4] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.921800][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.084397][ T684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.092331][ T684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.108626][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.493298][ T54] Bluetooth: hci2: command 0x0419 tx timeout 12:51:40 executing program 2: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:40 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:40 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) socket$bt_hidp(0x1f, 0x3, 0x6) [ 255.153575][ T9246] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:51:41 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:41 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:41 executing program 2: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 256.900603][ T9253] not chained 50000 origins [ 256.905168][ T9253] CPU: 0 PID: 9253 Comm: syz-executor.2 Not tainted 5.10.0-rc4-syzkaller #0 [ 256.913841][ T9253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.923906][ T9253] Call Trace: [ 256.927219][ T9253] dump_stack+0x21c/0x280 [ 256.931572][ T9253] kmsan_internal_chain_origin+0x6f/0x130 [ 256.937389][ T9253] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 256.943559][ T9253] ? udpv6_recvmsg+0x26bf/0x2b00 [ 256.948515][ T9253] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 256.954681][ T9253] ? kmsan_get_metadata+0x116/0x180 [ 256.959887][ T9253] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 256.965703][ T9253] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 256.971782][ T9253] ? kmsan_get_metadata+0x116/0x180 [ 256.977077][ T9253] ? kmsan_internal_set_origin+0x85/0xc0 [ 256.983602][ T9253] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 256.989676][ T9253] ? _copy_from_user+0x1fd/0x300 [ 256.994622][ T9253] ? kmsan_get_metadata+0x116/0x180 [ 256.999834][ T9253] __msan_chain_origin+0x57/0xa0 [ 257.004794][ T9253] __get_compat_msghdr+0x6db/0x9d0 [ 257.010874][ T9253] get_compat_msghdr+0x108/0x2b0 [ 257.015830][ T9253] do_recvmmsg+0xdd1/0x22f0 [ 257.020344][ T9253] ? __irq_exit_rcu+0x7a/0x270 [ 257.025125][ T9253] ? kmsan_get_metadata+0x116/0x180 [ 257.030430][ T9253] ? kmsan_internal_set_origin+0x85/0xc0 [ 257.036339][ T9253] ? __msan_poison_alloca+0xe9/0x110 [ 257.041637][ T9253] ? __sys_recvmmsg+0xb5/0x6f0 [ 257.046424][ T9253] __sys_recvmmsg+0x519/0x6f0 [ 257.051113][ T9253] ? sysvec_apic_timer_interrupt+0x11d/0x130 [ 257.057201][ T9253] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 257.063367][ T9253] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 257.069451][ T9253] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 257.075632][ T9253] __do_fast_syscall_32+0x102/0x160 [ 257.080936][ T9253] do_fast_syscall_32+0x6a/0xc0 [ 257.085803][ T9253] do_SYSENTER_32+0x73/0x90 [ 257.090322][ T9253] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 257.096653][ T9253] RIP: 0023:0xf7f85549 [ 257.100740][ T9253] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 257.120359][ T9253] RSP: 002b:00000000f557f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 257.128779][ T9253] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 257.136744][ T9253] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 257.144705][ T9253] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.152672][ T9253] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 257.160634][ T9253] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.168598][ T9253] Uninit was stored to memory at: [ 257.173670][ T9253] kmsan_internal_chain_origin+0xad/0x130 [ 257.179385][ T9253] __msan_chain_origin+0x57/0xa0 [ 257.184316][ T9253] __get_compat_msghdr+0x6db/0x9d0 [ 257.189414][ T9253] get_compat_msghdr+0x108/0x2b0 [ 257.194344][ T9253] do_recvmmsg+0xdd1/0x22f0 [ 257.198842][ T9253] __sys_recvmmsg+0x519/0x6f0 [ 257.203513][ T9253] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 257.209570][ T9253] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 257.215725][ T9253] __do_fast_syscall_32+0x102/0x160 [ 257.220914][ T9253] do_fast_syscall_32+0x6a/0xc0 [ 257.225755][ T9253] do_SYSENTER_32+0x73/0x90 [ 257.230264][ T9253] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 257.236568][ T9253] [ 257.238895][ T9253] Uninit was stored to memory at: [ 257.244028][ T9253] kmsan_internal_chain_origin+0xad/0x130 [ 257.249931][ T9253] __msan_chain_origin+0x57/0xa0 [ 257.254886][ T9253] __get_compat_msghdr+0x6db/0x9d0 [ 257.259992][ T9253] get_compat_msghdr+0x108/0x2b0 [ 257.264931][ T9253] do_recvmmsg+0xdd1/0x22f0 [ 257.269434][ T9253] __sys_recvmmsg+0x519/0x6f0 [ 257.274104][ T9253] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 257.280164][ T9253] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 257.286312][ T9253] __do_fast_syscall_32+0x102/0x160 [ 257.291501][ T9253] do_fast_syscall_32+0x6a/0xc0 [ 257.296356][ T9253] do_SYSENTER_32+0x73/0x90 [ 257.300853][ T9253] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 257.307157][ T9253] [ 257.309469][ T9253] Uninit was stored to memory at: [ 257.314484][ T9253] kmsan_internal_chain_origin+0xad/0x130 [ 257.320190][ T9253] __msan_chain_origin+0x57/0xa0 [ 257.325125][ T9253] __get_compat_msghdr+0x6db/0x9d0 [ 257.330241][ T9253] get_compat_msghdr+0x108/0x2b0 [ 257.335173][ T9253] do_recvmmsg+0xdd1/0x22f0 [ 257.339665][ T9253] __sys_recvmmsg+0x519/0x6f0 [ 257.344335][ T9253] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 257.350391][ T9253] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 257.356545][ T9253] __do_fast_syscall_32+0x102/0x160 [ 257.361736][ T9253] do_fast_syscall_32+0x6a/0xc0 [ 257.366577][ T9253] do_SYSENTER_32+0x73/0x90 [ 257.371074][ T9253] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 257.377379][ T9253] [ 257.379691][ T9253] Uninit was stored to memory at: [ 257.384720][ T9253] kmsan_internal_chain_origin+0xad/0x130 [ 257.390443][ T9253] __msan_chain_origin+0x57/0xa0 [ 257.395396][ T9253] __get_compat_msghdr+0x6db/0x9d0 [ 257.400513][ T9253] get_compat_msghdr+0x108/0x2b0 [ 257.405446][ T9253] do_recvmmsg+0xdd1/0x22f0 [ 257.409942][ T9253] __sys_recvmmsg+0x519/0x6f0 [ 257.414610][ T9253] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 257.420669][ T9253] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 257.427033][ T9253] __do_fast_syscall_32+0x102/0x160 [ 257.432441][ T9253] do_fast_syscall_32+0x6a/0xc0 [ 257.437296][ T9253] do_SYSENTER_32+0x73/0x90 [ 257.441961][ T9253] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 257.448278][ T9253] [ 257.450594][ T9253] Uninit was stored to memory at: [ 257.455616][ T9253] kmsan_internal_chain_origin+0xad/0x130 [ 257.461440][ T9253] __msan_chain_origin+0x57/0xa0 [ 257.466381][ T9253] __get_compat_msghdr+0x6db/0x9d0 [ 257.471488][ T9253] get_compat_msghdr+0x108/0x2b0 [ 257.476421][ T9253] do_recvmmsg+0xdd1/0x22f0 [ 257.480915][ T9253] __sys_recvmmsg+0x519/0x6f0 [ 257.485598][ T9253] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 257.491657][ T9253] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 257.497806][ T9253] __do_fast_syscall_32+0x102/0x160 [ 257.503003][ T9253] do_fast_syscall_32+0x6a/0xc0 [ 257.507868][ T9253] do_SYSENTER_32+0x73/0x90 [ 257.512366][ T9253] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 257.518670][ T9253] [ 257.520990][ T9253] Uninit was stored to memory at: [ 257.526005][ T9253] kmsan_internal_chain_origin+0xad/0x130 [ 257.531710][ T9253] __msan_chain_origin+0x57/0xa0 [ 257.536641][ T9253] __get_compat_msghdr+0x6db/0x9d0 [ 257.542439][ T9253] get_compat_msghdr+0x108/0x2b0 [ 257.547367][ T9253] do_recvmmsg+0xdd1/0x22f0 [ 257.551880][ T9253] __sys_recvmmsg+0x519/0x6f0 [ 257.556568][ T9253] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 257.562647][ T9253] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 257.568792][ T9253] __do_fast_syscall_32+0x102/0x160 [ 257.573984][ T9253] do_fast_syscall_32+0x6a/0xc0 [ 257.578825][ T9253] do_SYSENTER_32+0x73/0x90 [ 257.583338][ T9253] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 257.589639][ T9253] [ 257.591948][ T9253] Uninit was stored to memory at: [ 257.596963][ T9253] kmsan_internal_chain_origin+0xad/0x130 [ 257.602718][ T9253] __msan_chain_origin+0x57/0xa0 [ 257.607657][ T9253] __get_compat_msghdr+0x6db/0x9d0 [ 257.612794][ T9253] get_compat_msghdr+0x108/0x2b0 [ 257.617753][ T9253] do_recvmmsg+0xdd1/0x22f0 [ 257.622252][ T9253] __sys_recvmmsg+0x519/0x6f0 [ 257.627358][ T9253] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 257.633569][ T9253] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 257.640160][ T9253] __do_fast_syscall_32+0x102/0x160 [ 257.645463][ T9253] do_fast_syscall_32+0x6a/0xc0 12:51:43 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 257.650313][ T9253] do_SYSENTER_32+0x73/0x90 [ 257.654818][ T9253] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 257.661165][ T9253] [ 257.663482][ T9253] Local variable ----msg_sys@do_recvmmsg created at: [ 257.670190][ T9253] do_recvmmsg+0xbf/0x22f0 [ 257.674604][ T9253] do_recvmmsg+0xbf/0x22f0 12:51:43 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:44 executing program 2: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:45 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:45 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:45 executing program 2: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 12:51:46 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:46 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:46 executing program 2: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:47 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r1}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 262.502512][ T9297] not chained 60000 origins [ 262.507074][ T9297] CPU: 0 PID: 9297 Comm: syz-executor.2 Not tainted 5.10.0-rc4-syzkaller #0 [ 262.515751][ T9297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.525818][ T9297] Call Trace: [ 262.529132][ T9297] dump_stack+0x21c/0x280 [ 262.533477][ T9297] kmsan_internal_chain_origin+0x6f/0x130 [ 262.539206][ T9297] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 262.545289][ T9297] ? udpv6_recvmsg+0x26bf/0x2b00 [ 262.550238][ T9297] ? kmsan_get_metadata+0x116/0x180 [ 262.555428][ T9297] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 262.561231][ T9297] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 262.567285][ T9297] ? kmsan_get_metadata+0x116/0x180 [ 262.572472][ T9297] ? kmsan_internal_set_origin+0x85/0xc0 [ 262.578105][ T9297] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 262.584166][ T9297] ? _copy_from_user+0x1fd/0x300 [ 262.589095][ T9297] ? kmsan_get_metadata+0x116/0x180 [ 262.594282][ T9297] __msan_chain_origin+0x57/0xa0 [ 262.599213][ T9297] __get_compat_msghdr+0x6db/0x9d0 [ 262.604323][ T9297] get_compat_msghdr+0x108/0x2b0 [ 262.609279][ T9297] do_recvmmsg+0xdd1/0x22f0 [ 262.613789][ T9297] ? sysvec_apic_timer_interrupt+0x11d/0x130 [ 262.619774][ T9297] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 262.625934][ T9297] ? virt_to_page_or_null+0x74/0xf0 [ 262.631157][ T9297] ? kmsan_get_metadata+0x116/0x180 [ 262.636369][ T9297] ? kmsan_internal_set_origin+0x85/0xc0 [ 262.642011][ T9297] ? __msan_poison_alloca+0xe9/0x110 [ 262.647308][ T9297] ? __sys_recvmmsg+0xb5/0x6f0 [ 262.653726][ T9297] __sys_recvmmsg+0x519/0x6f0 [ 262.658406][ T9297] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 262.664471][ T9297] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 262.670621][ T9297] __do_fast_syscall_32+0x102/0x160 [ 262.675819][ T9297] do_fast_syscall_32+0x6a/0xc0 [ 262.680666][ T9297] do_SYSENTER_32+0x73/0x90 [ 262.685167][ T9297] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 262.691484][ T9297] RIP: 0023:0xf7f85549 [ 262.695548][ T9297] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 262.715325][ T9297] RSP: 002b:00000000f557f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 262.723746][ T9297] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 262.731726][ T9297] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 262.739720][ T9297] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.748049][ T9297] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 262.756014][ T9297] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.763977][ T9297] Uninit was stored to memory at: [ 262.768998][ T9297] kmsan_internal_chain_origin+0xad/0x130 [ 262.774712][ T9297] __msan_chain_origin+0x57/0xa0 [ 262.779639][ T9297] __get_compat_msghdr+0x6db/0x9d0 [ 262.784739][ T9297] get_compat_msghdr+0x108/0x2b0 [ 262.789670][ T9297] do_recvmmsg+0xdd1/0x22f0 [ 262.794163][ T9297] __sys_recvmmsg+0x519/0x6f0 [ 262.798831][ T9297] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 262.804889][ T9297] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 262.811033][ T9297] __do_fast_syscall_32+0x102/0x160 [ 262.816225][ T9297] do_fast_syscall_32+0x6a/0xc0 [ 262.821165][ T9297] do_SYSENTER_32+0x73/0x90 [ 262.825660][ T9297] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 262.831964][ T9297] [ 262.834282][ T9297] Uninit was stored to memory at: [ 262.839298][ T9297] kmsan_internal_chain_origin+0xad/0x130 [ 262.845013][ T9297] __msan_chain_origin+0x57/0xa0 [ 262.849940][ T9297] __get_compat_msghdr+0x6db/0x9d0 [ 262.855040][ T9297] get_compat_msghdr+0x108/0x2b0 [ 262.859967][ T9297] do_recvmmsg+0xdd1/0x22f0 [ 262.864458][ T9297] __sys_recvmmsg+0x519/0x6f0 [ 262.869126][ T9297] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 262.875184][ T9297] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 262.881333][ T9297] __do_fast_syscall_32+0x102/0x160 [ 262.886533][ T9297] do_fast_syscall_32+0x6a/0xc0 [ 262.891473][ T9297] do_SYSENTER_32+0x73/0x90 [ 262.895973][ T9297] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 262.902277][ T9297] [ 262.904588][ T9297] Uninit was stored to memory at: [ 262.909602][ T9297] kmsan_internal_chain_origin+0xad/0x130 [ 262.915312][ T9297] __msan_chain_origin+0x57/0xa0 [ 262.920237][ T9297] __get_compat_msghdr+0x6db/0x9d0 [ 262.925339][ T9297] get_compat_msghdr+0x108/0x2b0 [ 262.930264][ T9297] do_recvmmsg+0xdd1/0x22f0 [ 262.934757][ T9297] __sys_recvmmsg+0x519/0x6f0 [ 262.939431][ T9297] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 262.945486][ T9297] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 262.951628][ T9297] __do_fast_syscall_32+0x102/0x160 [ 262.956815][ T9297] do_fast_syscall_32+0x6a/0xc0 [ 262.961654][ T9297] do_SYSENTER_32+0x73/0x90 [ 262.966171][ T9297] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 262.972485][ T9297] [ 262.974800][ T9297] Uninit was stored to memory at: [ 262.979815][ T9297] kmsan_internal_chain_origin+0xad/0x130 [ 262.985521][ T9297] __msan_chain_origin+0x57/0xa0 [ 262.990534][ T9297] __get_compat_msghdr+0x6db/0x9d0 [ 262.995652][ T9297] get_compat_msghdr+0x108/0x2b0 [ 263.000841][ T9297] do_recvmmsg+0xdd1/0x22f0 [ 263.005335][ T9297] __sys_recvmmsg+0x519/0x6f0 [ 263.010002][ T9297] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 263.016059][ T9297] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 263.022201][ T9297] __do_fast_syscall_32+0x102/0x160 [ 263.027389][ T9297] do_fast_syscall_32+0x6a/0xc0 [ 263.032241][ T9297] do_SYSENTER_32+0x73/0x90 [ 263.036743][ T9297] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 263.043050][ T9297] [ 263.045366][ T9297] Uninit was stored to memory at: [ 263.050378][ T9297] kmsan_internal_chain_origin+0xad/0x130 [ 263.056085][ T9297] __msan_chain_origin+0x57/0xa0 [ 263.061011][ T9297] __get_compat_msghdr+0x6db/0x9d0 [ 263.066632][ T9297] get_compat_msghdr+0x108/0x2b0 [ 263.071560][ T9297] do_recvmmsg+0xdd1/0x22f0 [ 263.076051][ T9297] __sys_recvmmsg+0x519/0x6f0 [ 263.080719][ T9297] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 263.086778][ T9297] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 263.092929][ T9297] __do_fast_syscall_32+0x102/0x160 [ 263.098172][ T9297] do_fast_syscall_32+0x6a/0xc0 [ 263.103012][ T9297] do_SYSENTER_32+0x73/0x90 [ 263.107507][ T9297] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 263.113823][ T9297] [ 263.116134][ T9297] Uninit was stored to memory at: [ 263.121147][ T9297] kmsan_internal_chain_origin+0xad/0x130 [ 263.126853][ T9297] __msan_chain_origin+0x57/0xa0 [ 263.131782][ T9297] __get_compat_msghdr+0x6db/0x9d0 [ 263.136895][ T9297] get_compat_msghdr+0x108/0x2b0 [ 263.141824][ T9297] do_recvmmsg+0xdd1/0x22f0 [ 263.146318][ T9297] __sys_recvmmsg+0x519/0x6f0 [ 263.150988][ T9297] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 263.157046][ T9297] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 263.163195][ T9297] __do_fast_syscall_32+0x102/0x160 [ 263.168384][ T9297] do_fast_syscall_32+0x6a/0xc0 [ 263.173230][ T9297] do_SYSENTER_32+0x73/0x90 [ 263.177725][ T9297] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 263.184039][ T9297] [ 263.186437][ T9297] Uninit was stored to memory at: [ 263.191448][ T9297] kmsan_internal_chain_origin+0xad/0x130 [ 263.197157][ T9297] __msan_chain_origin+0x57/0xa0 [ 263.202085][ T9297] __get_compat_msghdr+0x6db/0x9d0 [ 263.207187][ T9297] get_compat_msghdr+0x108/0x2b0 [ 263.212126][ T9297] do_recvmmsg+0xdd1/0x22f0 [ 263.216620][ T9297] __sys_recvmmsg+0x519/0x6f0 [ 263.221289][ T9297] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 263.227346][ T9297] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 263.233491][ T9297] __do_fast_syscall_32+0x102/0x160 [ 263.238770][ T9297] do_fast_syscall_32+0x6a/0xc0 [ 263.243612][ T9297] do_SYSENTER_32+0x73/0x90 [ 263.248976][ T9297] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c 12:51:48 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 263.255281][ T9297] [ 263.257593][ T9297] Local variable ----msg_sys@do_recvmmsg created at: [ 263.264257][ T9297] do_recvmmsg+0xbf/0x22f0 [ 263.268686][ T9297] do_recvmmsg+0xbf/0x22f0 12:51:49 executing program 2: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:49 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r1}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:50 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r1}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:50 executing program 2: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:50 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:51 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:51 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305828, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000180)='security.capability\x00', &(0x7f0000000380)=@v3={0x3000000, [{}, {0x8}]}, 0x18, 0x1) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) read$FUSE(0xffffffffffffffff, &(0x7f0000000b80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x4001, 0x0, 0x0, 0x3, 0x0, 0x704}, r0, 0x40009, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4001, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0xff, 0x1, 0x8, 0x0, 0xe6, 0x1, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}, 0x58581, 0x2, 0x0, 0x9, 0x0, 0xcd, 0x7f}, 0x0, 0x5, r1, 0x9) set_mempolicy(0x1, &(0x7f0000000140)=0x8000000010000101, 0x2) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000380)={0x0, 0x7ff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000002c0)={r4, 0x918, 0x5}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, 0x0) 12:51:52 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 267.098125][ T9335] IPVS: ftp: loaded support on port[0] = 21 12:51:52 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 267.501177][ T9336] IPVS: ftp: loaded support on port[0] = 21 12:51:53 executing program 2: syz_emit_ethernet(0xb6, &(0x7f0000000000)={@multicast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x005\x00', 0x80, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a80502"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200000300000000000481000600000c0400004001000000390bd8602f83a218abcc54e48ddc330710760859b499b1164aac92d30e07"], 0x0) syz_emit_ethernet(0x57, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8137ffff00490701ffffffffa027b979a9350001ffffffffffffffffffff00004069803f1d00ed687df3217def0acf3899100c349ea21230e2d3cf335550a7332230357955da4ee1799ba2"], &(0x7f0000000180)={0x1, 0x2, [0x72b, 0x3ff, 0x5cb, 0x6db]}) 12:51:53 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 268.362050][ T9373] not chained 70000 origins [ 