_recvmmsg+0x55a/0x1180 [ 1941.544858][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1941.550015][ T9159] do_syscall_64+0x3d/0xb0 [ 1941.554639][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1941.560703][ T9159] [ 1941.563171][ T9159] Uninit was stored to memory at: [ 1941.568358][ T9159] ___sys_recvmsg+0x522/0x890 [ 1941.573235][ T9159] do_recvmmsg+0x55a/0x1180 [ 1941.577858][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1941.583087][ T9159] do_syscall_64+0x3d/0xb0 [ 1941.587627][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1941.593760][ T9159] [ 1941.596162][ T9159] Local variable msg_sys created at: [ 1941.601513][ T9159] do_recvmmsg+0x5c/0x1180 [ 1941.606138][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1942.083266][ T9159] not chained 2570000 origins [ 1942.088796][ T9159] CPU: 0 PID: 9159 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1942.099003][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1942.109172][ T9159] Call Trace: [ 1942.112527][ T9159] [ 1942.115533][ T9159] dump_stack_lvl+0x1c8/0x256 [ 1942.120402][ T9159] dump_stack+0x1a/0x1c [ 1942.124735][ T9159] kmsan_internal_chain_origin+0x78/0x120 [ 1942.130603][ T9159] ? filter_irq_stacks+0x5c/0x1a0 [ 1942.135814][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1942.141867][ T9159] ? do_recvmmsg+0x55a/0x1180 [ 1942.146677][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1942.152664][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1942.158655][ T9159] ? should_fail+0x3f/0x810 [ 1942.163312][ T9159] ? __stack_depot_save+0x21/0x4b0 [ 1942.168564][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1942.174968][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1942.180930][ T9159] __msan_chain_origin+0xbd/0x140 [ 1942.186102][ T9159] ___sys_recvmsg+0x522/0x890 [ 1942.190928][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1942.196966][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1942.202936][ T9159] do_recvmmsg+0x55a/0x1180 [ 1942.207597][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1942.213995][ T9159] ? do_syscall_64+0x3d/0xb0 [ 1942.218723][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1942.223898][ T9159] do_syscall_64+0x3d/0xb0 [ 1942.228442][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1942.234513][ T9159] RIP: 0033:0x7f6a17489279 [ 1942.239034][ T9159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1942.258795][ T9159] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1942.267347][ T9159] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1942.275519][ T9159] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1942.283624][ T9159] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1942.291708][ T9159] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1942.299783][ T9159] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1942.307877][ T9159] [ 1942.341588][ T9159] Uninit was stored to memory at: [ 1942.346825][ T9159] ___sys_recvmsg+0x522/0x890 [ 1942.351624][ T9159] do_recvmmsg+0x55a/0x1180 [ 1942.356256][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1942.361413][ T9159] do_syscall_64+0x3d/0xb0 [ 1942.376937][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1942.383914][ T9159] [ 1942.386649][ T9159] Uninit was stored to memory at: [ 1942.392727][ T9159] ___sys_recvmsg+0x522/0x890 [ 1942.398176][ T9159] do_recvmmsg+0x55a/0x1180 [ 1942.403496][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1942.409523][ T9159] do_syscall_64+0x3d/0xb0 [ 1942.414700][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1942.421710][ T9159] [ 1942.424455][ T9159] Uninit was stored to memory at: [ 1942.430402][ T9159] ___sys_recvmsg+0x522/0x890 [ 1942.435978][ T9159] do_recvmmsg+0x55a/0x1180 [ 1942.441242][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1942.447188][ T9159] do_syscall_64+0x3d/0xb0 [ 1942.452432][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1942.459300][ T9159] [ 1942.462139][ T9159] Uninit was stored to memory at: [ 1942.468092][ T9159] ___sys_recvmsg+0x522/0x890 [ 1942.473723][ T9159] do_recvmmsg+0x55a/0x1180 [ 1942.478990][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1942.485031][ T9159] do_syscall_64+0x3d/0xb0 [ 1942.490233][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1942.497255][ T9159] [ 1942.500001][ T9159] Uninit was stored to memory at: [ 1942.506056][ T9159] ___sys_recvmsg+0x522/0x890 [ 1942.511539][ T9159] do_recvmmsg+0x55a/0x1180 [ 1942.516931][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1942.522906][ T9159] do_syscall_64+0x3d/0xb0 [ 1942.528055][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1942.535039][ T9159] [ 1942.537771][ T9159] Uninit was stored to memory at: [ 1942.543840][ T9159] ___sys_recvmsg+0x522/0x890 [ 1942.549300][ T9159] do_recvmmsg+0x55a/0x1180 [ 1942.554719][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1942.560592][ T9159] do_syscall_64+0x3d/0xb0 [ 1942.565898][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1942.573015][ T9159] [ 1942.575763][ T9159] Uninit was stored to memory at: [ 1942.581877][ T9159] ___sys_recvmsg+0x522/0x890 [ 1942.587370][ T9159] do_recvmmsg+0x55a/0x1180 [ 1942.592766][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1942.598604][ T9159] do_syscall_64+0x3d/0xb0 [ 1942.603897][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1942.610832][ T9159] [ 1942.613739][ T9159] Local variable msg_sys created at: [ 1942.619808][ T9159] do_recvmmsg+0x5c/0x1180 [ 1942.625085][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1942.706772][ T9159] not chained 2580000 origins [ 1942.711575][ T9159] CPU: 1 PID: 9159 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1942.721772][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1942.731938][ T9159] Call Trace: [ 1942.735295][ T9159] [ 1942.738302][ T9159] dump_stack_lvl+0x1c8/0x256 [ 1942.743162][ T9159] dump_stack+0x1a/0x1c [ 1942.747476][ T9159] kmsan_internal_chain_origin+0x78/0x120 [ 1942.753349][ T9159] ? filter_irq_stacks+0x5c/0x1a0 [ 1942.758552][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1942.764601][ T9159] ? do_recvmmsg+0x55a/0x1180 [ 1942.769414][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1942.775384][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1942.781356][ T9159] ? should_fail+0x3f/0x810 [ 1942.786006][ T9159] ? __stack_depot_save+0x21/0x4b0 [ 1942.791262][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1942.797665][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1942.803622][ T9159] __msan_chain_origin+0xbd/0x140 [ 1942.808786][ T9159] ___sys_recvmsg+0x522/0x890 [ 1942.813595][ T9159] ? do_recvmmsg+0x5bc/0x1180 [ 1942.818426][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1942.824501][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1942.830471][ T9159] do_recvmmsg+0x55a/0x1180 [ 1942.835122][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1942.841522][ T9159] ? do_syscall_64+0x3d/0xb0 [ 1942.846271][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1942.851454][ T9159] do_syscall_64+0x3d/0xb0 [ 1942.856007][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1942.862091][ T9159] RIP: 0033:0x7f6a17489279 [ 1942.866641][ T9159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1942.886495][ T9159] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1942.895052][ T9159] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1942.903145][ T9159] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1942.911224][ T9159] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1942.919329][ T9159] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1942.927401][ T9159] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1942.935506][ T9159] [ 1942.941175][ T9159] Uninit was stored to memory at: [ 1942.946645][ T9159] ___sys_recvmsg+0x522/0x890 [ 1942.951449][ T9159] do_recvmmsg+0x55a/0x1180 [ 1942.956180][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1942.961352][ T9159] do_syscall_64+0x3d/0xb0 [ 1942.965972][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1942.972197][ T9159] [ 1942.974581][ T9159] Uninit was stored to memory at: [ 1942.979766][ T9159] ___sys_recvmsg+0x522/0x890 [ 1942.984650][ T9159] do_recvmmsg+0x55a/0x1180 [ 1942.989279][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1942.994508][ T9159] do_syscall_64+0x3d/0xb0 [ 1942.999048][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1943.005189][ T9159] [ 1943.007577][ T9159] Uninit was stored to memory at: [ 1943.012838][ T9159] ___sys_recvmsg+0x522/0x890 [ 1943.017658][ T9159] do_recvmmsg+0x55a/0x1180 [ 1943.022368][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1943.027544][ T9159] do_syscall_64+0x3d/0xb0 [ 1943.032171][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1943.038239][ T9159] [ 1943.040621][ T9159] Uninit was stored to memory at: [ 1943.045875][ T9159] ___sys_recvmsg+0x522/0x890 [ 1943.050678][ T9159] do_recvmmsg+0x55a/0x1180 [ 1943.055378][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1943.060535][ T9159] do_syscall_64+0x3d/0xb0 [ 1943.065172][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1943.071237][ T9159] [ 1943.073696][ T9159] Uninit was stored to memory at: [ 1943.078876][ T9159] ___sys_recvmsg+0x522/0x890 [ 1943.083742][ T9159] do_recvmmsg+0x55a/0x1180 [ 1943.088354][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1943.093594][ T9159] do_syscall_64+0x3d/0xb0 [ 1943.098137][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1943.104271][ T9159] [ 1943.106656][ T9159] Uninit was stored to memory at: [ 1943.111918][ T9159] ___sys_recvmsg+0x522/0x890 [ 1943.116717][ T9159] do_recvmmsg+0x55a/0x1180 [ 1943.121346][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1943.126579][ T9159] do_syscall_64+0x3d/0xb0 [ 1943.131116][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1943.137314][ T9159] [ 1943.139703][ T9159] Uninit was stored to memory at: [ 1943.145012][ T9159] ___sys_recvmsg+0x522/0x890 [ 1943.149814][ T9159] do_recvmmsg+0x55a/0x1180 [ 1943.154522][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1943.159677][ T9159] do_syscall_64+0x3d/0xb0 [ 1943.164343][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1943.170411][ T9159] [ 1943.172878][ T9159] Local variable msg_sys created at: [ 1943.178241][ T9159] do_recvmmsg+0x5c/0x1180 [ 1943.182919][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1943.336706][ T9159] not chained 2590000 origins [ 1943.341502][ T9159] CPU: 1 PID: 9159 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1943.351709][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1943.361875][ T9159] Call Trace: [ 1943.365239][ T9159] [ 1943.368243][ T9159] dump_stack_lvl+0x1c8/0x256 [ 1943.373102][ T9159] dump_stack+0x1a/0x1c [ 1943.377410][ T9159] kmsan_internal_chain_origin+0x78/0x120 [ 1943.383280][ T9159] ? filter_irq_stacks+0x5c/0x1a0 [ 1943.388487][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1943.394536][ T9159] ? do_recvmmsg+0x55a/0x1180 [ 1943.399346][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1943.405317][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1943.411291][ T9159] ? should_fail+0x3f/0x810 [ 1943.415938][ T9159] ? __stack_depot_save+0x21/0x4b0 [ 1943.421200][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1943.427605][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1943.433572][ T9159] __msan_chain_origin+0xbd/0x140 [ 1943.438736][ T9159] ___sys_recvmsg+0x522/0x890 [ 1943.443545][ T9159] ? do_recvmmsg+0x5bc/0x1180 [ 1943.448372][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1943.454421][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1943.460391][ T9159] do_recvmmsg+0x55a/0x1180 [ 1943.465048][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1943.471451][ T9159] ? do_syscall_64+0x3d/0xb0 [ 1943.476198][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1943.481383][ T9159] do_syscall_64+0x3d/0xb0 [ 1943.485933][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1943.492020][ T9159] RIP: 0033:0x7f6a17489279 [ 1943.496542][ T9159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1943.516310][ T9159] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1943.524868][ T9159] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1943.532991][ T9159] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1943.541097][ T9159] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1943.549176][ T9159] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1943.557255][ T9159] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1943.565369][ T9159] [ 1943.571920][ T9159] Uninit was stored to memory at: [ 1943.579192][ T9159] ___sys_recvmsg+0x522/0x890 [ 1943.584305][ T9159] do_recvmmsg+0x55a/0x1180 [ 1943.588937][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1943.594173][ T9159] do_syscall_64+0x3d/0xb0 [ 1943.598713][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1943.604872][ T9159] [ 1943.607262][ T9159] Uninit was stored to memory at: [ 1943.612516][ T9159] ___sys_recvmsg+0x522/0x890 [ 1943.617318][ T9159] do_recvmmsg+0x55a/0x1180 [ 1943.622024][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1943.627177][ T9159] do_syscall_64+0x3d/0xb0 [ 1943.631794][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1943.637861][ T9159] [ 1943.640244][ T9159] Uninit was stored to memory at: [ 1943.645508][ T9159] ___sys_recvmsg+0x522/0x890 [ 1943.650314][ T9159] do_recvmmsg+0x55a/0x1180 [ 1943.655028][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1943.660189][ T9159] do_syscall_64+0x3d/0xb0 [ 1943.664824][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1943.670898][ T9159] [ 1943.673420][ T9159] Uninit was stored to memory at: [ 1943.678623][ T9159] ___sys_recvmsg+0x522/0x890 [ 1943.683515][ T9159] do_recvmmsg+0x55a/0x1180 [ 1943.688161][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1943.693445][ T9159] do_syscall_64+0x3d/0xb0 [ 1943.697991][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1943.704141][ T9159] [ 1943.706533][ T9159] Uninit was stored to memory at: [ 1943.711882][ T9159] ___sys_recvmsg+0x522/0x890 [ 1943.716698][ T9159] do_recvmmsg+0x55a/0x1180 [ 1943.721345][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1943.726648][ T9159] do_syscall_64+0x3d/0xb0 [ 1943.731199][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1943.737416][ T9159] [ 1943.739803][ T9159] Uninit was stored to memory at: [ 1943.745127][ T9159] ___sys_recvmsg+0x522/0x890 [ 1943.749934][ T9159] do_recvmmsg+0x55a/0x1180 [ 1943.754698][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1943.759854][ T9159] do_syscall_64+0x3d/0xb0 [ 1943.764487][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1943.770551][ T9159] [ 1943.773074][ T9159] Uninit was stored to memory at: [ 1943.778263][ T9159] ___sys_recvmsg+0x522/0x890 [ 1943.783195][ T9159] do_recvmmsg+0x55a/0x1180 [ 1943.787828][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1943.793116][ T9159] do_syscall_64+0x3d/0xb0 [ 1943.797662][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1943.803858][ T9159] [ 1943.806244][ T9159] Local variable msg_sys created at: [ 1943.811691][ T9159] do_recvmmsg+0x5c/0x1180 [ 1943.816230][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1944.089544][ T9159] not chained 2600000 origins [ 1944.094498][ T9159] CPU: 1 PID: 9159 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1944.104704][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1944.114868][ T9159] Call Trace: [ 1944.118225][ T9159] [ 1944.121231][ T9159] dump_stack_lvl+0x1c8/0x256 [ 1944.126094][ T9159] dump_stack+0x1a/0x1c [ 1944.130419][ T9159] kmsan_internal_chain_origin+0x78/0x120 [ 1944.136289][ T9159] ? filter_irq_stacks+0x5c/0x1a0 [ 1944.141490][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1944.147536][ T9159] ? do_recvmmsg+0x55a/0x1180 [ 1944.152346][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1944.158317][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1944.164288][ T9159] ? should_fail+0x3f/0x810 [ 1944.168939][ T9159] ? __stack_depot_save+0x21/0x4b0 [ 1944.174206][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1944.180612][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1944.186582][ T9159] __msan_chain_origin+0xbd/0x140 [ 1944.191745][ T9159] ___sys_recvmsg+0x522/0x890 [ 1944.196551][ T9159] ? do_recvmmsg+0x5bc/0x1180 [ 1944.201384][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1944.207434][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1944.213406][ T9159] do_recvmmsg+0x55a/0x1180 [ 1944.218060][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1944.224464][ T9159] ? do_syscall_64+0x3d/0xb0 [ 1944.229186][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1944.234366][ T9159] do_syscall_64+0x3d/0xb0 [ 1944.238915][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1944.244994][ T9159] RIP: 0033:0x7f6a17489279 [ 1944.249512][ T9159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1944.269288][ T9159] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1944.277936][ T9159] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1944.286029][ T9159] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1944.294112][ T9159] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1944.302198][ T9159] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1944.310276][ T9159] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1944.318413][ T9159] [ 1944.327396][ T9159] Uninit was stored to memory at: [ 1944.333836][ T9159] ___sys_recvmsg+0x522/0x890 [ 1944.338649][ T9159] do_recvmmsg+0x55a/0x1180 [ 1944.343354][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1944.348504][ T9159] do_syscall_64+0x3d/0xb0 [ 1944.353117][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1944.359184][ T9159] [ 1944.361571][ T9159] Uninit was stored to memory at: [ 1944.366838][ T9159] ___sys_recvmsg+0x522/0x890 [ 1944.371716][ T9159] do_recvmmsg+0x55a/0x1180 [ 1944.376348][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1944.381504][ T9159] do_syscall_64+0x3d/0xb0 [ 1944.386122][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1944.392264][ T9159] [ 1944.394650][ T9159] Uninit was stored to memory at: [ 1944.399827][ T9159] ___sys_recvmsg+0x522/0x890 [ 1944.404697][ T9159] do_recvmmsg+0x55a/0x1180 [ 1944.409325][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1944.414551][ T9159] do_syscall_64+0x3d/0xb0 [ 1944.419100][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1944.425242][ T9159] [ 1944.427625][ T9159] Uninit was stored to memory at: [ 1944.432879][ T9159] ___sys_recvmsg+0x522/0x890 [ 1944.437686][ T9159] do_recvmmsg+0x55a/0x1180 [ 1944.442379][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1944.447531][ T9159] do_syscall_64+0x3d/0xb0 [ 1944.452156][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1944.458232][ T9159] [ 1944.460619][ T9159] Uninit was stored to memory at: [ 1944.465878][ T9159] ___sys_recvmsg+0x522/0x890 [ 1944.470687][ T9159] do_recvmmsg+0x55a/0x1180 [ 1944.475396][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1944.480556][ T9159] do_syscall_64+0x3d/0xb0 [ 1944.485175][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1944.491265][ T9159] [ 1944.493722][ T9159] Uninit was stored to memory at: [ 1944.498910][ T9159] ___sys_recvmsg+0x522/0x890 [ 1944.503786][ T9159] do_recvmmsg+0x55a/0x1180 [ 1944.508423][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1944.513648][ T9159] do_syscall_64+0x3d/0xb0 [ 1944.518189][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1944.524348][ T9159] [ 1944.526745][ T9159] Uninit was stored to memory at: [ 1944.532014][ T9159] ___sys_recvmsg+0x522/0x890 [ 1944.536814][ T9159] do_recvmmsg+0x55a/0x1180 [ 1944.541446][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1944.546675][ T9159] do_syscall_64+0x3d/0xb0 [ 1944.551216][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1944.557353][ T9159] [ 1944.559750][ T9159] Local variable msg_sys created at: [ 1944.565179][ T9159] do_recvmmsg+0x5c/0x1180 [ 1944.569721][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1944.738322][ T9159] not chained 2610000 origins [ 1944.743257][ T9159] CPU: 1 PID: 9159 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1944.753462][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1944.763623][ T9159] Call Trace: [ 1944.766978][ T9159] [ 1944.769981][ T9159] dump_stack_lvl+0x1c8/0x256 [ 1944.774855][ T9159] dump_stack+0x1a/0x1c [ 1944.779173][ T9159] kmsan_internal_chain_origin+0x78/0x120 [ 1944.785042][ T9159] ? filter_irq_stacks+0x5c/0x1a0 [ 1944.790246][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1944.796293][ T9159] ? do_recvmmsg+0x55a/0x1180 [ 1944.801105][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1944.807071][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1944.813051][ T9159] ? should_fail+0x3f/0x810 [ 1944.817710][ T9159] ? __stack_depot_save+0x21/0x4b0 [ 1944.822974][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1944.829379][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1944.835343][ T9159] __msan_chain_origin+0xbd/0x140 [ 1944.840519][ T9159] ___sys_recvmsg+0x522/0x890 [ 1944.845329][ T9159] ? do_recvmmsg+0x5bc/0x1180 [ 1944.850158][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1944.856221][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1944.862192][ T9159] do_recvmmsg+0x55a/0x1180 [ 1944.866847][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1944.873265][ T9159] ? do_syscall_64+0x3d/0xb0 [ 1944.878017][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1944.883202][ T9159] do_syscall_64+0x3d/0xb0 [ 1944.887749][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1944.893820][ T9159] RIP: 0033:0x7f6a17489279 [ 1944.898353][ T9159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1944.918121][ T9159] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1944.926763][ T9159] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1944.934860][ T9159] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1944.942960][ T9159] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1944.951043][ T9159] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1944.959120][ T9159] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1944.967229][ T9159] [ 1944.972848][ T9159] Uninit was stored to memory at: [ 1944.978059][ T9159] ___sys_recvmsg+0x522/0x890 [ 1944.983291][ T9159] do_recvmmsg+0x55a/0x1180 [ 1944.987923][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1944.993151][ T9159] do_syscall_64+0x3d/0xb0 [ 1944.997694][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1945.003836][ T9159] [ 1945.006238][ T9159] Uninit was stored to memory at: [ 1945.011426][ T9159] ___sys_recvmsg+0x522/0x890 [ 1945.016304][ T9159] do_recvmmsg+0x55a/0x1180 [ 1945.020930][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1945.026158][ T9159] do_syscall_64+0x3d/0xb0 [ 1945.030697][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1945.036834][ T9159] [ 1945.039218][ T9159] Uninit was stored to memory at: [ 1945.044468][ T9159] ___sys_recvmsg+0x522/0x890 [ 1945.049268][ T9159] do_recvmmsg+0x55a/0x1180 [ 1945.054002][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1945.059161][ T9159] do_syscall_64+0x3d/0xb0 [ 1945.063777][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1945.069850][ T9159] [ 1945.072311][ T9159] Uninit was stored to memory at: [ 1945.077502][ T9159] ___sys_recvmsg+0x522/0x890 [ 1945.082414][ T9159] do_recvmmsg+0x55a/0x1180 [ 1945.087045][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1945.092276][ T9159] do_syscall_64+0x3d/0xb0 [ 1945.096818][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1945.102970][ T9159] [ 1945.105359][ T9159] Uninit was stored to memory at: [ 1945.110543][ T9159] ___sys_recvmsg+0x522/0x890 [ 1945.115417][ T9159] do_recvmmsg+0x55a/0x1180 [ 1945.120046][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1945.125274][ T9159] do_syscall_64+0x3d/0xb0 [ 1945.129818][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1945.135965][ T9159] [ 1945.138349][ T9159] Uninit was stored to memory at: [ 1945.143626][ T9159] ___sys_recvmsg+0x522/0x890 [ 1945.148431][ T9159] do_recvmmsg+0x55a/0x1180 [ 1945.153137][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1945.158297][ T9159] do_syscall_64+0x3d/0xb0 [ 1945.162916][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1945.168986][ T9159] [ 1945.171371][ T9159] Uninit was stored to memory at: [ 1945.176630][ T9159] ___sys_recvmsg+0x522/0x890 [ 1945.181431][ T9159] do_recvmmsg+0x55a/0x1180 [ 1945.186126][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1945.191283][ T9159] do_syscall_64+0x3d/0xb0 [ 1945.195903][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1945.202040][ T9159] [ 1945.204428][ T9159] Local variable msg_sys created at: [ 1945.209783][ T9159] do_recvmmsg+0x5c/0x1180 [ 1945.214405][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1945.528962][ T9159] not chained 2620000 origins [ 1945.534254][ T9159] CPU: 0 PID: 9159 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1945.544422][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1945.554574][ T9159] Call Trace: [ 1945.557988][ T9159] [ 1945.560953][ T9159] dump_stack_lvl+0x1c8/0x256 [ 1945.565738][ T9159] dump_stack+0x1a/0x1c [ 1945.569991][ T9159] kmsan_internal_chain_origin+0x78/0x120 [ 1945.575814][ T9159] ? filter_irq_stacks+0x5c/0x1a0 [ 1945.580947][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1945.586924][ T9159] ? do_recvmmsg+0x55a/0x1180 [ 1945.591692][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1945.597661][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1945.603636][ T9159] ? should_fail+0x3f/0x810 [ 1945.608284][ T9159] ? __stack_depot_save+0x21/0x4b0 [ 1945.613533][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1945.619874][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1945.625767][ T9159] __msan_chain_origin+0xbd/0x140 [ 1945.630874][ T9159] ___sys_recvmsg+0x522/0x890 [ 1945.635621][ T9159] ? do_recvmmsg+0x5bc/0x1180 [ 1945.640381][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1945.646394][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1945.652415][ T9159] do_recvmmsg+0x55a/0x1180 [ 1945.657017][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1945.663355][ T9159] ? do_syscall_64+0x3d/0xb0 [ 1945.668034][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1945.673147][ T9159] do_syscall_64+0x3d/0xb0 [ 1945.677631][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1945.683623][ T9159] RIP: 0033:0x7f6a17489279 [ 1945.688091][ T9159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1945.707795][ T9159] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1945.716281][ T9159] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1945.724340][ T9159] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1945.732583][ T9159] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1945.740625][ T9159] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1945.748680][ T9159] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1945.756822][ T9159] [ 1945.790747][ T9159] Uninit was stored to memory at: [ 1945.795939][ T9159] ___sys_recvmsg+0x522/0x890 [ 1945.800681][ T9159] do_recvmmsg+0x55a/0x1180 [ 1945.809308][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1945.815315][ T9159] do_syscall_64+0x3d/0xb0 [ 1945.820260][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1945.827212][ T9159] [ 1945.829963][ T9159] Uninit was stored to memory at: [ 1945.836015][ T9159] ___sys_recvmsg+0x522/0x890 [ 1945.841495][ T9159] do_recvmmsg+0x55a/0x1180 [ 1945.846928][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1945.852909][ T9159] do_syscall_64+0x3d/0xb0 [ 1945.857867][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1945.864820][ T9159] [ 1945.867564][ T9159] Uninit was stored to memory at: [ 1945.873477][ T9159] ___sys_recvmsg+0x522/0x890 [ 1945.878732][ T9159] do_recvmmsg+0x55a/0x1180 [ 1945.884054][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1945.889612][ T9159] do_syscall_64+0x3d/0xb0 [ 1945.894831][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1945.901334][ T9159] [ 1945.904171][ T9159] Uninit was stored to memory at: [ 1945.909788][ T9159] ___sys_recvmsg+0x522/0x890 [ 1945.915365][ T9159] do_recvmmsg+0x55a/0x1180 [ 1945.920346][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1945.926232][ T9159] do_syscall_64+0x3d/0xb0 [ 1945.931162][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1945.938038][ T9159] [ 1945.940662][ T9159] Uninit was stored to memory at: [ 1945.946634][ T9159] ___sys_recvmsg+0x522/0x890 [ 1945.952136][ T9159] do_recvmmsg+0x55a/0x1180 [ 1945.957247][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1945.963187][ T9159] do_syscall_64+0x3d/0xb0 [ 1945.968116][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1945.975071][ T9159] [ 1945.977929][ T9159] Uninit was stored to memory at: [ 1945.984025][ T9159] ___sys_recvmsg+0x522/0x890 [ 1945.989471][ T9159] do_recvmmsg+0x55a/0x1180 [ 1945.994867][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1946.000478][ T9159] do_syscall_64+0x3d/0xb0 [ 1946.005666][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1946.012571][ T9159] [ 1946.015296][ T9159] Uninit was stored to memory at: [ 1946.021102][ T9159] ___sys_recvmsg+0x522/0x890 [ 1946.026588][ T9159] do_recvmmsg+0x55a/0x1180 [ 1946.031950][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1946.037850][ T9159] do_syscall_64+0x3d/0xb0 [ 1946.042828][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1946.049312][ T9159] [ 1946.052128][ T9159] Local variable msg_sys created at: [ 1946.058168][ T9159] do_recvmmsg+0x5c/0x1180 [ 1946.063405][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1946.406885][ T9159] not chained 2630000 origins [ 1946.413641][ T9159] CPU: 1 PID: 9159 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1946.423866][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1946.434157][ T9159] Call Trace: [ 1946.437516][ T9159] [ 1946.440543][ T9159] dump_stack_lvl+0x1c8/0x256 [ 1946.445411][ T9159] dump_stack+0x1a/0x1c [ 1946.449739][ T9159] kmsan_internal_chain_origin+0x78/0x120 [ 1946.455621][ T9159] ? filter_irq_stacks+0x5c/0x1a0 [ 1946.460834][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1946.467843][ T9159] ? do_recvmmsg+0x55a/0x1180 [ 1946.472659][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1946.478640][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1946.484629][ T9159] ? should_fail+0x3f/0x810 [ 1946.489287][ T9159] ? __stack_depot_save+0x21/0x4b0 [ 1946.494556][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1946.500968][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1946.506933][ T9159] __msan_chain_origin+0xbd/0x140 [ 1946.512103][ T9159] ___sys_recvmsg+0x522/0x890 [ 1946.516913][ T9159] ? do_recvmmsg+0x5bc/0x1180 [ 1946.521747][ T9159] ? kmsan_internal_check_memory+0x94/0x530 [ 1946.527810][ T9159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1946.533784][ T9159] do_recvmmsg+0x55a/0x1180 [ 1946.538450][ T9159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1946.544857][ T9159] ? do_syscall_64+0x3d/0xb0 [ 1946.549595][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1946.554782][ T9159] do_syscall_64+0x3d/0xb0 [ 1946.559340][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1946.565416][ T9159] RIP: 0033:0x7f6a17489279 [ 1946.569945][ T9159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1946.589730][ T9159] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1946.598291][ T9159] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1946.606389][ T9159] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1946.614484][ T9159] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1946.622568][ T9159] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1946.630646][ T9159] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1946.638759][ T9159] [ 1946.644300][ T9159] Uninit was stored to memory at: [ 1946.649509][ T9159] ___sys_recvmsg+0x522/0x890 [ 1946.655884][ T9159] do_recvmmsg+0x55a/0x1180 [ 1946.660608][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1946.665979][ T9159] do_syscall_64+0x3d/0xb0 [ 1946.670524][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1946.676677][ T9159] [ 1946.679067][ T9159] Uninit was stored to memory at: [ 1946.684335][ T9159] ___sys_recvmsg+0x522/0x890 [ 1946.689139][ T9159] do_recvmmsg+0x55a/0x1180 [ 1946.693842][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1946.698998][ T9159] do_syscall_64+0x3d/0xb0 [ 1946.703635][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1946.709701][ T9159] [ 1946.712163][ T9159] Uninit was stored to memory at: [ 1946.717377][ T9159] ___sys_recvmsg+0x522/0x890 [ 1946.722265][ T9159] do_recvmmsg+0x55a/0x1180 [ 1946.726901][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1946.732130][ T9159] do_syscall_64+0x3d/0xb0 [ 1946.736674][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1946.742822][ T9159] [ 1946.745210][ T9159] Uninit was stored to memory at: [ 1946.750421][ T9159] ___sys_recvmsg+0x522/0x890 [ 1946.755303][ T9159] do_recvmmsg+0x55a/0x1180 [ 1946.759937][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1946.765170][ T9159] do_syscall_64+0x3d/0xb0 [ 1946.769710][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1946.775851][ T9159] [ 1946.778235][ T9159] Uninit was stored to memory at: [ 1946.783500][ T9159] ___sys_recvmsg+0x522/0x890 [ 1946.788303][ T9159] do_recvmmsg+0x55a/0x1180 [ 1946.793010][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1946.798171][ T9159] do_syscall_64+0x3d/0xb0 [ 1946.802800][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1946.808865][ T9159] [ 1946.811250][ T9159] Uninit was stored to memory at: [ 1946.816531][ T9159] ___sys_recvmsg+0x522/0x890 [ 1946.821331][ T9159] do_recvmmsg+0x55a/0x1180 [ 1946.826045][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1946.831206][ T9159] do_syscall_64+0x3d/0xb0 [ 1946.835832][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1946.842036][ T9159] [ 1946.844427][ T9159] Uninit was stored to memory at: [ 1946.849609][ T9159] ___sys_recvmsg+0x522/0x890 [ 1946.854492][ T9159] do_recvmmsg+0x55a/0x1180 [ 1946.859120][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1946.864372][ T9159] do_syscall_64+0x3d/0xb0 [ 1946.868923][ T9159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1946.875065][ T9159] [ 1946.877456][ T9159] Local variable msg_sys created at: [ 1946.882893][ T9159] do_recvmmsg+0x5c/0x1180 [ 1946.887439][ T9159] __x64_sys_recvmmsg+0x3a7/0x4b0 22:47:54 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x40}, [@alu={0x4, 0x0, 0xc, 0x1, 0x6, 0x50, 0xfffffffffffffff0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4000000a}, @call={0x85, 0x0, 0x0, 0x51}, @cb_func, @jmp={0x5, 0x0, 0x2, 0x4, 0x4, 0x30}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x70e7}, @exit]}, &(0x7f0000000100)='syzkaller\x00', 0x1f, 0x5e, &(0x7f0000000440)=""/94, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xf}, 0x10}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x57, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000540)={r3, 0x9, 0x7, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c000000100000012bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008002800f20e000008001b00000000004c002b8008000800", @ANYRES32=r4, @ANYBLOB="080003000000000008000800", @ANYRES32=r3, @ANYBLOB="01000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="080003000500000008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x24024010}, 0x2404c001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r0, @ANYRESDEC=r4], 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x0) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000011, 0x0, 0x2811fdff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00a778a581910fb6a824e419699db50da03f3db27297e49a5a41546ee55e4c07b68ec68ed693e867cdc14aa33d83cf4ca8867a874d8ae16007c64208410c4c46295b7c4c58cb5709bb7be4f06d3ccbf2db332dac4bb7874926bd02ee034d81df4f7a6fb6dbe5de511718ed0cb93cb36292a752ada92bd3eaf40308a4e31ddf1ca5da0ea3f7ef041b93865305aa6fc553886f6b66f5abdb15c9cd8b08df54bf2502c1e7d09e63ba6465d892ebf50dbe8e03b8880d351c8f844da23fc163d642e1805c15", @ANYRES64=r7, @ANYRES64=r7, @ANYRESDEC=r7]) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:47:54 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 22:47:54 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 22:47:54 executing program 2: syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 22:47:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0xffffffffdf002fff, 0x0) 22:47:54 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x40}, [@alu={0x4, 0x0, 0xc, 0x1, 0x6, 0x50, 0xfffffffffffffff0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4000000a}, @call={0x85, 0x0, 0x0, 0x51}, @cb_func, @jmp={0x5, 0x0, 0x2, 0x4, 0x4, 0x30}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x70e7}, @exit]}, &(0x7f0000000100)='syzkaller\x00', 0x1f, 0x5e, &(0x7f0000000440)=""/94, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xf}, 0x10}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x57, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000540)={r3, 0x9, 0x7, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c000000100000012bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008002800f20e000008001b00000000004c002b8008000800", @ANYRES32=r4, @ANYBLOB="080003000000000008000800", @ANYRES32=r3, @ANYBLOB="01000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="080003000500000008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x24024010}, 0x2404c001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r0, @ANYRESDEC=r4], 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x0) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000011, 0x0, 0x2811fdff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00a778a581910fb6a824e419699db50da03f3db27297e49a5a41546ee55e4c07b68ec68ed693e867cdc14aa33d83cf4ca8867a874d8ae16007c64208410c4c46295b7c4c58cb5709bb7be4f06d3ccbf2db332dac4bb7874926bd02ee034d81df4f7a6fb6dbe5de511718ed0cb93cb36292a752ada92bd3eaf40308a4e31ddf1ca5da0ea3f7ef041b93865305aa6fc553886f6b66f5abdb15c9cd8b08df54bf2502c1e7d09e63ba6465d892ebf50dbe8e03b8880d351c8f844da23fc163d642e1805c15", @ANYRES64=r7, @ANYRES64=r7, @ANYRESDEC=r7]) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:47:54 executing program 1: migrate_pages(0x0, 0x6b4, 0x0, 0xfffffffffffffffc) [ 1947.492647][T27551] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1947.502915][ T8359] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1947.582287][ T25] usb 3-1: new high-speed USB device number 85 using dummy_hcd 22:47:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x40101286, &(0x7f0000000240)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "625563124110b1cf414b5e86e255e6ccc724f76016ae8a3d61f083e20c76c0dd6a96d83624061158218df86525e54e9508067e7a4bc779f3bc1af23a998bb209", "9f71dd84be2de39975176c53c112a051740b0795cfeb034ae3ee230d99f4e1befe27118e8e605b8085f3d15f1ccbf3fdd10b14ac3fe65e89b86e3e7ac3539712", "8aaf155c2d39d1071a33d81e41569eec34c48693d193bae38fb5c88c5ac3b19f"}}) [ 1947.732382][T27551] usb 6-1: Using ep0 maxpacket: 8 [ 1947.742392][ T8359] usb 4-1: Using ep0 maxpacket: 8 [ 1947.932983][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 1947.953050][ T8359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1947.965089][ T8359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1947.977090][ T8359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024 [ 1947.988738][ T8359] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1947.999867][T27551] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1948.010953][T27551] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1948.020880][T27551] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024 [ 1948.032309][T27551] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1948.146649][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1948.158934][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1948.169093][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024 [ 1948.182874][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1948.262500][ T8359] usb 4-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86 [ 1948.271941][ T8359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.280139][ T8359] usb 4-1: Product: syz [ 1948.286518][ T8359] usb 4-1: Manufacturer: syz [ 1948.291394][ T8359] usb 4-1: SerialNumber: syz [ 1948.298522][T27551] usb 6-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86 22:47:55 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0x80000002) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/97, 0x61}], 0x15, 0x0, 0x0) [ 1948.307856][T27551] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.316111][T27551] usb 6-1: Product: syz [ 1948.320475][T27551] usb 6-1: Manufacturer: syz [ 1948.325306][T27551] usb 6-1: SerialNumber: syz [ 1948.365931][ T8359] usb 4-1: config 0 descriptor?? [ 1948.387834][T27551] usb 6-1: config 0 descriptor?? [ 1948.533082][ T25] usb 3-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86 [ 1948.542512][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.550891][ T25] usb 3-1: Product: syz [ 1948.556407][ T25] usb 3-1: Manufacturer: syz [ 1948.561183][ T25] usb 3-1: SerialNumber: syz [ 1948.843959][ T25] usb 3-1: config 0 descriptor?? [ 1948.915313][ T3552] usb 4-1: USB disconnect, device number 69 [ 1948.936288][T27551] usb 6-1: USB disconnect, device number 95 22:47:56 executing program 1: getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000), 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x244000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000280)={0x2, &(0x7f0000000200)=[{}, {@fixed}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 22:47:56 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) [ 1949.556659][ T8359] usb 3-1: USB disconnect, device number 85 22:47:56 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000012c0), 0x1000000000000147, 0x0, 0x0) [ 1950.057508][ T9601] udevd[9601]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1950.338646][ T9485] udevd[9485]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1950.362373][T27551] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1950.469649][ T9591] udevd[9591]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1950.623674][ T9467] not chained 2640000 origins [ 1950.628565][ T9467] CPU: 1 PID: 9467 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1950.638777][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1950.648956][ T9467] Call Trace: [ 1950.652317][ T9467] [ 1950.655343][ T9467] dump_stack_lvl+0x1c8/0x256 [ 1950.660210][ T9467] dump_stack+0x1a/0x1c [ 1950.664538][ T9467] kmsan_internal_chain_origin+0x78/0x120 [ 1950.670416][ T9467] ? filter_irq_stacks+0x5c/0x1a0 [ 1950.675625][ T9467] ? kmsan_internal_check_memory+0x94/0x530 [ 1950.681680][ T9467] ? do_recvmmsg+0x55a/0x1180 [ 1950.686503][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1950.692484][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1950.698459][ T9467] ? should_fail+0x3f/0x810 [ 1950.703109][ T9467] ? __stack_depot_save+0x21/0x4b0 [ 1950.708377][ T9467] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1950.714793][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1950.720772][ T9467] __msan_chain_origin+0xbd/0x140 [ 1950.725957][ T9467] ___sys_recvmsg+0x522/0x890 [ 1950.730772][ T9467] ? do_recvmmsg+0x5bc/0x1180 [ 1950.735614][ T9467] ? kmsan_internal_check_memory+0x94/0x530 [ 1950.741672][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1950.747645][ T9467] do_recvmmsg+0x55a/0x1180 [ 1950.752304][ T9467] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1950.758713][ T9467] ? do_syscall_64+0x3d/0xb0 [ 1950.763441][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1950.768633][ T9467] do_syscall_64+0x3d/0xb0 [ 1950.773191][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1950.779263][ T9467] RIP: 0033:0x7faec0089279 [ 1950.783785][ T9467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1950.803562][ T9467] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1950.812118][ T9467] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1950.820217][ T9467] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1950.828306][ T9467] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1950.836396][ T9467] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1950.844480][ T9467] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1950.852604][ T9467] [ 1950.858860][ T9467] Uninit was stored to memory at: [ 1950.864491][ T9467] ___sys_recvmsg+0x522/0x890 [ 1950.869305][ T9467] do_recvmmsg+0x55a/0x1180 [ 1950.874037][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1950.879204][ T9467] do_syscall_64+0x3d/0xb0 [ 1950.883843][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1950.889961][ T9467] [ 1950.892471][ T9467] Uninit was stored to memory at: [ 1950.897665][ T9467] ___sys_recvmsg+0x522/0x890 [ 1950.902558][ T9467] do_recvmmsg+0x55a/0x1180 [ 1950.907195][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1950.912463][ T9467] do_syscall_64+0x3d/0xb0 [ 1950.917012][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1950.923175][ T9467] [ 1950.925568][ T9467] Uninit was stored to memory at: [ 1950.930839][ T9467] ___sys_recvmsg+0x522/0x890 [ 1950.935732][ T9467] do_recvmmsg+0x55a/0x1180 [ 1950.940366][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1950.945611][ T9467] do_syscall_64+0x3d/0xb0 [ 1950.950159][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1950.956306][ T9467] [ 1950.958693][ T9467] Uninit was stored to memory at: [ 1950.963956][ T9467] ___sys_recvmsg+0x522/0x890 [ 1950.968763][ T9467] do_recvmmsg+0x55a/0x1180 [ 1950.973483][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1950.978641][ T9467] do_syscall_64+0x3d/0xb0 [ 1950.983264][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1950.989352][ T9467] [ 1950.991821][ T9467] Uninit was stored to memory at: [ 1950.997008][ T9467] ___sys_recvmsg+0x522/0x890 [ 1951.001897][ T9467] do_recvmmsg+0x55a/0x1180 [ 1951.006520][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1951.011744][ T9467] do_syscall_64+0x3d/0xb0 [ 1951.016301][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1951.022452][ T9467] [ 1951.024839][ T9467] Uninit was stored to memory at: [ 1951.030025][ T9467] ___sys_recvmsg+0x522/0x890 [ 1951.034902][ T9467] do_recvmmsg+0x55a/0x1180 [ 1951.039527][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1951.044753][ T9467] do_syscall_64+0x3d/0xb0 [ 1951.049295][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1951.055439][ T9467] [ 1951.057824][ T9467] Uninit was stored to memory at: [ 1951.063076][ T9467] ___sys_recvmsg+0x522/0x890 [ 1951.067873][ T9467] do_recvmmsg+0x55a/0x1180 [ 1951.072579][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1951.077734][ T9467] do_syscall_64+0x3d/0xb0 [ 1951.082350][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1951.088435][ T9467] [ 1951.090826][ T9467] Local variable msg_sys created at: [ 1951.096267][ T9467] do_recvmmsg+0x5c/0x1180 [ 1951.100834][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1951.106264][T27551] usb 4-1: Using ep0 maxpacket: 8 [ 1951.232930][T27551] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1951.244129][T27551] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1951.256414][T27551] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024 [ 1951.268284][T27551] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1951.648160][T27551] usb 4-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86 [ 1951.657531][T27551] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.668355][T27551] usb 4-1: Product: syz [ 1951.672972][T27551] usb 4-1: Manufacturer: syz [ 1951.677751][T27551] usb 4-1: SerialNumber: syz [ 1951.747030][ T9482] not chained 2650000 origins [ 1951.752798][ T9482] CPU: 0 PID: 9482 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1951.763017][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1951.769405][T27551] usb 4-1: config 0 descriptor?? [ 1951.773129][ T9482] Call Trace: [ 1951.773158][ T9482] [ 1951.773184][ T9482] dump_stack_lvl+0x1c8/0x256 [ 1951.789257][ T9482] dump_stack+0x1a/0x1c [ 1951.793583][ T9482] kmsan_internal_chain_origin+0x78/0x120 [ 1951.799454][ T9482] ? filter_irq_stacks+0x5c/0x1a0 [ 1951.804660][ T9482] ? kmsan_internal_check_memory+0x94/0x530 [ 1951.810711][ T9482] ? do_recvmmsg+0x55a/0x1180 [ 1951.815542][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1951.821513][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1951.827487][ T9482] ? should_fail+0x3f/0x810 [ 1951.832132][ T9482] ? __stack_depot_save+0x21/0x4b0 [ 1951.837394][ T9482] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1951.843800][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1951.849766][ T9482] __msan_chain_origin+0xbd/0x140 [ 1951.854950][ T9482] ___sys_recvmsg+0x522/0x890 [ 1951.859763][ T9482] ? do_recvmmsg+0x5bc/0x1180 [ 1951.864599][ T9482] ? kmsan_internal_check_memory+0x94/0x530 [ 1951.870650][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1951.876623][ T9482] do_recvmmsg+0x55a/0x1180 [ 1951.881286][ T9482] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1951.887691][ T9482] ? do_syscall_64+0x3d/0xb0 [ 1951.892422][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1951.897611][ T9482] do_syscall_64+0x3d/0xb0 [ 1951.902165][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1951.908240][ T9482] RIP: 0033:0x7f6a17489279 [ 1951.912767][ T9482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1951.932536][ T9482] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1951.941092][ T9482] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1951.949191][ T9482] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1951.957274][ T9482] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1951.965362][ T9482] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1951.973438][ T9482] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1951.981560][ T9482] [ 1952.015809][ T9482] Uninit was stored to memory at: [ 1952.021041][ T9482] ___sys_recvmsg+0x522/0x890 [ 1952.025851][ T9482] do_recvmmsg+0x55a/0x1180 [ 1952.030494][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1952.035655][ T9482] do_syscall_64+0x3d/0xb0 [ 1952.056343][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1952.063374][ T9482] [ 1952.066116][ T9482] Uninit was stored to memory at: [ 1952.072194][ T9482] ___sys_recvmsg+0x522/0x890 [ 1952.077641][ T9482] do_recvmmsg+0x55a/0x1180 [ 1952.083021][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1952.088906][ T9482] do_syscall_64+0x3d/0xb0 [ 1952.094214][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1952.101095][ T9482] [ 1952.103999][ T9482] Uninit was stored to memory at: [ 1952.109898][ T9482] ___sys_recvmsg+0x522/0x890 [ 1952.115514][ T9482] do_recvmmsg+0x55a/0x1180 [ 1952.120765][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1952.126784][ T9482] do_syscall_64+0x3d/0xb0 [ 1952.132001][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1952.138815][ T9482] [ 1952.141539][ T9482] Uninit was stored to memory at: [ 1952.147628][ T9482] ___sys_recvmsg+0x522/0x890 [ 1952.153193][ T9482] do_recvmmsg+0x55a/0x1180 [ 1952.158442][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1952.164417][ T9482] do_syscall_64+0x3d/0xb0 [ 1952.169579][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1952.176602][ T9482] [ 1952.179337][ T9482] Uninit was stored to memory at: [ 1952.185299][ T9482] ___sys_recvmsg+0x522/0x890 [ 1952.190827][ T9482] do_recvmmsg+0x55a/0x1180 [ 1952.196321][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1952.202294][ T9482] do_syscall_64+0x3d/0xb0 [ 1952.207467][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1952.214417][ T9482] [ 1952.217159][ T9482] Uninit was stored to memory at: [ 1952.223147][ T9482] ___sys_recvmsg+0x522/0x890 [ 1952.228623][ T9482] do_recvmmsg+0x55a/0x1180 [ 1952.234060][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1952.239904][ T9482] do_syscall_64+0x3d/0xb0 [ 1952.245206][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1952.252122][ T9482] [ 1952.254853][ T9482] Uninit was stored to memory at: [ 1952.260753][ T9482] ___sys_recvmsg+0x522/0x890 [ 1952.266259][ T9482] do_recvmmsg+0x55a/0x1180 [ 1952.271547][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1952.277594][ T9482] do_syscall_64+0x3d/0xb0 [ 1952.282860][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1952.289708][ T9482] [ 1952.292595][ T9482] Local variable msg_sys created at: [ 1952.298652][ T9482] do_recvmmsg+0x5c/0x1180 [ 1952.303936][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1952.442939][ T8359] usb 4-1: USB disconnect, device number 70 [ 1952.661245][ T9612] udevd[9612]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1952.698912][ T9482] not chained 2660000 origins [ 1952.703915][ T9482] CPU: 1 PID: 9482 