268.366609][ T9373] CPU: 0 PID: 9373 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 268.375295][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.385351][ T9373] Call Trace: [ 268.388653][ T9373] dump_stack+0x21c/0x280 [ 268.392988][ T9373] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 268.399063][ T9373] kmsan_internal_chain_origin+0x6f/0x130 [ 268.404782][ T9373] ? kmsan_get_metadata+0x116/0x180 [ 268.409975][ T9373] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 268.415772][ T9373] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 268.422956][ T9373] ? idle_cpu+0x9a/0x1d0 [ 268.427188][ T9373] ? __irq_exit_rcu+0x7a/0x270 [ 268.431941][ T9373] ? __msan_get_context_state+0x9/0x20 [ 268.437391][ T9373] ? kmsan_get_metadata+0x116/0x180 [ 268.442589][ T9373] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 268.448390][ T9373] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 268.454595][ T9373] ? kmsan_get_metadata+0x116/0x180 [ 268.459803][ T9373] ? kmsan_internal_set_origin+0x85/0xc0 [ 268.465458][ T9373] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 268.471539][ T9373] ? _copy_from_user+0x1fd/0x300 [ 268.476474][ T9373] ? kmsan_get_metadata+0x116/0x180 [ 268.481670][ T9373] __msan_chain_origin+0x57/0xa0 [ 268.486610][ T9373] __get_compat_msghdr+0x6db/0x9d0 [ 268.491733][ T9373] get_compat_msghdr+0x108/0x2b0 [ 268.496673][ T9373] do_recvmmsg+0xdd1/0x22f0 [ 268.501168][ T9373] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 268.507294][ T9373] ? native_apic_mem_write+0x45/0x90 [ 268.512595][ T9373] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 268.518726][ T9373] ? sched_clock_cpu+0x5e/0x920 [ 268.523622][ T9373] ? apic_is_clustered_box+0xa0/0xa0 [ 268.528903][ T9373] ? kmsan_get_metadata+0x116/0x180 [ 268.534095][ T9373] ? kmsan_internal_set_origin+0x85/0xc0 [ 268.539729][ T9373] ? __msan_poison_alloca+0xe9/0x110 [ 268.545006][ T9373] ? __sys_recvmmsg+0xb5/0x6f0 [ 268.549761][ T9373] __sys_recvmmsg+0x519/0x6f0 [ 268.554516][ T9373] ? __msan_get_context_state+0x9/0x20 [ 268.559971][ T9373] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 268.566034][ T9373] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 268.572185][ T9373] __do_fast_syscall_32+0x102/0x160 [ 268.577376][ T9373] do_fast_syscall_32+0x6a/0xc0 [ 268.582221][ T9373] do_SYSENTER_32+0x73/0x90 [ 268.586718][ T9373] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 268.593033][ T9373] RIP: 0023:0xf7f98549 [ 268.597129][ T9373] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 268.616738][ T9373] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 268.625154][ T9373] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 268.633115][ T9373] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 268.641075][ T9373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.649038][ T9373] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 268.657000][ T9373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.664965][ T9373] Uninit was stored to memory at: [ 268.669987][ T9373] kmsan_internal_chain_origin+0xad/0x130 [ 268.675694][ T9373] __msan_chain_origin+0x57/0xa0 [ 268.680623][ T9373] __get_compat_msghdr+0x6db/0x9d0 [ 268.685723][ T9373] get_compat_msghdr+0x108/0x2b0 [ 268.690651][ T9373] do_recvmmsg+0xdd1/0x22f0 [ 268.695152][ T9373] __sys_recvmmsg+0x519/0x6f0 [ 268.699825][ T9373] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 268.705882][ T9373] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 268.712027][ T9373] __do_fast_syscall_32+0x102/0x160 [ 268.717221][ T9373] do_fast_syscall_32+0x6a/0xc0 [ 268.722063][ T9373] do_SYSENTER_32+0x73/0x90 [ 268.726560][ T9373] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 268.732865][ T9373] [ 268.735177][ T9373] Uninit was stored to memory at: [ 268.740192][ T9373] kmsan_internal_chain_origin+0xad/0x130 [ 268.745900][ T9373] __msan_chain_origin+0x57/0xa0 [ 268.750851][ T9373] __get_compat_msghdr+0x6db/0x9d0 [ 268.755950][ T9373] get_compat_msghdr+0x108/0x2b0 [ 268.760874][ T9373] do_recvmmsg+0xdd1/0x22f0 [ 268.765367][ T9373] __sys_recvmmsg+0x519/0x6f0 [ 268.770033][ T9373] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 268.776089][ T9373] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 268.782256][ T9373] __do_fast_syscall_32+0x102/0x160 [ 268.787449][ T9373] do_fast_syscall_32+0x6a/0xc0 [ 268.792291][ T9373] do_SYSENTER_32+0x73/0x90 [ 268.796788][ T9373] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 268.803095][ T9373] [ 268.805406][ T9373] Uninit was stored to memory at: [ 268.810429][ T9373] kmsan_internal_chain_origin+0xad/0x130 [ 268.816359][ T9373] __msan_chain_origin+0x57/0xa0 [ 268.821285][ T9373] __get_compat_msghdr+0x6db/0x9d0 [ 268.826384][ T9373] get_compat_msghdr+0x108/0x2b0 [ 268.831320][ T9373] do_recvmmsg+0xdd1/0x22f0 [ 268.835810][ T9373] __sys_recvmmsg+0x519/0x6f0 [ 268.840911][ T9373] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 268.846969][ T9373] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 268.853113][ T9373] __do_fast_syscall_32+0x102/0x160 [ 268.858299][ T9373] do_fast_syscall_32+0x6a/0xc0 [ 268.863138][ T9373] do_SYSENTER_32+0x73/0x90 [ 268.867632][ T9373] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 268.873943][ T9373] [ 268.876269][ T9373] Uninit was stored to memory at: [ 268.881283][ T9373] kmsan_internal_chain_origin+0xad/0x130 [ 268.886988][ T9373] __msan_chain_origin+0x57/0xa0 [ 268.891934][ T9373] __get_compat_msghdr+0x6db/0x9d0 [ 268.897054][ T9373] get_compat_msghdr+0x108/0x2b0 [ 268.901999][ T9373] do_recvmmsg+0xdd1/0x22f0 [ 268.906493][ T9373] __sys_recvmmsg+0x519/0x6f0 [ 268.911162][ T9373] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 268.917227][ T9373] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 268.923372][ T9373] __do_fast_syscall_32+0x102/0x160 [ 268.928558][ T9373] do_fast_syscall_32+0x6a/0xc0 [ 268.933401][ T9373] do_SYSENTER_32+0x73/0x90 [ 268.937911][ T9373] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 268.944231][ T9373] [ 268.946542][ T9373] Uninit was stored to memory at: [ 268.951554][ T9373] kmsan_internal_chain_origin+0xad/0x130 [ 268.957271][ T9373] __msan_chain_origin+0x57/0xa0 [ 268.962197][ T9373] __get_compat_msghdr+0x6db/0x9d0 [ 268.967310][ T9373] get_compat_msghdr+0x108/0x2b0 [ 268.972253][ T9373] do_recvmmsg+0xdd1/0x22f0 [ 268.976746][ T9373] __sys_recvmmsg+0x519/0x6f0 [ 268.981412][ T9373] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 268.987469][ T9373] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 268.993617][ T9373] __do_fast_syscall_32+0x102/0x160 [ 268.998806][ T9373] do_fast_syscall_32+0x6a/0xc0 [ 269.003662][ T9373] do_SYSENTER_32+0x73/0x90 [ 269.008159][ T9373] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 269.014461][ T9373] [ 269.016771][ T9373] Uninit was stored to memory at: [ 269.021783][ T9373] kmsan_internal_chain_origin+0xad/0x130 [ 269.027489][ T9373] __msan_chain_origin+0x57/0xa0 [ 269.032414][ T9373] __get_compat_msghdr+0x6db/0x9d0 [ 269.039106][ T9373] get_compat_msghdr+0x108/0x2b0 [ 269.044035][ T9373] do_recvmmsg+0xdd1/0x22f0 [ 269.048526][ T9373] __sys_recvmmsg+0x519/0x6f0 [ 269.053209][ T9373] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 269.059272][ T9373] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 269.065418][ T9373] __do_fast_syscall_32+0x102/0x160 [ 269.071658][ T9373] do_fast_syscall_32+0x6a/0xc0 [ 269.076499][ T9373] do_SYSENTER_32+0x73/0x90 [ 269.080994][ T9373] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 269.087311][ T9373] [ 269.089620][ T9373] Uninit was stored to memory at: [ 269.094633][ T9373] kmsan_internal_chain_origin+0xad/0x130 [ 269.100351][ T9373] __msan_chain_origin+0x57/0xa0 [ 269.105279][ T9373] __get_compat_msghdr+0x6db/0x9d0 [ 269.110380][ T9373] get_compat_msghdr+0x108/0x2b0 [ 269.115307][ T9373] do_recvmmsg+0xdd1/0x22f0 [ 269.119799][ T9373] __sys_recvmmsg+0x519/0x6f0 [ 269.124481][ T9373] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 269.130555][ T9373] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 269.136699][ T9373] __do_fast_syscall_32+0x102/0x160 [ 269.141886][ T9373] do_fast_syscall_32+0x6a/0xc0 [ 269.146726][ T9373] do_SYSENTER_32+0x73/0x90 [ 269.151224][ T9373] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 269.157525][ T9373] [ 269.159840][ T9373] Local variable ----msg_sys@do_recvmmsg created at: [ 269.166501][ T9373] do_recvmmsg+0xbf/0x22f0 [ 269.170904][ T9373] do_recvmmsg+0xbf/0x22f0 12:51:54 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:55 executing program 2: socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='shortnameed,\x00']) [ 270.676763][ T9401] FAT-fs (loop2): Unrecognized mount option "shortnameed" or missing value 12:51:57 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x4f, 0x22, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}], 0x40}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0x59) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[], 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000140)={0x67446698, 0x0, 0x2, 0x0, 0x4, "bf671c4bccb78d08f120e1730918e5a50b82be051d8bcb0306035e7f7cc0ee3e315350cc87a8eae24afdc282980457b744b8853bcb430c54844a1977e4b9a1b65fd4f49211271dba6f8b0119106e71e6fcef8c783f42efa744ccd411992a1385388afde776abb58dd0ee502843d4c30b9e234be4a7928c2570bc251060d545646b768b7dba7ee417947f01e40f6ad4b3a7480ae61623fe536f983e418727724876e37a71c754a6220e66b2ca3a7f32c74d0a8df0d06828"}, 0xc7) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee01) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee01) syz_mount_image$afs(&(0x7f0000000040)='afs\x00', &(0x7f0000000240)='./file0\x00', 0x1ff, 0x4, &(0x7f0000000500)=[{&(0x7f0000000280)="b3c8c763e11b6c7deeaae8835f91864d0bd1773a0c4216cf1043502886c7b92d7dccc47fd1765597be318cdade422744f202b6354e90fc0abc0db330ecf01ab85a8783da3b0e0042c0e7bc8bd2f7beb5aab8b413fe70f5752e62a5e9f4c9cdd612a66d4760860ea17b14a6ed376b2512180f3f545f0829bd10ef4d3dec22ffb8ec2b9fa3912935b326823d4668b9", 0x8e, 0x695}, {&(0x7f0000000340)="800ef9fa76a4e0cb8182566676ab32391d7b346f9821bbc56669ba4e477d6c87b2f49e9e7ed57298d6295937144f286034b6ae6a08953c20770473a1162cef9090ffe93d7a4f98607c386fca348f6e5084078fe3680c6b144e65dfd96e4557b06a32d5ee9b45df3893d2e1f864fed5782c263dcfcbb7bdc673408eefc5fe8466c145", 0x82, 0x4}, {&(0x7f0000000400)="7058c78571de6aa5dde40e2e66576e4aa586e41ce54d748a0a7241f22af331804405875cf88de44e1233ab595773ad05678f51653e61083b08db49bb95a9dcc27b9fcec7d7f3d0e792f29f0a29af82d8fc1ab55f75bf614d221171", 0x5b, 0x8}, {&(0x7f0000000480)="56bc387c0065687b0fd30264dc70ab93bcef5de1c3bb18a31eba71d1f2075a68fc9b908a218686125879f265ce0ab3d6a733fd541d1b6878f7f13026137caa223f8a12c078db373eb716628f134f36fe4eca2577461aa342af8319", 0x5b, 0x1}], 0x40000, &(0x7f0000000540)={[{@flock_local='flock=local'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0xf6, 0x36, 0x65, 0x63, 0x35, 0x66, 0x34], 0x2d, [0x61, 0x63, 0x30, 0x32], 0x2d, [0x33, 0x36, 0x34, 0x35], 0x2d, [0x34, 0x35, 0x63, 0x36], 0x2d, [0x64, 0x36, 0x36, 0x31, 0x32, 0x33, 0x36, 0x37]}}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@dont_measure='dont_measure'}, {@smackfshat={'smackfshat'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@uid_eq={'uid', 0x3d, r4}}, {@obj_type={'obj_type', 0x3d, '^.-\x8d)'}}, {@seclabel='seclabel'}, {@obj_user={'obj_user', 0x3d, '.'}}]}) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a44efda0658aed124b069e5aaaaaaaaaa2faaaaaaaaaa2181004a00000c0300000007ff000067792ec1b4613801c04709725a0d65874f4a649b53d6cda1be06e090b51d28ba209d13d71ef24b41b5174bb1093c5102d027a9fce744565207f848"], &(0x7f0000000080)={0x1, 0x3, [0x1a7, 0x51d, 0xca1, 0x9c4]}) 12:51:57 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:57 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:57 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x40, 0x6, 0x1c, {0x1c, 0xc, "db46d7c981723b783274df2b21fa1177594985554bcbeab1446f"}}, &(0x7f0000000040)={0x0, 0x3, 0x36, @string={0x36, 0x3, "22115b6d5519178d2790190a486dd58912e406171c55e4d673a308d41b6e58f64f253a7613d719f115d731d6bb77ed2318f5c485"}}, &(0x7f0000000140)={0x0, 0x22, 0x23, {[@main=@item_012={0x2, 0x0, 0x9, "a87b"}, @main=@item_4={0x3, 0x0, 0x8, "e66b4a27"}, @local=@item_012={0x1, 0x2, 0xa, "de"}, @main=@item_4={0x3, 0x0, 0x13f44ac30b451bc1, "5f1324ba"}, @main=@item_4={0x3, 0x0, 0x8, "543ba8f9"}, @main=@item_4={0x3, 0x0, 0x9, "5ffdc0a7"}, @global=@item_012={0x1, 0x1, 0x4, '|'}, @global=@item_4={0x3, 0x1, 0x0, "af55d91d"}, @main=@item_012={0x2, 0x0, 0xc, "d347"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6c, 0x9, 0x1, {0x22, 0x438}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000200)={0x40, 0x3, 0x54, "820d2b9597215bee6e52f2dbe28ef8e383b669af50c560ec13dfdec5958f2438cc1362ea2d0fa8b1e3aa892211fc1582f82d69b4c35066f77f310f797619df3840714b78eb1f6211d6bdae79b286a9bd97b67747"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9d}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5e}, &(0x7f0000000300)={0x20, 0x1, 0xa6, "0822674d294733e987a180cf3792b417b45c5e502dc761a6315ccf588b082a04e0c32ac59329a75ceb73585c54460c53af59a52f88ad9cb72810d72fd0a67cacadbf4846127dc959892382b235e891bed6e0e17993da4bce02f5396b888fd709a46d07c1af5585695e20442f6459f2a5152ba920a8b4a647c8e08ee8b55e02a85be39d2a6a3438c4e4fc7a46295fb4352b50bfe83fa59bc44257480132038977c87ec1919a26"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000100)) 12:51:58 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:58 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 273.035108][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 273.406446][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.417672][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.427936][ T7] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 273.437359][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.618451][ T7] usb 3-1: config 0 descriptor?? [ 274.098092][ T9426] udc-core: couldn't find an available UDC or it's busy [ 274.105389][ T9426] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:51:59 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:51:59 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 274.218774][ T7] cm6533_jd 0003:0D8C:0022.0001: No inputs registered, leaving [ 274.287798][ T7] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 274.498129][ T54] usb 3-1: USB disconnect, device number 2 [ 275.293200][ T8770] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 275.470193][ T9462] not chained 80000 origins [ 275.474749][ T9462] CPU: 1 PID: 9462 Comm: syz-executor.1 Not tainted 5.10.0-rc4-syzkaller #0 [ 275.483520][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.493625][ T9462] Call Trace: [ 275.497000][ T9462] dump_stack+0x21c/0x280 [ 275.501361][ T9462] kmsan_internal_chain_origin+0x6f/0x130 [ 275.507117][ T9462] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 275.513211][ T9462] ? udpv6_recvmsg+0x26bf/0x2b00 [ 275.518175][ T9462] ? kmsan_get_metadata+0x116/0x180 [ 275.523403][ T9462] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 275.529335][ T9462] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 275.535454][ T9462] ? kmsan_get_metadata+0x116/0x180 [ 275.540677][ T9462] ? kmsan_internal_set_origin+0x85/0xc0 [ 275.546347][ T9462] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 275.552446][ T9462] ? _copy_from_user+0x1fd/0x300 [ 275.557410][ T9462] ? kmsan_get_metadata+0x116/0x180 [ 275.562622][ T9462] __msan_chain_origin+0x57/0xa0 [ 275.567585][ T9462] __get_compat_msghdr+0x6db/0x9d0 [ 275.572722][ T9462] get_compat_msghdr+0x108/0x2b0 [ 275.577855][ T9462] do_recvmmsg+0xdd1/0x22f0 [ 275.582516][ T9462] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 275.588721][ T9462] ? sched_clock_cpu+0x5e/0x920 [ 275.593588][ T9462] ? kmsan_get_metadata+0x116/0x180 [ 275.598804][ T9462] ? kmsan_internal_set_origin+0x85/0xc0 [ 275.604457][ T9462] ? __msan_poison_alloca+0xe9/0x110 [ 275.609757][ T9462] ? __sys_recvmmsg+0xb5/0x6f0 [ 275.614531][ T9462] __sys_recvmmsg+0x519/0x6f0 [ 275.619228][ T9462] ? __msan_get_context_state+0x9/0x20 [ 275.624842][ T9462] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 275.630935][ T9462] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 275.637110][ T9462] __do_fast_syscall_32+0x102/0x160 [ 275.642332][ T9462] do_fast_syscall_32+0x6a/0xc0 [ 275.647206][ T9462] do_SYSENTER_32+0x73/0x90 [ 275.651732][ T9462] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 275.658067][ T9462] RIP: 0023:0xf7fda549 [ 275.662151][ T9462] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 275.681768][ T9462] RSP: 002b:00000000f55d45fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 275.690207][ T9462] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 275.698201][ T9462] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 275.706272][ T9462] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.714265][ T9462] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 275.722250][ T9462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.730238][ T9462] Uninit was stored to memory at: [ 275.735287][ T9462] kmsan_internal_chain_origin+0xad/0x130 [ 275.741027][ T9462] __msan_chain_origin+0x57/0xa0 [ 275.746117][ T9462] __get_compat_msghdr+0x6db/0x9d0 [ 275.751242][ T9462] get_compat_msghdr+0x108/0x2b0 [ 275.756193][ T9462] do_recvmmsg+0xdd1/0x22f0 [ 275.760710][ T9462] __sys_recvmmsg+0x519/0x6f0 [ 275.765407][ T9462] __se_compat_sys_recvmmsg_time32+0xfb/0x120 12:52:01 executing program 3: r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x22000, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = openat$vcs(0xffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2a082, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000080)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup2(r2, r3) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x2, &(0x7f0000000100)={[0xfff, 0x49]}, 0x8) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000001240)={@local, 0x0}, &(0x7f0000001280)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001340)={'syztnl2\x00', &(0x7f00000012c0)={'syztnl2\x00', r5, 0x2f, 0x80, 0x8d, 0x4, 0xdb89c05ce748a4c7, @private2={0xfc, 0x2, [], 0x1}, @remote, 0x1, 0x28, 0x7}}) sendmsg$nl_route_sched(r2, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@gettfilter={0x3c, 0x2e, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff3}, {0x1, 0xfff1}, {0xb, 0x8}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1a4}, {0x8, 0xb, 0xfff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000880}, 0x40001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001480)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) clock_gettime(0x0, &(0x7f0000006100)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005fc0)=[{{&(0x7f0000001880)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001900)=""/138, 0x8a}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/105, 0x69}, {&(0x7f0000002a40)=""/118, 0x76}], 0x4, &(0x7f0000002b00)=""/186, 0xba}, 0x5}, {{&(0x7f0000002bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002c40)=""/8, 0x8}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/169, 0xa9}, {&(0x7f0000002e40)=""/22, 0x16}, {&(0x7f0000002e80)=""/81, 0x51}, {&(0x7f0000002f00)=""/17, 0x11}], 0x6, &(0x7f0000002f80)=""/121, 0x79}, 0xfffffffb}, {{&(0x7f0000003000)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003080)=""/228, 0xe4}, {&(0x7f0000003180)=""/225, 0xe1}, {&(0x7f0000003280)=""/46, 0x2e}, {&(0x7f00000032c0)=""/205, 0xcd}, {&(0x7f00000033c0)=""/246, 0xf6}], 0x5, &(0x7f0000003500)=""/9, 0x9}, 0x8}, {{&(0x7f0000003540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000003780)=[{&(0x7f00000035c0)=""/126, 0x7e}, {&(0x7f0000003640)=""/107, 0x6b}, {&(0x7f00000036c0)=""/160, 0xa0}], 0x3, &(0x7f00000037c0)=""/215, 0xd7}, 0x80000000}, {{&(0x7f00000038c0)=@ipx, 0x80, &(0x7f0000003980)=[{&(0x7f0000003940)}], 0x1, &(0x7f00000039c0)=""/33, 0x21}, 0x7}, {{&(0x7f0000003a00), 0x80, &(0x7f0000005140)=[{&(0x7f0000003a80)=""/185, 0xb9}, {&(0x7f0000003b40)=""/155, 0x9b}, {&(0x7f0000003c00)=""/51, 0x33}, {&(0x7f0000003c40)=""/98, 0x62}, {&(0x7f0000003cc0)=""/237, 0xed}, {&(0x7f0000003dc0)=""/209, 0xd1}, {&(0x7f0000003ec0)=""/216, 0xd8}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/211, 0xd3}, {&(0x7f00000050c0)=""/65, 0x41}], 0xa, &(0x7f00000051c0)=""/40, 0x28}, 0x4}, {{0x0, 0x0, &(0x7f0000005680)=[{&(0x7f0000005200)=""/49, 0x31}, {&(0x7f0000005240)=""/93, 0x5d}, {&(0x7f00000052c0)=""/237, 0xed}, {&(0x7f00000053c0)=""/192, 0xc0}, {&(0x7f0000005480)=""/198, 0xc6}, {&(0x7f0000005580)=""/204, 0xcc}], 0x6, &(0x7f00000056c0)=""/165, 0xa5}, 0xff}, {{&(0x7f0000005780)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000005880)=[{&(0x7f0000005800)=""/121, 0x79}], 0x1}, 0x8001}, {{&(0x7f00000058c0)=@nfc, 0x80, &(0x7f0000005980)=[{&(0x7f0000005940)=""/48, 0x30}], 0x1}, 0x6}, {{&(0x7f00000059c0)=@nfc_llcp, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005a40)=""/228, 0xe4}, {&(0x7f0000005b40)=""/95, 0x5f}, {&(0x7f0000005bc0)=""/240, 0xf0}, {&(0x7f0000005cc0)=""/230, 0xe6}, {&(0x7f0000005dc0)=""/68, 0x44}, {&(0x7f0000005e40)=""/32, 0x20}], 0x6, &(0x7f0000005ec0)=""/240, 0xf0}, 0xffffffff}], 0xa, 0x0, &(0x7f0000006140)={r8, r9+60000000}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r10, 0x89f7, &(0x7f0000006200)={'syztnl2\x00', &(0x7f0000006180)={'ip6gre0\x00', r5, 0x2, 0x20, 0x2, 0x5, 0x41, @private1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10, 0x8000, 0x7, 0x37f}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000006240)={0x3, 0x2, {0x200, @usage=0x8, r7, 0x7, 0xfffffffffffffe00, 0xfffffffffffffbff, 0x7, 0x8, 0x4, @usage=0x8001, 0x4000, 0x3f, [0xffffffff, 0x0, 0x5ff6b84c, 0x2, 0x4, 0x5]}, {0xb1c0, @struct={0x7fff, 0x2}, r6, 0x2, 0x0, 0x5e1f, 0x6, 0x0, 0x87, @struct={0x6, 0xdf1}, 0x3f, 0x1ff, [0x2, 0x1ac, 0x7, 0x8, 0x5c6a, 0x8]}, {0x3, @usage=0x4, r7, 0x0, 0x7, 0x4, 0x7, 0x7, 0x47a, @struct={0x53, 0x9}, 0x6e, 0x3f, [0x1f, 0x8, 0xd988, 0x84c, 0x7, 0xa4b]}, {0xffffffff, 0x2, 0x82c}}) sync_file_range(r4, 0x1, 0x9, 0x0) r11 = openat$null(0xffffff9c, &(0x7f0000006640)='/dev/null\x00', 0x400000, 0x0) sendfile(r10, r11, &(0x7f0000006680)=0x3, 0x7ff) [ 275.771486][ T9462] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 275.777654][ T9462] __do_fast_syscall_32+0x102/0x160 [ 275.782888][ T9462] do_fast_syscall_32+0x6a/0xc0 [ 275.787762][ T9462] do_SYSENTER_32+0x73/0x90 [ 275.792401][ T9462] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 275.798735][ T9462] [ 275.801072][ T9462] Uninit was stored to memory at: [ 275.806117][ T9462] kmsan_internal_chain_origin+0xad/0x130 [ 275.811848][ T9462] __msan_chain_origin+0x57/0xa0 [ 275.816798][ T9462] __get_compat_msghdr+0x6db/0x9d0 [ 275.821924][ T9462] get_compat_msghdr+0x108/0x2b0 [ 275.826880][ T9462] do_recvmmsg+0xdd1/0x22f0 [ 275.831398][ T9462] __sys_recvmmsg+0x519/0x6f0 [ 275.836097][ T9462] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 275.842191][ T9462] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 275.848362][ T9462] __do_fast_syscall_32+0x102/0x160 [ 275.853581][ T9462] do_fast_syscall_32+0x6a/0xc0 [ 275.858447][ T9462] do_SYSENTER_32+0x73/0x90 [ 275.862966][ T9462] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 275.869285][ T9462] [ 275.871616][ T9462] Uninit was stored to memory at: [ 275.876655][ T9462] kmsan_internal_chain_origin+0xad/0x130 [ 275.882395][ T9462] __msan_chain_origin+0x57/0xa0 [ 275.887345][ T9462] __get_compat_msghdr+0x6db/0x9d0 [ 275.892468][ T9462] get_compat_msghdr+0x108/0x2b0 [ 275.897423][ T9462] do_recvmmsg+0xdd1/0x22f0 [ 275.901946][ T9462] __sys_recvmmsg+0x519/0x6f0 [ 275.906638][ T9462] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 275.912763][ T9462] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 275.918957][ T9462] __do_fast_syscall_32+0x102/0x160 [ 275.924176][ T9462] do_fast_syscall_32+0x6a/0xc0 [ 275.929042][ T9462] do_SYSENTER_32+0x73/0x90 [ 275.933564][ T9462] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 275.939912][ T9462] [ 275.942245][ T9462] Uninit was stored to memory at: [ 275.947310][ T9462] kmsan_internal_chain_origin+0xad/0x130 [ 275.953044][ T9462] __msan_chain_origin+0x57/0xa0 [ 275.957994][ T9462] __get_compat_msghdr+0x6db/0x9d0 [ 275.963130][ T9462] get_compat_msghdr+0x108/0x2b0 [ 275.968082][ T9462] do_recvmmsg+0xdd1/0x22f0 [ 275.972599][ T9462] __sys_recvmmsg+0x519/0x6f0 [ 275.977293][ T9462] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 275.983374][ T9462] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 275.989541][ T9462] __do_fast_syscall_32+0x102/0x160 [ 275.994755][ T9462] do_fast_syscall_32+0x6a/0xc0 [ 276.000054][ T9462] do_SYSENTER_32+0x73/0x90 [ 276.005099][ T9462] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 276.011426][ T9462] [ 276.013754][ T9462] Uninit was stored to memory at: [ 276.018801][ T9462] kmsan_internal_chain_origin+0xad/0x130 [ 276.024533][ T9462] __msan_chain_origin+0x57/0xa0 [ 276.029486][ T9462] __get_compat_msghdr+0x6db/0x9d0 [ 276.034608][ T9462] get_compat_msghdr+0x108/0x2b0 [ 276.039563][ T9462] do_recvmmsg+0xdd1/0x22f0 [ 276.044177][ T9462] __sys_recvmmsg+0x519/0x6f0 [ 276.048914][ T9462] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 276.055004][ T9462] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 276.061173][ T9462] __do_fast_syscall_32+0x102/0x160 [ 276.066389][ T9462] do_fast_syscall_32+0x6a/0xc0 [ 276.071253][ T9462] do_SYSENTER_32+0x73/0x90 [ 276.075772][ T9462] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 276.082086][ T9462] [ 276.084429][ T9462] Uninit was stored to memory at: [ 276.089465][ T9462] kmsan_internal_chain_origin+0xad/0x130 [ 276.095199][ T9462] __msan_chain_origin+0x57/0xa0 [ 276.100143][ T9462] __get_compat_msghdr+0x6db/0x9d0 [ 276.105263][ T9462] get_compat_msghdr+0x108/0x2b0 [ 276.110208][ T9462] do_recvmmsg+0xdd1/0x22f0 [ 276.114810][ T9462] __sys_recvmmsg+0x519/0x6f0 [ 276.119601][ T9462] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 276.125688][ T9462] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 276.131861][ T9462] __do_fast_syscall_32+0x102/0x160 [ 276.137078][ T9462] do_fast_syscall_32+0x6a/0xc0 [ 276.141942][ T9462] do_SYSENTER_32+0x73/0x90 [ 276.146467][ T9462] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 276.152816][ T9462] [ 276.155146][ T9462] Uninit was stored to memory at: [ 276.160178][ T9462] kmsan_internal_chain_origin+0xad/0x130 [ 276.165906][ T9462] __msan_chain_origin+0x57/0xa0 [ 276.170857][ T9462] __get_compat_msghdr+0x6db/0x9d0 [ 276.175981][ T9462] get_compat_msghdr+0x108/0x2b0 [ 276.180950][ T9462] do_recvmmsg+0xdd1/0x22f0 [ 276.185464][ T9462] __sys_recvmmsg+0x519/0x6f0 [ 276.190151][ T9462] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 276.196248][ T9462] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 276.202421][ T9462] __do_fast_syscall_32+0x102/0x160 [ 276.207644][ T9462] do_fast_syscall_32+0x6a/0xc0 [ 276.212511][ T9462] do_SYSENTER_32+0x73/0x90 [ 276.217029][ T9462] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c 12:52:01 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x40, 0x6, 0x1c, {0x1c, 0xc, "db46d7c981723b783274df2b21fa1177594985554bcbeab1446f"}}, &(0x7f0000000040)={0x0, 0x3, 0x36, @string={0x36, 0x3, "22115b6d5519178d2790190a486dd58912e406171c55e4d673a308d41b6e58f64f253a7613d719f115d731d6bb77ed2318f5c485"}}, &(0x7f0000000140)={0x0, 0x22, 0x23, {[@main=@item_012={0x2, 0x0, 0x9, "a87b"}, @main=@item_4={0x3, 0x0, 0x8, "e66b4a27"}, @local=@item_012={0x1, 0x2, 0xa, "de"}, @main=@item_4={0x3, 0x0, 0x13f44ac30b451bc1, "5f1324ba"}, @main=@item_4={0x3, 0x0, 0x8, "543ba8f9"}, @main=@item_4={0x3, 0x0, 0x9, "5ffdc0a7"}, @global=@item_012={0x1, 0x1, 0x4, '|'}, @global=@item_4={0x3, 0x1, 0x0, "af55d91d"}, @main=@item_012={0x2, 0x0, 0xc, "d347"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6c, 0x9, 0x1, {0x22, 0x438}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000200)={0x40, 0x3, 0x54, "820d2b9597215bee6e52f2dbe28ef8e383b669af50c560ec13dfdec5958f2438cc1362ea2d0fa8b1e3aa892211fc1582f82d69b4c35066f77f310f797619df3840714b78eb1f6211d6bdae79b286a9bd97b67747"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9d}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5e}, &(0x7f0000000300)={0x20, 0x1, 0xa6, "0822674d294733e987a180cf3792b417b45c5e502dc761a6315ccf588b082a04e0c32ac59329a75ceb73585c54460c53af59a52f88ad9cb72810d72fd0a67cacadbf4846127dc959892382b235e891bed6e0e17993da4bce02f5396b888fd709a46d07c1af5585695e20442f6459f2a5152ba920a8b4a647c8e08ee8b55e02a85be39d2a6a3438c4e4fc7a46295fb4352b50bfe83fa59bc44257480132038977c87ec1919a26"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000100)) [ 276.223347][ T9462] [ 276.225677][ T9462] Local variable ----msg_sys@do_recvmmsg created at: [ 276.232364][ T9462] do_recvmmsg+0xbf/0x22f0 [ 276.236801][ T9462] do_recvmmsg+0xbf/0x22f0 12:52:01 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r1}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 276.756718][ T8770] usb 3-1: device not accepting address 3, error -71 12:52:02 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 277.464863][ T8770] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 277.865168][ T8770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.876498][ T8770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.886637][ T8770] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 277.895875][ T8770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.102229][ T8770] usb 3-1: config 0 descriptor?? 12:52:03 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:03 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r1}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 278.561320][ T9475] udc-core: couldn't find an available UDC or it's busy [ 278.568670][ T9475] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 278.636414][ T8770] cm6533_jd 0003:0D8C:0022.0002: No inputs registered, leaving [ 278.706691][ T8770] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 279.036520][ T54] usb 3-1: USB disconnect, device number 4 12:52:05 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:05 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r1}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x40, 0x6, 0x1c, {0x1c, 0xc, "db46d7c981723b783274df2b21fa1177594985554bcbeab1446f"}}, &(0x7f0000000040)={0x0, 0x3, 0x36, @string={0x36, 0x3, "22115b6d5519178d2790190a486dd58912e406171c55e4d673a308d41b6e58f64f253a7613d719f115d731d6bb77ed2318f5c485"}}, &(0x7f0000000140)={0x0, 0x22, 0x23, {[@main=@item_012={0x2, 0x0, 0x9, "a87b"}, @main=@item_4={0x3, 0x0, 0x8, "e66b4a27"}, @local=@item_012={0x1, 0x2, 0xa, "de"}, @main=@item_4={0x3, 0x0, 0x13f44ac30b451bc1, "5f1324ba"}, @main=@item_4={0x3, 0x0, 0x8, "543ba8f9"}, @main=@item_4={0x3, 0x0, 0x9, "5ffdc0a7"}, @global=@item_012={0x1, 0x1, 0x4, '|'}, @global=@item_4={0x3, 0x1, 0x0, "af55d91d"}, @main=@item_012={0x2, 0x0, 0xc, "d347"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6c, 0x9, 0x1, {0x22, 0x438}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000200)={0x40, 0x3, 0x54, "820d2b9597215bee6e52f2dbe28ef8e383b669af50c560ec13dfdec5958f2438cc1362ea2d0fa8b1e3aa892211fc1582f82d69b4c35066f77f310f797619df3840714b78eb1f6211d6bdae79b286a9bd97b67747"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9d}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5e}, &(0x7f0000000300)={0x20, 0x1, 0xa6, "0822674d294733e987a180cf3792b417b45c5e502dc761a6315ccf588b082a04e0c32ac59329a75ceb73585c54460c53af59a52f88ad9cb72810d72fd0a67cacadbf4846127dc959892382b235e891bed6e0e17993da4bce02f5396b888fd709a46d07c1af5585695e20442f6459f2a5152ba920a8b4a647c8e08ee8b55e02a85be39d2a6a3438c4e4fc7a46295fb4352b50bfe83fa59bc44257480132038977c87ec1919a26"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000100)) [ 279.888104][ T9490] IPVS: ftp: loaded support on port[0] = 21 [ 280.734673][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd 12:52:06 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 281.100716][ T9533] not chained 90000 origins [ 281.105271][ T9533] CPU: 0 PID: 9533 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 281.113950][ T9533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.123982][ T9490] chnl_net:caif_netlink_parms(): no params data found [ 281.124049][ T9533] Call Trace: [ 281.134099][ T9533] dump_stack+0x21c/0x280 [ 281.138517][ T9533] kmsan_internal_chain_origin+0x6f/0x130 [ 281.144286][ T9533] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 281.150366][ T9533] ? udpv6_recvmsg+0x26bf/0x2b00 [ 281.155334][ T9533] ? kmsan_get_metadata+0x116/0x180 [ 281.160547][ T9533] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 281.166715][ T9533] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 281.172809][ T9533] ? kmsan_get_metadata+0x116/0x180 [ 281.178053][ T9533] ? kmsan_internal_set_origin+0x85/0xc0 [ 281.183790][ T9533] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 281.189870][ T9533] ? _copy_from_user+0x1fd/0x300 [ 281.194987][ T9533] ? kmsan_get_metadata+0x116/0x180 [ 281.200194][ T9533] __msan_chain_origin+0x57/0xa0 [ 281.205147][ T9533] __get_compat_msghdr+0x6db/0x9d0 [ 281.210272][ T9533] get_compat_msghdr+0x108/0x2b0 [ 281.215228][ T9533] do_recvmmsg+0xdd1/0x22f0 [ 281.220002][ T9533] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 281.226085][ T9533] ? native_apic_mem_write+0x45/0x90 [ 281.231386][ T9533] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 281.237471][ T9533] ? sched_clock_cpu+0x5e/0x920 [ 281.242368][ T9533] ? apic_is_clustered_box+0xa0/0xa0 [ 281.247671][ T9533] ? kmsan_get_metadata+0x116/0x180 [ 281.252879][ T9533] ? kmsan_internal_set_origin+0x85/0xc0 [ 281.258523][ T9533] ? __msan_poison_alloca+0xe9/0x110 [ 281.263823][ T9533] ? __sys_recvmmsg+0xb5/0x6f0 [ 281.268609][ T9533] __sys_recvmmsg+0x519/0x6f0 [ 281.273297][ T9533] ? __msan_get_context_state+0x9/0x20 [ 281.278797][ T9533] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 281.284883][ T9533] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 281.291135][ T9533] __do_fast_syscall_32+0x102/0x160 [ 281.296350][ T9533] do_fast_syscall_32+0x6a/0xc0 [ 281.301228][ T9533] do_SYSENTER_32+0x73/0x90 [ 281.305750][ T9533] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 281.312086][ T9533] RIP: 0023:0xf7f98549 [ 281.316248][ T9533] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 281.335951][ T9533] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 281.344366][ T9533] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 281.352853][ T9533] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 281.360815][ T9533] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.368777][ T9533] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 281.376739][ T9533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.384711][ T9533] Uninit was stored to memory at: [ 281.389733][ T9533] kmsan_internal_chain_origin+0xad/0x130 [ 281.395463][ T9533] __msan_chain_origin+0x57/0xa0 [ 281.400580][ T9533] __get_compat_msghdr+0x6db/0x9d0 [ 281.405704][ T9533] get_compat_msghdr+0x108/0x2b0 [ 281.410643][ T9533] do_recvmmsg+0xdd1/0x22f0 [ 281.415142][ T9533] __sys_recvmmsg+0x519/0x6f0 [ 281.419814][ T9533] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 281.425871][ T9533] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 281.432068][ T9533] __do_fast_syscall_32+0x102/0x160 [ 281.437292][ T9533] do_fast_syscall_32+0x6a/0xc0 [ 281.442144][ T9533] do_SYSENTER_32+0x73/0x90 [ 281.446658][ T9533] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 281.452970][ T9533] [ 281.455371][ T9533] Uninit was stored to memory at: [ 281.460390][ T9533] kmsan_internal_chain_origin+0xad/0x130 [ 281.466096][ T9533] __msan_chain_origin+0x57/0xa0 [ 281.471022][ T9533] __get_compat_msghdr+0x6db/0x9d0 [ 281.476121][ T9533] get_compat_msghdr+0x108/0x2b0 [ 281.481051][ T9533] do_recvmmsg+0xdd1/0x22f0 [ 281.485640][ T9533] __sys_recvmmsg+0x519/0x6f0 [ 281.490327][ T9533] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 281.496385][ T9533] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 281.503062][ T9533] __do_fast_syscall_32+0x102/0x160 [ 281.508252][ T9533] do_fast_syscall_32+0x6a/0xc0 [ 281.513093][ T9533] do_SYSENTER_32+0x73/0x90 [ 281.517587][ T9533] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 281.524500][ T9533] [ 281.526814][ T9533] Uninit was stored to memory at: [ 281.531828][ T9533] kmsan_internal_chain_origin+0xad/0x130 [ 281.537543][ T9533] __msan_chain_origin+0x57/0xa0 [ 281.542470][ T9533] __get_compat_msghdr+0x6db/0x9d0 [ 281.547570][ T9533] get_compat_msghdr+0x108/0x2b0 [ 281.552499][ T9533] do_recvmmsg+0xdd1/0x22f0 [ 281.557000][ T9533] __sys_recvmmsg+0x519/0x6f0 [ 281.561669][ T9533] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 281.567726][ T9533] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 281.573872][ T9533] __do_fast_syscall_32+0x102/0x160 [ 281.579683][ T9533] do_fast_syscall_32+0x6a/0xc0 [ 281.584522][ T9533] do_SYSENTER_32+0x73/0x90 [ 281.589018][ T9533] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 281.595328][ T9533] [ 281.597650][ T9533] Uninit was stored to memory at: [ 281.602694][ T9533] kmsan_internal_chain_origin+0xad/0x130 [ 281.608422][ T9533] __msan_chain_origin+0x57/0xa0 [ 281.613365][ T9533] __get_compat_msghdr+0x6db/0x9d0 [ 281.618481][ T9533] get_compat_msghdr+0x108/0x2b0 [ 281.623410][ T9533] do_recvmmsg+0xdd1/0x22f0 [ 281.627904][ T9533] __sys_recvmmsg+0x519/0x6f0 [ 281.632592][ T9533] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 281.638658][ T9533] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 281.644818][ T9533] __do_fast_syscall_32+0x102/0x160 [ 281.650028][ T9533] do_fast_syscall_32+0x6a/0xc0 [ 281.654874][ T9533] do_SYSENTER_32+0x73/0x90 [ 281.659371][ T9533] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 281.665680][ T9533] [ 281.668004][ T9533] Uninit was stored to memory at: [ 281.673027][ T9533] kmsan_internal_chain_origin+0xad/0x130 [ 281.678731][ T9533] __msan_chain_origin+0x57/0xa0 [ 281.683671][ T9533] __get_compat_msghdr+0x6db/0x9d0 [ 281.688773][ T9533] get_compat_msghdr+0x108/0x2b0 [ 281.693700][ T9533] do_recvmmsg+0xdd1/0x22f0 [ 281.698213][ T9533] __sys_recvmmsg+0x519/0x6f0 [ 281.702891][ T9533] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 281.708955][ T9533] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 281.715098][ T9533] __do_fast_syscall_32+0x102/0x160 [ 281.720284][ T9533] do_fast_syscall_32+0x6a/0xc0 [ 281.725122][ T9533] do_SYSENTER_32+0x73/0x90 [ 281.729616][ T9533] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 281.735918][ T9533] [ 281.739200][ T9533] Uninit was stored to memory at: [ 281.744224][ T9533] kmsan_internal_chain_origin+0xad/0x130 [ 281.749928][ T9533] __msan_chain_origin+0x57/0xa0 [ 281.754855][ T9533] __get_compat_msghdr+0x6db/0x9d0 [ 281.760213][ T9533] get_compat_msghdr+0x108/0x2b0 [ 281.765229][ T9533] do_recvmmsg+0xdd1/0x22f0 [ 281.769721][ T9533] __sys_recvmmsg+0x519/0x6f0 [ 281.774387][ T9533] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 281.780443][ T9533] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 281.786592][ T9533] __do_fast_syscall_32+0x102/0x160 [ 281.791803][ T9533] do_fast_syscall_32+0x6a/0xc0 [ 281.796660][ T9533] do_SYSENTER_32+0x73/0x90 [ 281.801242][ T9533] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 281.807549][ T9533] [ 281.809863][ T9533] Uninit was stored to memory at: [ 281.814877][ T9533] kmsan_internal_chain_origin+0xad/0x130 [ 281.820668][ T9533] __msan_chain_origin+0x57/0xa0 [ 281.825597][ T9533] __get_compat_msghdr+0x6db/0x9d0 [ 281.830696][ T9533] get_compat_msghdr+0x108/0x2b0 [ 281.837359][ T9533] do_recvmmsg+0xdd1/0x22f0 [ 281.841850][ T9533] __sys_recvmmsg+0x519/0x6f0 [ 281.846602][ T9533] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 281.852657][ T9533] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 281.858801][ T9533] __do_fast_syscall_32+0x102/0x160 [ 281.863990][ T9533] do_fast_syscall_32+0x6a/0xc0 [ 281.868829][ T9533] do_SYSENTER_32+0x73/0x90 [ 281.873325][ T9533] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 281.879628][ T9533] [ 281.881940][ T9533] Local variable ----msg_sys@do_recvmmsg created at: [ 281.888604][ T9533] do_recvmmsg+0xbf/0x22f0 [ 281.893008][ T9533] do_recvmmsg+0xbf/0x22f0 [ 281.940984][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.952187][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.962954][ T7] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 281.972192][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.996082][ T7] usb 3-1: config 0 descriptor?? [ 282.282028][ T9490] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.289513][ T9490] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.299278][ T9490] device bridge_slave_0 entered promiscuous mode [ 282.459841][ T9549] udc-core: couldn't find an available UDC or it's busy [ 282.467776][ T9549] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 282.472977][ T9490] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.482935][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.492750][ T9490] device bridge_slave_1 entered promiscuous mode [ 282.579675][ T7] cm6533_jd 0003:0D8C:0022.0003: No inputs registered, leaving [ 282.686501][ T7] cm6533_jd 0003:0D8C:0022.