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1952.714119][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1952.724285][ T9482] Call Trace: [ 1952.727643][ T9482] [ 1952.730659][ T9482] dump_stack_lvl+0x1c8/0x256 [ 1952.735526][ T9482] dump_stack+0x1a/0x1c [ 1952.739846][ T9482] kmsan_internal_chain_origin+0x78/0x120 [ 1952.745722][ T9482] ? filter_irq_stacks+0x5c/0x1a0 [ 1952.750935][ T9482] ? kmsan_internal_check_memory+0x94/0x530 [ 1952.756979][ T9482] ? do_recvmmsg+0x55a/0x1180 [ 1952.761789][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1952.767762][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1952.773745][ T9482] ? should_fail+0x3f/0x810 [ 1952.778398][ T9482] ? __stack_depot_save+0x21/0x4b0 [ 1952.783659][ T9482] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1952.790060][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1952.796025][ T9482] __msan_chain_origin+0xbd/0x140 [ 1952.801208][ T9482] ___sys_recvmsg+0x522/0x890 [ 1952.806018][ T9482] ? do_recvmmsg+0x5bc/0x1180 [ 1952.810851][ T9482] ? kmsan_internal_check_memory+0x94/0x530 [ 1952.816913][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1952.822890][ T9482] do_recvmmsg+0x55a/0x1180 [ 1952.827545][ T9482] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1952.833962][ T9482] ? do_syscall_64+0x3d/0xb0 [ 1952.838696][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1952.843887][ T9482] do_syscall_64+0x3d/0xb0 [ 1952.848441][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1952.854514][ T9482] RIP: 0033:0x7f6a17489279 [ 1952.859031][ T9482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1952.878803][ T9482] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1952.887365][ T9482] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1952.895461][ T9482] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1952.903544][ T9482] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1952.911622][ T9482] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1952.919767][ T9482] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1952.927878][ T9482] [ 1952.934242][ T9482] Uninit was stored to memory at: [ 1952.939455][ T9482] ___sys_recvmsg+0x522/0x890 [ 1952.945916][ T9482] do_recvmmsg+0x55a/0x1180 [ 1952.950641][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1952.955874][ T9482] do_syscall_64+0x3d/0xb0 [ 1952.960419][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1952.966576][ T9482] [ 1952.968970][ T9482] Uninit was stored to memory at: [ 1952.974247][ T9482] ___sys_recvmsg+0x522/0x890 [ 1952.979046][ T9482] do_recvmmsg+0x55a/0x1180 [ 1952.983748][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1952.988907][ T9482] do_syscall_64+0x3d/0xb0 [ 1952.993515][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1952.999596][ T9482] [ 1953.002189][ T9482] Uninit was stored to memory at: [ 1953.007377][ T9482] ___sys_recvmsg+0x522/0x890 [ 1953.012249][ T9482] do_recvmmsg+0x55a/0x1180 [ 1953.016894][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1953.022136][ T9482] do_syscall_64+0x3d/0xb0 [ 1953.026680][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1953.032827][ T9482] [ 1953.035211][ T9482] Uninit was stored to memory at: [ 1953.040399][ T9482] ___sys_recvmsg+0x522/0x890 [ 1953.045289][ T9482] do_recvmmsg+0x55a/0x1180 [ 1953.049926][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1953.055156][ T9482] do_syscall_64+0x3d/0xb0 [ 1953.059700][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1953.065849][ T9482] [ 1953.068243][ T9482] Uninit was stored to memory at: [ 1953.073507][ T9482] ___sys_recvmsg+0x522/0x890 [ 1953.078316][ T9482] do_recvmmsg+0x55a/0x1180 [ 1953.083027][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1953.088191][ T9482] do_syscall_64+0x3d/0xb0 [ 1953.092805][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1953.098886][ T9482] [ 1953.101275][ T9482] Uninit was stored to memory at: [ 1953.106542][ T9482] ___sys_recvmsg+0x522/0x890 [ 1953.111349][ T9482] do_recvmmsg+0x55a/0x1180 [ 1953.116151][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1953.121309][ T9482] do_syscall_64+0x3d/0xb0 [ 1953.125932][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1953.132080][ T9482] [ 1953.134468][ T9482] Uninit was stored to memory at: [ 1953.139659][ T9482] ___sys_recvmsg+0x522/0x890 [ 1953.144542][ T9482] do_recvmmsg+0x55a/0x1180 [ 1953.149169][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1953.154408][ T9482] do_syscall_64+0x3d/0xb0 [ 1953.158951][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1953.165097][ T9482] [ 1953.167484][ T9482] Local variable msg_sys created at: [ 1953.172915][ T9482] do_recvmmsg+0x5c/0x1180 [ 1953.177456][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1953.667319][ T9467] not chained 2670000 origins [ 1953.672335][ T9467] CPU: 1 PID: 9467 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1953.682545][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1953.692705][ T9467] Call Trace: [ 1953.696060][ T9467] [ 1953.699083][ T9467] dump_stack_lvl+0x1c8/0x256 [ 1953.703949][ T9467] dump_stack+0x1a/0x1c [ 1953.708267][ T9467] kmsan_internal_chain_origin+0x78/0x120 [ 1953.714143][ T9467] ? filter_irq_stacks+0x5c/0x1a0 [ 1953.719352][ T9467] ? kmsan_internal_check_memory+0x94/0x530 [ 1953.725407][ T9467] ? do_recvmmsg+0x55a/0x1180 [ 1953.730254][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1953.736228][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1953.742202][ T9467] ? should_fail+0x3f/0x810 [ 1953.746858][ T9467] ? __stack_depot_save+0x21/0x4b0 [ 1953.752123][ T9467] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1953.758530][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1953.764507][ T9467] __msan_chain_origin+0xbd/0x140 [ 1953.769678][ T9467] ___sys_recvmsg+0x522/0x890 [ 1953.774483][ T9467] ? do_recvmmsg+0x5bc/0x1180 [ 1953.779316][ T9467] ? kmsan_internal_check_memory+0x94/0x530 [ 1953.785367][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1953.791333][ T9467] do_recvmmsg+0x55a/0x1180 [ 1953.795987][ T9467] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1953.802401][ T9467] ? do_syscall_64+0x3d/0xb0 [ 1953.807126][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1953.812306][ T9467] do_syscall_64+0x3d/0xb0 [ 1953.816852][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1953.822933][ T9467] RIP: 0033:0x7faec0089279 [ 1953.827453][ T9467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1953.847221][ T9467] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1953.855801][ T9467] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1953.863907][ T9467] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1953.871996][ T9467] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1953.880085][ T9467] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1953.888258][ T9467] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1953.896378][ T9467] [ 1953.903256][ T9467] Uninit was stored to memory at: [ 1953.908474][ T9467] ___sys_recvmsg+0x522/0x890 [ 1953.914077][ T9467] do_recvmmsg+0x55a/0x1180 [ 1953.918737][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1953.923980][ T9467] do_syscall_64+0x3d/0xb0 [ 1953.928564][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1953.934722][ T9467] [ 1953.937111][ T9467] Uninit was stored to memory at: [ 1953.942406][ T9467] ___sys_recvmsg+0x522/0x890 [ 1953.947213][ T9467] do_recvmmsg+0x55a/0x1180 [ 1953.951917][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1953.957160][ T9467] do_syscall_64+0x3d/0xb0 [ 1953.961766][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1953.967830][ T9467] [ 1953.970217][ T9467] Uninit was stored to memory at: [ 1953.975497][ T9467] ___sys_recvmsg+0x522/0x890 [ 1953.980300][ T9467] do_recvmmsg+0x55a/0x1180 [ 1953.985009][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1953.990170][ T9467] do_syscall_64+0x3d/0xb0 [ 1953.994792][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1954.000866][ T9467] [ 1954.003373][ T9467] Uninit was stored to memory at: [ 1954.008571][ T9467] ___sys_recvmsg+0x522/0x890 [ 1954.013449][ T9467] do_recvmmsg+0x55a/0x1180 [ 1954.018073][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1954.023352][ T9467] do_syscall_64+0x3d/0xb0 [ 1954.027905][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1954.034049][ T9467] [ 1954.036443][ T9467] Uninit was stored to memory at: [ 1954.041769][ T9467] ___sys_recvmsg+0x522/0x890 [ 1954.046578][ T9467] do_recvmmsg+0x55a/0x1180 [ 1954.051209][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1954.056514][ T9467] do_syscall_64+0x3d/0xb0 [ 1954.061058][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1954.067263][ T9467] [ 1954.069675][ T9467] Uninit was stored to memory at: [ 1954.074987][ T9467] ___sys_recvmsg+0x522/0x890 [ 1954.079788][ T9467] do_recvmmsg+0x55a/0x1180 [ 1954.084547][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1954.089711][ T9467] do_syscall_64+0x3d/0xb0 [ 1954.094386][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1954.100467][ T9467] [ 1954.102987][ T9467] Uninit was stored to memory at: [ 1954.108174][ T9467] ___sys_recvmsg+0x522/0x890 [ 1954.113140][ T9467] do_recvmmsg+0x55a/0x1180 [ 1954.117768][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1954.123047][ T9467] do_syscall_64+0x3d/0xb0 [ 1954.127589][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1954.133795][ T9467] [ 1954.136279][ T9467] Local variable msg_sys created at: [ 1954.141778][ T9467] do_recvmmsg+0x5c/0x1180 [ 1954.146323][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1954.483337][ T9482] not chained 2680000 origins [ 1954.488857][ T9482] CPU: 0 PID: 9482 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1954.499502][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1954.509664][ T9482] Call Trace: [ 1954.513019][ T9482] [ 1954.516038][ T9482] dump_stack_lvl+0x1c8/0x256 [ 1954.520911][ T9482] dump_stack+0x1a/0x1c [ 1954.525225][ T9482] kmsan_internal_chain_origin+0x78/0x120 [ 1954.531096][ T9482] ? filter_irq_stacks+0x5c/0x1a0 [ 1954.536314][ T9482] ? kmsan_internal_check_memory+0x94/0x530 [ 1954.542368][ T9482] ? do_recvmmsg+0x55a/0x1180 [ 1954.547186][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1954.553160][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1954.559127][ T9482] ? should_fail+0x3f/0x810 [ 1954.563790][ T9482] ? __stack_depot_save+0x21/0x4b0 [ 1954.569083][ T9482] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1954.575515][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1954.581489][ T9482] __msan_chain_origin+0xbd/0x140 [ 1954.586656][ T9482] ___sys_recvmsg+0x522/0x890 [ 1954.591560][ T9482] ? do_recvmmsg+0x5bc/0x1180 [ 1954.596391][ T9482] ? kmsan_internal_check_memory+0x94/0x530 [ 1954.602443][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1954.608414][ T9482] do_recvmmsg+0x55a/0x1180 [ 1954.613070][ T9482] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1954.619472][ T9482] ? do_syscall_64+0x3d/0xb0 [ 1954.624196][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1954.629377][ T9482] do_syscall_64+0x3d/0xb0 [ 1954.633932][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1954.640004][ T9482] RIP: 0033:0x7f6a17489279 [ 1954.644548][ T9482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1954.664323][ T9482] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1954.672872][ T9482] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1954.681001][ T9482] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1954.689086][ T9482] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1954.697167][ T9482] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1954.705245][ T9482] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1954.713357][ T9482] [ 1954.747189][ T9482] Uninit was stored to memory at: [ 1954.752418][ T9482] ___sys_recvmsg+0x522/0x890 [ 1954.757226][ T9482] do_recvmmsg+0x55a/0x1180 [ 1954.761856][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1954.767015][ T9482] do_syscall_64+0x3d/0xb0 [ 1954.775599][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1954.782636][ T9482] [ 1954.785377][ T9482] Uninit was stored to memory at: [ 1954.791215][ T9482] ___sys_recvmsg+0x522/0x890 [ 1954.796804][ T9482] do_recvmmsg+0x55a/0x1180 [ 1954.802225][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1954.808068][ T9482] do_syscall_64+0x3d/0xb0 [ 1954.813271][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1954.820083][ T9482] [ 1954.822969][ T9482] Uninit was stored to memory at: [ 1954.828961][ T9482] ___sys_recvmsg+0x522/0x890 [ 1954.834559][ T9482] do_recvmmsg+0x55a/0x1180 [ 1954.839848][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1954.845838][ T9482] do_syscall_64+0x3d/0xb0 [ 1954.851045][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1954.858068][ T9482] [ 1954.860808][ T9482] Uninit was stored to memory at: [ 1954.866850][ T9482] ___sys_recvmsg+0x522/0x890 [ 1954.872427][ T9482] do_recvmmsg+0x55a/0x1180 [ 1954.877665][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1954.883638][ T9482] do_syscall_64+0x3d/0xb0 [ 1954.888791][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1954.895774][ T9482] [ 1954.898505][ T9482] Uninit was stored to memory at: [ 1954.904543][ T9482] ___sys_recvmsg+0x522/0x890 [ 1954.909992][ T9482] do_recvmmsg+0x55a/0x1180 [ 1954.915405][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1954.921246][ T9482] do_syscall_64+0x3d/0xb0 [ 1954.926519][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1954.933448][ T9482] [ 1954.936206][ T9482] Uninit was stored to memory at: [ 1954.942286][ T9482] ___sys_recvmsg+0x522/0x890 [ 1954.947731][ T9482] do_recvmmsg+0x55a/0x1180 [ 1954.953114][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1954.958932][ T9482] do_syscall_64+0x3d/0xb0 [ 1954.964195][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1954.971125][ T9482] [ 1954.974060][ T9482] Uninit was stored to memory at: [ 1954.979898][ T9482] ___sys_recvmsg+0x522/0x890 [ 1954.985485][ T9482] do_recvmmsg+0x55a/0x1180 [ 1954.990716][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1954.996644][ T9482] do_syscall_64+0x3d/0xb0 [ 1955.001876][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1955.008724][ T9482] [ 1955.011478][ T9482] Local variable msg_sys created at: [ 1955.017672][ T9482] do_recvmmsg+0x5c/0x1180 [ 1955.022977][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1955.097535][ T9467] not chained 2690000 origins [ 1955.103189][ T9467] CPU: 0 PID: 9467 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1955.113410][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1955.123586][ T9467] Call Trace: [ 1955.126947][ T9467] [ 1955.129957][ T9467] dump_stack_lvl+0x1c8/0x256 [ 1955.134850][ T9467] dump_stack+0x1a/0x1c [ 1955.139178][ T9467] kmsan_internal_chain_origin+0x78/0x120 [ 1955.145051][ T9467] ? filter_irq_stacks+0x5c/0x1a0 [ 1955.150256][ T9467] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1955.156665][ T9467] ? do_recvmmsg+0x55a/0x1180 [ 1955.161483][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1955.167449][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1955.173430][ T9467] ? should_fail+0x3f/0x810 [ 1955.178086][ T9467] ? __stack_depot_save+0x21/0x4b0 [ 1955.183346][ T9467] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1955.189754][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1955.195718][ T9467] __msan_chain_origin+0xbd/0x140 [ 1955.200885][ T9467] ___sys_recvmsg+0x522/0x890 [ 1955.205693][ T9467] ? do_recvmmsg+0x5bc/0x1180 [ 1955.210539][ T9467] ? kmsan_internal_check_memory+0x94/0x530 [ 1955.216594][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1955.222597][ T9467] do_recvmmsg+0x55a/0x1180 [ 1955.227257][ T9467] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1955.233685][ T9467] ? do_syscall_64+0x3d/0xb0 [ 1955.238412][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1955.243600][ T9467] do_syscall_64+0x3d/0xb0 [ 1955.248151][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1955.254228][ T9467] RIP: 0033:0x7faec0089279 [ 1955.258752][ T9467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1955.278536][ T9467] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1955.287129][ T9467] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1955.295325][ T9467] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1955.303406][ T9467] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1955.311491][ T9467] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1955.319577][ T9467] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1955.327698][ T9467] [ 1955.361800][ T9467] Uninit was stored to memory at: [ 1955.367048][ T9467] ___sys_recvmsg+0x522/0x890 [ 1955.371878][ T9467] do_recvmmsg+0x55a/0x1180 [ 1955.376517][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1955.381671][ T9467] do_syscall_64+0x3d/0xb0 [ 1955.390864][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1955.397986][ T9467] [ 1955.400714][ T9467] Uninit was stored to memory at: [ 1955.406757][ T9467] ___sys_recvmsg+0x522/0x890 [ 1955.412372][ T9467] do_recvmmsg+0x55a/0x1180 [ 1955.417671][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1955.423670][ T9467] do_syscall_64+0x3d/0xb0 [ 1955.428873][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1955.435903][ T9467] [ 1955.438639][ T9467] Uninit was stored to memory at: [ 1955.444675][ T9467] ___sys_recvmsg+0x522/0x890 [ 1955.450120][ T9467] do_recvmmsg+0x55a/0x1180 [ 1955.455548][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1955.461404][ T9467] do_syscall_64+0x3d/0xb0 [ 1955.466763][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1955.473739][ T9467] [ 1955.476526][ T9467] Uninit was stored to memory at: [ 1955.482559][ T9467] ___sys_recvmsg+0x522/0x890 [ 1955.488013][ T9467] do_recvmmsg+0x55a/0x1180 [ 1955.493424][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1955.499276][ T9467] do_syscall_64+0x3d/0xb0 [ 1955.504544][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1955.511360][ T9467] [ 1955.514237][ T9467] Uninit was stored to memory at: [ 1955.520246][ T9467] ___sys_recvmsg+0x522/0x890 [ 1955.525826][ T9467] do_recvmmsg+0x55a/0x1180 [ 1955.531134][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1955.537105][ T9467] do_syscall_64+0x3d/0xb0 [ 1955.542380][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1955.549230][ T9467] [ 1955.552107][ T9467] Uninit was stored to memory at: [ 1955.558059][ T9467] ___sys_recvmsg+0x522/0x890 [ 1955.563591][ T9467] do_recvmmsg+0x55a/0x1180 [ 1955.568826][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1955.574827][ T9467] do_syscall_64+0x3d/0xb0 [ 1955.580014][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1955.587026][ T9467] [ 1955.589772][ T9467] Uninit was stored to memory at: [ 1955.595860][ T9467] ___sys_recvmsg+0x522/0x890 [ 1955.601311][ T9467] do_recvmmsg+0x55a/0x1180 [ 1955.606702][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1955.612672][ T9467] do_syscall_64+0x3d/0xb0 [ 1955.617839][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1955.624859][ T9467] [ 1955.627644][ T9467] Local variable msg_sys created at: [ 1955.633817][ T9467] do_recvmmsg+0x5c/0x1180 [ 1955.638998][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1955.726121][ T9467] not chained 2700000 origins [ 1955.731759][ T9467] CPU: 0 PID: 9467 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1955.741972][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1955.752136][ T9467] Call Trace: [ 1955.755487][ T9467] [ 1955.758491][ T9467] dump_stack_lvl+0x1c8/0x256 [ 1955.763351][ T9467] dump_stack+0x1a/0x1c [ 1955.767664][ T9467] kmsan_internal_chain_origin+0x78/0x120 [ 1955.773529][ T9467] ? filter_irq_stacks+0x5c/0x1a0 [ 1955.778730][ T9467] ? kmsan_internal_check_memory+0x94/0x530 [ 1955.784773][ T9467] ? do_recvmmsg+0x55a/0x1180 [ 1955.789575][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1955.795521][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1955.801491][ T9467] ? should_fail+0x3f/0x810 [ 1955.806135][ T9467] ? __stack_depot_save+0x21/0x4b0 [ 1955.811391][ T9467] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1955.817790][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1955.823757][ T9467] __msan_chain_origin+0xbd/0x140 [ 1955.828932][ T9467] ___sys_recvmsg+0x522/0x890 [ 1955.833752][ T9467] ? do_recvmmsg+0x5bc/0x1180 [ 1955.838585][ T9467] ? kmsan_internal_check_memory+0x94/0x530 [ 1955.844640][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1955.850607][ T9467] do_recvmmsg+0x55a/0x1180 [ 1955.855267][ T9467] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1955.861668][ T9467] ? do_syscall_64+0x3d/0xb0 [ 1955.866397][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1955.871577][ T9467] do_syscall_64+0x3d/0xb0 [ 1955.876120][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1955.882202][ T9467] RIP: 0033:0x7faec0089279 [ 1955.886718][ T9467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1955.906485][ T9467] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1955.915036][ T9467] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1955.923127][ T9467] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1955.931207][ T9467] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1955.939293][ T9467] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1955.947368][ T9467] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1955.955477][ T9467] [ 1955.989162][ T9467] Uninit was stored to memory at: [ 1955.994480][ T9467] ___sys_recvmsg+0x522/0x890 [ 1955.999283][ T9467] do_recvmmsg+0x55a/0x1180 [ 1956.004352][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1956.009522][ T9467] do_syscall_64+0x3d/0xb0 [ 1956.017635][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1956.024604][ T9467] [ 1956.027349][ T9467] Uninit was stored to memory at: [ 1956.033406][ T9467] ___sys_recvmsg+0x522/0x890 [ 1956.038886][ T9467] do_recvmmsg+0x55a/0x1180 [ 1956.044187][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1956.050036][ T9467] do_syscall_64+0x3d/0xb0 [ 1956.055341][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1956.062261][ T9467] [ 1956.064986][ T9467] Uninit was stored to memory at: [ 1956.070891][ T9467] ___sys_recvmsg+0x522/0x890 [ 1956.076514][ T9467] do_recvmmsg+0x55a/0x1180 [ 1956.081843][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1956.087713][ T9467] do_syscall_64+0x3d/0xb0 [ 1956.093033][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1956.099866][ T9467] [ 1956.102735][ T9467] Uninit was stored to memory at: [ 1956.108647][ T9467] ___sys_recvmsg+0x522/0x890 [ 1956.114256][ T9467] do_recvmmsg+0x55a/0x1180 [ 1956.119465][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1956.125368][ T9467] do_syscall_64+0x3d/0xb0 [ 1956.130506][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1956.137524][ T9467] [ 1956.140273][ T9467] Uninit was stored to memory at: [ 1956.146320][ T9467] ___sys_recvmsg+0x522/0x890 [ 1956.151879][ T9467] do_recvmmsg+0x55a/0x1180 [ 1956.157122][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1956.163096][ T9467] do_syscall_64+0x3d/0xb0 [ 1956.168253][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1956.175233][ T9467] [ 1956.177971][ T9467] Uninit was stored to memory at: [ 1956.184017][ T9467] ___sys_recvmsg+0x522/0x890 [ 1956.189485][ T9467] do_recvmmsg+0x55a/0x1180 [ 1956.194756][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1956.200630][ T9467] do_syscall_64+0x3d/0xb0 [ 1956.205947][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1956.212956][ T9467] [ 1956.215698][ T9467] Uninit was stored to memory at: [ 1956.221826][ T9467] ___sys_recvmsg+0x522/0x890 [ 1956.227572][ T9467] do_recvmmsg+0x55a/0x1180 [ 1956.232963][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1956.238794][ T9467] do_syscall_64+0x3d/0xb0 [ 1956.244044][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1956.250898][ T9467] [ 1956.253785][ T9467] Local variable msg_sys created at: [ 1956.258409][ T9482] not chained 2710000 origins [ 1956.259766][ T9467] do_recvmmsg+0x5c/0x1180 [ 1956.264181][ T9482] CPU: 1 PID: 9482 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1956.264273][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1956.264321][ T9482] Call Trace: [ 1956.264349][ T9482] [ 1956.264375][ T9482] dump_stack_lvl+0x1c8/0x256 [ 1956.269394][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1956.278946][ T9482] dump_stack+0x1a/0x1c [ 1956.279063][ T9482] kmsan_internal_chain_origin+0x78/0x120 [ 1956.279170][ T9482] ? filter_irq_stacks+0x5c/0x1a0 [ 1956.279308][ T9482] ? kmsan_internal_check_memory+0x94/0x530 [ 1956.279414][ T9482] ? do_recvmmsg+0x55a/0x1180 [ 1956.279505][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1956.279622][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1956.279740][ T9482] ? should_fail+0x3f/0x810 [ 1956.279843][ T9482] ? __stack_depot_save+0x21/0x4b0 [ 1956.279945][ T9482] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1956.280060][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1956.280170][ T9482] __msan_chain_origin+0xbd/0x140 [ 1956.370810][ T9482] ___sys_recvmsg+0x522/0x890 [ 1956.375632][ T9482] ? do_recvmmsg+0x5bc/0x1180 [ 1956.380472][ T9482] ? kmsan_internal_check_memory+0x94/0x530 [ 1956.386526][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1956.392498][ T9482] do_recvmmsg+0x55a/0x1180 [ 1956.397155][ T9482] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1956.403562][ T9482] ? do_syscall_64+0x3d/0xb0 [ 1956.408288][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1956.413477][ T9482] do_syscall_64+0x3d/0xb0 [ 1956.418026][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1956.424089][ T9482] RIP: 0033:0x7f6a17489279 [ 1956.428599][ T9482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1956.448363][ T9482] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1956.456924][ T9482] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1956.465015][ T9482] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1956.473094][ T9482] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1956.481181][ T9482] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1956.489261][ T9482] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1956.497376][ T9482] [ 1956.503400][ T9482] Uninit was stored to memory at: [ 1956.508602][ T9482] ___sys_recvmsg+0x522/0x890 [ 1956.513741][ T9482] do_recvmmsg+0x55a/0x1180 [ 1956.518376][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1956.523613][ T9482] do_syscall_64+0x3d/0xb0 [ 1956.528156][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1956.534299][ T9482] [ 1956.536684][ T9482] Uninit was stored to memory at: [ 1956.541941][ T9482] ___sys_recvmsg+0x522/0x890 [ 1956.546742][ T9482] do_recvmmsg+0x55a/0x1180 [ 1956.551366][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1956.556607][ T9482] do_syscall_64+0x3d/0xb0 [ 1956.561149][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1956.567281][ T9482] [ 1956.569667][ T9482] Uninit was stored to memory at: [ 1956.574925][ T9482] ___sys_recvmsg+0x522/0x890 [ 1956.579741][ T9482] do_recvmmsg+0x55a/0x1180 [ 1956.584441][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1956.589595][ T9482] do_syscall_64+0x3d/0xb0 [ 1956.594220][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1956.600292][ T9482] [ 1956.602748][ T9482] Uninit was stored to memory at: [ 1956.607936][ T9482] ___sys_recvmsg+0x522/0x890 [ 1956.612807][ T9482] do_recvmmsg+0x55a/0x1180 [ 1956.617438][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1956.622661][ T9482] do_syscall_64+0x3d/0xb0 [ 1956.627199][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1956.633337][ T9482] [ 1956.635721][ T9482] Uninit was stored to memory at: [ 1956.640908][ T9482] ___sys_recvmsg+0x522/0x890 [ 1956.645779][ T9482] do_recvmmsg+0x55a/0x1180 [ 1956.650402][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1956.655632][ T9482] do_syscall_64+0x3d/0xb0 [ 1956.660169][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1956.666329][ T9482] [ 1956.668711][ T9482] Uninit was stored to memory at: [ 1956.673971][ T9482] ___sys_recvmsg+0x522/0x890 [ 1956.678768][ T9482] do_recvmmsg+0x55a/0x1180 [ 1956.683468][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1956.688622][ T9482] do_syscall_64+0x3d/0xb0 [ 1956.693239][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1956.699315][ T9482] [ 1956.701768][ T9482] Uninit was stored to memory at: [ 1956.706953][ T9482] ___sys_recvmsg+0x522/0x890 [ 1956.711828][ T9482] do_recvmmsg+0x55a/0x1180 [ 1956.716483][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1956.721724][ T9482] do_syscall_64+0x3d/0xb0 [ 1956.726266][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1956.732424][ T9482] [ 1956.734812][ T9482] Local variable msg_sys created at: [ 1956.740163][ T9482] do_recvmmsg+0x5c/0x1180 [ 1956.744769][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1957.120162][ T9467] not chained 2720000 origins [ 1957.125348][ T9467] CPU: 1 PID: 9467 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1957.135558][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1957.145721][ T9467] Call Trace: [ 1957.149078][ T9467] [ 1957.152088][ T9467] dump_stack_lvl+0x1c8/0x256 [ 1957.156950][ T9467] dump_stack+0x1a/0x1c [ 1957.161266][ T9467] kmsan_internal_chain_origin+0x78/0x120 [ 1957.167146][ T9467] ? filter_irq_stacks+0x5c/0x1a0 [ 1957.172353][ T9467] ? kmsan_internal_check_memory+0x94/0x530 [ 1957.178406][ T9467] ? do_recvmmsg+0x55a/0x1180 [ 1957.183255][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1957.189254][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1957.195228][ T9467] ? should_fail+0x3f/0x810 [ 1957.199881][ T9467] ? __stack_depot_save+0x21/0x4b0 [ 1957.205144][ T9467] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1957.212182][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1957.218146][ T9467] __msan_chain_origin+0xbd/0x140 [ 1957.223314][ T9467] ___sys_recvmsg+0x522/0x890 [ 1957.228127][ T9467] ? do_recvmmsg+0x5bc/0x1180 [ 1957.232960][ T9467] ? kmsan_internal_check_memory+0x94/0x530 [ 1957.239034][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1957.245006][ T9467] do_recvmmsg+0x55a/0x1180 [ 1957.249662][ T9467] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1957.256070][ T9467] ? do_syscall_64+0x3d/0xb0 [ 1957.260818][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1957.266004][ T9467] do_syscall_64+0x3d/0xb0 [ 1957.270552][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1957.276621][ T9467] RIP: 0033:0x7faec0089279 [ 1957.281138][ T9467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1957.300913][ T9467] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1957.309471][ T9467] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1957.317596][ T9467] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1957.325686][ T9467] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1957.333774][ T9467] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1957.341862][ T9467] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1957.349989][ T9467] [ 1957.355459][ T9467] Uninit was stored to memory at: [ 1957.360669][ T9467] ___sys_recvmsg+0x522/0x890 [ 1957.365766][ T9467] do_recvmmsg+0x55a/0x1180 [ 1957.370406][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1957.375648][ T9467] do_syscall_64+0x3d/0xb0 [ 1957.380195][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1957.386364][ T9467] [ 1957.388776][ T9467] Uninit was stored to memory at: [ 1957.394050][ T9467] ___sys_recvmsg+0x522/0x890 [ 1957.398867][ T9467] do_recvmmsg+0x55a/0x1180 [ 1957.403579][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1957.408735][ T9467] do_syscall_64+0x3d/0xb0 [ 1957.413362][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1957.419434][ T9467] [ 1957.421913][ T9467] Uninit was stored to memory at: [ 1957.427110][ T9467] ___sys_recvmsg+0x522/0x890 [ 1957.432034][ T9467] do_recvmmsg+0x55a/0x1180 [ 1957.436663][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1957.441907][ T9467] do_syscall_64+0x3d/0xb0 [ 1957.446465][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1957.452698][ T9467] [ 1957.455097][ T9467] Uninit was stored to memory at: [ 1957.460305][ T9467] ___sys_recvmsg+0x522/0x890 [ 1957.465254][ T9467] do_recvmmsg+0x55a/0x1180 [ 1957.469892][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1957.475177][ T9467] do_syscall_64+0x3d/0xb0 [ 1957.479724][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1957.485926][ T9467] [ 1957.488315][ T9467] Uninit was stored to memory at: [ 1957.493638][ T9467] ___sys_recvmsg+0x522/0x890 [ 1957.498443][ T9467] do_recvmmsg+0x55a/0x1180 [ 1957.503205][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1957.508368][ T9467] do_syscall_64+0x3d/0xb0 [ 1957.513046][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1957.519115][ T9467] [ 1957.521509][ T9467] Uninit was stored to memory at: [ 1957.526845][ T9467] ___sys_recvmsg+0x522/0x890 [ 1957.531772][ T9467] do_recvmmsg+0x55a/0x1180 [ 1957.536408][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1957.541567][ T9467] do_syscall_64+0x3d/0xb0 [ 1957.546266][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1957.552414][ T9467] [ 1957.554811][ T9467] Uninit was stored to memory at: [ 1957.559994][ T9467] ___sys_recvmsg+0x522/0x890 [ 1957.564923][ T9467] do_recvmmsg+0x55a/0x1180 [ 1957.569562][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1957.574868][ T9467] do_syscall_64+0x3d/0xb0 [ 1957.579427][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1957.585641][ T9467] [ 1957.588037][ T9467] Local variable msg_sys created at: [ 1957.593473][ T9467] do_recvmmsg+0x5c/0x1180 [ 1957.598015][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1957.717553][ T9467] not chained 2730000 origins [ 1957.722606][ T9467] CPU: 1 PID: 9467 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1957.732823][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1957.742999][ T9467] Call Trace: [ 1957.746359][ T9467] [ 1957.749364][ T9467] dump_stack_lvl+0x1c8/0x256 [ 1957.754227][ T9467] dump_stack+0x1a/0x1c [ 1957.758542][ T9467] kmsan_internal_chain_origin+0x78/0x120 [ 1957.764413][ T9467] ? filter_irq_stacks+0x5c/0x1a0 [ 1957.769623][ T9467] ? kmsan_internal_check_memory+0x94/0x530 [ 1957.775669][ T9467] ? do_recvmmsg+0x55a/0x1180 [ 1957.780483][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1957.786451][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1957.792418][ T9467] ? should_fail+0x3f/0x810 [ 1957.797071][ T9467] ? __stack_depot_save+0x21/0x4b0 [ 1957.802332][ T9467] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1957.808736][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1957.814708][ T9467] __msan_chain_origin+0xbd/0x140 [ 1957.819881][ T9467] ___sys_recvmsg+0x522/0x890 [ 1957.824699][ T9467] ? do_recvmmsg+0x5bc/0x1180 [ 1957.829532][ T9467] ? kmsan_internal_check_memory+0x94/0x530 [ 1957.835585][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1957.841554][ T9467] do_recvmmsg+0x55a/0x1180 [ 1957.846211][ T9467] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1957.852650][ T9467] ? do_syscall_64+0x3d/0xb0 [ 1957.857384][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1957.862592][ T9467] do_syscall_64+0x3d/0xb0 [ 1957.867169][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1957.873291][ T9467] RIP: 0033:0x7faec0089279 [ 1957.877828][ T9467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1957.897603][ T9467] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1957.906247][ T9467] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1957.914338][ T9467] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1957.922512][ T9467] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1957.930599][ T9467] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1957.938677][ T9467] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1957.946811][ T9467] [ 1957.952502][ T9467] Uninit was stored to memory at: [ 1957.957714][ T9467] ___sys_recvmsg+0x522/0x890 [ 1957.962825][ T9467] do_recvmmsg+0x55a/0x1180 [ 1957.968245][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1957.973555][ T9467] do_syscall_64+0x3d/0xb0 [ 1957.978111][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1957.984259][ T9467] [ 1957.986650][ T9467] Uninit was stored to memory at: [ 1957.991905][ T9467] ___sys_recvmsg+0x522/0x890 [ 1957.996714][ T9467] do_recvmmsg+0x55a/0x1180 [ 1958.001351][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1958.006591][ T9467] do_syscall_64+0x3d/0xb0 [ 1958.011161][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1958.017341][ T9467] [ 1958.019769][ T9467] Uninit was stored to memory at: [ 1958.025030][ T9467] ___sys_recvmsg+0x522/0x890 [ 1958.029831][ T9467] do_recvmmsg+0x55a/0x1180 [ 1958.034533][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1958.039688][ T9467] do_syscall_64+0x3d/0xb0 [ 1958.044305][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1958.050372][ T9467] [ 1958.052863][ T9467] Uninit was stored to memory at: [ 1958.058134][ T9467] ___sys_recvmsg+0x522/0x890 [ 1958.063017][ T9467] do_recvmmsg+0x55a/0x1180 [ 1958.067652][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1958.072884][ T9467] do_syscall_64+0x3d/0xb0 [ 1958.077433][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1958.083587][ T9467] [ 1958.085976][ T9467] Uninit was stored to memory at: [ 1958.091163][ T9467] ___sys_recvmsg+0x522/0x890 [ 1958.096041][ T9467] do_recvmmsg+0x55a/0x1180 [ 1958.100710][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1958.105952][ T9467] do_syscall_64+0x3d/0xb0 [ 1958.110496][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1958.116636][ T9467] [ 1958.119035][ T9467] Uninit was stored to memory at: [ 1958.124290][ T9467] ___sys_recvmsg+0x522/0x890 [ 1958.129097][ T9467] do_recvmmsg+0x55a/0x1180 [ 1958.133794][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1958.138977][ T9467] do_syscall_64+0x3d/0xb0 [ 1958.143594][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1958.149664][ T9467] [ 1958.152164][ T9467] Uninit was stored to memory at: [ 1958.157346][ T9467] ___sys_recvmsg+0x522/0x890 [ 1958.162225][ T9467] do_recvmmsg+0x55a/0x1180 [ 1958.166858][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1958.172093][ T9467] do_syscall_64+0x3d/0xb0 [ 1958.176633][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1958.182781][ T9467] [ 1958.185169][ T9467] Local variable msg_sys created at: [ 1958.190524][ T9467] do_recvmmsg+0x5c/0x1180 [ 1958.195197][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1958.321936][ T9467] not chained 2740000 origins [ 1958.326742][ T9467] CPU: 1 PID: 9467 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1958.336964][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1958.347137][ T9467] Call Trace: [ 1958.350505][ T9467] [ 1958.353514][ T9467] dump_stack_lvl+0x1c8/0x256 [ 1958.358381][ T9467] dump_stack+0x1a/0x1c [ 1958.362693][ T9467] kmsan_internal_chain_origin+0x78/0x120 [ 1958.368559][ T9467] ? filter_irq_stacks+0x5c/0x1a0 [ 1958.373769][ T9467] ? kmsan_internal_check_memory+0x94/0x530 [ 1958.379823][ T9467] ? do_recvmmsg+0x55a/0x1180 [ 1958.384646][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1958.390615][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1958.396584][ T9467] ? should_fail+0x3f/0x810 [ 1958.401239][ T9467] ? __stack_depot_save+0x21/0x4b0 [ 1958.406504][ T9467] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1958.412938][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1958.418910][ T9467] __msan_chain_origin+0xbd/0x140 [ 1958.424081][ T9467] ___sys_recvmsg+0x522/0x890 [ 1958.428894][ T9467] ? do_recvmmsg+0x5bc/0x1180 [ 1958.433752][ T9467] ? kmsan_internal_check_memory+0x94/0x530 [ 1958.439812][ T9467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1958.445793][ T9467] do_recvmmsg+0x55a/0x1180 [ 1958.450453][ T9467] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1958.456865][ T9467] ? do_syscall_64+0x3d/0xb0 [ 1958.461597][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1958.466786][ T9467] do_syscall_64+0x3d/0xb0 [ 1958.471352][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1958.477434][ T9467] RIP: 0033:0x7faec0089279 [ 1958.481967][ T9467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1958.501744][ T9467] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1958.510304][ T9467] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1958.518401][ T9467] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1958.526486][ T9467] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1958.534584][ T9467] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1958.542676][ T9467] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1958.550809][ T9467] [ 1958.556364][ T9467] Uninit was stored to memory at: [ 1958.561580][ T9467] ___sys_recvmsg+0x522/0x890 [ 1958.566706][ T9467] do_recvmmsg+0x55a/0x1180 [ 1958.571338][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1958.576582][ T9467] do_syscall_64+0x3d/0xb0 [ 1958.581130][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1958.587288][ T9467] [ 1958.589677][ T9467] Uninit was stored to memory at: [ 1958.594949][ T9467] ___sys_recvmsg+0x522/0x890 [ 1958.599754][ T9467] do_recvmmsg+0x55a/0x1180 [ 1958.604513][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1958.609675][ T9467] do_syscall_64+0x3d/0xb0 [ 1958.614307][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1958.620379][ T9467] [ 1958.622851][ T9467] Uninit was stored to memory at: [ 1958.628059][ T9467] ___sys_recvmsg+0x522/0x890 [ 1958.632934][ T9467] do_recvmmsg+0x55a/0x1180 [ 1958.637563][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1958.642796][ T9467] do_syscall_64+0x3d/0xb0 [ 1958.647370][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1958.653520][ T9467] [ 1958.655909][ T9467] Uninit was stored to memory at: [ 1958.661179][ T9467] ___sys_recvmsg+0x522/0x890 [ 1958.666063][ T9467] do_recvmmsg+0x55a/0x1180 [ 1958.670694][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1958.675940][ T9467] do_syscall_64+0x3d/0xb0 [ 1958.680484][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1958.686659][ T9467] [ 1958.689046][ T9467] Uninit was stored to memory at: [ 1958.694334][ T9467] ___sys_recvmsg+0x522/0x890 [ 1958.699144][ T9467] do_recvmmsg+0x55a/0x1180 [ 1958.703914][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1958.709082][ T9467] do_syscall_64+0x3d/0xb0 [ 1958.713765][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1958.719839][ T9467] [ 1958.722389][ T9467] Uninit was stored to memory at: [ 1958.727573][ T9467] ___sys_recvmsg+0x522/0x890 [ 1958.732469][ T9467] do_recvmmsg+0x55a/0x1180 [ 1958.737100][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1958.742333][ T9467] do_syscall_64+0x3d/0xb0 [ 1958.746878][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1958.753014][ T9467] [ 1958.755402][ T9467] Uninit was stored to memory at: [ 1958.760588][ T9467] ___sys_recvmsg+0x522/0x890 [ 1958.765473][ T9467] do_recvmmsg+0x55a/0x1180 [ 1958.770104][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1958.775333][ T9467] do_syscall_64+0x3d/0xb0 [ 1958.779880][ T9467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1958.786012][ T9467] [ 1958.788403][ T9467] Local variable msg_sys created at: [ 1958.793857][ T9467] do_recvmmsg+0x5c/0x1180 [ 1958.798402][ T9467] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1959.028018][ T9482] not chained 2750000 origins [ 1959.033789][ T9482] CPU: 0 PID: 9482 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1959.045236][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1959.055405][ T9482] Call Trace: [ 1959.058766][ T9482] [ 1959.061774][ T9482] dump_stack_lvl+0x1c8/0x256 [ 1959.066638][ T9482] dump_stack+0x1a/0x1c [ 1959.070963][ T9482] kmsan_internal_chain_origin+0x78/0x120 [ 1959.076835][ T9482] ? filter_irq_stacks+0x5c/0x1a0 [ 1959.082055][ T9482] ? kmsan_internal_check_memory+0x94/0x530 [ 1959.088110][ T9482] ? do_recvmmsg+0x55a/0x1180 [ 1959.092941][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1959.098935][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1959.105361][ T9482] ? should_fail+0x3f/0x810 [ 1959.110059][ T9482] ? __stack_depot_save+0x21/0x4b0 [ 1959.115318][ T9482] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1959.121723][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1959.127688][ T9482] __msan_chain_origin+0xbd/0x140 [ 1959.132856][ T9482] ___sys_recvmsg+0x522/0x890 [ 1959.137671][ T9482] ? do_recvmmsg+0x5bc/0x1180 [ 1959.142506][ T9482] ? kmsan_internal_check_memory+0x94/0x530 [ 1959.148553][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1959.154531][ T9482] do_recvmmsg+0x55a/0x1180 [ 1959.159191][ T9482] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1959.165595][ T9482] ? do_syscall_64+0x3d/0xb0 [ 1959.170318][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1959.175504][ T9482] do_syscall_64+0x3d/0xb0 [ 1959.180050][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1959.186123][ T9482] RIP: 0033:0x7f6a17489279 [ 1959.190642][ T9482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1959.210496][ T9482] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1959.219074][ T9482] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1959.227171][ T9482] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1959.235254][ T9482] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1959.243342][ T9482] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1959.251420][ T9482] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1959.259536][ T9482] [ 1959.294106][ T9482] Uninit was stored to memory at: [ 1959.299347][ T9482] ___sys_recvmsg+0x522/0x890 [ 1959.304155][ T9482] do_recvmmsg+0x55a/0x1180 [ 1959.308809][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1959.313983][ T9482] do_syscall_64+0x3d/0xb0 [ 1959.322490][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1959.329395][ T9482] [ 1959.332338][ T9482] Uninit was stored to memory at: [ 1959.338263][ T9482] ___sys_recvmsg+0x522/0x890 [ 1959.343821][ T9482] do_recvmmsg+0x55a/0x1180 [ 1959.349112][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1959.355029][ T9482] do_syscall_64+0x3d/0xb0 [ 1959.360182][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1959.367266][ T9482] [ 1959.370013][ T9482] Uninit was stored to memory at: [ 1959.376000][ T9482] ___sys_recvmsg+0x522/0x890 [ 1959.381489][ T9482] do_recvmmsg+0x55a/0x1180 [ 1959.386857][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1959.392786][ T9482] do_syscall_64+0x3d/0xb0 [ 1959.397943][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1959.404915][ T9482] [ 1959.407705][ T9482] Uninit was stored to memory at: [ 1959.413738][ T9482] ___sys_recvmsg+0x522/0x890 [ 1959.419176][ T9482] do_recvmmsg+0x55a/0x1180 [ 1959.424509][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1959.430335][ T9482] do_syscall_64+0x3d/0xb0 [ 1959.435568][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1959.442562][ T9482] [ 1959.445314][ T9482] Uninit was stored to memory at: [ 1959.451219][ T9482] ___sys_recvmsg+0x522/0x890 [ 1959.456806][ T9482] do_recvmmsg+0x55a/0x1180 [ 1959.462131][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1959.467884][ T9482] do_syscall_64+0x3d/0xb0 [ 1959.473184][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1959.480010][ T9482] [ 1959.482900][ T9482] Uninit was stored to memory at: [ 1959.488533][ T9482] ___sys_recvmsg+0x522/0x890 [ 1959.494220][ T9482] do_recvmmsg+0x55a/0x1180 [ 1959.499256][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1959.505187][ T9482] do_syscall_64+0x3d/0xb0 [ 1959.510120][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1959.516983][ T9482] [ 1959.519569][ T9482] Uninit was stored to memory at: [ 1959.525606][ T9482] ___sys_recvmsg+0x522/0x890 [ 1959.531054][ T9482] do_recvmmsg+0x55a/0x1180 [ 1959.536476][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1959.542381][ T9482] do_syscall_64+0x3d/0xb0 [ 1959.547555][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1959.554569][ T9482] [ 1959.557185][ T9482] Local variable msg_sys created at: [ 1959.563313][ T9482] do_recvmmsg+0x5c/0x1180 [ 1959.568265][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1959.715261][ T9482] not chained 2760000 origins [ 1959.720072][ T9482] CPU: 1 PID: 9482 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1959.730291][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1959.740464][ T9482] Call Trace: [ 1959.743825][ T9482] [ 1959.746833][ T9482] dump_stack_lvl+0x1c8/0x256 [ 1959.751701][ T9482] dump_stack+0x1a/0x1c [ 1959.756013][ T9482] kmsan_internal_chain_origin+0x78/0x120 [ 1959.761907][ T9482] ? filter_irq_stacks+0x5c/0x1a0 [ 1959.767118][ T9482] ? kmsan_internal_check_memory+0x94/0x530 [ 1959.773165][ T9482] ? do_recvmmsg+0x55a/0x1180 [ 1959.777978][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1959.783970][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1959.789967][ T9482] ? should_fail+0x3f/0x810 [ 1959.794631][ T9482] ? __stack_depot_save+0x21/0x4b0 [ 1959.799904][ T9482] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1959.806339][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1959.812319][ T9482] __msan_chain_origin+0xbd/0x140 [ 1959.817507][ T9482] ___sys_recvmsg+0x522/0x890 [ 1959.822322][ T9482] ? do_recvmmsg+0x5bc/0x1180 [ 1959.827168][ T9482] ? kmsan_internal_check_memory+0x94/0x530 [ 1959.833239][ T9482] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1959.839219][ T9482] do_recvmmsg+0x55a/0x1180 [ 1959.843915][ T9482] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1959.850344][ T9482] ? do_syscall_64+0x3d/0xb0 [ 1959.855085][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1959.860271][ T9482] do_syscall_64+0x3d/0xb0 [ 1959.864826][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1959.870898][ T9482] RIP: 0033:0x7f6a17489279 [ 1959.875426][ T9482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1959.895236][ T9482] RSP: 002b:00007f6a163dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1959.903796][ T9482] RAX: ffffffffffffffda RBX: 00007f6a1759c050 RCX: 00007f6a17489279 [ 1959.911890][ T9482] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1959.919971][ T9482] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1959.928053][ T9482] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1959.936149][ T9482] R13: 00007f6a17acfb1f R14: 00007f6a163dd300 R15: 0000000000022000 [ 1959.944261][ T9482] [ 1959.949789][ T9482] Uninit was stored to memory at: [ 1959.955275][ T9482] ___sys_recvmsg+0x522/0x890 [ 1959.960103][ T9482] do_recvmmsg+0x55a/0x1180 [ 1959.964814][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1959.969971][ T9482] do_syscall_64+0x3d/0xb0 [ 1959.974586][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1959.980657][ T9482] [ 1959.983126][ T9482] Uninit was stored to memory at: [ 1959.988311][ T9482] ___sys_recvmsg+0x522/0x890 [ 1959.993190][ T9482] do_recvmmsg+0x55a/0x1180 [ 1959.997837][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1960.003068][ T9482] do_syscall_64+0x3d/0xb0 [ 1960.007612][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1960.013759][ T9482] [ 1960.016161][ T9482] Uninit was stored to memory at: [ 1960.021346][ T9482] ___sys_recvmsg+0x522/0x890 [ 1960.026238][ T9482] do_recvmmsg+0x55a/0x1180 [ 1960.030865][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1960.036090][ T9482] do_syscall_64+0x3d/0xb0 [ 1960.040649][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1960.046795][ T9482] [ 1960.049181][ T9482] Uninit was stored to memory at: [ 1960.054453][ T9482] ___sys_recvmsg+0x522/0x890 [ 1960.059256][ T9482] do_recvmmsg+0x55a/0x1180 [ 1960.064020][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1960.069180][ T9482] do_syscall_64+0x3d/0xb0 [ 1960.073790][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1960.079858][ T9482] [ 1960.082318][ T9482] Uninit was stored to memory at: [ 1960.087517][ T9482] ___sys_recvmsg+0x522/0x890 [ 1960.092445][ T9482] do_recvmmsg+0x55a/0x1180 [ 1960.097077][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1960.102359][ T9482] do_syscall_64+0x3d/0xb0 [ 1960.106955][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1960.113236][ T9482] [ 1960.115639][ T9482] Uninit was stored to memory at: [ 1960.120826][ T9482] ___sys_recvmsg+0x522/0x890 [ 1960.125779][ T9482] do_recvmmsg+0x55a/0x1180 [ 1960.130415][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1960.135706][ T9482] do_syscall_64+0x3d/0xb0 [ 1960.140257][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1960.146470][ T9482] [ 1960.148854][ T9482] Uninit was stored to memory at: [ 1960.154109][ T9482] ___sys_recvmsg+0x522/0x890 [ 1960.158906][ T9482] do_recvmmsg+0x55a/0x1180 [ 1960.163662][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1960.168821][ T9482] do_syscall_64+0x3d/0xb0 [ 1960.173447][ T9482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1960.179519][ T9482] [ 1960.182030][ T9482] Local variable msg_sys created at: [ 1960.187389][ T9482] do_recvmmsg+0x5c/0x1180 [ 1960.192034][ T9482] __x64_sys_recvmmsg+0x3a7/0x4b0 22:48:07 executing program 2: r0 = epoll_create1(0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x5a) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x80002001}) 22:48:07 executing program 5: r0 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\x96\x05\r\x84\x87\x1c\b\x8c`\xea)A\x90m\xb6&\xd0\x9d\xb8\x7f\xc6W\x81\xb7\xf9\xbd\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x06\x00\x00\x00\x00\x00\x00\x00\xff\xd6\xf2\xfe\xf3]\x15&\x97]mC\v\f\n\x1f\xe2\t\x14\x84\xe0\xa4\xda\xe7\xe8\xd5ue\xf4\xf8\xde\xf3\x00q?[\xba=\x1a\xb2\xdf]\xc0\xeb\x16\xe4\x7f\x17o\x1b\xa4M\xafa\xc7tR?3hH\x18\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xe3\xb5\xd6\xed1\x10\x8d\x87N\x9c8\xfd\xd0t\xe6?\x9c\x95`\xfc_\'N\x90\xb7\xb5\x0f\xeb\x17{\x1fu\'\xb4=\xbcO@AP1\x9d\xd2[\x956\x10y\xae\xfe\xb8\xa1J\x96\xa6&\x1b\xba%\xca!\x0eRsGT\xdf\xd8;\x9ea\xd0\x01\x0eq~\x00\xfbh\xf7\xc8\x97\\\xc0\\\x17YQ\xac\xc9\r\x88\xca\xb4\xfe\xfa\x97\xabbW\xc0\xb7\xaa/Y\xa9R+\x9a}\x8c\x8b\xdb\x0e\xd5\xfc\xf5\xdb\xeb\xffE\xd5\xd0\x18\xd5c\xa9\x1cr\xd1z?%\x8c\xf4w8\x94$\x1b\xd4\x90\x97b2R\x8f%&v\xd1e\xcc \xcf\xe2x\xeeq\xabgk\xe3\xda\x1abH\xd0\xda\xe9\xf6\x83\x92\x89^\xa6\xeeh\x98\xc8*fKO\x99%GJ\xc3\xfe\x0e\xf2\x82P\xf1\x87\xd4\x87m\xb6\x99}A\x01pD]\xe1\x88\vj^\xcb\xc1\xcf\xd8\x88\x0f\xdbe^\x80\\\r\xb4\xd0\x8b\xc1j{U*<\xd5Hr^<\x16\xc9\xd2\x1e\xf1\x1a\xe3\x954tb\xf2\xbe#J\x0e\x99\xb3#\n\xe0f\x0e\xa3\xf9G\x01b\xdc\x03B\xbd\'\x85\xc7%\xfdCEK;\x90\xcd3\x7f+\x00\xc3\x85\x8b\xcd', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f000030e000/0x2000)=nil, 0x2000}}) 22:48:07 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 22:48:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000840)=@ccm_128={{}, "e170b48068b2e397", "071e844a52bfb5af514e45440adb80b6", "77e4e4ac", "32ad72f999e06db5"}, 0x28) 22:48:07 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x40}, [@alu={0x4, 0x0, 0xc, 0x1, 0x6, 0x50, 0xfffffffffffffff0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4000000a}, @call={0x85, 0x0, 0x0, 0x51}, @cb_func, @jmp={0x5, 0x0, 0x2, 0x4, 0x4, 0x30}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x70e7}, @exit]}, &(0x7f0000000100)='syzkaller\x00', 0x1f, 0x5e, &(0x7f0000000440)=""/94, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xf}, 0x10}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x57, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000540)={r3, 0x9, 0x7, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c000000100000012bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008002800f20e000008001b00000000004c002b8008000800", @ANYRES32=r4, @ANYBLOB="080003000000000008000800", @ANYRES32=r3, @ANYBLOB="01000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="080003000500000008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x24024010}, 0x2404c001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r0, @ANYRESDEC=r4], 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x0) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000011, 0x0, 0x2811fdff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00a778a581910fb6a824e419699db50da03f3db27297e49a5a41546ee55e4c07b68ec68ed693e867cdc14aa33d83cf4ca8867a874d8ae16007c64208410c4c46295b7c4c58cb5709bb7be4f06d3ccbf2db332dac4bb7874926bd02ee034d81df4f7a6fb6dbe5de511718ed0cb93cb36292a752ada92bd3eaf40308a4e31ddf1ca5da0ea3f7ef041b93865305aa6fc553886f6b66f5abdb15c9cd8b08df54bf2502c1e7d09e63ba6465d892ebf50dbe8e03b8880d351c8f844da23fc163d642e1805c15", @ANYRES64=r7, @ANYRES64=r7, @ANYRESDEC=r7]) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:48:07 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0x258, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 22:48:07 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0xa0) 22:48:07 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000010c0)=""/150, 0x96}], 0x1, 0x4, 0x0) 22:48:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0xb, @sliced}) 22:48:08 executing program 2: syz_usb_connect(0x0, 0x52, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x9f, 0x39, 0xf0, 0x20, 0x582, 0x25, 0xc08c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x47, 0x0, 0x4d, 0x0, [@uac_control={{}, [@mixer_unit={0x6, 0x24, 0x4, 0x4, 0x0, '\\'}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0xf, 0x0, "145130aaa477ae114b7f9f6236"}]}}]}}]}}]}}, 0x0) 22:48:08 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x54, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}]}]}, 0x54}}, 0x0) 22:48:08 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0x258, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 22:48:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03001500055bd25a80648c63940d3424fc60100010400a000a00053582c137153e370800038047020000d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) 22:48:08 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a00010a000000000000000000000000fd"], 0x1c}}, 0x0) 22:48:09 executing program 0: r0 = open(&(0x7f0000000080)='.\x00', 0x40000, 0x0) getdents(r0, &(0x7f0000000140)=""/82, 0x19) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x18, 0x0, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getdents(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg(r3, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80005) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:48:09 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a00010a000000000000000000000000fd"], 0x1c}}, 0x0) [ 1962.273838][ T25] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1962.523746][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 1962.642144][ T25] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 1962.650563][ T25] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1962.660280][ T25] usb 3-1: config 0 has no interface number 1 [ 1962.666745][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1962.679942][ T25] usb 3-1: too many endpoints for config 0 interface 4 altsetting 0: 92, using maximum allowed: 30 [ 1962.690974][ T25] usb 3-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 92 [ 1963.053086][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice=c0.8c [ 1963.062619][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.070806][ T25] usb 3-1: Product: syz [ 1963.075292][ T25] usb 3-1: Manufacturer: syz [ 1963.080077][ T25] usb 3-1: SerialNumber: syz [ 1963.197859][ T9675] not chained 2770000 origins [ 1963.203167][ T9675] CPU: 1 PID: 9675 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1963.213376][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1963.223544][ T9675] Call Trace: [ 1963.226896][ T9675] [ 1963.229901][ T9675] dump_stack_lvl+0x1c8/0x256 [ 1963.234770][ T9675] dump_stack+0x1a/0x1c [ 1963.239092][ T9675] kmsan_internal_chain_origin+0x78/0x120 [ 1963.244967][ T9675] ? filter_irq_stacks+0x5c/0x1a0 [ 1963.250182][ T9675] ? kmsan_internal_check_memory+0x94/0x530 [ 1963.256253][ T9675] ? do_recvmmsg+0x55a/0x1180 [ 1963.261071][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1963.267074][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1963.273064][ T9675] ? should_fail+0x3f/0x810 [ 1963.277723][ T9675] ? __stack_depot_save+0x21/0x4b0 [ 1963.282986][ T9675] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1963.289403][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1963.295366][ T9675] __msan_chain_origin+0xbd/0x140 [ 1963.300550][ T9675] ___sys_recvmsg+0x522/0x890 [ 1963.305364][ T9675] ? do_recvmmsg+0x5bc/0x1180 [ 1963.310212][ T9675] ? kmsan_internal_check_memory+0x94/0x530 [ 1963.316273][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1963.322247][ T9675] do_recvmmsg+0x55a/0x1180 [ 1963.326913][ T9675] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1963.333326][ T9675] ? do_syscall_64+0x3d/0xb0 [ 1963.338062][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1963.343253][ T9675] do_syscall_64+0x3d/0xb0 [ 1963.347802][ T9675] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1963.353770][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1963.359843][ T9675] RIP: 0033:0x7faec0089279 [ 1963.364371][ T9675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1963.384144][ T9675] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1963.392731][ T9675] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1963.400832][ T9675] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1963.408918][ T9675] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1963.416998][ T9675] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1963.425071][ T9675] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1963.433178][ T9675] [ 1963.439749][ T9675] Uninit was stored to memory at: [ 1963.445858][ T9675] ___sys_recvmsg+0x522/0x890 [ 1963.450668][ T9675] do_recvmmsg+0x55a/0x1180 [ 1963.455399][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1963.460565][ T9675] do_syscall_64+0x3d/0xb0 [ 1963.465216][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1963.471297][ T9675] [ 1963.473774][ T9675] Uninit was stored to memory at: [ 1963.478967][ T9675] ___sys_recvmsg+0x522/0x890 [ 1963.483880][ T9675] do_recvmmsg+0x55a/0x1180 [ 1963.488513][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1963.493758][ T9675] do_syscall_64+0x3d/0xb0 [ 1963.498301][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1963.504467][ T9675] [ 1963.506853][ T9675] Uninit was stored to memory at: [ 1963.512131][ T9675] ___sys_recvmsg+0x522/0x890 [ 1963.516938][ T9675] do_recvmmsg+0x55a/0x1180 [ 1963.521568][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1963.526827][ T9675] do_syscall_64+0x3d/0xb0 [ 1963.531368][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1963.537512][ T9675] [ 1963.539895][ T9675] Uninit was stored to memory at: [ 1963.545162][ T9675] ___sys_recvmsg+0x522/0x890 [ 1963.549967][ T9675] do_recvmmsg+0x55a/0x1180 [ 1963.554682][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1963.559840][ T9675] do_syscall_64+0x3d/0xb0 [ 1963.564453][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1963.570520][ T9675] [ 1963.572987][ T9675] Uninit was stored to memory at: [ 1963.578174][ T9675] ___sys_recvmsg+0x522/0x890 [ 1963.583055][ T9675] do_recvmmsg+0x55a/0x1180 [ 1963.587687][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1963.592921][ T9675] do_syscall_64+0x3d/0xb0 [ 1963.597466][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1963.603605][ T9675] [ 1963.605994][ T9675] Uninit was stored to memory at: [ 1963.611170][ T9675] ___sys_recvmsg+0x522/0x890 [ 1963.616051][ T9675] do_recvmmsg+0x55a/0x1180 [ 1963.620698][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1963.625939][ T9675] do_syscall_64+0x3d/0xb0 [ 1963.630487][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1963.636629][ T9675] [ 1963.639017][ T9675] Uninit was stored to memory at: [ 1963.644274][ T9675] ___sys_recvmsg+0x522/0x890 [ 1963.649097][ T9675] do_recvmmsg+0x55a/0x1180 [ 1963.653814][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1963.658971][ T9675] do_syscall_64+0x3d/0xb0 [ 1963.663597][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1963.669663][ T9675] [ 1963.672127][ T9675] Local variable msg_sys created at: [ 1963.677482][ T9675] do_recvmmsg+0x5c/0x1180 [ 1963.682100][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1963.750608][ T25] usb 3-1: config 0 descriptor?? [ 1963.861395][ T25] hub 3-1:0.4: bad descriptor, ignoring hub [ 1963.867740][ T25] hub: probe of 3-1:0.4 failed with error -5 [ 1964.253244][ T25] usb 3-1: USB disconnect, device number 86 [ 1964.405809][ T9722] udevd[9722]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1965.170761][ T9675] not chained 2780000 origins [ 1965.175780][ T9675] CPU: 1 PID: 9675 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1965.185988][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1965.196165][ T9675] Call Trace: [ 1965.199525][ T9675] [ 1965.202537][ T9675] dump_stack_lvl+0x1c8/0x256 [ 1965.207403][ T9675] dump_stack+0x1a/0x1c [ 1965.211717][ T9675] kmsan_internal_chain_origin+0x78/0x120 [ 1965.217592][ T9675] ? filter_irq_stacks+0x5c/0x1a0 [ 1965.222799][ T9675] ? kmsan_internal_check_memory+0x94/0x530 [ 1965.228847][ T9675] ? do_recvmmsg+0x55a/0x1180 [ 1965.233665][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1965.239639][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1965.245605][ T9675] ? should_fail+0x3f/0x810 [ 1965.250255][ T9675] ? __stack_depot_save+0x21/0x4b0 [ 1965.255521][ T9675] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1965.261923][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1965.267896][ T9675] __msan_chain_origin+0xbd/0x140 [ 1965.273068][ T9675] ___sys_recvmsg+0x522/0x890 [ 1965.277875][ T9675] ? do_recvmmsg+0x5bc/0x1180 [ 1965.282705][ T9675] ? kmsan_internal_check_memory+0x94/0x530 [ 1965.288759][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1965.294727][ T9675] do_recvmmsg+0x55a/0x1180 [ 1965.299387][ T9675] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1965.305799][ T9675] ? do_syscall_64+0x3d/0xb0 [ 1965.310549][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1965.315735][ T9675] do_syscall_64+0x3d/0xb0 [ 1965.320279][ T9675] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1965.326248][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1965.332328][ T9675] RIP: 0033:0x7faec0089279 [ 1965.336854][ T9675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1965.356636][ T9675] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1965.365190][ T9675] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1965.373280][ T9675] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1965.381361][ T9675] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1965.389453][ T9675] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1965.397530][ T9675] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1965.405642][ T9675] [ 1965.411348][ T9675] Uninit was stored to memory at: [ 1965.416888][ T9675] ___sys_recvmsg+0x522/0x890 [ 1965.421771][ T9675] do_recvmmsg+0x55a/0x1180 [ 1965.426400][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1965.431564][ T9675] do_syscall_64+0x3d/0xb0 [ 1965.436198][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1965.442369][ T9675] [ 1965.444760][ T9675] Uninit was stored to memory at: [ 1965.449956][ T9675] ___sys_recvmsg+0x522/0x890 [ 1965.454850][ T9675] do_recvmmsg+0x55a/0x1180 [ 1965.459496][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1965.464745][ T9675] do_syscall_64+0x3d/0xb0 [ 1965.469309][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1965.475499][ T9675] [ 1965.477888][ T9675] Uninit was stored to memory at: [ 1965.483164][ T9675] ___sys_recvmsg+0x522/0x890 [ 1965.487988][ T9675] do_recvmmsg+0x55a/0x1180 [ 1965.492687][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1965.497842][ T9675] do_syscall_64+0x3d/0xb0 [ 1965.502476][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1965.508547][ T9675] [ 1965.510932][ T9675] Uninit was stored to memory at: [ 1965.516219][ T9675] ___sys_recvmsg+0x522/0x890 [ 1965.521022][ T9675] do_recvmmsg+0x55a/0x1180 [ 1965.525733][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1965.530887][ T9675] do_syscall_64+0x3d/0xb0 [ 1965.535520][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1965.541664][ T9675] [ 1965.544049][ T9675] Uninit was stored to memory at: [ 1965.549230][ T9675] ___sys_recvmsg+0x522/0x890 [ 1965.554112][ T9675] do_recvmmsg+0x55a/0x1180 [ 1965.558736][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1965.564065][ T9675] do_syscall_64+0x3d/0xb0 [ 1965.568614][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1965.574779][ T9675] [ 1965.577163][ T9675] Uninit was stored to memory at: [ 1965.582435][ T9675] ___sys_recvmsg+0x522/0x890 [ 1965.587244][ T9675] do_recvmmsg+0x55a/0x1180 [ 1965.591947][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1965.597127][ T9675] do_syscall_64+0x3d/0xb0 [ 1965.601760][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1965.607828][ T9675] [ 1965.610214][ T9675] Uninit was stored to memory at: [ 1965.615482][ T9675] ___sys_recvmsg+0x522/0x890 [ 1965.620286][ T9675] do_recvmmsg+0x55a/0x1180 [ 1965.624991][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1965.630152][ T9675] do_syscall_64+0x3d/0xb0 [ 1965.634803][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1965.640884][ T9675] [ 1965.643350][ T9675] Local variable msg_sys created at: [ 1965.648704][ T9675] do_recvmmsg+0x5c/0x1180 [ 1965.653320][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1966.269980][ T9675] not chained 2790000 origins [ 1966.275250][ T9675] CPU: 0 PID: 9675 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1966.285427][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1966.295586][ T9675] Call Trace: [ 1966.298915][ T9675] [ 1966.301879][ T9675] dump_stack_lvl+0x1c8/0x256 [ 1966.306692][ T9675] dump_stack+0x1a/0x1c [ 1966.310995][ T9675] kmsan_internal_chain_origin+0x78/0x120 [ 1966.316801][ T9675] ? filter_irq_stacks+0x5c/0x1a0 [ 1966.321927][ T9675] ? kmsan_internal_check_memory+0x94/0x530 [ 1966.327903][ T9675] ? do_recvmmsg+0x55a/0x1180 [ 1966.332685][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1966.338657][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1966.344603][ T9675] ? should_fail+0x3f/0x810 [ 1966.349199][ T9675] ? __stack_depot_save+0x21/0x4b0 [ 1966.354389][ T9675] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1966.360719][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1966.366610][ T9675] __msan_chain_origin+0xbd/0x140 [ 1966.371709][ T9675] ___sys_recvmsg+0x522/0x890 [ 1966.376452][ T9675] ? do_recvmmsg+0x5bc/0x1180 [ 1966.381212][ T9675] ? kmsan_internal_check_memory+0x94/0x530 [ 1966.387215][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1966.393183][ T9675] do_recvmmsg+0x55a/0x1180 [ 1966.397836][ T9675] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1966.404248][ T9675] ? do_syscall_64+0x3d/0xb0 [ 1966.408930][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1966.414089][ T9675] do_syscall_64+0x3d/0xb0 [ 1966.418570][ T9675] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1966.424470][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1966.430487][ T9675] RIP: 0033:0x7faec0089279 [ 1966.434980][ T9675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1966.454730][ T9675] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1966.463214][ T9675] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1966.471248][ T9675] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1966.479273][ T9675] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1966.487318][ T9675] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1966.495378][ T9675] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1966.503546][ T9675] [ 1966.506614][ C0] vkms_vblank_simulate: vblank timer overrun [ 1966.536865][ C0] vkms_vblank_simulate: vblank timer overrun [ 1966.549365][ T9675] Uninit was stored to memory at: [ 1966.554676][ T9675] ___sys_recvmsg+0x522/0x890 [ 1966.559481][ T9675] do_recvmmsg+0x55a/0x1180 [ 1966.564593][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1966.569740][ T9675] do_syscall_64+0x3d/0xb0 [ 1966.574230][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1966.580229][ T9675] [ 1966.582580][ T9675] Uninit was stored to memory at: [ 1966.587735][ C0] vkms_vblank_simulate: vblank timer overrun [ 1966.599460][ T9675] ___sys_recvmsg+0x522/0x890 [ 1966.605025][ T9675] do_recvmmsg+0x55a/0x1180 [ 1966.610053][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1966.615966][ T9675] do_syscall_64+0x3d/0xb0 [ 1966.620867][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1966.627802][ T9675] [ 1966.630410][ T9675] Uninit was stored to memory at: [ 1966.636472][ T9675] ___sys_recvmsg+0x522/0x890 [ 1966.641999][ T9675] do_recvmmsg+0x55a/0x1180 [ 1966.647272][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1966.653254][ T9675] do_syscall_64+0x3d/0xb0 [ 1966.658162][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1966.665057][ T9675] [ 1966.667661][ T9675] Uninit was stored to memory at: [ 1966.673682][ T9675] ___sys_recvmsg+0x522/0x890 [ 1966.678917][ T9675] do_recvmmsg+0x55a/0x1180 [ 1966.684294][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1966.689922][ T9675] do_syscall_64+0x3d/0xb0 [ 1966.695185][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1966.702007][ T9675] [ 1966.704757][ T9675] Uninit was stored to memory at: [ 1966.710402][ T9675] ___sys_recvmsg+0x522/0x890 [ 1966.715921][ T9675] do_recvmmsg+0x55a/0x1180 [ 1966.720938][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1966.726891][ T9675] do_syscall_64+0x3d/0xb0 [ 1966.731979][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1966.738788][ T9675] [ 1966.741523][ T9675] Uninit was stored to memory at: [ 1966.747403][ T9675] ___sys_recvmsg+0x522/0x890 [ 1966.752873][ T9675] do_recvmmsg+0x55a/0x1180 [ 1966.757843][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1966.763821][ T9675] do_syscall_64+0x3d/0xb0 [ 1966.768998][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1966.775971][ T9675] [ 1966.778535][ T9675] Uninit was stored to memory at: [ 1966.784520][ T9675] ___sys_recvmsg+0x522/0x890 [ 1966.789747][ T9675] do_recvmmsg+0x55a/0x1180 [ 1966.795118][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1966.800707][ T9675] do_syscall_64+0x3d/0xb0 [ 1966.805890][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1966.812879][ T9675] [ 1966.815632][ T9675] Local variable msg_sys created at: [ 1966.821454][ T9675] do_recvmmsg+0x5c/0x1180 [ 1966.826773][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1967.247532][ T9675] not chained 2800000 origins [ 1967.253289][ T9675] CPU: 0 PID: 9675 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1967.263577][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1967.273687][ T9675] Call Trace: [ 1967.277002][ T9675] [ 1967.279964][ T9675] dump_stack_lvl+0x1c8/0x256 [ 1967.284761][ T9675] dump_stack+0x1a/0x1c [ 1967.288999][ T9675] kmsan_internal_chain_origin+0x78/0x120 [ 1967.294811][ T9675] ? filter_irq_stacks+0x5c/0x1a0 [ 1967.299934][ T9675] ? kmsan_internal_check_memory+0x94/0x530 [ 1967.305914][ T9675] ? do_recvmmsg+0x55a/0x1180 [ 1967.310669][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1967.316596][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1967.322592][ T9675] ? should_fail+0x3f/0x810 [ 1967.327251][ T9675] ? __stack_depot_save+0x21/0x4b0 [ 1967.332522][ T9675] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1967.338912][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1967.344817][ T9675] __msan_chain_origin+0xbd/0x140 [ 1967.349920][ T9675] ___sys_recvmsg+0x522/0x890 [ 1967.354672][ T9675] ? do_recvmmsg+0x5bc/0x1180 [ 1967.359443][ T9675] ? kmsan_internal_check_memory+0x94/0x530 [ 1967.365493][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1967.371452][ T9675] do_recvmmsg+0x55a/0x1180 [ 1967.376079][ T9675] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1967.382437][ T9675] ? do_syscall_64+0x3d/0xb0 [ 1967.387100][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1967.392211][ T9675] do_syscall_64+0x3d/0xb0 [ 1967.396862][ T9675] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1967.402757][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1967.408753][ T9675] RIP: 0033:0x7faec0089279 [ 1967.413242][ T9675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1967.433016][ T9675] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1967.441554][ T9675] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1967.449614][ T9675] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1967.457639][ T9675] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1967.465686][ T9675] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1967.473763][ T9675] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1967.481850][ T9675] [ 1967.516556][ T9675] Uninit was stored to memory at: [ 1967.521734][ T9675] ___sys_recvmsg+0x522/0x890 [ 1967.526477][ T9675] do_recvmmsg+0x55a/0x1180 [ 1967.531041][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1967.536175][ T9675] do_syscall_64+0x3d/0xb0 [ 1967.554834][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1967.561455][ T9675] [ 1967.564274][ T9675] Uninit was stored to memory at: [ 1967.569936][ T9675] ___sys_recvmsg+0x522/0x890 [ 1967.575461][ T9675] do_recvmmsg+0x55a/0x1180 [ 1967.580492][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1967.586456][ T9675] do_syscall_64+0x3d/0xb0 [ 1967.591404][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1967.598267][ T9675] [ 1967.600835][ T9675] Uninit was stored to memory at: [ 1967.606848][ T9675] ___sys_recvmsg+0x522/0x890 [ 1967.612420][ T9675] do_recvmmsg+0x55a/0x1180 [ 1967.617424][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1967.623296][ T9675] do_syscall_64+0x3d/0xb0 [ 1967.628477][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1967.635440][ T9675] [ 1967.638180][ T9675] Uninit was stored to memory at: [ 1967.644259][ T9675] ___sys_recvmsg+0x522/0x890 [ 1967.649501][ T9675] do_recvmmsg+0x55a/0x1180 [ 1967.654839][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1967.660454][ T9675] do_syscall_64+0x3d/0xb0 [ 1967.665642][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1967.672583][ T9675] [ 1967.675300][ T9675] Uninit was stored to memory at: [ 1967.680917][ T9675] ___sys_recvmsg+0x522/0x890 [ 1967.686468][ T9675] do_recvmmsg+0x55a/0x1180 [ 1967.691480][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1967.697445][ T9675] do_syscall_64+0x3d/0xb0 [ 1967.702687][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1967.709222][ T9675] [ 1967.712029][ T9675] Uninit was stored to memory at: [ 1967.717857][ T9675] ___sys_recvmsg+0x522/0x890 [ 1967.723375][ T9675] do_recvmmsg+0x55a/0x1180 [ 1967.728361][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1967.734305][ T9675] do_syscall_64+0x3d/0xb0 [ 1967.739463][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1967.746393][ T9675] [ 1967.749000][ T9675] Uninit was stored to memory at: [ 1967.754888][ T9675] ___sys_recvmsg+0x522/0x890 [ 1967.760076][ T9675] do_recvmmsg+0x55a/0x1180 [ 1967.765443][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1967.771030][ T9675] do_syscall_64+0x3d/0xb0 [ 