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 282.937150][ T9490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 12:52:08 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 283.027761][ T9490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.193188][ T9490] team0: Port device team_slave_0 added [ 283.250389][ T9490] team0: Port device team_slave_1 added [ 283.446621][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.453873][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.480060][ T9490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 12:52:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x40, 0x6, 0x1c, {0x1c, 0xc, "db46d7c981723b783274df2b21fa1177594985554bcbeab1446f"}}, &(0x7f0000000040)={0x0, 0x3, 0x36, @string={0x36, 0x3, "22115b6d5519178d2790190a486dd58912e406171c55e4d673a308d41b6e58f64f253a7613d719f115d731d6bb77ed2318f5c485"}}, &(0x7f0000000140)={0x0, 0x22, 0x23, {[@main=@item_012={0x2, 0x0, 0x9, "a87b"}, @main=@item_4={0x3, 0x0, 0x8, "e66b4a27"}, @local=@item_012={0x1, 0x2, 0xa, "de"}, @main=@item_4={0x3, 0x0, 0x13f44ac30b451bc1, "5f1324ba"}, @main=@item_4={0x3, 0x0, 0x8, "543ba8f9"}, @main=@item_4={0x3, 0x0, 0x9, "5ffdc0a7"}, @global=@item_012={0x1, 0x1, 0x4, '|'}, @global=@item_4={0x3, 0x1, 0x0, "af55d91d"}, @main=@item_012={0x2, 0x0, 0xc, "d347"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6c, 0x9, 0x1, {0x22, 0x438}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000200)={0x40, 0x3, 0x54, "820d2b9597215bee6e52f2dbe28ef8e383b669af50c560ec13dfdec5958f2438cc1362ea2d0fa8b1e3aa892211fc1582f82d69b4c35066f77f310f797619df3840714b78eb1f6211d6bdae79b286a9bd97b67747"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9d}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5e}, &(0x7f0000000300)={0x20, 0x1, 0xa6, "0822674d294733e987a180cf3792b417b45c5e502dc761a6315ccf588b082a04e0c32ac59329a75ceb73585c54460c53af59a52f88ad9cb72810d72fd0a67cacadbf4846127dc959892382b235e891bed6e0e17993da4bce02f5396b888fd709a46d07c1af5585695e20442f6459f2a5152ba920a8b4a647c8e08ee8b55e02a85be39d2a6a3438c4e4fc7a46295fb4352b50bfe83fa59bc44257480132038977c87ec1919a26"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000100)) [ 283.654026][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.661140][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.687525][ T9490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.916121][ T9490] device hsr_slave_0 entered promiscuous mode [ 283.949288][ T9490] device hsr_slave_1 entered promiscuous mode [ 283.958615][ T9490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.967274][ T9490] Cannot create hsr debugfs directory [ 284.363538][ T9490] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 284.414471][ T9490] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 284.471512][ T9490] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 284.537358][ T9490] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 284.625194][ T17] Bluetooth: hci3: command 0x0409 tx timeout [ 284.651713][ T3483] usb 3-1: USB disconnect, device number 5 [ 285.073912][ T3483] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 285.435312][ T9490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.464450][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.476098][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.486433][ T3483] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 285.495902][ T3483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.616822][ T3483] usb 3-1: config 0 descriptor?? [ 285.682496][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.691913][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.762397][ T9490] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.872248][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.882241][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.892723][ T4726] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.899991][ T4726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.028052][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.037918][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.048045][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.057461][ T4726] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.064827][ T4726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.074058][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.085603][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.118878][ T9714] udc-core: couldn't find an available UDC or it's busy [ 286.126371][ T9714] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 286.144174][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.155890][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.196866][ T3483] cm6533_jd 0003:0D8C:0022.0004: No inputs registered, leaving [ 286.242455][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.252748][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.263056][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.268997][ T3483] cm6533_jd 0003:0D8C:0022.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 286.273206][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.293660][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.350953][ T9490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.368411][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.491503][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.501529][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.518952][ T3483] usb 3-1: USB disconnect, device number 6 [ 286.616432][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.624461][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.654345][ T54] Bluetooth: hci3: command 0x041b tx timeout [ 286.698897][ T9490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.880769][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.891046][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.986766][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.997567][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 287.036547][ T9490] device veth0_vlan entered promiscuous mode [ 287.053822][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 287.063418][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 287.128367][ T9490] device veth1_vlan entered promiscuous mode [ 287.214975][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 287.225235][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 287.234978][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.245095][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.318352][ T9490] device veth0_macvtap entered promiscuous mode [ 287.373984][ T9490] device veth1_macvtap entered promiscuous mode [ 287.490413][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 287.501559][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.512323][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 287.522936][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.532994][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 287.543608][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.557574][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.573242][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.582714][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.593054][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.603286][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.651797][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 287.662934][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.673082][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 287.683743][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.693846][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 287.704513][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.718556][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.743478][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.753743][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.804725][ T9490] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.815000][ T9490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.824117][ T9490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.833150][ T9490] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.241761][ T824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.249889][ T824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.261183][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.387617][ T271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.395713][ T271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.411055][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 288.736102][ T3483] Bluetooth: hci3: command 0x040f tx timeout 12:52:14 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:14 executing program 3: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:14 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x40, 0x6, 0x1c, {0x1c, 0xc, "db46d7c981723b783274df2b21fa1177594985554bcbeab1446f"}}, &(0x7f0000000040)={0x0, 0x3, 0x36, @string={0x36, 0x3, "22115b6d5519178d2790190a486dd58912e406171c55e4d673a308d41b6e58f64f253a7613d719f115d731d6bb77ed2318f5c485"}}, &(0x7f0000000140)={0x0, 0x22, 0x23, {[@main=@item_012={0x2, 0x0, 0x9, "a87b"}, @main=@item_4={0x3, 0x0, 0x8, "e66b4a27"}, @local=@item_012={0x1, 0x2, 0xa, "de"}, @main=@item_4={0x3, 0x0, 0x13f44ac30b451bc1, "5f1324ba"}, @main=@item_4={0x3, 0x0, 0x8, "543ba8f9"}, @main=@item_4={0x3, 0x0, 0x9, "5ffdc0a7"}, @global=@item_012={0x1, 0x1, 0x4, '|'}, @global=@item_4={0x3, 0x1, 0x0, "af55d91d"}, @main=@item_012={0x2, 0x0, 0xc, "d347"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6c, 0x9, 0x1, {0x22, 0x438}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000200)={0x40, 0x3, 0x54, "820d2b9597215bee6e52f2dbe28ef8e383b669af50c560ec13dfdec5958f2438cc1362ea2d0fa8b1e3aa892211fc1582f82d69b4c35066f77f310f797619df3840714b78eb1f6211d6bdae79b286a9bd97b67747"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9d}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5e}, &(0x7f0000000300)={0x20, 0x1, 0xa6, "0822674d294733e987a180cf3792b417b45c5e502dc761a6315ccf588b082a04e0c32ac59329a75ceb73585c54460c53af59a52f88ad9cb72810d72fd0a67cacadbf4846127dc959892382b235e891bed6e0e17993da4bce02f5396b888fd709a46d07c1af5585695e20442f6459f2a5152ba920a8b4a647c8e08ee8b55e02a85be39d2a6a3438c4e4fc7a46295fb4352b50bfe83fa59bc44257480132038977c87ec1919a26"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000100)) [ 289.233205][ T4726] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 289.423536][ T9838] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 289.613484][ T4726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.624877][ T4726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.636169][ T4726] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 289.645829][ T4726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.863180][ T4726] usb 3-1: config 0 descriptor?? 12:52:15 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:15 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 290.338833][ T9828] udc-core: couldn't find an available UDC or it's busy [ 290.346433][ T9828] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 290.496345][ T4726] cm6533_jd 0003:0D8C:0022.0005: No inputs registered, leaving [ 290.579245][ T4726] cm6533_jd 0003:0D8C:0022.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 290.742466][ T4726] usb 3-1: USB disconnect, device number 7 [ 290.823849][ T3483] Bluetooth: hci3: command 0x0419 tx timeout 12:52:16 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:16 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r1}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x40, 0x6, 0x1c, {0x1c, 0xc, "db46d7c981723b783274df2b21fa1177594985554bcbeab1446f"}}, &(0x7f0000000040)={0x0, 0x3, 0x36, @string={0x36, 0x3, "22115b6d5519178d2790190a486dd58912e406171c55e4d673a308d41b6e58f64f253a7613d719f115d731d6bb77ed2318f5c485"}}, &(0x7f0000000140)={0x0, 0x22, 0x23, {[@main=@item_012={0x2, 0x0, 0x9, "a87b"}, @main=@item_4={0x3, 0x0, 0x8, "e66b4a27"}, @local=@item_012={0x1, 0x2, 0xa, "de"}, @main=@item_4={0x3, 0x0, 0x13f44ac30b451bc1, "5f1324ba"}, @main=@item_4={0x3, 0x0, 0x8, "543ba8f9"}, @main=@item_4={0x3, 0x0, 0x9, "5ffdc0a7"}, @global=@item_012={0x1, 0x1, 0x4, '|'}, @global=@item_4={0x3, 0x1, 0x0, "af55d91d"}, @main=@item_012={0x2, 0x0, 0xc, "d347"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6c, 0x9, 0x1, {0x22, 0x438}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000200)={0x40, 0x3, 0x54, "820d2b9597215bee6e52f2dbe28ef8e383b669af50c560ec13dfdec5958f2438cc1362ea2d0fa8b1e3aa892211fc1582f82d69b4c35066f77f310f797619df3840714b78eb1f6211d6bdae79b286a9bd97b67747"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9d}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5e}, &(0x7f0000000300)={0x20, 0x1, 0xa6, "0822674d294733e987a180cf3792b417b45c5e502dc761a6315ccf588b082a04e0c32ac59329a75ceb73585c54460c53af59a52f88ad9cb72810d72fd0a67cacadbf4846127dc959892382b235e891bed6e0e17993da4bce02f5396b888fd709a46d07c1af5585695e20442f6459f2a5152ba920a8b4a647c8e08ee8b55e02a85be39d2a6a3438c4e4fc7a46295fb4352b50bfe83fa59bc44257480132038977c87ec1919a26"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000100)) 12:52:17 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r1}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 292.135873][ T5] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 292.515049][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.526486][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.537280][ T5] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 292.546769][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:52:18 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 292.714198][ T5] usb 3-1: config 0 descriptor?? 12:52:18 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r1}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 293.177195][ T9876] udc-core: couldn't find an available UDC or it's busy [ 293.184672][ T9876] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 293.268478][ T5] cm6533_jd 0003:0D8C:0022.0006: No inputs registered, leaving [ 293.381213][ T5] cm6533_jd 0003:0D8C:0022.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 293.520423][ T5] usb 3-1: USB disconnect, device number 8 12:52:19 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:19 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x40, 0x6, 0x1c, {0x1c, 0xc, "db46d7c981723b783274df2b21fa1177594985554bcbeab1446f"}}, &(0x7f0000000040)={0x0, 0x3, 0x36, @string={0x36, 0x3, "22115b6d5519178d2790190a486dd58912e406171c55e4d673a308d41b6e58f64f253a7613d719f115d731d6bb77ed2318f5c485"}}, &(0x7f0000000140)={0x0, 0x22, 0x23, {[@main=@item_012={0x2, 0x0, 0x9, "a87b"}, @main=@item_4={0x3, 0x0, 0x8, "e66b4a27"}, @local=@item_012={0x1, 0x2, 0xa, "de"}, @main=@item_4={0x3, 0x0, 0x13f44ac30b451bc1, "5f1324ba"}, @main=@item_4={0x3, 0x0, 0x8, "543ba8f9"}, @main=@item_4={0x3, 0x0, 0x9, "5ffdc0a7"}, @global=@item_012={0x1, 0x1, 0x4, '|'}, @global=@item_4={0x3, 0x1, 0x0, "af55d91d"}, @main=@item_012={0x2, 0x0, 0xc, "d347"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6c, 0x9, 0x1, {0x22, 0x438}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000200)={0x40, 0x3, 0x54, "820d2b9597215bee6e52f2dbe28ef8e383b669af50c560ec13dfdec5958f2438cc1362ea2d0fa8b1e3aa892211fc1582f82d69b4c35066f77f310f797619df3840714b78eb1f6211d6bdae79b286a9bd97b67747"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9d}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5e}, &(0x7f0000000300)={0x20, 0x1, 0xa6, "0822674d294733e987a180cf3792b417b45c5e502dc761a6315ccf588b082a04e0c32ac59329a75ceb73585c54460c53af59a52f88ad9cb72810d72fd0a67cacadbf4846127dc959892382b235e891bed6e0e17993da4bce02f5396b888fd709a46d07c1af5585695e20442f6459f2a5152ba920a8b4a647c8e08ee8b55e02a85be39d2a6a3438c4e4fc7a46295fb4352b50bfe83fa59bc44257480132038977c87ec1919a26"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000100)) [ 294.804350][ T9912] not chained 100000 origins [ 294.809166][ T9912] CPU: 0 PID: 9912 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 294.818091][ T9912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.828214][ T9912] Call Trace: [ 294.831543][ T9912] dump_stack+0x21c/0x280 [ 294.835925][ T9912] kmsan_internal_chain_origin+0x6f/0x130 [ 294.841684][ T9912] ? kmsan_get_metadata+0x116/0x180 [ 294.847003][ T9912] ? kmsan_get_metadata+0x116/0x180 [ 294.852319][ T9912] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 294.858330][ T9912] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 294.864433][ T9912] ? idle_cpu+0x9a/0x1d0 [ 294.868705][ T9912] ? __irq_exit_rcu+0x7a/0x270 [ 294.873495][ T9912] ? __msan_get_context_state+0x9/0x20 [ 294.879122][ T9912] ? irqentry_exit+0x12/0x50 [ 294.883892][ T9912] ? sysvec_apic_timer_interrupt+0x11d/0x130 [ 294.889917][ T9912] ? kmsan_get_metadata+0x116/0x180 [ 294.895391][ T9912] ? kmsan_internal_set_origin+0x85/0xc0 [ 294.901149][ T9912] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 294.907247][ T9912] ? _copy_from_user+0x1fd/0x300 [ 294.912214][ T9912] ? kmsan_get_metadata+0x116/0x180 [ 294.917453][ T9912] __msan_chain_origin+0x57/0xa0 [ 294.922427][ T9912] __get_compat_msghdr+0x6db/0x9d0 [ 294.927625][ T9912] get_compat_msghdr+0x108/0x2b0 [ 294.932595][ T9912] do_recvmmsg+0xdd1/0x22f0 [ 294.937229][ T9912] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 294.943653][ T9912] ? __msan_metadata_ptr_for_load_8+0x11/0x20 [ 294.949757][ T9912] ? kmsan_get_metadata+0x116/0x180 [ 294.955096][ T9912] ? kmsan_get_metadata+0x116/0x180 [ 294.960870][ T9912] ? kmsan_internal_set_origin+0x85/0xc0 [ 294.966678][ T9912] ? __msan_poison_alloca+0xe9/0x110 [ 294.971995][ T9912] ? __sys_recvmmsg+0xb5/0x6f0 [ 294.976804][ T9912] __sys_recvmmsg+0x519/0x6f0 [ 294.981513][ T9912] ? sysvec_apic_timer_interrupt+0x11d/0x130 [ 294.990357][ T9912] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 294.997016][ T9912] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 295.003134][ T9912] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 295.009451][ T9912] __do_fast_syscall_32+0x102/0x160 [ 295.014693][ T9912] do_fast_syscall_32+0x6a/0xc0 [ 295.019578][ T9912] do_SYSENTER_32+0x73/0x90 [ 295.024118][ T9912] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 295.030467][ T9912] RIP: 0023:0xf7f98549 [ 295.034677][ T9912] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 295.054336][ T9912] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 295.062807][ T9912] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020008880 [ 295.071000][ T9912] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 295.079125][ T9912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.087299][ T9912] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 295.095440][ T9912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.103438][ T9912] Uninit was stored to memory at: [ 295.108548][ T9912] kmsan_internal_chain_origin+0xad/0x130 [ 295.114423][ T9912] __msan_chain_origin+0x57/0xa0 [ 295.120604][ T9912] __get_compat_msghdr+0x6db/0x9d0 [ 295.125879][ T9912] get_compat_msghdr+0x108/0x2b0 [ 295.130852][ T9912] do_recvmmsg+0xdd1/0x22f0 [ 295.135723][ T9912] __sys_recvmmsg+0x519/0x6f0 [ 295.140427][ T9912] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 295.146627][ T9912] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 295.152889][ T9912] __do_fast_syscall_32+0x102/0x160 [ 295.158094][ T9912] do_fast_syscall_32+0x6a/0xc0 [ 295.162946][ T9912] do_SYSENTER_32+0x73/0x90 [ 295.167463][ T9912] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 295.173784][ T9912] [ 295.176182][ T9912] Uninit was stored to memory at: [ 295.181265][ T9912] kmsan_internal_chain_origin+0xad/0x130 [ 295.186984][ T9912] __msan_chain_origin+0x57/0xa0 [ 295.191976][ T9912] __get_compat_msghdr+0x6db/0x9d0 [ 295.197096][ T9912] get_compat_msghdr+0x108/0x2b0 [ 295.202063][ T9912] do_recvmmsg+0xdd1/0x22f0 [ 295.206655][ T9912] __sys_recvmmsg+0x519/0x6f0 [ 295.211333][ T9912] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 295.217451][ T9912] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 295.223610][ T9912] __do_fast_syscall_32+0x102/0x160 [ 295.228818][ T9912] do_fast_syscall_32+0x6a/0xc0 [ 295.233686][ T9912] do_SYSENTER_32+0x73/0x90 [ 295.238194][ T9912] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 295.244507][ T9912] [ 295.246824][ T9912] Uninit was stored to memory at: [ 295.251849][ T9912] kmsan_internal_chain_origin+0xad/0x130 [ 295.257562][ T9912] __msan_chain_origin+0x57/0xa0 [ 295.262506][ T9912] __get_compat_msghdr+0x6db/0x9d0 [ 295.267617][ T9912] get_compat_msghdr+0x108/0x2b0 [ 295.272550][ T9912] do_recvmmsg+0xdd1/0x22f0 [ 295.277041][ T9912] __sys_recvmmsg+0x519/0x6f0 [ 295.281710][ T9912] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 295.287941][ T9912] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 295.294091][ T9912] __do_fast_syscall_32+0x102/0x160 [ 295.299278][ T9912] do_fast_syscall_32+0x6a/0xc0 [ 295.304122][ T9912] do_SYSENTER_32+0x73/0x90 [ 295.308618][ T9912] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 295.314919][ T9912] [ 295.317231][ T9912] Uninit was stored to memory at: [ 295.322243][ T9912] kmsan_internal_chain_origin+0xad/0x130 [ 295.327950][ T9912] __msan_chain_origin+0x57/0xa0 [ 295.332879][ T9912] __get_compat_msghdr+0x6db/0x9d0 [ 295.337983][ T9912] get_compat_msghdr+0x108/0x2b0 [ 295.342937][ T9912] do_recvmmsg+0xdd1/0x22f0 [ 295.347431][ T9912] __sys_recvmmsg+0x519/0x6f0 [ 295.352099][ T9912] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 295.358157][ T9912] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 295.364303][ T9912] __do_fast_syscall_32+0x102/0x160 [ 295.369497][ T9912] do_fast_syscall_32+0x6a/0xc0 [ 295.374336][ T9912] do_SYSENTER_32+0x73/0x90 [ 295.379024][ T9912] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 295.385344][ T9912] [ 295.387669][ T9912] Uninit was stored to memory at: [ 295.392960][ T9912] kmsan_internal_chain_origin+0xad/0x130 [ 295.398689][ T9912] __msan_chain_origin+0x57/0xa0 [ 295.403629][ T9912] __get_compat_msghdr+0x6db/0x9d0 [ 295.408754][ T9912] get_compat_msghdr+0x108/0x2b0 [ 295.413692][ T9912] do_recvmmsg+0xdd1/0x22f0 [ 295.418192][ T9912] __sys_recvmmsg+0x519/0x6f0 [ 295.422885][ T9912] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 295.428950][ T9912] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 295.435117][ T9912] __do_fast_syscall_32+0x102/0x160 [ 295.440306][ T9912] do_fast_syscall_32+0x6a/0xc0 [ 295.445175][ T9912] do_SYSENTER_32+0x73/0x90 [ 295.449811][ T9912] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 295.456126][ T9912] [ 295.458441][ T9912] Uninit was stored to memory at: [ 295.463584][ T9912] kmsan_internal_chain_origin+0xad/0x130 [ 295.469311][ T9912] __msan_chain_origin+0x57/0xa0 [ 295.474241][ T9912] __get_compat_msghdr+0x6db/0x9d0 [ 295.479343][ T9912] get_compat_msghdr+0x108/0x2b0 [ 295.484294][ T9912] do_recvmmsg+0xdd1/0x22f0 [ 295.488802][ T9912] __sys_recvmmsg+0x519/0x6f0 [ 295.493469][ T9912] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 295.499697][ T9912] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 295.505858][ T9912] __do_fast_syscall_32+0x102/0x160 [ 295.511047][ T9912] do_fast_syscall_32+0x6a/0xc0 [ 295.515887][ T9912] do_SYSENTER_32+0x73/0x90 [ 295.520386][ T9912] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 295.526786][ T9912] [ 295.529097][ T9912] Uninit was stored to memory at: [ 295.534111][ T9912] kmsan_internal_chain_origin+0xad/0x130 [ 295.539819][ T9912] __msan_chain_origin+0x57/0xa0 [ 295.544747][ T9912] __get_compat_msghdr+0x6db/0x9d0 [ 295.549845][ T9912] get_compat_msghdr+0x108/0x2b0 [ 295.554804][ T9912] do_recvmmsg+0xdd1/0x22f0 [ 295.559345][ T9912] __sys_recvmmsg+0x519/0x6f0 [ 295.564026][ T9912] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 295.570094][ T9912] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 295.576239][ T9912] __do_fast_syscall_32+0x102/0x160 [ 295.581429][ T9912] do_fast_syscall_32+0x6a/0xc0 [ 295.586270][ T9912] do_SYSENTER_32+0x73/0x90 [ 295.590764][ T9912] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 295.597065][ T9912] [ 295.599377][ T9912] Local variable ----msg_sys@do_recvmmsg created at: [ 295.606041][ T9912] do_recvmmsg+0xbf/0x22f0 [ 295.610448][ T9912] do_recvmmsg+0xbf/0x22f0 12:52:21 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 295.802993][ T3483] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 296.165978][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.177164][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.187297][ T3483] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 296.197609][ T3483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.355001][ T3483] usb 3-1: config 0 descriptor?? [ 296.826218][ T9917] udc-core: couldn't find an available UDC or it's busy [ 296.833658][ T9917] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 296.908094][ T3483] cm6533_jd 0003:0D8C:0022.0007: No inputs registered, leaving [ 296.984437][ T3483] cm6533_jd 0003:0D8C:0022.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 12:52:22 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 297.123990][ T3483] usb 3-1: USB disconnect, device number 9 12:52:23 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x40, 0x6, 0x1c, {0x1c, 0xc, "db46d7c981723b783274df2b21fa1177594985554bcbeab1446f"}}, &(0x7f0000000040)={0x0, 0x3, 0x36, @string={0x36, 0x3, "22115b6d5519178d2790190a486dd58912e406171c55e4d673a308d41b6e58f64f253a7613d719f115d731d6bb77ed2318f5c485"}}, &(0x7f0000000140)={0x0, 0x22, 0x23, {[@main=@item_012={0x2, 0x0, 0x9, "a87b"}, @main=@item_4={0x3, 0x0, 0x8, "e66b4a27"}, @local=@item_012={0x1, 0x2, 0xa, "de"}, @main=@item_4={0x3, 0x0, 0x13f44ac30b451bc1, "5f1324ba"}, @main=@item_4={0x3, 0x0, 0x8, "543ba8f9"}, @main=@item_4={0x3, 0x0, 0x9, "5ffdc0a7"}, @global=@item_012={0x1, 0x1, 0x4, '|'}, @global=@item_4={0x3, 0x1, 0x0, "af55d91d"}, @main=@item_012={0x2, 0x0, 0xc, "d347"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6c, 0x9, 0x1, {0x22, 0x438}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000200)={0x40, 0x3, 0x54, "820d2b9597215bee6e52f2dbe28ef8e383b669af50c560ec13dfdec5958f2438cc1362ea2d0fa8b1e3aa892211fc1582f82d69b4c35066f77f310f797619df3840714b78eb1f6211d6bdae79b286a9bd97b67747"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9d}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5e}, &(0x7f0000000300)={0x20, 0x1, 0xa6, "0822674d294733e987a180cf3792b417b45c5e502dc761a6315ccf588b082a04e0c32ac59329a75ceb73585c54460c53af59a52f88ad9cb72810d72fd0a67cacadbf4846127dc959892382b235e891bed6e0e17993da4bce02f5396b888fd709a46d07c1af5585695e20442f6459f2a5152ba920a8b4a647c8e08ee8b55e02a85be39d2a6a3438c4e4fc7a46295fb4352b50bfe83fa59bc44257480132038977c87ec1919a26"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}}) r2 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000100)) 12:52:23 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:24 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x86}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0x45) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0xd8, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1}}, @ptr={0xd, 0x0, 0x0, 0x2, 0x4}, @func={0x1, 0x0, 0x0, 0xc, 0x4}, @enum={0x2, 0x6, 0x0, 0x6, 0x4, [{0x4, 0x7fff}, {0x3, 0x1000}, {0x2}, {0xe, 0x7f}, {0x9, 0x3}, {0xb, 0xffffff00}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x20}}, @func={0xc, 0x0, 0x0, 0xc, 0x1}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x7fff, [{0xb, 0x0, 0x6}, {0x5, 0x4, 0x100}, {0x3, 0x1, 0x35}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x7}}]}, {0x0, [0x61, 0x5f]}}, &(0x7f00000004c0)=""/128, 0xf4, 0x80, 0x1}, 0x20) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000200)='bpf_lsm_path_mkdir\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, 0x0, 0xfffffffd}, [@exit, @exit, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb9}, @exit, @generic={0xff, 0x7, 0x7, 0x9, 0x3}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0xbaf, 0x0, 0x0, 0x40f00, 0x10, [], r0, 0x4, r1, 0x8, &(0x7f0000000540)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xd, 0x4, 0x1}, 0x10, r2}, 0x74) [ 298.593110][ T3483] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 298.983090][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.994627][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.005349][ T3483] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 299.014659][ T3483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.197056][ T3483] usb 3-1: config 0 descriptor?? [ 299.657873][ T9951] udc-core: couldn't find an available UDC or it's busy [ 299.665200][ T9951] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:52:25 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x86}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0x45) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0xd8, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1}}, @ptr={0xd, 0x0, 0x0, 0x2, 0x4}, @func={0x1, 0x0, 0x0, 0xc, 0x4}, @enum={0x2, 0x6, 0x0, 0x6, 0x4, [{0x4, 0x7fff}, {0x3, 0x1000}, {0x2}, {0xe, 0x7f}, {0x9, 0x3}, {0xb, 0xffffff00}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x20}}, @func={0xc, 0x0, 0x0, 0xc, 0x1}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x7fff, [{0xb, 0x0, 0x6}, {0x5, 0x4, 0x100}, {0x3, 0x1, 0x35}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x7}}]}, {0x0, [0x61, 0x5f]}}, &(0x7f00000004c0)=""/128, 0xf4, 0x80, 0x1}, 0x20) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000200)='bpf_lsm_path_mkdir\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, 0x0, 0xfffffffd}, [@exit, @exit, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb9}, @exit, @generic={0xff, 0x7, 0x7, 0x9, 0x3}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0xbaf, 0x0, 0x0, 0x40f00, 0x10, [], r0, 0x4, r1, 0x8, &(0x7f0000000540)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xd, 0x4, 0x1}, 0x10, r2}, 0x74) [ 299.843772][ T3483] usbhid 3-1:0.0: can't add hid device: -71 [ 299.850176][ T3483] usbhid: probe of 3-1:0.0 failed with error -71 12:52:25 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 299.909460][ T3483] usb 3-1: USB disconnect, device number 10 12:52:26 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x40, 0x6, 0x1c, {0x1c, 0xc, "db46d7c981723b783274df2b21fa1177594985554bcbeab1446f"}}, &(0x7f0000000040)={0x0, 0x3, 0x36, @string={0x36, 0x3, "22115b6d5519178d2790190a486dd58912e406171c55e4d673a308d41b6e58f64f253a7613d719f115d731d6bb77ed2318f5c485"}}, &(0x7f0000000140)={0x0, 0x22, 0x23, {[@main=@item_012={0x2, 0x0, 0x9, "a87b"}, @main=@item_4={0x3, 0x0, 0x8, "e66b4a27"}, @local=@item_012={0x1, 0x2, 0xa, "de"}, @main=@item_4={0x3, 0x0, 0x13f44ac30b451bc1, "5f1324ba"}, @main=@item_4={0x3, 0x0, 0x8, "543ba8f9"}, @main=@item_4={0x3, 0x0, 0x9, "5ffdc0a7"}, @global=@item_012={0x1, 0x1, 0x4, '|'}, @global=@item_4={0x3, 0x1, 0x0, "af55d91d"}, @main=@item_012={0x2, 0x0, 0xc, "d347"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6c, 0x9, 0x1, {0x22, 0x438}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000200)={0x40, 0x3, 0x54, "820d2b9597215bee6e52f2dbe28ef8e383b669af50c560ec13dfdec5958f2438cc1362ea2d0fa8b1e3aa892211fc1582f82d69b4c35066f77f310f797619df3840714b78eb1f6211d6bdae79b286a9bd97b67747"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9d}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5e}, &(0x7f0000000300)={0x20, 0x1, 0xa6, "0822674d294733e987a180cf3792b417b45c5e502dc761a6315ccf588b082a04e0c32ac59329a75ceb73585c54460c53af59a52f88ad9cb72810d72fd0a67cacadbf4846127dc959892382b235e891bed6e0e17993da4bce02f5396b888fd709a46d07c1af5585695e20442f6459f2a5152ba920a8b4a647c8e08ee8b55e02a85be39d2a6a3438c4e4fc7a46295fb4352b50bfe83fa59bc44257480132038977c87ec1919a26"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}}) r2 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000100)) [ 301.057456][ T9979] not chained 110000 origins [ 301.062107][ T9979] CPU: 0 PID: 9979 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 301.070784][ T9979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.080874][ T9979] Call Trace: [ 301.084187][ T9979] dump_stack+0x21c/0x280 [ 301.088535][ T9979] kmsan_internal_chain_origin+0x6f/0x130 [ 301.094376][ T9979] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 301.100554][ T9979] ? udpv6_recvmsg+0x26bf/0x2b00 [ 301.105516][ T9979] ? kmsan_get_metadata+0x116/0x180 [ 301.110733][ T9979] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 301.116557][ T9979] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 301.122638][ T9979] ? kmsan_get_metadata+0x116/0x180 [ 301.127864][ T9979] ? kmsan_internal_set_origin+0x85/0xc0 [ 301.133530][ T9979] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 301.139622][ T9979] ? _copy_from_user+0x1fd/0x300 [ 301.144586][ T9979] ? kmsan_get_metadata+0x116/0x180 [ 301.149844][ T9979] __msan_chain_origin+0x57/0xa0 [ 301.154818][ T9979] __get_compat_msghdr+0x6db/0x9d0 [ 301.159983][ T9979] get_compat_msghdr+0x108/0x2b0 [ 301.164950][ T9979] do_recvmmsg+0xdd1/0x22f0 [ 301.169481][ T9979] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 301.175582][ T9979] ? __irq_exit_rcu+0x7a/0x270 [ 301.180374][ T9979] ? kmsan_get_metadata+0x116/0x180 [ 301.185592][ T9979] ? kmsan_internal_set_origin+0x85/0xc0 [ 301.191265][ T9979] ? __msan_poison_alloca+0xe9/0x110 [ 301.196577][ T9979] ? __sys_recvmmsg+0xb5/0x6f0 [ 301.201370][ T9979] __sys_recvmmsg+0x519/0x6f0 [ 301.206074][ T9979] ? __msan_get_context_state+0x9/0x20 [ 301.211558][ T9979] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 301.217655][ T9979] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 301.223840][ T9979] __do_fast_syscall_32+0x102/0x160 [ 301.229106][ T9979] do_fast_syscall_32+0x6a/0xc0 [ 301.233988][ T9979] do_SYSENTER_32+0x73/0x90 [ 301.238714][ T9979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 301.245068][ T9979] RIP: 0023:0xf7f98549 [ 301.249160][ T9979] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 301.268780][ T9979] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 301.277223][ T9979] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 301.285214][ T9979] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 301.293204][ T9979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.301193][ T9979] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 301.309198][ T9979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.317361][ T9979] Uninit was stored to memory at: [ 301.322886][ T9979] kmsan_internal_chain_origin+0xad/0x130 [ 301.328720][ T9979] __msan_chain_origin+0x57/0xa0 [ 301.333680][ T9979] __get_compat_msghdr+0x6db/0x9d0 [ 301.338902][ T9979] get_compat_msghdr+0x108/0x2b0 [ 301.343946][ T9979] do_recvmmsg+0xdd1/0x22f0 [ 301.348574][ T9979] __sys_recvmmsg+0x519/0x6f0 [ 301.354930][ T9979] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 301.361995][ T9979] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 301.368185][ T9979] __do_fast_syscall_32+0x102/0x160 [ 301.373752][ T9979] do_fast_syscall_32+0x6a/0xc0 [ 301.378649][ T9979] do_SYSENTER_32+0x73/0x90 [ 301.383199][ T9979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 301.389527][ T9979] [ 301.391866][ T9979] Uninit was stored to memory at: [ 301.397258][ T9979] kmsan_internal_chain_origin+0xad/0x130 [ 301.403613][ T9979] __msan_chain_origin+0x57/0xa0 [ 301.408665][ T9979] __get_compat_msghdr+0x6db/0x9d0 [ 301.413806][ T9979] get_compat_msghdr+0x108/0x2b0 [ 301.419645][ T9979] do_recvmmsg+0xdd1/0x22f0 [ 301.424544][ T9979] __sys_recvmmsg+0x519/0x6f0 [ 301.429769][ T9979] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 301.435876][ T9979] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 301.442145][ T9979] __do_fast_syscall_32+0x102/0x160 [ 301.447600][ T9979] do_fast_syscall_32+0x6a/0xc0 [ 301.452485][ T9979] do_SYSENTER_32+0x73/0x90 [ 301.457017][ T9979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 301.463637][ T9979] [ 301.465982][ T9979] Uninit was stored to memory at: [ 301.471025][ T9979] kmsan_internal_chain_origin+0xad/0x130 [ 301.476796][ T9979] __msan_chain_origin+0x57/0xa0 [ 301.481762][ T9979] __get_compat_msghdr+0x6db/0x9d0 [ 301.486890][ T9979] get_compat_msghdr+0x108/0x2b0 [ 301.491842][ T9979] do_recvmmsg+0xdd1/0x22f0 [ 301.496386][ T9979] __sys_recvmmsg+0x519/0x6f0 [ 301.501079][ T9979] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 301.507161][ T9979] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 301.513337][ T9979] __do_fast_syscall_32+0x102/0x160 [ 301.518550][ T9979] do_fast_syscall_32+0x6a/0xc0 [ 301.523418][ T9979] do_SYSENTER_32+0x73/0x90 [ 301.527936][ T9979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 301.534255][ T9979] [ 301.536587][ T9979] Uninit was stored to memory at: [ 301.541635][ T9979] kmsan_internal_chain_origin+0xad/0x130 [ 301.547368][ T9979] __msan_chain_origin+0x57/0xa0 [ 301.552320][ T9979] __get_compat_msghdr+0x6db/0x9d0 [ 301.557442][ T9979] get_compat_msghdr+0x108/0x2b0 [ 301.562388][ T9979] do_recvmmsg+0xdd1/0x22f0 [ 301.566909][ T9979] __sys_recvmmsg+0x519/0x6f0 [ 301.571608][ T9979] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 301.577690][ T9979] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 301.583859][ T9979] __do_fast_syscall_32+0x102/0x160 [ 301.589083][ T9979] do_fast_syscall_32+0x6a/0xc0 [ 301.593948][ T9979] do_SYSENTER_32+0x73/0x90 [ 301.598500][ T9979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 301.604824][ T9979] [ 301.607236][ T9979] Uninit was stored to memory at: [ 301.612472][ T9979] kmsan_internal_chain_origin+0xad/0x130 [ 301.618292][ T9979] __msan_chain_origin+0x57/0xa0 [ 301.623248][ T9979] __get_compat_msghdr+0x6db/0x9d0 [ 301.628404][ T9979] get_compat_msghdr+0x108/0x2b0 [ 301.633381][ T9979] do_recvmmsg+0xdd1/0x22f0 [ 301.637938][ T9979] __sys_recvmmsg+0x519/0x6f0 [ 301.642630][ T9979] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 301.648827][ T9979] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 301.655004][ T9979] __do_fast_syscall_32+0x102/0x160 [ 301.660251][ T9979] do_fast_syscall_32+0x6a/0xc0 [ 301.665119][ T9979] do_SYSENTER_32+0x73/0x90 [ 301.669651][ T9979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 301.676223][ T9979] [ 301.678562][ T9979] Uninit was stored to memory at: [ 301.684051][ T9979] kmsan_internal_chain_origin+0xad/0x130 [ 301.689787][ T9979] __msan_chain_origin+0x57/0xa0 [ 301.694754][ T9979] __get_compat_msghdr+0x6db/0x9d0 [ 301.699887][ T9979] get_compat_msghdr+0x108/0x2b0 [ 301.704839][ T9979] do_recvmmsg+0xdd1/0x22f0 [ 301.709357][ T9979] __sys_recvmmsg+0x519/0x6f0 [ 301.714049][ T9979] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 301.720137][ T9979] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 301.726317][ T9979] __do_fast_syscall_32+0x102/0x160 [ 301.731552][ T9979] do_fast_syscall_32+0x6a/0xc0 [ 301.736420][ T9979] do_SYSENTER_32+0x73/0x90 [ 301.740944][ T9979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 301.748044][ T9979] [ 301.750378][ T9979] Uninit was stored to memory at: [ 301.755415][ T9979] kmsan_internal_chain_origin+0xad/0x130 [ 301.761146][ T9979] __msan_chain_origin+0x57/0xa0 [ 301.766183][ T9979] __get_compat_msghdr+0x6db/0x9d0 [ 301.771319][ T9979] get_compat_msghdr+0x108/0x2b0 [ 301.776303][ T9979] do_recvmmsg+0xdd1/0x22f0 [ 301.780838][ T9979] __sys_recvmmsg+0x519/0x6f0 [ 301.785533][ T9979] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 301.791641][ T9979] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 301.797823][ T9979] __do_fast_syscall_32+0x102/0x160 [ 301.803049][ T9979] do_fast_syscall_32+0x6a/0xc0 12:52:27 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 301.807918][ T9979] do_SYSENTER_32+0x73/0x90 [ 301.812433][ T9979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 301.819298][ T9979] [ 301.821634][ T9979] Local variable ----msg_sys@do_recvmmsg created at: [ 301.828325][ T9979] do_recvmmsg+0xbf/0x22f0 [ 301.832756][ T9979] do_recvmmsg+0xbf/0x22f0 [ 302.023648][ T3483] usb 3-1: new high-speed USB device number 11 using dummy_hcd 12:52:27 executing program 3: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:27 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 302.415869][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.427154][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.438362][ T3483] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 302.447926][ T3483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.793526][ T3483] usb 3-1: config 0 descriptor?? 