1967.776258][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1967.783208][ T9675] [ 1967.785953][ T9675] Local variable msg_sys created at: [ 1967.791945][ T9675] do_recvmmsg+0x5c/0x1180 [ 1967.796887][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1968.401557][ T9675] not chained 2810000 origins [ 1968.407243][ T9675] CPU: 0 PID: 9675 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1968.417461][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1968.427637][ T9675] Call Trace: [ 1968.430997][ T9675] [ 1968.434013][ T9675] dump_stack_lvl+0x1c8/0x256 [ 1968.438881][ T9675] dump_stack+0x1a/0x1c [ 1968.443213][ T9675] kmsan_internal_chain_origin+0x78/0x120 [ 1968.449116][ T9675] ? filter_irq_stacks+0x5c/0x1a0 [ 1968.454336][ T9675] ? kmsan_internal_check_memory+0x94/0x530 [ 1968.460390][ T9675] ? do_recvmmsg+0x55a/0x1180 [ 1968.465214][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1968.471205][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1968.477184][ T9675] ? should_fail+0x3f/0x810 [ 1968.481844][ T9675] ? __stack_depot_save+0x21/0x4b0 [ 1968.487115][ T9675] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1968.493523][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1968.499492][ T9675] __msan_chain_origin+0xbd/0x140 [ 1968.504671][ T9675] ___sys_recvmsg+0x522/0x890 [ 1968.509481][ T9675] ? do_recvmmsg+0x5bc/0x1180 [ 1968.514316][ T9675] ? kmsan_internal_check_memory+0x94/0x530 [ 1968.520376][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1968.526356][ T9675] do_recvmmsg+0x55a/0x1180 [ 1968.531017][ T9675] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1968.537430][ T9675] ? do_syscall_64+0x3d/0xb0 [ 1968.542154][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1968.547338][ T9675] do_syscall_64+0x3d/0xb0 [ 1968.551881][ T9675] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1968.557844][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1968.563924][ T9675] RIP: 0033:0x7faec0089279 [ 1968.568487][ T9675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1968.588267][ T9675] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1968.596822][ T9675] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1968.604925][ T9675] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1968.613011][ T9675] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1968.621100][ T9675] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1968.629177][ T9675] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1968.637288][ T9675] [ 1968.671820][ T9675] Uninit was stored to memory at: [ 1968.677057][ T9675] ___sys_recvmsg+0x522/0x890 [ 1968.681859][ T9675] do_recvmmsg+0x55a/0x1180 [ 1968.686499][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1968.691649][ T9675] do_syscall_64+0x3d/0xb0 [ 1968.700583][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1968.707553][ T9675] [ 1968.710304][ T9675] Uninit was stored to memory at: [ 1968.716387][ T9675] ___sys_recvmsg+0x522/0x890 [ 1968.721908][ T9675] do_recvmmsg+0x55a/0x1180 [ 1968.727180][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1968.733148][ T9675] do_syscall_64+0x3d/0xb0 [ 1968.738328][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1968.745304][ T9675] [ 1968.748043][ T9675] Uninit was stored to memory at: [ 1968.754143][ T9675] ___sys_recvmsg+0x522/0x890 [ 1968.759585][ T9675] do_recvmmsg+0x55a/0x1180 [ 1968.764961][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1968.770789][ T9675] do_syscall_64+0x3d/0xb0 [ 1968.776102][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1968.783154][ T9675] [ 1968.785921][ T9675] Uninit was stored to memory at: [ 1968.791873][ T9675] ___sys_recvmsg+0x522/0x890 [ 1968.797324][ T9675] do_recvmmsg+0x55a/0x1180 [ 1968.802712][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1968.808587][ T9675] do_syscall_64+0x3d/0xb0 [ 1968.813855][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1968.820674][ T9675] [ 1968.823539][ T9675] Uninit was stored to memory at: [ 1968.829430][ T9675] ___sys_recvmsg+0x522/0x890 [ 1968.835026][ T9675] do_recvmmsg+0x55a/0x1180 [ 1968.840291][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1968.846292][ T9675] do_syscall_64+0x3d/0xb0 [ 1968.851501][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1968.858595][ T9675] [ 1968.861338][ T9675] Uninit was stored to memory at: [ 1968.867511][ T9675] ___sys_recvmsg+0x522/0x890 [ 1968.873074][ T9675] do_recvmmsg+0x55a/0x1180 [ 1968.878329][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1968.884297][ T9675] do_syscall_64+0x3d/0xb0 [ 1968.889391][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1968.896344][ T9675] [ 1968.899095][ T9675] Uninit was stored to memory at: [ 1968.905127][ T9675] ___sys_recvmsg+0x522/0x890 [ 1968.910565][ T9675] do_recvmmsg+0x55a/0x1180 [ 1968.915951][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1968.921931][ T9675] do_syscall_64+0x3d/0xb0 [ 1968.927063][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1968.934082][ T9675] [ 1968.936832][ T9675] Local variable msg_sys created at: [ 1968.943024][ T9675] do_recvmmsg+0x5c/0x1180 [ 1968.948198][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1969.358681][ T9675] not chained 2820000 origins [ 1969.363662][ T9675] CPU: 1 PID: 9675 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1969.373868][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1969.384029][ T9675] Call Trace: [ 1969.387384][ T9675] [ 1969.390483][ T9675] dump_stack_lvl+0x1c8/0x256 [ 1969.395348][ T9675] dump_stack+0x1a/0x1c [ 1969.399666][ T9675] kmsan_internal_chain_origin+0x78/0x120 [ 1969.405540][ T9675] ? filter_irq_stacks+0x5c/0x1a0 [ 1969.410761][ T9675] ? kmsan_internal_check_memory+0x94/0x530 [ 1969.416812][ T9675] ? do_recvmmsg+0x55a/0x1180 [ 1969.421624][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1969.427594][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1969.433565][ T9675] ? should_fail+0x3f/0x810 [ 1969.438249][ T9675] ? __stack_depot_save+0x21/0x4b0 [ 1969.443509][ T9675] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1969.449913][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1969.455876][ T9675] __msan_chain_origin+0xbd/0x140 [ 1969.461051][ T9675] ___sys_recvmsg+0x522/0x890 [ 1969.465859][ T9675] ? do_recvmmsg+0x5bc/0x1180 [ 1969.470687][ T9675] ? kmsan_internal_check_memory+0x94/0x530 [ 1969.476754][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1969.482735][ T9675] do_recvmmsg+0x55a/0x1180 [ 1969.487400][ T9675] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1969.493820][ T9675] ? do_syscall_64+0x3d/0xb0 [ 1969.498548][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1969.503731][ T9675] do_syscall_64+0x3d/0xb0 [ 1969.508271][ T9675] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1969.514239][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1969.520313][ T9675] RIP: 0033:0x7faec0089279 [ 1969.524840][ T9675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1969.544639][ T9675] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1969.553197][ T9675] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1969.561285][ T9675] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1969.569369][ T9675] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1969.577457][ T9675] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1969.585540][ T9675] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1969.593655][ T9675] [ 1969.599289][ T9675] Uninit was stored to memory at: [ 1969.604793][ T9675] ___sys_recvmsg+0x522/0x890 [ 1969.609601][ T9675] do_recvmmsg+0x55a/0x1180 [ 1969.614314][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1969.619506][ T9675] do_syscall_64+0x3d/0xb0 [ 1969.624136][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1969.630208][ T9675] [ 1969.632677][ T9675] Uninit was stored to memory at: [ 1969.637966][ T9675] ___sys_recvmsg+0x522/0x890 [ 1969.642937][ T9675] do_recvmmsg+0x55a/0x1180 [ 1969.647570][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1969.652850][ T9675] do_syscall_64+0x3d/0xb0 [ 1969.657393][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1969.663546][ T9675] [ 1969.665930][ T9675] Uninit was stored to memory at: [ 1969.671114][ T9675] ___sys_recvmsg+0x522/0x890 [ 1969.676054][ T9675] do_recvmmsg+0x55a/0x1180 [ 1969.680702][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1969.686007][ T9675] do_syscall_64+0x3d/0xb0 [ 1969.690551][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1969.696701][ T9675] [ 1969.699090][ T9675] Uninit was stored to memory at: [ 1969.704430][ T9675] ___sys_recvmsg+0x522/0x890 [ 1969.709229][ T9675] do_recvmmsg+0x55a/0x1180 [ 1969.713973][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1969.719120][ T9675] do_syscall_64+0x3d/0xb0 [ 1969.723794][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1969.729868][ T9675] [ 1969.732371][ T9675] Uninit was stored to memory at: [ 1969.737646][ T9675] ___sys_recvmsg+0x522/0x890 [ 1969.742527][ T9675] do_recvmmsg+0x55a/0x1180 [ 1969.747164][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1969.752398][ T9675] do_syscall_64+0x3d/0xb0 [ 1969.756950][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1969.763146][ T9675] [ 1969.765533][ T9675] Uninit was stored to memory at: [ 1969.770724][ T9675] ___sys_recvmsg+0x522/0x890 [ 1969.775665][ T9675] do_recvmmsg+0x55a/0x1180 [ 1969.780502][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1969.785802][ T9675] do_syscall_64+0x3d/0xb0 [ 1969.790353][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1969.796545][ T9675] [ 1969.798932][ T9675] Uninit was stored to memory at: [ 1969.804247][ T9675] ___sys_recvmsg+0x522/0x890 [ 1969.809056][ T9675] do_recvmmsg+0x55a/0x1180 [ 1969.813840][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1969.818999][ T9675] do_syscall_64+0x3d/0xb0 [ 1969.823671][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1969.829748][ T9675] [ 1969.832277][ T9675] Local variable msg_sys created at: [ 1969.837635][ T9675] do_recvmmsg+0x5c/0x1180 [ 1969.842304][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1970.153408][ T9675] not chained 2830000 origins [ 1970.158694][ T9675] CPU: 0 PID: 9675 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1970.168833][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1970.179027][ T9675] Call Trace: [ 1970.182341][ T9675] [ 1970.185306][ T9675] dump_stack_lvl+0x1c8/0x256 [ 1970.190094][ T9675] dump_stack+0x1a/0x1c [ 1970.194332][ T9675] kmsan_internal_chain_origin+0x78/0x120 [ 1970.200139][ T9675] ? filter_irq_stacks+0x5c/0x1a0 [ 1970.205297][ T9675] ? kmsan_internal_check_memory+0x94/0x530 [ 1970.211348][ T9675] ? do_recvmmsg+0x55a/0x1180 [ 1970.216174][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1970.222126][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1970.228020][ T9675] ? should_fail+0x3f/0x810 [ 1970.232604][ T9675] ? __stack_depot_save+0x21/0x4b0 [ 1970.237804][ T9675] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1970.244157][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1970.250070][ T9675] __msan_chain_origin+0xbd/0x140 [ 1970.255283][ T9675] ___sys_recvmsg+0x522/0x890 [ 1970.260089][ T9675] ? do_recvmmsg+0x5bc/0x1180 [ 1970.264853][ T9675] ? kmsan_internal_check_memory+0x94/0x530 [ 1970.270847][ T9675] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1970.276759][ T9675] do_recvmmsg+0x55a/0x1180 [ 1970.281358][ T9675] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1970.287702][ T9675] ? do_syscall_64+0x3d/0xb0 [ 1970.292382][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1970.297528][ T9675] do_syscall_64+0x3d/0xb0 [ 1970.302035][ T9675] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1970.308010][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1970.314077][ T9675] RIP: 0033:0x7faec0089279 [ 1970.318547][ T9675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1970.338258][ T9675] RSP: 002b:00007faec118e168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1970.346746][ T9675] RAX: ffffffffffffffda RBX: 00007faec019c050 RCX: 00007faec0089279 [ 1970.354808][ T9675] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1970.362895][ T9675] RBP: 00007faec00e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1970.370974][ T9675] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1970.379061][ T9675] R13: 00007faec06cfb1f R14: 00007faec118e300 R15: 0000000000022000 [ 1970.387111][ T9675] [ 1970.419444][ T9675] Uninit was stored to memory at: [ 1970.424662][ T9675] ___sys_recvmsg+0x522/0x890 [ 1970.429479][ T9675] do_recvmmsg+0x55a/0x1180 [ 1970.434126][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1970.439244][ T9675] do_syscall_64+0x3d/0xb0 [ 1970.447784][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1970.454847][ T9675] [ 1970.457484][ T9675] Uninit was stored to memory at: [ 1970.463556][ T9675] ___sys_recvmsg+0x522/0x890 [ 1970.468808][ T9675] do_recvmmsg+0x55a/0x1180 [ 1970.474182][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1970.480023][ T9675] do_syscall_64+0x3d/0xb0 [ 1970.485270][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1970.492152][ T9675] [ 1970.494761][ T9675] Uninit was stored to memory at: [ 1970.500328][ T9675] ___sys_recvmsg+0x522/0x890 [ 1970.505858][ T9675] do_recvmmsg+0x55a/0x1180 [ 1970.510930][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1970.516915][ T9675] do_syscall_64+0x3d/0xb0 [ 1970.522045][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1970.528589][ T9675] [ 1970.531146][ T9675] Uninit was stored to memory at: [ 1970.537113][ T9675] ___sys_recvmsg+0x522/0x890 [ 1970.542676][ T9675] do_recvmmsg+0x55a/0x1180 [ 1970.547660][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1970.553570][ T9675] do_syscall_64+0x3d/0xb0 [ 1970.558660][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1970.565664][ T9675] [ 1970.568288][ T9675] Uninit was stored to memory at: [ 1970.574308][ T9675] ___sys_recvmsg+0x522/0x890 [ 1970.579522][ T9675] do_recvmmsg+0x55a/0x1180 [ 1970.584880][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1970.590522][ T9675] do_syscall_64+0x3d/0xb0 [ 1970.595776][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1970.602788][ T9675] [ 1970.605524][ T9675] Uninit was stored to memory at: [ 1970.611143][ T9675] ___sys_recvmsg+0x522/0x890 [ 1970.616684][ T9675] do_recvmmsg+0x55a/0x1180 [ 1970.621899][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1970.627598][ T9675] do_syscall_64+0x3d/0xb0 [ 1970.632833][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1970.639396][ T9675] [ 1970.642237][ T9675] Uninit was stored to memory at: [ 1970.648118][ T9675] ___sys_recvmsg+0x522/0x890 [ 1970.653680][ T9675] do_recvmmsg+0x55a/0x1180 [ 1970.658682][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1970.664564][ T9675] do_syscall_64+0x3d/0xb0 [ 1970.669489][ T9675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1970.676389][ T9675] [ 1970.679095][ T9675] Local variable msg_sys created at: [ 1970.685205][ T9675] do_recvmmsg+0x5c/0x1180 [ 1970.690075][ T9675] __x64_sys_recvmmsg+0x3a7/0x4b0 22:48:17 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0x258, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 22:48:17 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a00010a000000000000000000000000fd"], 0x1c}}, 0x0) 22:48:17 executing program 0: r0 = open(&(0x7f0000000080)='.\x00', 0x40000, 0x0) getdents(r0, &(0x7f0000000140)=""/82, 0x19) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x18, 0x0, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getdents(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg(r3, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80005) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:48:17 executing program 2: r0 = open(&(0x7f0000000080)='.\x00', 0x40000, 0x0) getdents(r0, &(0x7f0000000140)=""/82, 0x19) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x18, 0x0, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getdents(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg(r3, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80005) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:48:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x3}}}}]}, 0x38}}, 0x0) [ 1970.928034][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 22:48:18 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a00010a000000000000000000000000fd"], 0x1c}}, 0x0) 22:48:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_OBJ_TYPE={0x8}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 22:48:18 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) ppoll(&(0x7f0000000100), 0x20000000000000d2, &(0x7f0000000480), &(0x7f00000004c0), 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:48:18 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0x258, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 22:48:19 executing program 5: r0 = syz_io_uring_setup(0x3e17, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0xffffffff}, 0x80000001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22c5, 0x0, 0x0, 0x0, 0x0) 22:48:19 executing program 1: r0 = epoll_create(0x9) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004900), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0000004}) read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 22:48:19 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) ppoll(&(0x7f0000000100), 0x20000000000000d2, &(0x7f0000000480), &(0x7f00000004c0), 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:48:19 executing program 0: r0 = open(&(0x7f0000000080)='.\x00', 0x40000, 0x0) getdents(r0, &(0x7f0000000140)=""/82, 0x19) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x18, 0x0, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getdents(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg(r3, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80005) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:48:19 executing program 2: r0 = open(&(0x7f0000000080)='.\x00', 0x40000, 0x0) getdents(r0, &(0x7f0000000140)=""/82, 0x19) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x18, 0x0, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getdents(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg(r3, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80005) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:48:19 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) ppoll(&(0x7f0000000100), 0x20000000000000d2, &(0x7f0000000480), &(0x7f00000004c0), 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:48:19 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) ppoll(&(0x7f0000000100), 0x20000000000000d2, &(0x7f0000000480), &(0x7f00000004c0), 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:48:19 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) ppoll(&(0x7f0000000100), 0x20000000000000d2, &(0x7f0000000480), &(0x7f00000004c0), 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:48:20 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) ppoll(&(0x7f0000000100), 0x20000000000000d2, &(0x7f0000000480), &(0x7f00000004c0), 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:48:20 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) ppoll(&(0x7f0000000100), 0x20000000000000d2, &(0x7f0000000480), &(0x7f00000004c0), 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:48:20 executing program 0: r0 = open(&(0x7f0000000080)='.\x00', 0x40000, 0x0) getdents(r0, &(0x7f0000000140)=""/82, 0x19) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x18, 0x0, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getdents(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg(r3, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80005) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:48:21 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) ppoll(&(0x7f0000000100), 0x20000000000000d2, &(0x7f0000000480), &(0x7f00000004c0), 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:48:21 executing program 2: r0 = open(&(0x7f0000000080)='.\x00', 0x40000, 0x0) getdents(r0, &(0x7f0000000140)=""/82, 0x19) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x18, 0x0, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getdents(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg(r3, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80005) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:48:21 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) ppoll(&(0x7f0000000100), 0x20000000000000d2, &(0x7f0000000480), &(0x7f00000004c0), 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:48:21 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) ppoll(&(0x7f0000000100), 0x20000000000000d2, &(0x7f0000000480), &(0x7f00000004c0), 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:48:21 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') syz_clone3(&(0x7f0000000400)={0x204001100, &(0x7f0000000200), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 22:48:21 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000240)={0x0, [[0x8], [0x3], [0x5]], '\x00', [{0x5, 0x6, 0x0, 0x1}, {}, {}, {0x0, 0x4}]}) 22:48:22 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = dup(r0) fallocate(r1, 0x0, 0x0, 0x87fd) 22:48:22 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x4}}]}, 0x40}}, 0x0) 22:48:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x81000000}}]}]}]}]}, 0x40}}, 0x0) 22:48:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x50, 0x1, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x2}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}]}]}, 0x50}}, 0x0) [ 1975.700327][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 22:48:22 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r0, 0x1}, 0x14}}, 0x0) 22:48:22 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65", 0x4) 22:48:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x7f4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff33bc00000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe, 0xf}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x9}}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22:48:23 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r0, 0x1}, 0x14}}, 0x0) 22:48:23 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') syz_clone3(&(0x7f0000000400)={0x204001100, &(0x7f0000000200), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 22:48:23 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r0, 0x1}, 0x14}}, 0x0) 22:48:23 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') syz_clone3(&(0x7f0000000400)={0x204001100, &(0x7f0000000200), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 22:48:23 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r0, 0x1}, 0x14}}, 0x0) 22:48:23 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x11}, 0x1c) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000180)) setsockopt$SO_TIMESTAMPING(r0, 0x6, 0x24, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) getpeername$inet6(r0, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) [ 1976.593273][ T9838] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:48:23 executing program 0: r0 = syz_io_uring_setup(0x39e9, &(0x7f00000014c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f00000da000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x1) syz_io_uring_setup(0x884, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0x2, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x66d, 0x0, 0x0, 0x0, 0x0) 22:48:23 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000008c0)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@rdma_dest={0x18}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x60}, 0x0) 22:48:24 executing program 0: r0 = syz_io_uring_setup(0x39e9, &(0x7f00000014c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f00000da000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x1) syz_io_uring_setup(0x884, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0x2, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x66d, 0x0, 0x0, 0x0, 0x0) 22:48:24 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x11}, 0x1c) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000180)) setsockopt$SO_TIMESTAMPING(r0, 0x6, 0x24, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) getpeername$inet6(r0, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) 22:48:24 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') syz_clone3(&(0x7f0000000400)={0x204001100, &(0x7f0000000200), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 22:48:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x7f4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff33bc00000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe, 0xf}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x9}}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22:48:24 executing program 5: r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d00031d5abf0009050400005539000009050b00000000000009050200000005000009047d010134feaf0009b50e00000000690009047dbe"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001000)={0x2c, 0x0, 0x0, &(0x7f0000000f40)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0) 22:48:24 executing program 0: r0 = syz_io_uring_setup(0x39e9, &(0x7f00000014c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f00000da000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x1) syz_io_uring_setup(0x884, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0x2, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x66d, 0x0, 0x0, 0x0, 0x0) [ 1977.607592][ T9873] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:48:24 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') syz_clone3(&(0x7f0000000400)={0x204001100, &(0x7f0000000200), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 1977.882553][ T8359] usb 6-1: new high-speed USB device number 96 using dummy_hcd 22:48:25 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x11}, 0x1c) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000180)) setsockopt$SO_TIMESTAMPING(r0, 0x6, 0x24, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) getpeername$inet6(r0, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) 22:48:25 executing program 0: r0 = syz_io_uring_setup(0x39e9, &(0x7f00000014c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f00000da000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x1) syz_io_uring_setup(0x884, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0x2, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x66d, 0x0, 0x0, 0x0, 0x0) 22:48:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x7f4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff33bc00000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe, 0xf}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x9}}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1978.123088][ T8359] usb 6-1: Using ep0 maxpacket: 16 [ 1978.259818][ T8359] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1978.268664][ T8359] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1978.277218][ T8359] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1978.285756][ T8359] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1978.294170][ T8359] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1978.303306][ T8359] usb 6-1: config 0 has no interface number 0 [ 1978.309598][ T8359] usb 6-1: config 0 interface 125 altsetting 0 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1978.320955][ T8359] usb 6-1: config 0 interface 125 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1978.330464][ T9903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1978.330981][ T8359] usb 6-1: config 0 interface 125 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1978.350533][ T8359] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1978.363883][ T8359] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1978.582783][ T8359] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1978.592300][ T8359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.602409][ T8359] usb 6-1: Product: syz [ 1978.606772][ T8359] usb 6-1: Manufacturer: syz [ 1978.611575][ T8359] usb 6-1: SerialNumber: syz 22:48:25 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x11}, 0x1c) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000180)) setsockopt$SO_TIMESTAMPING(r0, 0x6, 0x24, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) getpeername$inet6(r0, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) [ 1978.788312][ T8359] usb 6-1: config 0 descriptor?? [ 1978.868053][ T8359] usb 6-1: selecting invalid altsetting 2 22:48:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x7f4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff33bc00000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe, 0xf}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x9}}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22:48:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x7f4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff33bc00000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe, 0xf}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x9}}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1979.200203][ T9930] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 22:48:26 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') syz_clone3(&(0x7f0000000400)={0x204001100, &(0x7f0000000200), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 22:48:26 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) [ 1979.430452][ T9945] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1979.481855][ C1] usb 6-1: async_complete: urb error -71 [ 1979.488437][ C1] usb 6-1: async_complete: urb error -71 [ 1979.511823][ T8359] get_1284_register: usb error -71 [ 1979.517408][ T8359] parport0: fix this legacy no-device port driver! [ 1979.589562][ T8359] usb 6-1: USB disconnect, device number 96 22:48:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x7f4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff33bc00000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe, 0xf}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x9}}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1980.069962][ T9976] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 22:48:27 executing program 5: r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d00031d5abf0009050400005539000009050b00000000000009050200000005000009047d010134feaf0009b50e00000000690009047dbe"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001000)={0x2c, 0x0, 0x0, &(0x7f0000000f40)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0) 22:48:27 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') syz_clone3(&(0x7f0000000400)={0x204001100, &(0x7f0000000200), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 22:48:27 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000048000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000be000/0x3000)=nil, &(0x7f0000462000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="9b42071f12"], 0x20000600}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) 22:48:27 executing program 3: set_mempolicy(0x3, &(0x7f0000000180)=0x3, 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 22:48:27 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000048000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000be000/0x3000)=nil, &(0x7f0000462000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="9b42071f12"], 0x20000600}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) 22:48:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x7f4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff33bc00000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe, 0xf}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x9}}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22:48:27 executing program 3: set_mempolicy(0x3, &(0x7f0000000180)=0x3, 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 1980.418893][ T9994] ptrace attach of "/root/syz-executor.2 exec"[3533] was attempted by "¼\x1b ff.„ fïÀfofoftÁfsú\x0cfDoÁfDoÎfDoÒfDoÞfDdÅfDdÉfDdÕfDdÚfEÛÁfEÛÓfDÛÇfDÛ×fAëÈfAëÒftÑføÐfD×ÊÓêAÓéD)Ê…Ÿ\x1b foNLðM9Ë‚É\x1b M…É„À\x1b M‰ËfïÀHÇÁ A¹ LWIâÿ Iê  f„ IƒÂ6 fo\x0cfofoâfsÛfsú\x0cfëÓfDoÁfDoÎfDoÒfDoÞfDdÅfDdÉfDdÕfDdÚfEÛÁfEÛÓfDÛÇfDÛ×fAëÈfAëÒftÁftÊføÈf×Ñêÿÿ …È Iƒë†ÿ HƒÁfoÜIƒÂœ fo\x0cfofoâfsÛfsú\x0cfëÓfDoÁfDoÎfDoÒfDoÞfDdÅfDdÉfDdÕfDdÚfEÛÁfEÛÓfDÛÇfDÛ×fAëÈfAëÒftÁftÊføÈf×Ñêÿÿ …. Iƒë†e HƒÁfoÜéÇþÿÿ€ ftÃf×Ð÷Âðÿ u Iƒû\x0cvfïÀIê  é¤þÿÿf.„ fo\x0cfsØfsÛél ff.„ fïÀfofoftÁfsú\x0bfDoÁfDoÎfDoÒfDoÞfDdÅfDdÉfDdÕfDdÚfEÛÁfEÛÓfDÛÇfDÛ×fAëÈfAëÒftÑføÐfD×ÊÓêAÓéD)Ê…O foNLðM9Ë‚y M…É„p M‰ËfïÀHÇÁ A¹ LWIâÿ Iê  f„ IƒÂ6 fo\x0cfofoâfsÛfsú\x0bfëÓfDoÁfDoÎfDoÒfDoÞfDd [ 1980.902155][ T8359] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1981.027510][T10009] ptrace attach of "/root/syz-executor.2 exec"[3533] was attempted by "¼\x1b ff.„ fïÀfofoftÁfsú\x0cfDoÁfDoÎfDoÒfDoÞfDdÅfDdÉfDdÕfDdÚfEÛÁfEÛÓfDÛÇfDÛ×fAëÈfAëÒftÑføÐfD×ÊÓêAÓéD)Ê…Ÿ\x1b foNLðM9Ë‚É\x1b M…É„À\x1b M‰ËfïÀHÇÁ A¹ LWIâÿ Iê  f„ IƒÂ6 fo\x0cfofoâfsÛfsú\x0cfëÓfDoÁfDoÎfDoÒfDoÞfDdÅfDdÉfDdÕfDdÚfEÛÁfEÛÓfDÛÇfDÛ×fAëÈfAëÒftÁftÊføÈf×Ñêÿÿ …È Iƒë†ÿ HƒÁfoÜIƒÂœ fo\x0cfofoâfsÛfsú\x0cfëÓfDoÁfDoÎfDoÒfDoÞfDdÅfDdÉfDdÕfDdÚfEÛÁfEÛÓfDÛÇfDÛ×fAëÈfAëÒftÁftÊføÈf×Ñêÿÿ …. Iƒë†e HƒÁfoÜéÇþÿÿ€ ftÃf×Ð÷Âðÿ u Iƒû\x0cvfïÀIê  é¤þÿÿf.„ fo\x0cfsØfsÛél ff.„ fïÀfofoftÁfsú\x0bfDoÁfDoÎfDoÒfDoÞfDdÅfDdÉfDdÕfDdÚfEÛÁfEÛÓfDÛÇfDÛ×fAëÈfAëÒftÑføÐfD×ÊÓêAÓéD)Ê…O foNLðM9Ë‚y M…É„p M‰ËfïÀHÇÁ A¹ LWIâÿ Iê  f„ IƒÂ6 fo\x0cfofoâfsÛfsú\x0bfëÓfDoÁfDoÎfDoÒfDoÞfDd 22:48:28 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000048000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000be000/0x3000)=nil, &(0x7f0000462000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="9b42071f12"], 0x20000600}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) [ 1981.175380][T10011] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1981.612058][ T8359] usb 6-1: Using ep0 maxpacket: 16 22:48:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "18dcad82f461115d808c523f265470cf8895359adf2980b9d3d4004aa92657d5"}) [ 1981.733354][ T8359] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1981.742026][ T8359] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1981.750409][ T8359] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1981.758893][ T8359] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1981.759738][T10033] ptrace attach of "/root/syz-executor.2 exec"[3533] was attempted by "¼\x1b ff.„ fïÀfofoftÁfsú\x0cfDoÁfDoÎfDoÒfDoÞfDdÅfDdÉfDdÕfDdÚfEÛÁfEÛÓfDÛÇfDÛ×fAëÈfAëÒftÑføÐfD×ÊÓêAÓéD)Ê…Ÿ\x1b foNLðM9Ë‚É\x1b M…É„À\x1b M‰ËfïÀHÇÁ A¹ LWIâÿ Iê  f„ IƒÂ6 fo\x0cfofoâfsÛfsú\x0cfëÓfDoÁfDoÎfDoÒfDoÞfDdÅfDdÉfDdÕfDdÚfEÛÁfEÛÓfDÛÇfDÛ×fAëÈfAëÒftÁftÊføÈf×Ñêÿÿ …È Iƒë†ÿ HƒÁfoÜIƒÂœ fo\x0cfofoâfsÛfsú\x0cfëÓfDoÁfDoÎfDoÒfDoÞfDdÅfDdÉfDdÕfDdÚfEÛÁfEÛÓfDÛÇfDÛ×fAëÈfAëÒftÁftÊføÈf×Ñêÿÿ …. Iƒë†e HƒÁfoÜéÇþÿÿ€ ftÃf×Ð÷Âðÿ u Iƒû\x0cvfïÀIê  é¤þÿÿf.„ fo\x0cfsØfsÛél ff.„ fïÀfofoftÁfsú\x0bfDoÁfDoÎfDoÒfDoÞfDdÅfDdÉfDdÕfDdÚfEÛÁfEÛÓfDÛÇfDÛ×fAëÈfAëÒftÑføÐfD×ÊÓêAÓéD)Ê…O foNLðM9Ë‚y M…É„p M‰ËfïÀHÇÁ A¹ LWIâÿ Iê  f„ IƒÂ6 fo\x0cfofoâfsÛfsú\x0bfëÓfDoÁfDoÎfDoÒfDoÞfDd [ 1981.767247][ T8359] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1981.767368][ T8359] usb 6-1: config 0 has no interface number 0 [ 1981.767483][ T8359] usb 6-1: config 0 interface 125 altsetting 0 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1981.767633][ T8359] usb 6-1: config 0 interface 125 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1981.767756][ T8359] usb 6-1: config 0 interface 125 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1981.767882][ T8359] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1981.768028][ T8359] usb 6-1: config 0 interface 125 has no altsetting 2 22:48:29 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f00000010c0), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000012c0)={0x0, 0x0, "360a7cdcc3e30bf31d27000c6a87314c5dd9a13e47277d36d32990af9b55d057"}) 22:48:29 executing program 3: set_mempolicy(0x3, &(0x7f0000000180)=0x3, 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 1982.110394][ T8359] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1982.119871][ T8359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.128206][ T8359] usb 6-1: Product: syz [ 1982.132684][ T8359] usb 6-1: Manufacturer: syz [ 1982.137458][ T8359] usb 6-1: SerialNumber: syz 22:48:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "18dcad82f461115d808c523f265470cf8895359adf2980b9d3d4004aa92657d5"}) [ 1982.386611][ T8359] usb 6-1: config 0 descriptor?? [ 1982.446332][ T8359] usb 6-1: selecting invalid altsetting 2 [ 1983.091854][ C1] usb 6-1: async_complete: urb error -71 [ 1983.098227][ C1] usb 6-1: async_complete: urb error -71 [ 1983.104626][ T8359] get_1284_register: usb error -71 [ 1983.110153][ T8359] parport1: fix this legacy no-device port driver! [ 1983.147229][ T8359] usb 6-1: USB disconnect, device number 97 [ 1983.190735][ T9891] udevd[9891]: setting mode of /dev/bus/usb/006/097 to 020664 failed: No such file or directory [ 1983.210774][ T9891] udevd[9891]: setting owner of /dev/bus/usb/006/097 to uid=0, gid=0 failed: No such file or directory 22:48:30 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000048000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000be000/0x3000)=nil, &(0x7f0000462000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="9b42071f12"], 0x20000600}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) 22:48:30 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f00000010c0), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000012c0)={0x0, 0x0, "360a7cdcc3e30bf31d27000c6a87314c5dd9a13e47277d36d32990af9b55d057"}) 22:48:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "18dcad82f461115d808c523f265470cf8895359adf2980b9d3d4004aa92657d5"}) 22:48:30 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ptrace$cont(0x1f, 0xffffffffffffffff, 0x6, 0x7) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000240)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000480)=""/159, 0x9f}], 0x2, &(0x7f0000001bc0)=[{&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f0000000540)=""/143, 0x8f}, {0x0}, {&(0x7f0000000300)=""/21, 0x15}, {&(0x7f00000019c0)=""/92, 0x5c}], 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10) 22:48:30 executing program 3: set_mempolicy(0x3, &(0x7f0000000180)=0x3, 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 22:48:30 executing program 5: r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d00031d5abf0009050400005539000009050b00000000000009050200000005000009047d010134feaf0009b50e00000000690009047dbe"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001000)={0x2c, 0x0, 0x0, &(0x7f0000000f40)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0) 22:48:30 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f00000010c0), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000012c0)={0x0, 0x0, "360a7cdcc3e30bf31d27000c6a87314c5dd9a13e47277d36d32990af9b55d057"}) 22:48:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "18dcad82f461115d808c523f265470cf8895359adf2980b9d3d4004aa92657d5"}) [ 1983.902100][T10070] ptrace attach of "/root/syz-executor.2 exec"[3533] was attempted by "¼\x1b ff.„ fïÀfofoftÁfsú\x0cfDoÁfDoÎfDoÒfDoÞfDdÅfDdÉfDdÕfDdÚfEÛÁfEÛÓfDÛÇfDÛ×fAëÈfAëÒftÑføÐfD×ÊÓêAÓéD)Ê…Ÿ\x1b foNLðM9Ë‚É\x1b M…É„À\x1b M‰ËfïÀHÇÁ A¹ LWIâÿ Iê  f„ IƒÂ6 fo\x0cfofoâfsÛfsú\x0cfëÓfDoÁfDoÎfDoÒfDoÞfDdÅfDdÉfDdÕfDdÚfEÛÁfEÛÓfDÛÇfDÛ×fAëÈfAëÒftÁftÊføÈf×Ñêÿÿ …È Iƒë†ÿ HƒÁfoÜIƒÂœ fo\x0cfofoâfsÛfsú\x0cfëÓfDoÁfDoÎfDoÒfDoÞfDdÅfDdÉfDdÕfDdÚfEÛÁfEÛÓfDÛÇfDÛ×fAëÈfAëÒftÁftÊføÈf×Ñêÿÿ …. Iƒë†e HƒÁfoÜéÇþÿÿ€ ftÃf×Ð÷Âðÿ u Iƒû\x0cvfïÀIê  é¤þÿÿf.„ fo\x0cfsØfsÛél ff.„ fïÀfofoftÁfsú\x0bfDoÁfDoÎfDoÒfDoÞfDdÅfDdÉfDdÕfDdÚfEÛÁfEÛÓfDÛÇfDÛ×fAëÈfAëÒftÑføÐfD×ÊÓêAÓéD)Ê…O foNLðM9Ë‚y M…É„p M‰ËfïÀHÇÁ A¹ LWIâÿ Iê  f„ IƒÂ6 fo\x0cfofoâfsÛfsú\x0bfëÓfDoÁfDoÎfDoÒfDoÞfDd [ 1984.231881][ T8359] usb 6-1: new high-speed USB device number 98 using dummy_hcd 22:48:31 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ptrace$cont(0x1f, 0xffffffffffffffff, 0x6, 0x7) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000240)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000480)=""/159, 0x9f}], 0x2, &(0x7f0000001bc0)=[{&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f0000000540)=""/143, 0x8f}, {0x0}, {&(0x7f0000000300)=""/21, 0x15}, {&(0x7f00000019c0)=""/92, 0x5c}], 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10) 22:48:31 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f00000010c0), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000012c0)={0x0, 0x0, "360a7cdcc3e30bf31d27000c6a87314c5dd9a13e47277d36d32990af9b55d057"}) 22:48:31 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ptrace$cont(0x1f, 0xffffffffffffffff, 0x6, 0x7) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000240)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000480)=""/159, 0x9f}], 0x2, &(0x7f0000001bc0)=[{&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f0000000540)=""/143, 0x8f}, {0x0}, {&(0x7f0000000300)=""/21, 0x15}, {&(0x7f00000019c0)=""/92, 0x5c}], 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10) 22:48:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r1, &(0x7f0000006680)=[{{&(0x7f0000001dc0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000002040)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 22:48:32 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ptrace$cont(0x1f, 0xffffffffffffffff, 0x6, 0x7) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000240)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000480)=""/159, 0x9f}], 0x2, &(0x7f0000001bc0)=[{&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f0000000540)=""/143, 0x8f}, {0x0}, {&(0x7f0000000300)=""/21, 0x15}, {&(0x7f00000019c0)=""/92, 0x5c}], 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10) 22:48:32 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ptrace$cont(0x1f, 0xffffffffffffffff, 0x6, 0x7) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000240)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000480)=""/159, 0x9f}], 0x2, &(0x7f0000001bc0)=[{&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f0000000540)=""/143, 0x8f}, {0x0}, {&(0x7f0000000300)=""/21, 0x15}, {&(0x7f00000019c0)=""/92, 0x5c}], 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10) 22:48:32 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x4) 22:48:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x8, 0x4, &(0x7f0000000940)=@framed={{}, [@ldst={0x7, 0x2, 0x4, 0xa}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:48:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x9000000}]}], {0x14}}, 0x50}}, 0x0) [ 1985.383148][ T8359] usb 6-1: Using ep0 maxpacket: 16 [ 1985.502512][ T8359] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1985.511143][ T8359] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1985.519768][ T8359] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1985.528374][ T8359] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1985.536981][ T8359] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1985.546205][ T8359] usb 6-1: config 0 has no interface number 0 [ 1985.552760][ T8359] usb 6-1: config 0 interface 125 altsetting 0 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1985.565972][ T8359] usb 6-1: config 0 interface 125 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1985.576417][ T8359] usb 6-1: config 0 interface 125 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1985.586577][ T8359] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1985.599927][ T8359] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1986.022319][ T8359] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1986.031864][ T8359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.040071][ T8359] usb 6-1: Product: syz [ 1986.044595][ T8359] usb 6-1: Manufacturer: syz [ 1986.049375][ T8359] usb 6-1: SerialNumber: syz [ 1986.061497][ T8359] usb 6-1: config 0 descriptor?? [ 1986.111468][ T8359] usb 6-1: selecting invalid altsetting 2 [ 1986.751892][ C1] usb 6-1: async_complete: urb error -71 [ 1986.758252][ C1] usb 6-1: async_complete: urb error -71 [ 1986.764688][ T8359] get_1284_register: usb error -71 [ 1986.770222][ T8359] parport2: fix this legacy no-device port driver! [ 1986.808411][ T8359] usb 6-1: USB disconnect, device number 98 22:48:34 executing program 5: r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d00031d5abf0009050400005539000009050b00000000000009050200000005000009047d010134feaf0009b50e00000000690009047dbe"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001000)={0x2c, 0x0, 0x0, &(0x7f0000000f40)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0) 22:48:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x52020000, {}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 22:48:34 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000011c0)={{0x12, 0x1, 0x0, 0xe0, 0x9d, 0x70, 0x40, 0xa46, 0x9621, 0x4f32, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xbd, 0xd3, 0x45, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x10}}, {{0x9, 0x5, 0x8b, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x0, 0x0, 0x6, "bdd24a7432e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:48:34 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ptrace$cont(0x1f, 0xffffffffffffffff, 0x6, 0x7) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000240)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000480)=""/159, 0x9f}], 0x2, &(0x7f0000001bc0)=[{&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f0000000540)=""/143, 0x8f}, {0x0}, {&(0x7f0000000300)=""/21, 0x15}, {&(0x7f00000019c0)=""/92, 0x5c}], 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10) 22:48:34 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ptrace$cont(0x1f, 0xffffffffffffffff, 0x6, 0x7) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000240)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000480)=""/159, 0x9f}], 0x2, &(0x7f0000001bc0)=[{&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f0000000540)=""/143, 0x8f}, {0x0}, {&(0x7f0000000300)=""/21, 0x15}, {&(0x7f00000019c0)=""/92, 0x5c}], 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10) 22:48:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7cce1d61d4ea313a}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x0) 22:48:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000200)={0x0, 0x1b000}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}], 0xa, "43290e5f757aa8820c85a738ba2ba64acf82e292d70d2cb4da8aaa7dab9d9c5f0af3a7469f92642de66b3f885598079a2b0fcd20f9"}, 0x5e) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1987.712626][ T8359] usb 2-1: new high-speed USB device number 72 using dummy_hcd 22:48:34 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x38}}, 0x0) [ 1987.942175][ T3565] usb 6-1: new high-speed USB device number 99 using dummy_hcd 22:48:35 executing program 0: r0 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0\x01\x80gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\v\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\xf3\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbdY\xad\xcbj#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80n\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x04\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19VsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaR\xc10(r\x8f/\xd0T\xa3A\xd6\x01\xdd(^\xc4Z\xd46\x85\x1d\'\x0f\xb8\aU\x86\xc0\x9b>Uq\x86\xc1i\x83\xf3B\xf4`n#\x05\x11\xe0s\xab\xad\xc3d[\x1f;)\x976C\x16\xe9\xa5:u\xc5\xd6\x05\xc12\xd3\xb6F\xef\xb5\xd4e\xae\xf0/y\x87l\xd2\x1d\xaf\xa8\xd17\xa0\x9e\x19\xdaz\x1aA\x8d\xedb\x89X\x13\xc5@\\\x9e\x06&=$\x99$n\x1be\xd4\xd5x\xa2\xbdhY\xa4 \x0f\vO\xfb\xce\xde\x9f\xcb%r\x81=\x89\xd2R\x16-\x95\xdb\"\xbd\xe8\xdeC\xb7\xfb\x9eZ9\x01\xd5\x04\xb6\xa3M\xa7\x92v@y\x91x$E.\xee\xfc*_\x1b<\r\"\x04\t.\a\x0f\b3\xadl\x80\xd3\xf25_\t\xd4\xbe#\xfc\x1c\x03i\xdc\x06\x9d\xc7I\xd0r\xea\x9f\xaet\xdd\'\xa31p\xeb\xc3\x89\xda\xc8\x1dU\xf9a\x1c\nzKnW\xe9{]\x83\xad\xc3\x96\xc7MCf\xfc<\xe6\x87\xed2U\xcb!4\xa4(\xe9f\x18\xf3\xef\x9a\xfe\xa8#>\x1d\xd4\x17d\x16\x99v\xb8o+\x9e\xa0tB\xca`\x9c\xd5\xce\xb0\xd9\xbe|\x14\xcb\x83\xbcD\x1c\"n\xed\x14\x9by\x887\xf3\xdb\x17\xc9\xe9l\r\v\xd6=#\xa9\xe6\x05\xe9\a\x16\xf7\xe48\xb3<\x8d\x97!-a\x1c\x00\xe2f\xf1q\xad\xc5\nS\x04J@\x01\x8br\x95\xbf\vB\x9dS\x8a\xe2\xa9\x90cr\x97\xd5R\xca\xbam\x14=\\\x12\xaai\x98\x86o\x04]\xe0\xfb\xc9\xf6\x90\x94\xa31\xd0\x87Y\x13\xbf\x85\xa1F\x90\xc6\x8d\xb99k\xbe\x01\x9cw=\xd3}\xce\x16n\xfb-\xbd\x94\x12L\xdfC\xe1\xb4\xbe\x97\xfa\xc6[\xd8\x86>\xa6\xd7b3\xbb\a@]\x90Jl\xb0|\xff\xec\xad\"\t\x9c', 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000007}) ftruncate(r0, 0x0) [ 1988.157395][ T8359] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1988.167673][ T8359] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1988.183595][ T3565] usb 6-1: Using ep0 maxpacket: 16 22:48:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0), 0x10) [ 1988.201171][T10140] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:48:35 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000640)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/103, 0x67) getdents64(r0, 0xfffffffffffffffe, 0x29) [ 1988.329861][ T3565] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1988.339951][ T3565] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1988.342845][ T8359] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1988.349532][ T3565] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1988.357910][ T8359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.358030][ T8359] usb 2-1: Product: syz [ 1988.358118][ T8359] usb 2-1: Manufacturer: syz [ 1988.358208][ T8359] usb 2-1: SerialNumber: syz [ 1988.392499][ T3565] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1988.401987][ T3565] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1988.412202][ T3565] usb 6-1: config 0 has no interface number 0 [ 1988.419376][ T3565] usb 6-1: config 0 interface 125 altsetting 0 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1988.432256][ T3565] usb 6-1: config 0 interface 125 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1988.443651][ T3565] usb 6-1: config 0 interface 125 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1988.455110][ T3565] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1988.470181][ T3565] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1988.477144][ T8359] usb 2-1: config 0 descriptor?? [ 1988.504802][T10117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1988.556198][T10117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 22:48:35 executing program 0: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080), 0x64, 0x0) [ 1988.841508][ T3565] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1988.845336][T10117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1988.852198][ T3565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.868265][ T3565] usb 6-1: Product: syz [ 1988.873339][ T3565] usb 6-1: Manufacturer: syz [ 1988.878846][ T3565] usb 6-1: SerialNumber: syz [ 1988.896206][T10117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1989.021791][ T3565] usb 6-1: config 0 descriptor?? [ 1989.080182][ T3565] usb 6-1: selecting invalid altsetting 2 [ 1989.391763][ T8359] dm9601: No valid MAC address in EEPROM, using 4e:7b:38:57:88:1b [ 1989.592743][ T8359] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1989.666536][ T8359] usb 2-1: USB disconnect, device number 72 [ 1989.721848][ C0] usb 6-1: async_complete: urb error -71 [ 1989.728191][ C0] usb 6-1: async_complete: urb error -71 [ 1989.736062][ T3565] get_1284_register: usb error -71 [ 1989.742346][ T3565] parport3: fix this legacy no-device port driver! [ 1989.789694][ T3565] usb 6-1: USB disconnect, device number 99 22:48:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0), 0x10) 22:48:37 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000640)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/103, 0x67) getdents64(r0, 0xfffffffffffffffe, 0x29) 22:48:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0), 0x10) 22:48:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0), 0x10) 22:48:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000200)={0x0, 0x1b000}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}], 0xa, "43290e5f757aa8820c85a738ba2ba64acf82e292d70d2cb4da8aaa7dab9d9c5f0af3a7469f92642de66b3f885598079a2b0fcd20f9"}, 0x5e) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:48:37 executing program 5: syz_emit_ethernet(0x256, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x220, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc808000000000000023493b87aafaffffffffffffff230a2472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5af2602"}, {0x0, 0x1, "ffffefffdb5cc853b77b3fdc"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c61aa74d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907cbaa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0) 22:48:37 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000640)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/103, 