12:52:28 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r1}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 303.248366][ T9985] udc-core: couldn't find an available UDC or it's busy [ 303.256710][ T9985] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 303.463051][ T3483] usbhid 3-1:0.0: can't add hid device: -71 [ 303.469444][ T3483] usbhid: probe of 3-1:0.0 failed with error -71 [ 303.531717][ T3483] usb 3-1: USB disconnect, device number 11 12:52:29 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x40, 0x6, 0x1c, {0x1c, 0xc, "db46d7c981723b783274df2b21fa1177594985554bcbeab1446f"}}, &(0x7f0000000040)={0x0, 0x3, 0x36, @string={0x36, 0x3, "22115b6d5519178d2790190a486dd58912e406171c55e4d673a308d41b6e58f64f253a7613d719f115d731d6bb77ed2318f5c485"}}, &(0x7f0000000140)={0x0, 0x22, 0x23, {[@main=@item_012={0x2, 0x0, 0x9, "a87b"}, @main=@item_4={0x3, 0x0, 0x8, "e66b4a27"}, @local=@item_012={0x1, 0x2, 0xa, "de"}, @main=@item_4={0x3, 0x0, 0x13f44ac30b451bc1, "5f1324ba"}, @main=@item_4={0x3, 0x0, 0x8, "543ba8f9"}, @main=@item_4={0x3, 0x0, 0x9, "5ffdc0a7"}, @global=@item_012={0x1, 0x1, 0x4, '|'}, @global=@item_4={0x3, 0x1, 0x0, "af55d91d"}, @main=@item_012={0x2, 0x0, 0xc, "d347"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6c, 0x9, 0x1, {0x22, 0x438}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000200)={0x40, 0x3, 0x54, "820d2b9597215bee6e52f2dbe28ef8e383b669af50c560ec13dfdec5958f2438cc1362ea2d0fa8b1e3aa892211fc1582f82d69b4c35066f77f310f797619df3840714b78eb1f6211d6bdae79b286a9bd97b67747"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9d}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5e}, &(0x7f0000000300)={0x20, 0x1, 0xa6, "0822674d294733e987a180cf3792b417b45c5e502dc761a6315ccf588b082a04e0c32ac59329a75ceb73585c54460c53af59a52f88ad9cb72810d72fd0a67cacadbf4846127dc959892382b235e891bed6e0e17993da4bce02f5396b888fd709a46d07c1af5585695e20442f6459f2a5152ba920a8b4a647c8e08ee8b55e02a85be39d2a6a3438c4e4fc7a46295fb4352b50bfe83fa59bc44257480132038977c87ec1919a26"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000100)) 12:52:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x40, 0x6, 0x1c, {0x1c, 0xc, "db46d7c981723b783274df2b21fa1177594985554bcbeab1446f"}}, &(0x7f0000000040)={0x0, 0x3, 0x36, @string={0x36, 0x3, "22115b6d5519178d2790190a486dd58912e406171c55e4d673a308d41b6e58f64f253a7613d719f115d731d6bb77ed2318f5c485"}}, &(0x7f0000000140)={0x0, 0x22, 0x23, {[@main=@item_012={0x2, 0x0, 0x9, "a87b"}, @main=@item_4={0x3, 0x0, 0x8, "e66b4a27"}, @local=@item_012={0x1, 0x2, 0xa, "de"}, @main=@item_4={0x3, 0x0, 0x13f44ac30b451bc1, "5f1324ba"}, @main=@item_4={0x3, 0x0, 0x8, "543ba8f9"}, @main=@item_4={0x3, 0x0, 0x9, "5ffdc0a7"}, @global=@item_012={0x1, 0x1, 0x4, '|'}, @global=@item_4={0x3, 0x1, 0x0, "af55d91d"}, @main=@item_012={0x2, 0x0, 0xc, "d347"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6c, 0x9, 0x1, {0x22, 0x438}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000200)={0x40, 0x3, 0x54, "820d2b9597215bee6e52f2dbe28ef8e383b669af50c560ec13dfdec5958f2438cc1362ea2d0fa8b1e3aa892211fc1582f82d69b4c35066f77f310f797619df3840714b78eb1f6211d6bdae79b286a9bd97b67747"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9d}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5e}, &(0x7f0000000300)={0x20, 0x1, 0xa6, "0822674d294733e987a180cf3792b417b45c5e502dc761a6315ccf588b082a04e0c32ac59329a75ceb73585c54460c53af59a52f88ad9cb72810d72fd0a67cacadbf4846127dc959892382b235e891bed6e0e17993da4bce02f5396b888fd709a46d07c1af5585695e20442f6459f2a5152ba920a8b4a647c8e08ee8b55e02a85be39d2a6a3438c4e4fc7a46295fb4352b50bfe83fa59bc44257480132038977c87ec1919a26"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}}) r2 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000100)) [ 304.894972][ T9764] usb 4-1: new high-speed USB device number 2 using dummy_hcd 12:52:30 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r1}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 305.284549][ T9764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.296219][ T9764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.307446][ T9764] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 305.317209][ T9764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:52:30 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 305.334129][ T3483] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 305.413296][ T9764] usb 4-1: config 0 descriptor?? [ 305.604211][T10028] not chained 120000 origins [ 305.608840][T10028] CPU: 1 PID: 10028 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 305.617690][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.627768][T10028] Call Trace: [ 305.631096][T10028] dump_stack+0x21c/0x280 [ 305.635591][T10028] kmsan_internal_chain_origin+0x6f/0x130 [ 305.641322][T10028] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 305.647666][T10028] ? udpv6_recvmsg+0x26bf/0x2b00 [ 305.652622][T10028] ? kmsan_get_metadata+0x116/0x180 [ 305.657836][T10028] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 305.663657][T10028] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 305.669732][T10028] ? kmsan_get_metadata+0x116/0x180 [ 305.674957][T10028] ? kmsan_internal_set_origin+0x85/0xc0 [ 305.680627][T10028] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 305.686716][T10028] ? _copy_from_user+0x1fd/0x300 [ 305.691671][T10028] ? kmsan_get_metadata+0x116/0x180 [ 305.696888][T10028] __msan_chain_origin+0x57/0xa0 [ 305.701842][T10028] __get_compat_msghdr+0x6db/0x9d0 [ 305.706964][T10028] get_compat_msghdr+0x108/0x2b0 [ 305.711910][T10028] do_recvmmsg+0xdd1/0x22f0 [ 305.716425][T10028] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 305.722500][T10028] ? kmsan_get_metadata+0x116/0x180 [ 305.727704][T10028] ? kmsan_internal_set_origin+0x85/0xc0 [ 305.733345][T10028] ? _copy_from_user+0x1fd/0x300 [ 305.738294][T10028] ? kmsan_get_metadata+0x116/0x180 [ 305.743500][T10028] ? kmsan_get_metadata+0x116/0x180 [ 305.748710][T10028] ? kmsan_internal_set_origin+0x85/0xc0 [ 305.754436][T10028] ? __msan_poison_alloca+0xe9/0x110 [ 305.759731][T10028] ? __sys_recvmmsg+0xb5/0x6f0 [ 305.764503][T10028] __sys_recvmmsg+0x519/0x6f0 [ 305.769193][T10028] ? kmsan_get_metadata+0x116/0x180 [ 305.774413][T10028] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 305.780494][T10028] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 305.786662][T10028] __do_fast_syscall_32+0x102/0x160 [ 305.791871][T10028] do_fast_syscall_32+0x6a/0xc0 [ 305.796738][T10028] do_SYSENTER_32+0x73/0x90 [ 305.801254][T10028] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 305.807581][T10028] RIP: 0023:0xf7f98549 [ 305.811658][T10028] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 305.831272][T10028] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 305.839709][T10028] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020008880 [ 305.847702][T10028] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 305.855684][T10028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.863668][T10028] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 305.871659][T10028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.879639][T10028] Uninit was stored to memory at: [ 305.884677][T10028] kmsan_internal_chain_origin+0xad/0x130 [ 305.890405][T10028] __msan_chain_origin+0x57/0xa0 [ 305.895566][T10028] __get_compat_msghdr+0x6db/0x9d0 [ 305.900688][T10028] get_compat_msghdr+0x108/0x2b0 [ 305.905635][T10028] do_recvmmsg+0xdd1/0x22f0 [ 305.910152][T10028] __sys_recvmmsg+0x519/0x6f0 [ 305.914984][T10028] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 305.921070][T10028] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 305.927329][T10028] __do_fast_syscall_32+0x102/0x160 [ 305.932547][T10028] do_fast_syscall_32+0x6a/0xc0 [ 305.937499][T10028] do_SYSENTER_32+0x73/0x90 [ 305.942016][T10028] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 305.948338][T10028] [ 305.950665][T10028] Uninit was stored to memory at: [ 305.955707][T10028] kmsan_internal_chain_origin+0xad/0x130 [ 305.961443][T10028] __msan_chain_origin+0x57/0xa0 [ 305.966404][T10028] __get_compat_msghdr+0x6db/0x9d0 [ 305.971535][T10028] get_compat_msghdr+0x108/0x2b0 [ 305.976488][T10028] do_recvmmsg+0xdd1/0x22f0 [ 305.981034][T10028] __sys_recvmmsg+0x519/0x6f0 [ 305.985722][T10028] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 305.991798][T10028] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 305.997961][T10028] __do_fast_syscall_32+0x102/0x160 [ 306.003167][T10028] do_fast_syscall_32+0x6a/0xc0 [ 306.008023][T10028] do_SYSENTER_32+0x73/0x90 [ 306.012541][T10028] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 306.018858][T10028] [ 306.021206][T10028] Uninit was stored to memory at: [ 306.026238][T10028] kmsan_internal_chain_origin+0xad/0x130 [ 306.031980][T10028] __msan_chain_origin+0x57/0xa0 [ 306.036925][T10028] __get_compat_msghdr+0x6db/0x9d0 [ 306.042039][T10028] get_compat_msghdr+0x108/0x2b0 [ 306.046989][T10028] do_recvmmsg+0xdd1/0x22f0 [ 306.051499][T10028] __sys_recvmmsg+0x519/0x6f0 [ 306.056186][T10028] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 306.062261][T10028] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 306.068426][T10028] __do_fast_syscall_32+0x102/0x160 [ 306.073635][T10028] do_fast_syscall_32+0x6a/0xc0 [ 306.078494][T10028] do_SYSENTER_32+0x73/0x90 [ 306.083014][T10028] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 306.089336][T10028] [ 306.091664][T10028] Uninit was stored to memory at: [ 306.096701][T10028] kmsan_internal_chain_origin+0xad/0x130 [ 306.102433][T10028] __msan_chain_origin+0x57/0xa0 [ 306.107375][T10028] __get_compat_msghdr+0x6db/0x9d0 [ 306.113450][T10028] get_compat_msghdr+0x108/0x2b0 [ 306.118399][T10028] do_recvmmsg+0xdd1/0x22f0 [ 306.122913][T10028] __sys_recvmmsg+0x519/0x6f0 [ 306.127596][T10028] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 306.133675][T10028] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 306.139843][T10028] __do_fast_syscall_32+0x102/0x160 [ 306.145055][T10028] do_fast_syscall_32+0x6a/0xc0 [ 306.149917][T10028] do_SYSENTER_32+0x73/0x90 [ 306.154433][T10028] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 306.160750][T10028] [ 306.163081][T10028] Uninit was stored to memory at: [ 306.168116][T10028] kmsan_internal_chain_origin+0xad/0x130 [ 306.173847][T10028] __msan_chain_origin+0x57/0xa0 [ 306.178794][T10028] __get_compat_msghdr+0x6db/0x9d0 [ 306.183914][T10028] get_compat_msghdr+0x108/0x2b0 [ 306.188861][T10028] do_recvmmsg+0xdd1/0x22f0 [ 306.193374][T10028] __sys_recvmmsg+0x519/0x6f0 [ 306.198065][T10028] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 306.204139][T10028] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 306.210309][T10028] __do_fast_syscall_32+0x102/0x160 [ 306.215716][T10028] do_fast_syscall_32+0x6a/0xc0 [ 306.220578][T10028] do_SYSENTER_32+0x73/0x90 [ 306.225883][T10028] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 306.232200][T10028] [ 306.234525][T10028] Uninit was stored to memory at: [ 306.239566][T10028] kmsan_internal_chain_origin+0xad/0x130 [ 306.245377][T10028] __msan_chain_origin+0x57/0xa0 [ 306.250327][T10028] __get_compat_msghdr+0x6db/0x9d0 [ 306.255470][T10028] get_compat_msghdr+0x108/0x2b0 [ 306.260416][T10028] do_recvmmsg+0xdd1/0x22f0 [ 306.264931][T10028] __sys_recvmmsg+0x519/0x6f0 [ 306.269619][T10028] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 306.275697][T10028] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 306.281867][T10028] __do_fast_syscall_32+0x102/0x160 [ 306.287079][T10028] do_fast_syscall_32+0x6a/0xc0 [ 306.291943][T10028] do_SYSENTER_32+0x73/0x90 [ 306.296493][T10028] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 306.302828][T10028] [ 306.305149][T10028] Uninit was stored to memory at: [ 306.310540][T10028] kmsan_internal_chain_origin+0xad/0x130 [ 306.316296][T10028] __msan_chain_origin+0x57/0xa0 [ 306.321246][T10028] __get_compat_msghdr+0x6db/0x9d0 [ 306.326363][T10028] get_compat_msghdr+0x108/0x2b0 [ 306.331310][T10028] do_recvmmsg+0xdd1/0x22f0 [ 306.335832][T10028] __sys_recvmmsg+0x519/0x6f0 [ 306.340517][T10028] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 306.346594][T10028] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 12:52:31 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r1}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 306.352762][T10028] __do_fast_syscall_32+0x102/0x160 [ 306.358511][T10028] do_fast_syscall_32+0x6a/0xc0 [ 306.363380][T10028] do_SYSENTER_32+0x73/0x90 [ 306.368070][T10028] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 306.374386][T10028] [ 306.376706][T10028] Local variable ----msg_sys@do_recvmmsg created at: [ 306.383380][T10028] do_recvmmsg+0xbf/0x22f0 [ 306.387801][T10028] do_recvmmsg+0xbf/0x22f0 [ 306.503938][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.515191][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.525232][ T3483] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 306.535685][ T3483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.614638][ T3483] usb 3-1: config 0 descriptor?? [ 306.647371][T10018] udc-core: couldn't find an available UDC or it's busy [ 306.654882][T10018] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 306.719558][ T9764] cm6533_jd 0003:0D8C:0022.0008: No inputs registered, leaving [ 306.759926][ T9764] cm6533_jd 0003:0D8C:0022.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 12:52:32 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 307.000475][ T9764] usb 4-1: USB disconnect, device number 2 [ 307.088810][T10021] udc-core: couldn't find an available UDC or it's busy [ 307.096247][T10021] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 307.273378][ T3483] usbhid 3-1:0.0: can't add hid device: -71 [ 307.280028][ T3483] usbhid: probe of 3-1:0.0 failed with error -71 [ 307.345200][ T3483] usb 3-1: USB disconnect, device number 12 12:52:33 executing program 3: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:33 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:33 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000100)) 12:52:33 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 308.784395][ T9764] usb 3-1: new high-speed USB device number 13 using dummy_hcd 12:52:34 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 309.163687][ T9764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.174791][ T9764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.184948][ T9764] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 309.195280][ T9764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:52:34 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001200)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4c80a7194820eac04b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0ceef82f37eaef312d118c172438fb14105077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c29184ff7f4a7c0000cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b1f35eab28bfdeb715ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbcebdde510cb236414fda2322333719acd97cea107d40224edc5465a932b77a74e802a0d42bc6099ad2300000080006ef6beff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea080000000000000026abfb07671923618d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d564beb6d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae6b0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc229413300000000000000000003000000000000000050fac9010010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b09000000000000005ac15fc2288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7433282830689da6b53b263339863297771429d120000003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcac70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e119fc34960d3312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154bc05c37feaf3dd95f6ef2acd1fe582786105c7060000000000000001bb997316dbf17866fb84d4173731efe8060000005560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b40765cfade70659ce631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168cf16fdcdae4a571c043f6e40c349f4f9ecee27defc93871c5f99a355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d6d5210d7560eb92d6a97a27602b81f76386ff7f00000000000086086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b085f3c334b47f040743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab8678d1b4875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f967ce7daac4be29015df6bcd75f0dda9de5532e71ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6b70ebc660309e1e245b0fdec743af930cd6db49a47493808bad959719c0000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f7781f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183eedf744fb8fc4f9ce2242e0f00000000000000000000000000000057d77480e0345e67a96413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4a07474e6e5490a7d3c34a1658228b6675bd837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc76cbcd74dc07748f974e694a837447d226d23dcd55cb796da2dfb714a81e1dd5ff41c45f9ff6faa13f0f72f6dba7290cc3fdc551a624e13a00a8219b55322d860492eac3c252bc4bfcd4fff6d7e55c01bf815e5397134d4f51ca27c739aa76e9c8e52dee16792f6aed822d1ca05782f3a4d4696e4a0f9c5986016bf3a53f4666ad4ba9a44916384f5dfc4b9dc7b1a5c88367059dcec1b010698c16ab1ea510db8640aa97219fa8853bdc2a581fcb8a94e83f668ea65ed6dfa17b44d08722589bec342e8b0d84bedce315dfc69e2b87a27bff958fec1a83a2515b03430e9720005a793a32c68883a0d9f883fe5245b887a57addbf0b7e2252561ec10816074ecfd123427d399b287b73db5559c2603db032ec21b01015f6e44a9127dbd2871c52853cca0e7cf6c8ee3cce9f5475dbfd170060a8b48ecc125eda2512c34da5c293227080f5e8510ceed43e59fa0022abec23eb418ca6a461465328c22949c2fe7bbbcd18b89439cce444892f79c3b1dd11acf60e7ef01af6d8239110177bf7bd5a76a45570c8f44ff009920d85b008b6e8cd230bc016f0d054469bc50da5d0d601175474261ac4a7b75b730442f6ddcb84002af5e6525687cfa4d33da8c38a6600056fb4edd8ff545e7aee33df9b3993573d84f9d337bd8005f5d034b51506f17f859477bd35b98fe8006806fc068577a237af33d2b67b7006af3c49d2798a6aa841188b9a7070bfcd406e06549498fc4"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='lock_acquire\x00', r0}, 0x10) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000001140)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33073754c812c24980c70d197dafadc7854d307c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d3", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000180)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000180)="a8", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r3}, &(0x7f0000000240)=""/94, 0x5e, &(0x7f0000000140)={&(0x7f0000000100)={'sha256-generic\x00'}}) 12:52:34 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 309.331242][ T9764] usb 3-1: config 0 descriptor?? [ 309.797205][T10075] udc-core: couldn't find an available UDC or it's busy [ 309.804503][T10075] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 310.026607][ T9764] cm6533_jd 0003:0D8C:0022.0009: No inputs registered, leaving [ 310.097992][ T9764] cm6533_jd 0003:0D8C:0022.