0x67) getdents64(r0, 0xfffffffffffffffe, 0x29) 22:48:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0), 0x10) 22:48:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000cc0)=@newlink={0x44, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x44}}, 0x0) 22:48:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0), 0x10) 22:48:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000200)={0x0, 0x1b000}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}], 0xa, "43290e5f757aa8820c85a738ba2ba64acf82e292d70d2cb4da8aaa7dab9d9c5f0af3a7469f92642de66b3f885598079a2b0fcd20f9"}, 0x5e) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:48:38 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000640)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/103, 0x67) getdents64(r0, 0xfffffffffffffffe, 0x29) 22:48:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0), 0x10) 22:48:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0xc, 0x2, [{0x0, 0x0, 0x0, 0x4}]}]}, 0x2c}}, 0x0) 22:48:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0), 0x10) 22:48:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0), 0x10) 22:48:38 executing program 5: add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='G', 0x1, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='G', 0x1, 0xfffffffffffffffe) 22:48:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) 22:48:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000200)={0x0, 0x1b000}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}], 0xa, "43290e5f757aa8820c85a738ba2ba64acf82e292d70d2cb4da8aaa7dab9d9c5f0af3a7469f92642de66b3f885598079a2b0fcd20f9"}, 0x5e) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:48:39 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="5a20dc62e02c", @local, @val={@void}, {@ipv4={0x8906, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 22:48:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0), 0x10) 22:48:39 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="02000000020319", 0x7}, {&(0x7f0000000500)="89", 0x1}], 0x2) 22:48:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200000077, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x5522, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000200)={0x1, 0x1}) [ 1992.236001][T10232] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 22:48:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000100)=@flushpolicy={0x98, 0x1d, 0x1, 0x0, 0x0, "", [@sec_ctx={0x33, 0x8, {0x2f, 0x8, 0x1, 0xff, 0x27, "9c458b679d8f1cffaed1049d9d9b54978b97baba6b8b24fa7e3b699885105aa756acb6407d643d"}}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x20}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}, @replay_thresh={0x8, 0xb, 0x1}, @lifetime_val={0x24, 0x9, {0x6, 0x4, 0x5, 0x1}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x98}}, 0x4000) [ 1992.678506][T10235] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 22:48:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200000077, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x5522, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000200)={0x1, 0x1}) 22:48:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000100)=@flushpolicy={0x98, 0x1d, 0x1, 0x0, 0x0, "", [@sec_ctx={0x33, 0x8, {0x2f, 0x8, 0x1, 0xff, 0x27, "9c458b679d8f1cffaed1049d9d9b54978b97baba6b8b24fa7e3b699885105aa756acb6407d643d"}}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x20}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}, @replay_thresh={0x8, 0xb, 0x1}, @lifetime_val={0x24, 0x9, {0x6, 0x4, 0x5, 0x1}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x98}}, 0x4000) 22:48:40 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="5a20dc62e02c", @local, @val={@void}, {@ipv4={0x8906, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 22:48:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200000077, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x5522, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000200)={0x1, 0x1}) 22:48:40 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) 22:48:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200000077, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x5522, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000200)={0x1, 0x1}) 22:48:40 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) 22:48:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200000077, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x5522, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000200)={0x1, 0x1}) 22:48:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000100)=@flushpolicy={0x98, 0x1d, 0x1, 0x0, 0x0, "", [@sec_ctx={0x33, 0x8, {0x2f, 0x8, 0x1, 0xff, 0x27, "9c458b679d8f1cffaed1049d9d9b54978b97baba6b8b24fa7e3b699885105aa756acb6407d643d"}}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x20}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}, @replay_thresh={0x8, 0xb, 0x1}, @lifetime_val={0x24, 0x9, {0x6, 0x4, 0x5, 0x1}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x98}}, 0x4000) [ 1993.372351][T10261] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1993.527526][T10266] usb usb1: usbfs: process 10266 (syz-executor.5) did not claim interface 0 before use [ 1993.567376][T10269] usb usb1: usbfs: process 10269 (syz-executor.2) did not claim interface 0 before use 22:48:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000100)=@flushpolicy={0x98, 0x1d, 0x1, 0x0, 0x0, "", [@sec_ctx={0x33, 0x8, {0x2f, 0x8, 0x1, 0xff, 0x27, "9c458b679d8f1cffaed1049d9d9b54978b97baba6b8b24fa7e3b699885105aa756acb6407d643d"}}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x20}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}, @replay_thresh={0x8, 0xb, 0x1}, @lifetime_val={0x24, 0x9, {0x6, 0x4, 0x5, 0x1}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x98}}, 0x4000) [ 1993.736527][T10270] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 22:48:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200000077, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x5522, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000200)={0x1, 0x1}) 22:48:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200000077, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x5522, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000200)={0x1, 0x1}) [ 1993.976783][T10272] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1994.041937][T10273] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 22:48:41 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="5a20dc62e02c", @local, @val={@void}, {@ipv4={0x8906, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 22:48:41 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) 22:48:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3aa}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x8402000000000000}, 0x0) 22:48:41 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) 22:48:41 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe2, 0x25, 0x58, 0x10, 0x1435, 0x826, 0x1c50, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb4, 0xe9, 0xf5, 0x0, [], [{{0x9, 0x5, 0x64223982ff5da881, 0x2, 0x400}}, {{0x9, 0x5, 0x1, 0x2517b652d80d8486, 0x200}}]}}]}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 22:48:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x35}, {0x6}]}, 0x10) r2 = dup(r0) writev(r2, &(0x7f0000001680)=[{&(0x7f00000001c0)="ba0f5ee9", 0xfdef}], 0x1) [ 1994.667853][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1994.676665][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 [ 1994.745378][T10290] device ipvlan2 entered promiscuous mode [ 1994.753985][T10294] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 22:48:41 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="5a20dc62e02c", @local, @val={@void}, {@ipv4={0x8906, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 22:48:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x35}, {0x6}]}, 0x10) r2 = dup(r0) writev(r2, &(0x7f0000001680)=[{&(0x7f00000001c0)="ba0f5ee9", 0xfdef}], 0x1) [ 1994.892147][ T8359] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1994.974602][T10299] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 22:48:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3aa}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x8402000000000000}, 0x0) [ 1995.142319][ T8359] usb 3-1: Using ep0 maxpacket: 16 [ 1995.282649][ T8359] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1995.316029][T10300] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1995.337308][T10301] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 22:48:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x35}, {0x6}]}, 0x10) r2 = dup(r0) writev(r2, &(0x7f0000001680)=[{&(0x7f00000001c0)="ba0f5ee9", 0xfdef}], 0x1) [ 1995.452490][T10311] device ipvlan3 entered promiscuous mode [ 1995.493960][ T8359] usb 3-1: New USB device found, idVendor=1435, idProduct=0826, bcdDevice=1c.50 [ 1995.503621][ T8359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.512035][ T8359] usb 3-1: Product: syz [ 1995.516384][ T8359] usb 3-1: Manufacturer: syz [ 1995.521165][ T8359] usb 3-1: SerialNumber: syz 22:48:42 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) 22:48:42 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) [ 1995.695988][ T8359] usb 3-1: config 0 descriptor?? 22:48:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3aa}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x8402000000000000}, 0x0) [ 1995.723865][T10289] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1995.811767][ C1] usb 3-1: RX USB error -71. [ 1995.831833][ C1] usb 3-1: RX USB error -71. [ 1995.851887][ C1] usb 3-1: RX USB error -71. [ 1995.871908][ C1] usb 3-1: RX USB error -71. [ 1995.891803][ C1] usb 3-1: RX USB error -71. [ 1995.911854][ C1] usb 3-1: RX USB error -71. 22:48:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x35}, {0x6}]}, 0x10) r2 = dup(r0) writev(r2, &(0x7f0000001680)=[{&(0x7f00000001c0)="ba0f5ee9", 0xfdef}], 0x1) [ 1995.932057][ C1] usb 3-1: RX USB error -71. [ 1995.951852][ C1] usb 3-1: RX USB error -71. [ 1995.970463][T10289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1995.979185][ C1] usb 3-1: RX USB error -71. [ 1995.984275][T10320] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1995.992662][ C1] usb 3-1: RX USB error -71. [ 1995.999031][T10289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1996.011849][ C1] usb 3-1: RX USB error -71. [ 1996.031854][ C1] usb 3-1: RX USB error -71. [ 1996.051847][ C1] usb 3-1: RX USB error -71. [ 1996.071863][ C1] usb 3-1: RX USB error -71. [ 1996.101903][ C1] usb 3-1: RX USB error -71. [ 1996.121874][ C1] usb 3-1: RX USB error -71. [ 1996.143300][ C1] usb 3-1: RX USB error -71. [ 1996.171832][ C1] usb 3-1: RX USB error -71. [ 1996.201853][ C1] usb 3-1: RX USB error -71. [ 1996.231865][ C1] usb 3-1: RX USB error -71. [ 1996.251907][ C1] usb 3-1: RX USB error -71. 22:48:43 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1996.273255][ C1] usb 3-1: Failed to TX command. Status = -71 [ 1996.279793][ C1] usb 3-1: RX USB error -71. [ 1996.285140][ T8359] usb 3-1: could not initialize adapter [ 1996.338605][ C1] usb 3-1: RX USB error -2. [ 1996.343643][ C1] usb 3-1: error -1 when submitting rx urb [ 1996.369345][ T8359] ar5523: probe of 3-1:0.0 failed with error -71 [ 1996.469657][ T8359] usb 3-1: USB disconnect, device number 87 [ 1996.545155][T10324] device ipvlan4 entered promiscuous mode [ 1996.559170][T10326] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 22:48:43 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0}) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000340)=[@enter_looper], 0x50, 0x0, &(0x7f0000000640)="4029a68651b2b8fc2b7a360ada85a25da4d0f0640576886e8c617897bf457d5eeaceab34e64ddb14c95d187aaa72dad855ad93e0142f46668b4c804845ebbb5c9e285ec72499458d88d0fdb0e5bb9d55"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@dead_binder_done], 0x0, 0x0, 0x0}) 22:48:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3aa}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x8402000000000000}, 0x0) 22:48:44 executing program 3: syz_io_uring_setup(0x2220, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="60000000000000000701000007000000c09932ffd72e660fff62e6cebb397db9aa4ad59f9150da735e6710ce7dccb5b3c3014c6f7962b3b0e7c4c235c7ec6e2cbd87d7fb90ea810d8cfddfbdd3185621ca28522c68958364d6095f3d036aed00d8000000000000000c010000ff0300008c45638d98152400b2495d8fe23c06ddd3f1838e647f1b258d22c682d70094ecb16dc1c30212f374f0c883969172e1f3ee02797b83e7b31384e7e83c1ad782d5c3d1002b320a4a22647e11229df7030ca62c45cead3cdeb444cfcabf83bb629f4b652e8dc80ca6a991dba0d56c37c06561c7a26a48643c27ca2931a97f428b7e518c00811fa8899831d10541c880a212fc12c5e385fc16d8ff681cfd113d3887c12e52e9ce9f00a2548aaf19f9152e03bc049149b7be25d91e10b1eef0c24c1778f69ab6b1d1e816780000000000000013010000faffffff2842c37d19b293b9c3438ef4d172d1fe44aa759a311843517488383e57d921db05aafa3ef83a42ed85da1b9f2ce82835bbaba26079ad7c822bda972f3520f77637b3fb48d0596e50ce81b08b99a9f2eef3e02eea1b1224de090369"], 0x1558}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1, 0x0, 0x0) 22:48:44 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe2, 0x25, 0x58, 0x10, 0x1435, 0x826, 0x1c50, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb4, 0xe9, 0xf5, 0x0, [], [{{0x9, 0x5, 0x64223982ff5da881, 0x2, 0x400}}, {{0x9, 0x5, 0x1, 0x2517b652d80d8486, 0x200}}]}}]}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 22:48:44 executing program 1: process_vm_writev(0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000200)=""/249, 0xf2}], 0x2, &(0x7f0000000080)=[{0x0, 0x38}, {&(0x7f0000000440)=""/144, 0x90}, {&(0x7f00000000c0)=""/37, 0xffffffffffffff73}], 0x3, 0x0) 22:48:44 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000c0bb9b40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)={0x0, 0x0, 0x1, 'u'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x21, 0x1}}) [ 1997.296975][T10353] device ipvlan5 entered promiscuous mode 22:48:44 executing program 3: syz_io_uring_setup(0x2220, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x1558}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1, 0x0, 0x0) 22:48:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz0\x00', {}, 0x12}, 0x45c) [ 1997.682600][T27551] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1997.791938][ T8359] usb 6-1: new high-speed USB device number 100 using dummy_hcd 22:48:44 executing program 3: syz_io_uring_setup(0x2220, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x1558}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1, 0x0, 0x0) [ 1997.872043][T10371] input: syz0 as /devices/virtual/input/input100 [ 1997.923034][T27551] usb 3-1: Using ep0 maxpacket: 16 22:48:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000200)={0xa0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1998.056124][T27551] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1998.172574][ T8359] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1998.182036][ T8359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.237542][ T8359] usb 6-1: config 0 descriptor?? 22:48:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz0\x00', {}, 0x12}, 0x45c) [ 1998.262458][T27551] usb 3-1: New USB device found, idVendor=1435, idProduct=0826, bcdDevice=1c.50 [ 1998.272026][T27551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.280287][T27551] usb 3-1: Product: syz [ 1998.284832][T27551] usb 3-1: Manufacturer: syz [ 1998.289605][T27551] usb 3-1: SerialNumber: syz [ 1998.480116][T27551] usb 3-1: config 0 descriptor?? 22:48:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000200)={0xa0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1998.503722][T10358] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 22:48:45 executing program 3: syz_io_uring_setup(0x2220, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x1558}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1, 0x0, 0x0) [ 1998.651818][ C1] usb 3-1: RX USB error -71. [ 1998.671830][ C1] usb 3-1: RX USB error -71. [ 1998.685147][T10386] input: syz0 as /devices/virtual/input/input101 [ 1998.691800][ C1] usb 3-1: RX USB error -71. [ 1998.711823][ C1] usb 3-1: RX USB error -71. [ 1998.731872][ C1] usb 3-1: RX USB error -71. [ 1998.751926][ C1] usb 3-1: RX USB error -71. 22:48:45 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000200)={0xa0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1998.771773][ C1] usb 3-1: RX USB error -71. [ 1998.791831][ C1] usb 3-1: RX USB error -71. [ 1998.811763][ C1] usb 3-1: RX USB error -71. [ 1998.831807][ C1] usb 3-1: RX USB error -71. [ 1998.831997][T10358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.848682][T10358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1998.861841][ C1] usb 3-1: RX USB error -71. [ 1998.891853][ C1] usb 3-1: RX USB error -71. [ 1998.921815][ C1] usb 3-1: RX USB error -71. [ 1998.941969][ C1] usb 3-1: Failed to TX command. Status = -71 [ 1998.948540][ C1] usb 3-1: RX USB error -71. [ 1998.956108][T27551] usb 3-1: could not initialize adapter [ 1998.972804][ C1] usb 3-1: RX USB error -2. [ 1998.977807][ C1] usb 3-1: error -1 when submitting rx urb [ 1998.988621][T27551] ar5523: probe of 3-1:0.0 failed with error -71 22:48:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000200)={0xa0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1999.105214][T27551] usb 3-1: USB disconnect, device number 88 [ 1999.403103][ T8359] usb 6-1: Firmware version (0.0) predates our first public release. [ 1999.411439][ T8359] usb 6-1: Please update to version 0.2 or newer [ 1999.584521][ T8359] usb 6-1: USB disconnect, device number 100 22:48:46 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xe2, 0x25, 0x58, 0x10, 0x1435, 0x826, 0x1c50, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb4, 0xe9, 0xf5, 0x0, [], [{{0x9, 0x5, 0x64223982ff5da881, 0x2, 0x400}}, {{0x9, 0x5, 0x1, 0x2517b652d80d8486, 0x200}}]}}]}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 22:48:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz0\x00', {}, 0x12}, 0x45c) [ 1999.889767][T10425] input: syz0 as /devices/virtual/input/input102 22:48:47 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000180)={0x64, 0x12, 0x593d0b9258801b7b, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x15, 0x1, "0100100080d6ef17e7df1103be4e11379a"}]}, 0x64}}, 0x0) 22:48:47 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000200)={0xa0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:48:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000200)={0xa0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:48:47 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@userptr={0x0, 0x8, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5a361653"}, 0x0, 0x2, {0x0}}) 22:48:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz0\x00', {}, 0x12}, 0x45c) [ 2000.222349][ T3565] usb 3-1: new high-speed USB device number 89 using dummy_hcd 22:48:47 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}}], 0x2, 0x0) 22:48:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000200)={0xa0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2000.472228][ T3565] usb 3-1: Using ep0 maxpacket: 16 [ 2000.478153][T10450] input: syz0 as /devices/virtual/input/input103 22:48:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x14000000}) 22:48:47 executing program 0: syz_open_dev$mouse(&(0x7f0000000300), 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640), 0x0) close(r0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1ff, 0x0) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_open_procfs(r2, &(0x7f0000000080)='environ\x00') read$FUSE(r3, &(0x7f0000006200)={0x2020}, 0x2020) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000000)={0x222, "5f71ebb4d15574d2bd72d034b543ae3ff37841faed8d1885f4974f4871115d583fea8d6e120954cb23ac42b8e2feb1cd9966a617188816e14035b5be8c692bbaac6eb877fbfd55507d13a10858a799331a48915cb1c06e781b42806b145b049ad21994a0b79d6d9b32283a6f6e273b5e592e088489bc4fc9c77e7ddf119719b31e5320c0cc8d9b02eb6bd8bfd913bfb8059405b343f19a4730436fb852a3294757c79d29f1cd1819c2eb60d326c21d51e081ccc4c0566d7b158601e5eae0a4d2d66d4184878597c9c414f64ab717f77beab9f30c6463aa3aa3ad1df6ed89722f4c4f00f2e2d663b427479d8855da8948b7774dbced8b6eabda0648c79da61bd2d4b7bbbef28fbfdf3cf915bcdb1c3aee8610923fb77982b90c8bf10b9b019260bcaf9be9612370795d657df5330b5659bbd29942a3e67969cb94f219e66f4c34b0a2fef8908d939331a68cb37b5bd14fc670169805a91f5c001bd28d48b2e5ed24ae14fee496a82b8d9846d041c2c531001c06f6441bc052c508bea39b70640835fbfe31ce7ab4e8a0b7753b703985210e77e991617594ba8f4e73e15db93e4fe023090bf71a2e090faaeb6a5b4a0363566e42915d58a8fa442c0c3a227c6598ccd225882c2d9def28ac44243213a38cf885c84a4923a50812a77d1be67185ac9e03a405ea87d3a176cc72edc877df7a4c27b4c857873cf9ff07384242e88e24f0625fe528d9be540cb429b3dd34fcf3d24c6d584c30af9937f85b5e59606b34aaee"}) [ 2000.643286][ T3565] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 2000.774010][T10461] ===================================================== [ 2000.781220][T10461] BUG: KMSAN: kernel-infoleak-after-free in _copy_to_user+0xbc/0x100 [ 2000.789940][T10461] _copy_to_user+0xbc/0x100 [ 2000.794751][T10461] vcs_read+0x1ef7/0x23c0 [ 2000.799405][T10461] vfs_read+0x3a9/0x11b0 [ 2000.804030][T10461] ksys_read+0x21b/0x4e0 [ 2000.808433][T10461] __x64_sys_read+0x8f/0xd0 [ 2000.813483][T10461] do_syscall_64+0x3d/0xb0 [ 2000.820240][T10461] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2000.826652][T10461] [ 2000.829048][T10461] Uninit was stored to memory at: [ 2000.832566][ T3565] usb 3-1: New USB device found, idVendor=1435, idProduct=0826, bcdDevice=1c.50 [ 2000.834322][T10461] vc_uniscr_copy_line+0x340/0x570 [ 2000.844870][ T3565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.848625][T10461] vcs_read+0x102d/0x23c0 [ 2000.848741][T10461] vfs_read+0x3a9/0x11b0 [ 2000.848834][T10461] ksys_read+0x21b/0x4e0 [ 2000.848925][T10461] __x64_sys_read+0x8f/0xd0 [ 2000.849022][T10461] do_syscall_64+0x3d/0xb0 [ 2000.849102][T10461] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2000.858257][ T3565] usb 3-1: Product: syz [ 2000.861698][T10461] [ 2000.861715][T10461] Uninit was created at: [ 2000.861871][T10461] free_pcp_prepare+0x40/0x680 [ 2000.861979][T10461] free_unref_page_list+0x17c/0xd70 [ 2000.862085][T10461] release_pages+0x2b49/0x2b90 [ 2000.866963][ T3565] usb 3-1: Manufacturer: syz [ 2000.870632][T10461] free_pages_and_swap_cache+0xbd/0xd0 [ 2000.870731][T10461] tlb_flush_mmu+0x85d/0xa90 [ 2000.870844][T10461] tlb_finish_mmu+0xfc/0x250 [ 2000.870942][T10461] exit_mmap+0x1d6/0x780 [ 2000.871030][T10461] __mmput+0x147/0x510 [ 2000.871121][T10461] mmput+0x76/0x80 [ 2000.876325][ T3565] usb 3-1: SerialNumber: syz [ 2000.880142][T10461] exit_mm+0x1b8/0x360 [ 2000.880265][T10461] do_exit+0xcea/0x3e00 [ 2000.880334][T10461] do_group_exit+0x3aa/0x400 [ 2000.880410][T10461] get_signal+0x270e/0x2c50 [ 2000.880498][T10461] arch_do_signal_or_restart+0x56/0xae0 [ 2000.880647][T10461] exit_to_user_mode_loop+0xea/0x320 [ 2000.978081][T10461] exit_to_user_mode_prepare+0x16e/0x220 [ 2000.983940][T10461] syscall_exit_to_user_mode+0x23/0x40 [ 2000.989593][T10461] do_syscall_64+0x49/0xb0 [ 2000.994320][T10461] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2001.000397][T10461] [ 2001.002873][T10461] Bytes 16-511 of 4096 are uninitialized [ 2001.008590][T10461] Memory access of size 4096 starts at ffff88809d15e000 [ 2001.015699][T10461] Data copied to user address 0000000020002100 [ 2001.022007][T10461] [ 2001.024406][T10461] CPU: 1 PID: 10461 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2001.034786][T10461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2001.045057][T10461] ===================================================== [ 2001.052140][T10461] Disabling lock debugging due to kernel taint [ 2001.058372][T10461] Kernel panic - not syncing: kmsan.panic set ... [ 2001.064878][T10461] CPU: 1 PID: 10461 Comm: syz-executor.0 Tainted: G B 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2001.076560][T10461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2001.086727][T10461] Call Trace: [ 2001.090087][T10461] [ 2001.093094][T10461] dump_stack_lvl+0x1c8/0x256 [ 2001.097960][T10461] dump_stack+0x1a/0x1c [ 2001.102284][T10461] panic+0x4d3/0xc69 [ 2001.106362][T10461] kmsan_report+0x2cc/0x2d0 [ 2001.111037][T10461] ? kmsan_internal_check_memory+0x1aa/0x530 [ 2001.117172][T10461] ? kmsan_copy_to_user+0xcf/0xe0 [ 2001.122349][T10461] ? _copy_to_user+0xbc/0x100 [ 2001.127166][T10461] ? vcs_read+0x1ef7/0x23c0 [ 2001.131830][T10461] ? vfs_read+0x3a9/0x11b0 [ 2001.136393][T10461] ? ksys_read+0x21b/0x4e0 [ 2001.140955][T10461] ? __x64_sys_read+0x8f/0xd0 [ 2001.145777][T10461] ? do_syscall_64+0x3d/0xb0 [ 2001.150498][T10461] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2001.156746][T10461] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2001.162721][T10461] ? _prb_read_valid+0x1b61/0x1bb0 [ 2001.168025][T10461] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2001.173998][T10461] kmsan_internal_check_memory+0x1aa/0x530 [ 2001.180061][T10461] kmsan_copy_to_user+0xcf/0xe0 [ 2001.185055][T10461] ? should_fail_usercopy+0x2a/0x30 [ 2001.190416][T10461] _copy_to_user+0xbc/0x100 [ 2001.195067][T10461] vcs_read+0x1ef7/0x23c0 [ 2001.199606][T10461] ? vcs_lseek+0x6f0/0x6f0 [ 2001.204183][T10461] vfs_read+0x3a9/0x11b0 [ 2001.208583][T10461] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2001.214984][T10461] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2001.220955][T10461] ksys_read+0x21b/0x4e0 [ 2001.225362][T10461] __x64_sys_read+0x8f/0xd0 [ 2001.230022][T10461] do_syscall_64+0x3d/0xb0 [ 2001.234569][T10461] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2001.240645][T10461] RIP: 0033:0x7f6a17489279 [ 2001.245162][T10461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2001.264929][T10461] RSP: 002b:00007f6a163fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2001.273495][T10461] RAX: ffffffffffffffda RBX: 00007f6a1759bf80 RCX: 00007f6a17489279 [ 2001.281589][T10461] RDX: 0000000000002020 RSI: 0000000020002100 RDI: 0000000000000004 [ 2001.289686][T10461] RBP: 00007f6a174e3189 R08: 0000000000000000 R09: 0000000000000000 [ 2001.297773][T10461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2001.305848][T10461] R13: 00007f6a17acfb1f R14: 00007f6a163fe300 R15: 0000000000022000 [ 2001.313950][T10461] [ 2001.317246][T10461] Kernel Offset: disabled [ 2001.321636][T10461] Rebooting in 86400 seconds..