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 310.341245][ T9764] usb 3-1: USB disconnect, device number 13 [ 310.357945][T10086] not chained 130000 origins [ 310.363021][T10086] CPU: 0 PID: 10086 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 310.371789][T10086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.381856][T10086] Call Trace: [ 310.385166][T10086] dump_stack+0x21c/0x280 [ 310.389514][T10086] kmsan_internal_chain_origin+0x6f/0x130 [ 310.395260][T10086] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 310.401341][T10086] ? udpv6_recvmsg+0x26bf/0x2b00 [ 310.406297][T10086] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 310.412465][T10086] ? kmsan_get_metadata+0x116/0x180 [ 310.417678][T10086] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 310.423497][T10086] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 310.429576][T10086] ? kmsan_get_metadata+0x116/0x180 [ 310.434784][T10086] ? kmsan_internal_set_origin+0x85/0xc0 [ 310.440442][T10086] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 310.446526][T10086] ? _copy_from_user+0x1fd/0x300 [ 310.451484][T10086] ? kmsan_get_metadata+0x116/0x180 [ 310.457422][T10086] __msan_chain_origin+0x57/0xa0 [ 310.463598][T10086] __get_compat_msghdr+0x6db/0x9d0 [ 310.468751][T10086] get_compat_msghdr+0x108/0x2b0 [ 310.473722][T10086] do_recvmmsg+0xdd1/0x22f0 [ 310.478260][T10086] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 310.484349][T10086] ? kmsan_get_metadata+0x116/0x180 [ 310.489571][T10086] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 310.495690][T10086] ? native_apic_mem_write+0x45/0x90 [ 310.501089][T10086] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 310.507181][T10086] ? idle_cpu+0x9a/0x1d0 [ 310.511445][T10086] ? kmsan_get_metadata+0x116/0x180 [ 310.516752][T10086] ? kmsan_internal_set_origin+0x85/0xc0 [ 310.522398][T10086] ? __msan_poison_alloca+0xe9/0x110 [ 310.527873][T10086] ? __sys_recvmmsg+0xb5/0x6f0 [ 310.532944][T10086] __sys_recvmmsg+0x519/0x6f0 [ 310.537725][T10086] ? kmsan_get_metadata+0x9/0x180 [ 310.542773][T10086] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 310.548860][T10086] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 310.555242][T10086] __do_fast_syscall_32+0x102/0x160 [ 310.560500][T10086] do_fast_syscall_32+0x6a/0xc0 [ 310.565403][T10086] do_SYSENTER_32+0x73/0x90 [ 310.569929][T10086] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 310.576265][T10086] RIP: 0023:0xf7f98549 [ 310.580348][T10086] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 310.601185][T10086] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 310.609628][T10086] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 310.617633][T10086] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 310.625628][T10086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.633718][T10086] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 310.641701][T10086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.649947][T10086] Uninit was stored to memory at: [ 310.654993][T10086] kmsan_internal_chain_origin+0xad/0x130 [ 310.660747][T10086] __msan_chain_origin+0x57/0xa0 [ 310.665693][T10086] __get_compat_msghdr+0x6db/0x9d0 [ 310.670812][T10086] get_compat_msghdr+0x108/0x2b0 [ 310.675757][T10086] do_recvmmsg+0xdd1/0x22f0 [ 310.680269][T10086] __sys_recvmmsg+0x519/0x6f0 [ 310.684965][T10086] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 310.691061][T10086] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 310.697227][T10086] __do_fast_syscall_32+0x102/0x160 [ 310.702438][T10086] do_fast_syscall_32+0x6a/0xc0 [ 310.707298][T10086] do_SYSENTER_32+0x73/0x90 [ 310.711815][T10086] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 310.718130][T10086] [ 310.720455][T10086] Uninit was stored to memory at: [ 310.725488][T10086] kmsan_internal_chain_origin+0xad/0x130 [ 310.731217][T10086] __msan_chain_origin+0x57/0xa0 [ 310.736162][T10086] __get_compat_msghdr+0x6db/0x9d0 [ 310.741278][T10086] get_compat_msghdr+0x108/0x2b0 [ 310.746225][T10086] do_recvmmsg+0xdd1/0x22f0 [ 310.750734][T10086] __sys_recvmmsg+0x519/0x6f0 [ 310.755436][T10086] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 310.761528][T10086] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 310.767699][T10086] __do_fast_syscall_32+0x102/0x160 [ 310.772910][T10086] do_fast_syscall_32+0x6a/0xc0 [ 310.777771][T10086] do_SYSENTER_32+0x73/0x90 [ 310.782289][T10086] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 310.788611][T10086] [ 310.790936][T10086] Uninit was stored to memory at: [ 310.795972][T10086] kmsan_internal_chain_origin+0xad/0x130 [ 310.801708][T10086] __msan_chain_origin+0x57/0xa0 [ 310.806657][T10086] __get_compat_msghdr+0x6db/0x9d0 [ 310.811792][T10086] get_compat_msghdr+0x108/0x2b0 [ 310.817124][T10086] do_recvmmsg+0xdd1/0x22f0 [ 310.821738][T10086] __sys_recvmmsg+0x519/0x6f0 [ 310.826427][T10086] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 310.832503][T10086] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 310.838669][T10086] __do_fast_syscall_32+0x102/0x160 [ 310.843888][T10086] do_fast_syscall_32+0x6a/0xc0 [ 310.848742][T10086] do_SYSENTER_32+0x73/0x90 [ 310.853252][T10086] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 310.859569][T10086] [ 310.861892][T10086] Uninit was stored to memory at: [ 310.866922][T10086] kmsan_internal_chain_origin+0xad/0x130 [ 310.872649][T10086] __msan_chain_origin+0x57/0xa0 [ 310.877605][T10086] __get_compat_msghdr+0x6db/0x9d0 [ 310.882730][T10086] get_compat_msghdr+0x108/0x2b0 [ 310.887675][T10086] do_recvmmsg+0xdd1/0x22f0 [ 310.892189][T10086] __sys_recvmmsg+0x519/0x6f0 [ 310.896943][T10086] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 310.903110][T10086] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 310.909276][T10086] __do_fast_syscall_32+0x102/0x160 [ 310.914482][T10086] do_fast_syscall_32+0x6a/0xc0 [ 310.919342][T10086] do_SYSENTER_32+0x73/0x90 [ 310.923858][T10086] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 310.930180][T10086] [ 310.932505][T10086] Uninit was stored to memory at: [ 310.937541][T10086] kmsan_internal_chain_origin+0xad/0x130 [ 310.943272][T10086] __msan_chain_origin+0x57/0xa0 [ 310.948218][T10086] __get_compat_msghdr+0x6db/0x9d0 [ 310.953342][T10086] get_compat_msghdr+0x108/0x2b0 [ 310.958307][T10086] do_recvmmsg+0xdd1/0x22f0 [ 310.962826][T10086] __sys_recvmmsg+0x519/0x6f0 [ 310.967512][T10086] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 310.973593][T10086] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 310.979759][T10086] __do_fast_syscall_32+0x102/0x160 [ 310.984970][T10086] do_fast_syscall_32+0x6a/0xc0 [ 310.989828][T10086] do_SYSENTER_32+0x73/0x90 [ 310.994342][T10086] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 311.000656][T10086] [ 311.002980][T10086] Uninit was stored to memory at: [ 311.008022][T10086] kmsan_internal_chain_origin+0xad/0x130 [ 311.013748][T10086] __msan_chain_origin+0x57/0xa0 [ 311.018691][T10086] __get_compat_msghdr+0x6db/0x9d0 [ 311.023807][T10086] get_compat_msghdr+0x108/0x2b0 [ 311.028752][T10086] do_recvmmsg+0xdd1/0x22f0 [ 311.033266][T10086] __sys_recvmmsg+0x519/0x6f0 [ 311.037974][T10086] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 311.044049][T10086] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 311.050216][T10086] __do_fast_syscall_32+0x102/0x160 [ 311.055511][T10086] do_fast_syscall_32+0x6a/0xc0 [ 311.060376][T10086] do_SYSENTER_32+0x73/0x90 [ 311.064892][T10086] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 311.071209][T10086] [ 311.073531][T10086] Uninit was stored to memory at: [ 311.078576][T10086] kmsan_internal_chain_origin+0xad/0x130 [ 311.084299][T10086] __msan_chain_origin+0x57/0xa0 [ 311.089245][T10086] __get_compat_msghdr+0x6db/0x9d0 [ 311.094361][T10086] get_compat_msghdr+0x108/0x2b0 [ 311.099308][T10086] do_recvmmsg+0xdd1/0x22f0 [ 311.103825][T10086] __sys_recvmmsg+0x519/0x6f0 [ 311.108515][T10086] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 311.114594][T10086] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 311.120775][T10086] __do_fast_syscall_32+0x102/0x160 [ 311.125993][T10086] do_fast_syscall_32+0x6a/0xc0 [ 311.130862][T10086] do_SYSENTER_32+0x73/0x90 [ 311.135379][T10086] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 311.141698][T10086] 12:52:36 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) [ 311.144029][T10086] Local variable ----msg_sys@do_recvmmsg created at: [ 311.150717][T10086] do_recvmmsg+0xbf/0x22f0 [ 311.155144][T10086] do_recvmmsg+0xbf/0x22f0 12:52:36 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000780)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0xf7, &(0x7f00000000c0)=""/247, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r1 = dup2(r0, r0) read$char_usb(r1, &(0x7f00000001c0)=""/133, 0x85) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='fsi_master_gpio_clock_zeros\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340040002677471fc6f7b47efead2546e6267d1b", @ANYRES32=0x0, @ANYBLOB="1400030076657468305f746f5f7465616d0000000800020064010100"], 0x34}, 0x1, 0x0, 0x0, 0x84084}, 0x40084) 12:52:37 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 311.735439][ T9764] usb 3-1: new high-speed USB device number 14 using dummy_hcd 12:52:37 executing program 3: syz_mount_image$udf(&(0x7f00000001c0)='udf\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="62733d315b3409000100343036393431393538343332312c00"]) [ 312.133996][ T9764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.145215][ T9764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.155412][ T9764] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 312.166727][ T9764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.438301][ T9764] usb 3-1: config 0 descriptor?? [ 312.676546][T10132] UDF-fs: bad mount option "bs=1[4 " or missing value 12:52:38 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 312.900036][T10117] udc-core: couldn't find an available UDC or it's busy [ 312.907254][T10117] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 312.954756][T10132] UDF-fs: bad mount option "bs=1[4 " or missing value [ 313.009837][ T9764] cm6533_jd 0003:0D8C:0022.000A: No inputs registered, leaving [ 313.024478][ T9764] cm6533_jd 0003:0D8C:0022.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 12:52:38 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 313.287746][ T5] usb 3-1: USB disconnect, device number 14 12:52:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r2 = dup2(r1, r1) r3 = openat$null(0xffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x680400, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "118b171003e4c6bf", "fbfe98acd73ab4f90a8501e56d0c1f209bb96128b29c3bd9bca3ba58fc40084a", "321f7f0a", "6518b96f85e1346d"}, 0x38) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) dup2(r4, r4) setsockopt$inet6_tcp_int(r4, 0x6, 0x17, &(0x7f00000000c0)=0x2, 0x4) read$char_usb(r2, &(0x7f00000001c0)=""/133, 0x85) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x88) connect$inet6(r0, &(0x7f0000000080), 0x1c) r5 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 12:52:39 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:52:40 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:40 executing program 3: syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5d, &(0x7f0000000200)=[{&(0x7f0000010000)="020000000000343418010000e7306613cf127cd8020000001f00000000000000000020000000000001000000000000001000000005000000010000000000000001000000000000000000000000000000e001000000000000571b675f00000000581b675f00000000581b675f000000000100320000000100571b675f00000000004eed0000000000000000000b00000080002000c00010002d39466b1d9a4785818c615d21cbd81600"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000100"/32, 0x20, 0x500}, {&(0x7f0000010200)="85f94bf21965f89811faaf1e400007000000000000000000571b675f0000000010000000000000000b0000000500000030010000000000000100000000000000020000000000000001000000000000000100000001000000010000000000000000000000000000000600000000000000010000000000000003000000030000000200000000000000000000000000000003000000000000000100000000000000040000000000000002000000000000000400000000000000010000000000000001000000010000000500000000000000000000000000000005000000000000000100000000000000010000000100000006000000000000000000000000000000030000000000000001000000000000000300000003000000000000000000000001000000000000000200"/320, 0x140, 0x1000}, {&(0x7f0000010400)="0200000000000000100001022e0000000200000000000000100002022e2e00000b00000000000000e00f06012e6e696c667300"/64, 0x40, 0x2000}, {&(0x7f0000010500)="f47f0000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000ff0f00"/4128, 0x1020, 0x3000}, {&(0x7f0000011600)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x5080}, {&(0x7f0000011700)="01000000000000000010000000000000571b675f00000000571b675f0000000000000000000000000000000000000000ed4102000000000000000000000000000100"/96, 0x60, 0x5100}, {&(0x7f0000011800)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x5380}, {&(0x7f0000011900)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x5400}, {&(0x7f0000011a00)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x5480}, {&(0x7f0000011b00)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x5500}, {&(0x7f0000011c00)="00000000000000000000000000000000571b675f00000000571b675f0000000000000000000000000000000000000000a4810100"/64, 0x40, 0x5580}, {&(0x7f0000011d00)="0100"/32, 0x20, 0x6000}, {&(0x7f0000011e00)="0000000000000000000000000000000000000000000000000100000000000000571b675f000000000b000000000000000200000000000000040000000000000003000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100000000000000000000000000020000000000000003000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000200000000000000", 0xe0, 0x60c0}, {&(0x7f0000011f00)="0200000000000000000000000000000000000000000000000300000000000000", 0x20, 0x6240}, {&(0x7f0000012000)="0200000000000000000000000000000000000000000000000400000000000000", 0x20, 0x6300}, {&(0x7f0000012100)="0200000000000000000000000000000000000000000000000500000000000000", 0x20, 0x63c0}, {&(0x7f0000012200)="0200000000000000000000000000000000000000000000000600000000000000", 0x20, 0x6480}, {&(0x7f0000012300)="0200000000000000000000000000000000000000000000000700000000000000", 0x20, 0x6540}, {&(0x7f0000012400)="0200000000000000000000000000000000000000000000000800000000000000", 0x20, 0x6600}, {&(0x7f0000012500)="0200000000000000000000000000000000000000000000000900000000000000", 0x20, 0x66c0}, {&(0x7f0000012600)="0200000000000000000000000000000000000000000000000a00000000000000", 0x20, 0x6780}, {&(0x7f0000012700)="0200000000000000000000000000000000000000000000000b00000000000000", 0x20, 0x6840}, {&(0x7f0000012800)="0200000000000000000000000000000000000000000000000c00000000000000", 0x20, 0x6900}, {&(0x7f0000012900)="0200000000000000000000000000000000000000000000000d00000000000000", 0x20, 0x69c0}, {&(0x7f0000012a00)="0200000000000000000000000000000000000000000000000e00000000000000", 0x20, 0x6a80}, {&(0x7f0000012b00)="0200000000000000000000000000000000000000000000000f00000000000000", 0x20, 0x6b40}, {&(0x7f0000012c00)="0200000000000000000000000000000000000000000000001000000000000000", 0x20, 0x6c00}, {&(0x7f0000012d00)="0200000000000000000000000000000000000000000000001100000000000000", 0x20, 0x6cc0}, {&(0x7f0000012e00)="0200000000000000000000000000000000000000000000001200000000000000", 0x20, 0x6d80}, {&(0x7f0000012f00)="0200000000000000000000000000000000000000000000001300000000000000", 0x20, 0x6e40}, {&(0x7f0000013000)="0200000000000000000000000000000000000000000000001400000000000000", 0x20, 0x6f00}, {&(0x7f0000013100)="1d0000000000000002000000000000001e000000000000000000000000000000571b675f000000000b0000000300000000000000000000000000000003000000", 0x40, 0x7000}, {&(0x7f0000013200)="f97f00000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000007f00"/4128, 0x1020, 0x8000}, {&(0x7f0000014300)="02000000000000000100000000000000ffffffffffffffff000000000000000003000000000000000100000000000000ffffffffffffffff000000000000000004000000000000000100000000000000ffffffffffffffff000000000000000005000000000000000100000000000000ffffffffffffffff000000000000000006000000000000000100000000000000ffffffffffffffff000000000000000007000000000000000100000000000000ffffffffffffffff0000000000000000", 0xc0, 0xa020}, {&(0x7f0000014400)="41810c6190010000571b675f0000000003000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100000000000000000000000000080000000000000009000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000571b675f00000000571b675f0000000000000000000000000000000000000000008001000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000571b675f00000000571b675f0000000000000000000000000000000000000000008001000000000000000000000000000600"/352, 0x160, 0xb000}, {&(0x7f0000014600)="116ce3ea337a30ab11faaf1e400001000000000000000000581b675f0000000010000000000000000400000003000000b80000000000000002000000000000000c0000000000000002000000000000000100000001000000004000000000000000000000000000000200000000000000020000000000000001000000010000000a0000000000000000000000000000000d0000000000000002000000000000000100000001000000005000"/192, 0xc0, 0xc000}, {&(0x7f0000014700)="0c00000000000000100001022e0000000200000000000000100002022e2e00000d000000000000001800050166696c6530000000000000000e00000000000000c80f050766696c653100"/96, 0x60, 0xd000}, {&(0x7f0000014800)="0200000000000000100001022e0000000200000000000000100002022e2e00000b00000000000000180006012e6e696c66730000000000000c000000000000001800050266696c6530000000000000000f000000000000001800050166696c65310000000000000010000000000000001800050166696c65320000000000000010000000000000001800050166696c6533000000000000001100000000000000680f090166696c652e636f6c6400"/192, 0xc0, 0xe000}, {&(0x7f0000014900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xf000}, {&(0x7f0000014e00)="53f9c3a6d7069e8311faaf1e400000000100000000000000581b675f0000000020000000000000001000000008000000d00100000000000002000000000000000e0000000000000002000000000000000100000001000000006000000000000000000000000000000f000000000000000200000000000000010000000100000000700000000000000000000000000000100000000000000002000000000000000300000003000000070000000000000000000000000000000800000000000000010000000000000009000000000000000200000000000000110000000000000002000000000000000100000001000000001000000000000000000000000000000600000000000000020000000000000003000000030000000b0000000000000000000000000000000c0000000000000001000000000000000d0000000000000002000000000000000400000000000000000000000000000001000000010000000e0000000000000000000000000000000500000000000000000000000000000001000000010000000f0000000000000000000000000000000300000000000000000000000000000004000000040000000000000000000000010000000000000002000000000000002200"/480, 0x1e0, 0x10000}, {&(0x7f0000015000)='/tmp/syz-imagegen668924749/file0/file0\x00'/64, 0x40, 0x11000}, {&(0x7f0000015100)='syzkallers\x00'/32, 0x20, 0x12000}, {&(0x7f0000015200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x16000}, {&(0x7f0000015300)="ee7f0000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000ffff0300"/4128, 0x1020, 0x17000}, {&(0x7f0000016400)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x19080}, {&(0x7f0000016500)="01000000000000000010000000000000581b675f00000000581b675f000000008a396b308a396b300000000000000000ed4103000000000000000000000000000a00"/96, 0x60, 0x19100}, {&(0x7f0000016600)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x19380}, {&(0x7f0000016700)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x19400}, {&(0x7f0000016800)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x19480}, {&(0x7f0000016900)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x19500}, {&(0x7f0000016a00)="00000000000000000000000000000000571b675f00000000571b675f0000000000000000000000000000000000000000a4810100"/64, 0x40, 0x19580}, {&(0x7f0000016b00)="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", 0x300, 0x19600}, {&(0x7f0000016e00)="0200"/32, 0x20, 0x1a000}, {&(0x7f0000016f00)="0000000000000000000000000000000000000000000000000100000000000000571b675f000000000b000000000000000200000000000000040000000000000003000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100000000000000000000000000020000000000000003000000000000000400"/160, 0xa0, 0x1a0c0}, {&(0x7f0000017000)="0000000000000000000000000000000000000000000000000200000000000000581b675f00000000170000000000000008000000000000000c0000000000000003000000000000000000000000000000571b675f00000000571b675f0000000000000000000000000000000000000000008001000000000000000000000000000b000000000000000c000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000300000000000000", 0xe0, 0x1a180}, {&(0x7f0000017100)="0200000000000000000000000000000000000000000000000400000000000000", 0x20, 0x1a300}, {&(0x7f0000017200)="0200000000000000000000000000000000000000000000000500000000000000", 0x20, 0x1a3c0}, {&(0x7f0000017300)="0200000000000000000000000000000000000000000000000600000000000000", 0x20, 0x1a480}, {&(0x7f0000017400)="0200000000000000000000000000000000000000000000000700000000000000", 0x20, 0x1a540}, {&(0x7f0000017500)="0200000000000000000000000000000000000000000000000800000000000000", 0x20, 0x1a600}, {&(0x7f0000017600)="0200000000000000000000000000000000000000000000000900000000000000", 0x20, 0x1a6c0}, {&(0x7f0000017700)="0200000000000000000000000000000000000000000000000a00000000000000", 0x20, 0x1a780}, {&(0x7f0000017800)="0200000000000000000000000000000000000000000000000b00000000000000", 0x20, 0x1a840}, {&(0x7f0000017900)="0200000000000000000000000000000000000000000000000c00000000000000", 0x20, 0x1a900}, {&(0x7f0000017a00)="0200000000000000000000000000000000000000000000000d00000000000000", 0x20, 0x1a9c0}, {&(0x7f0000017b00)="0200000000000000000000000000000000000000000000000e00000000000000", 0x20, 0x1aa80}, {&(0x7f0000017c00)="0200000000000000000000000000000000000000000000000f00000000000000", 0x20, 0x1ab40}, {&(0x7f0000017d00)="0200000000000000000000000000000000000000000000001000000000000000", 0x20, 0x1ac00}, {&(0x7f0000017e00)="0200000000000000000000000000000000000000000000001100000000000000", 0x20, 0x1acc0}, {&(0x7f0000017f00)="0200000000000000000000000000000000000000000000001200000000000000", 0x20, 0x1ad80}, {&(0x7f0000018000)="0200000000000000000000000000000000000000000000001300000000000000", 0x20, 0x1ae40}, {&(0x7f0000018100)="0200000000000000000000000000000000000000000000001400000000000000", 0x20, 0x1af00}, {&(0x7f0000018200)="1b00000000000000040000000000000003000000000000000000000000000000581b675f000000000f00000003000000581b675f000000001000000003000000581b675f00000000070000000200000000000000000000000000000002000000", 0x60, 0x1b000}, {&(0x7f0000018300)="eb7f0000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000008000000080000000800000ffff00"/4128, 0x1020, 0x1c000}, {&(0x7f0000019400)="0100"/32, 0x20, 0x1d200}, {&(0x7f0000019500)="0100"/32, 0x20, 0x1d800}, {&(0x7f0000019600)="0100"/32, 0x20, 0x1da00}, {&(0x7f0000019700)="0100"/32, 0x20, 0x1dc00}, {&(0x7f0000019800)="0100"/32, 0x20, 0x1de00}, {&(0x7f0000019900)="02000000000000000100000000000000020000000000000000000000000000000300000000000000010000000000000002000000000000000000000000000000040000000000000001000000000000000200000000000000000000000000000005000000000000000100000000000000020000000000000000000000000000000600000000000000010000000000000001000000000000000000000000000000070000000000000001000000000000000100000000000000000000000000000013000000000000000200000000000000ffffffffffffffff000000000000000014000000000000000200000000000000ffffffffffffffff000000000000000015000000000000000200000000000000ffffffffffffffff00000000000000000e000000000000000200000000000000ffffffffffffffff000000000000000017000000000000000200000000000000ffffffffffffffff000000000000000018000000000000000200000000000000ffffffffffffffff000000000000000019000000000000000200000000000000ffffffffffffffff00000000000000001a000000000000000200000000000000ffffffffffffffff00000000000000001b000000000000000200000000000000ffffffffffffffff0000000000000000", 0x1e0, 0x1e020}, {&(0x7f0000019b00)="16000000000000000200000000000000ffffffffffffffff0000000000000000", 0x20, 0x1f000}, {&(0x7f0000019c00)="32fe4118b5717ec011faaf1e400006000200000000000000581b675f0000000030000000000000000700000001000000880000000000000002000000000000000300000000000000000000000000000005000000040000008200000000000000a200000000000000c200000000000000e20000000000000000000000000000000100"/160, 0xa0, 0x20000}, {&(0x7f0000019d00)="00000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000080fe3a671d7f000080fe3a671d7f00"/128, 0x80, 0x20360}, {&(0x7f0000019e00)="0d000000000000000200000000000000ffffffffffffffff0000000000000000", 0x20, 0x21000}, {&(0x7f0000019f00)="0f000000000000000200000000000000ffffffffffffffff0000000000000000", 0x20, 0x22000}, {&(0x7f000001a000)="11000000000000000200000000000000ffffffffffffffff0000000000000000", 0x20, 0x23000}, {&(0x7f000001a100)="12000000000000000200000000000000ffffffffffffffff0000000000000000", 0x20, 0x24000}, {&(0x7f000001a200)="0001080000000000000000000000000000000000000000000100000000000000020000000000000022000000000000008200000000000000a200000000000000c200000000000000e200"/96, 0x60, 0x25000}, {&(0x7f000001a300)="00000000000000001c000000000000001d000000000000001e000000000000001f000000000000002100000000000000220000000000000023000000000000002400"/96, 0x60, 0x25800}, {&(0x7f000001a400)="d38346c490010000581b675f0000000033000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100000000000102010000000000000000000000000009000000000000000a000000000000002500000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000571b675f00000000571b675f0000000000000000000000000000000000000000008001000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000571b675f00000000571b675f0000000000000000000000000000000000000000008001000000000000000000000000000f00"/352, 0x160, 0x26000}, {&(0x7f000001a600)="020000000000343418010000e7306613daa0dd52020000001f00000000000000000020000000000001000000000000001000000005000000020000000000000020000000000000000200000000000000b001000000000000571b675f00000000581b675f00000000581b675f000000000100320001000100571b675f00000000004eed0000000000000000000b00000080002000c00010002d39466b1d9a4785818c615d21cbd81600"/192, 0xc0, 0x1ff000}, {&(0x7f000001a700)="00000000000000000100"/32, 0x20, 0x1ff100}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7cc3caae051192721d355ba76e268582f989385d0cb5"]) [ 315.063513][ T4726] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 315.434336][ T4726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.446695][ T4726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.450800][T10183] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 315.457191][ T4726] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 315.466867][T10183] NILFS (loop3): unrecognized mount option "|ÃÊ®’r5[§n&…‚ù‰8] µ" [ 315.476131][ T4726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.668273][T10180] not chained 140000 origins [ 315.672899][T10180] CPU: 0 PID: 10180 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 315.681659][T10180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.691715][T10180] Call Trace: [ 315.695026][T10180] dump_stack+0x21c/0x280 [ 315.699364][T10180] ? __msan_memcpy+0x46/0x60 [ 315.703966][T10180] kmsan_internal_chain_origin+0x6f/0x130 [ 315.709695][T10180] ? kmsan_get_metadata+0x116/0x180 [ 315.714902][T10180] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 315.720718][T10180] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 315.726803][T10180] ? sched_clock_cpu+0x5e/0x920 [ 315.731663][T10180] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 315.737739][T10180] ? kmsan_get_metadata+0x116/0x180 [ 315.742959][T10180] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 315.748793][T10180] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 315.755057][T10180] ? kmsan_get_metadata+0x116/0x180 [ 315.760276][T10180] ? kmsan_internal_set_origin+0x85/0xc0 [ 315.765933][T10180] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 315.772015][T10180] ? _copy_from_user+0x1fd/0x300 [ 315.776962][T10180] ? kmsan_get_metadata+0x116/0x180 [ 315.782166][T10180] __msan_chain_origin+0x57/0xa0 [ 315.787115][T10180] __get_compat_msghdr+0x6db/0x9d0 [ 315.792255][T10180] get_compat_msghdr+0x108/0x2b0 [ 315.797223][T10180] do_recvmmsg+0xdd1/0x22f0 [ 315.801769][T10180] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 315.807849][T10180] ? sched_clock_cpu+0x5e/0x920 [ 315.812711][T10180] ? kmsan_get_metadata+0x116/0x180 [ 315.817923][T10180] ? kmsan_get_metadata+0x116/0x180 [ 315.823132][T10180] ? kmsan_internal_set_origin+0x85/0xc0 [ 315.828775][T10180] ? __msan_poison_alloca+0xe9/0x110 [ 315.834074][T10180] ? __sys_recvmmsg+0xb5/0x6f0 [ 315.838854][T10180] __sys_recvmmsg+0x519/0x6f0 [ 315.843541][T10180] ? __msan_get_context_state+0x9/0x20 [ 315.849023][T10180] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 315.855131][T10180] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 315.861306][T10180] __do_fast_syscall_32+0x102/0x160 [ 315.866510][T10180] do_fast_syscall_32+0x6a/0xc0 [ 315.871357][T10180] do_SYSENTER_32+0x73/0x90 [ 315.875863][T10180] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 315.882177][T10180] RIP: 0023:0xf7f98549 [ 315.886237][T10180] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 315.905832][T10180] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 315.914240][T10180] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 315.922201][T10180] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 315.930159][T10180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.938134][T10180] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 315.946096][T10180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.954058][T10180] Uninit was stored to memory at: [ 315.959076][T10180] kmsan_internal_chain_origin+0xad/0x130 [ 315.964783][T10180] __msan_chain_origin+0x57/0xa0 [ 315.969711][T10180] __get_compat_msghdr+0x6db/0x9d0 [ 315.974812][T10180] get_compat_msghdr+0x108/0x2b0 [ 315.979739][T10180] do_recvmmsg+0xdd1/0x22f0 [ 315.984233][T10180] __sys_recvmmsg+0x519/0x6f0 [ 315.988901][T10180] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 315.994960][T10180] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 316.001104][T10180] __do_fast_syscall_32+0x102/0x160 [ 316.006292][T10180] do_fast_syscall_32+0x6a/0xc0 [ 316.011132][T10180] do_SYSENTER_32+0x73/0x90 [ 316.015650][T10180] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 316.021952][T10180] [ 316.024267][T10180] Uninit was stored to memory at: [ 316.029293][T10180] kmsan_internal_chain_origin+0xad/0x130 [ 316.035014][T10180] __msan_chain_origin+0x57/0xa0 [ 316.039938][T10180] __get_compat_msghdr+0x6db/0x9d0 [ 316.045038][T10180] get_compat_msghdr+0x108/0x2b0 [ 316.049983][T10180] do_recvmmsg+0xdd1/0x22f0 [ 316.054577][T10180] __sys_recvmmsg+0x519/0x6f0 [ 316.059245][T10180] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 316.065303][T10180] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 316.071446][T10180] __do_fast_syscall_32+0x102/0x160 [ 316.076634][T10180] do_fast_syscall_32+0x6a/0xc0 [ 316.081477][T10180] do_SYSENTER_32+0x73/0x90 [ 316.086928][T10180] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 316.093233][T10180] [ 316.095544][T10180] Uninit was stored to memory at: [ 316.100554][T10180] kmsan_internal_chain_origin+0xad/0x130 [ 316.106259][T10180] __msan_chain_origin+0x57/0xa0 [ 316.111185][T10180] __get_compat_msghdr+0x6db/0x9d0 [ 316.116299][T10180] get_compat_msghdr+0x108/0x2b0 [ 316.121226][T10180] do_recvmmsg+0xdd1/0x22f0 [ 316.125731][T10180] __sys_recvmmsg+0x519/0x6f0 [ 316.130400][T10180] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 316.136550][T10180] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 316.142710][T10180] __do_fast_syscall_32+0x102/0x160 [ 316.148073][T10180] do_fast_syscall_32+0x6a/0xc0 [ 316.152924][T10180] do_SYSENTER_32+0x73/0x90 [ 316.157421][T10180] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 316.163724][T10180] [ 316.166038][T10180] Uninit was stored to memory at: [ 316.171052][T10180] kmsan_internal_chain_origin+0xad/0x130 [ 316.176765][T10180] __msan_chain_origin+0x57/0xa0 [ 316.181691][T10180] __get_compat_msghdr+0x6db/0x9d0 [ 316.186803][T10180] get_compat_msghdr+0x108/0x2b0 [ 316.191729][T10180] do_recvmmsg+0xdd1/0x22f0 [ 316.196224][T10180] __sys_recvmmsg+0x519/0x6f0 [ 316.200891][T10180] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 316.206947][T10180] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 316.213091][T10180] __do_fast_syscall_32+0x102/0x160 [ 316.218367][T10180] do_fast_syscall_32+0x6a/0xc0 [ 316.223207][T10180] do_SYSENTER_32+0x73/0x90 [ 316.227701][T10180] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 316.234005][T10180] [ 316.236317][T10180] Uninit was stored to memory at: [ 316.241330][T10180] kmsan_internal_chain_origin+0xad/0x130 [ 316.247035][T10180] __msan_chain_origin+0x57/0xa0 [ 316.251960][T10180] __get_compat_msghdr+0x6db/0x9d0 [ 316.257059][T10180] get_compat_msghdr+0x108/0x2b0 [ 316.261982][T10180] do_recvmmsg+0xdd1/0x22f0 [ 316.266474][T10180] __sys_recvmmsg+0x519/0x6f0 [ 316.271140][T10180] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 316.277198][T10180] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 316.283357][T10180] __do_fast_syscall_32+0x102/0x160 [ 316.288545][T10180] do_fast_syscall_32+0x6a/0xc0 [ 316.293391][T10180] do_SYSENTER_32+0x73/0x90 [ 316.297973][T10180] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 316.304275][T10180] [ 316.306605][T10180] Uninit was stored to memory at: [ 316.311617][T10180] kmsan_internal_chain_origin+0xad/0x130 [ 316.317324][T10180] __msan_chain_origin+0x57/0xa0 [ 316.322249][T10180] __get_compat_msghdr+0x6db/0x9d0 [ 316.327347][T10180] get_compat_msghdr+0x108/0x2b0 [ 316.332272][T10180] do_recvmmsg+0xdd1/0x22f0 [ 316.336767][T10180] __sys_recvmmsg+0x519/0x6f0 [ 316.341435][T10180] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 316.347492][T10180] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 316.353641][T10180] __do_fast_syscall_32+0x102/0x160 [ 316.358831][T10180] do_fast_syscall_32+0x6a/0xc0 [ 316.363677][T10180] do_SYSENTER_32+0x73/0x90 [ 316.368184][T10180] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 316.374485][T10180] [ 316.376801][T10180] Uninit was stored to memory at: [ 316.381815][T10180] kmsan_internal_chain_origin+0xad/0x130 [ 316.387522][T10180] __msan_chain_origin+0x57/0xa0 [ 316.392466][T10180] __get_compat_msghdr+0x6db/0x9d0 [ 316.397578][T10180] get_compat_msghdr+0x108/0x2b0 [ 316.402514][T10180] do_recvmmsg+0xdd1/0x22f0 [ 316.407086][T10180] __sys_recvmmsg+0x519/0x6f0 [ 316.411759][T10180] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 316.417822][T10180] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 316.424093][T10180] __do_fast_syscall_32+0x102/0x160 [ 316.429311][T10180] do_fast_syscall_32+0x6a/0xc0 [ 316.434162][T10180] do_SYSENTER_32+0x73/0x90 [ 316.438666][T10180] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 316.444971][T10180] [ 316.447282][T10180] Local variable ----msg_sys@do_recvmmsg created at: [ 316.453946][T10180] do_recvmmsg+0xbf/0x22f0 [ 316.458364][T10180] do_recvmmsg+0xbf/0x22f0 12:52:42 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 316.489547][ T4726] usb 3-1: config 0 descriptor?? 12:52:42 executing program 3: write$rfkill(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x2, 0x3}, 0x8) unshare(0x6c060000) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f00000000c0)='\x00\x00\x00@\x00\x00\x00@\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD5\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851\xacC\xce3L5\t\xc2\xbcG\x14\x96\xb7Y9OC\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xea^Ik\x886y\x19d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\xad\xb4\xe7QCvNhx461\x04N<\xedV\xcet\xaa~') ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x7709, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0x0, 0x10000) ioctl$KDSETLED(r0, 0x4b32, 0x36078e8f) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0xa, 0x6, 0x36fe) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0xee01) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x100005b, 0x2, &(0x7f0000000400)=[{&(0x7f0000000300)="713c9f39934c3dfca159d39cb3c64db40be4318a9efd", 0x16, 0x1f}, {&(0x7f0000000340)="847a95e635c849fd03f9a54d719b663253fa71764629708a201d9d8fbc45c737604a047532aa0c0e4dc6db47f2212b9bf2d09669083c026bb4f70f955fa0d366194418436576b2c8da0e354e04b8f38e954a6163bbc8cdef4e914e97aee7255d1a61e379f5d3ea110b5c4bcb746b5f5d3bc6fd5bfad4a5100a4783b321d1eae8f2050b5fa51702bbc3dcd010d900eefe08", 0x91, 0x9}], 0x800080, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRESDEC=0xee00, @ANYBLOB=',subj_type=,uid<', @ANYRESDEC=r3, @ANYBLOB=',\x00']) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'nat\x00', 0x21880, [0x6300]}, &(0x7f0000000100)=0x54) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x68902, 0x0) write$rfkill(r4, &(0x7f0000000040)={0x1}, 0x8) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6, 0x3}, 0x8) write$rfkill(r4, &(0x7f0000000080)={0x9, 0x1, 0x3, 0x1, 0x1}, 0x8) [ 316.966767][ T4726] cm6533_jd 0003:0D8C:0022.000B: No inputs registered, leaving [ 317.037458][ T4726] cm6533_jd 0003:0D8C:0022.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 317.236788][ T9801] usb 3-1: USB disconnect, device number 15 [ 317.293965][T10204] IPVS: ftp: loaded support on port[0] = 21 12:52:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:52:43 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:43 executing program 4: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1, 0xa365, 0x3745, 0x800, 0xffffffffffffffff}) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0245629, &(0x7f0000000080)={0x0, 0x3, 0x6, [], &(0x7f0000000040)=0x9}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x9, 0x0, 0x2, 0x0, 0x0, [{{r0}, 0x7}, {{r0}}]}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000140)={0x800, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "ada0ac7085b950"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001140)={{0x0, 0x13, 0xffffffffffffffff, 0x3, 0x6, 0x0, 0x5, 0x1, 0x1f, 0x6, 0xfffffffd, 0x1, 0xe6f, 0x4, 0x200}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001200)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002200)={0x0, 0x0, "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", "2e085ee4ce1dc1bef48ba84a6847d9c693e381f08d396644c1840c632381ce3df1449abf980a7e4dc9ee889cc4b394e3beed2d13f93e0c786a23110f662c77763b3246eff12cdd2b621da2db903c94800577a1a35e1124a3fb42f8408641e84f27641c25a99c71dfdf05b22b6a5b47c9a2020333f2f5161e4939d02543cf07985d5f80b2faf786d5f3061974ae3898e29e6de0b8ef4284091f174a25e348292fcc02e8319838a6c6158db1d9d7a5b913a5ee7a114395822b819749cd20a4ada9ef7d47f3f2898372031b1558b0af6ac85b360223fd2d4e3511a371ca847341edb85dd0698fc1c3cfde573fdf04ac7d181a8276c9724d683d5696aa4749c81680ff8fd645ca60216b57fb6cff76599f964223409806a7e94c360a8749d90d0858730801c7bd02e640edf60fbc845114094c73d8e51b30dd11bfd3af0d62064d3c2d11d7ceab024699d108bb0e23b88e34ea3ee720adcf03e77ce2c45b8ca85dff1359d154b998f5c48beff0bc8c524c0af982520ca23d5f94ad18f1ef81037ea0aee910ab65d57332a935a968050eb67856d55f069c20cb38e7cced3f2c80141ee814f87299063e68d3ac34b56f8af288cd04bc6935a3cc177ed1d51fbaf0f9bdefb83d0eb0509e699928d3af268519d721c43878bf74a0dfb2aada04758b750bca3d260cda9e4f06e5c4229b8d24be7bdf5778c386ac0a275f53a6d713e93c079e476c57efc823c6c100a2bcf27a4918833fea66258029db0202ef1541c13c365d43d80cc8f7c167f6af7557ada91659192ea32f9d050c149017f4f06af0a6fabb5840ff7f5d7ae14e6ece1e5d170b1aeb1e1154d24592f36fdd603903fe46bc3c4823b63d6e8ef873242c2ca2666ef0e395495f8d1fdcb7489753133e5b903d4f9442ea16218b288236b5b6a315e73d8edbfd0aea724edd55ba4510947d85f2aa9dc551337a4c2d568aa77e7cc001199689b85783bea939abcbecbbf758d91aedea296605a683ac1d30fd407b02ba9bc0f2ec3003c76ee7a26a4e177e2e1e7636a277326f464a94e6cc1f893c0d6e1378aaf6164e5fa86e1d2fea05e3b6538b7dc78810fb2c7320b4102c7e7dccfde1f51858afed72f3a55d0acdc361a0243895cb32dcf0a8f22cf6185ba0c5ac8a986c6067d639172cd30a6879f9cbee97cfb6ea9732f060d4ea6cd0f7f99de809c07d3122b34de89ad178f9b518e773970aa9c264dcb4f3b1e9eedcdcd692a29488df7de0295d27bac402fa6e053aabbee2f9e55c07627460caae5854d7645265dcb1287a5d1bf3334afb324317bdf051144e65a9a80c300b20e611c868c922b16f3092bd73213762c80f1be63426d9bf147268dd72f0798235289b88790e4462d39c3ff6cca3653a30c50e207e43faa26884d09d520677f9171d4cd2532535a6744c96a913523b7f3160d30b4b09512c5628711d901c8dc77b1b52e55a8fd53e218f3a30bdb4c844f1f18a30e66f7789ec9a322708ff8bdb8dcd31baf4487a7746fdce43f2519188a5d7d11cd02c3bb754d6936d4274891d12972d03071d8a6a76262fad1ddffb88333d13a80ae2d9efa707ea89127b71ae5cd11ab5a892318b1b4a94298a5cdecfb4ebdef21e98cfd9f2ccb88aa9201e8eb17477521caf5005d7119c14f90c6f88f1e2a248bec80b4d2035f127f9ba96d581b8ca51a02ec80b3d3360ba7cee9e237bfd474acb670fdeeeb85348fae2af2fd5ed3c47899a95caa3a9bcc86a91cd31cbcd7bafc6d59e81b267df2a0ded2e8dbd677ac5c3942b37304382da87c454554fd1625c66d0ab27511111e8dc8e9e68d6bc0852870b0a6ac2dfe1c9a14ec5c67347080ddcb269f02b0cb8a0366437756122efcaabe829124ade86632bcf6e737df81b48392266f0aee97400b3399b266e71f65a59dd9a4e2fffcda9bba11df73b418232e6bd7115e83eaf40a84a521b3d446a9126d7e0bae4bf5f9977846f160c669fde1748b76a21e67c701a324f0bc6cc467eb7ca23684552348ec3c04df29919ee711e0a471fbbc1a8cf0459e059f5c2d99be5a6d1cbcb5257a574e255674d7b6ee33914c6d2b400983c6f6fa0871257da1ddd6efb98be6c987da5219c7431d05c4182355878c38805c32adef298df23215314183a7a33dae13c4501207889f0aa9182b4e6408695ed2be7b8cf753b609acb2689821a58e3cf840913f06778f1a23d7860ca1edd2abc53ba1ad0fbef0ecf821b20153d8c6b0385439b9f683a70436d0ea58b92971a7cd869a2c98590caca6f6e6ec8da3d44928853eeb9cd86427d4163aa0af177a11c5dc6496998138d27dcc2bcfc92a5226f6df4718e440dc77450019d61cc5517e66899025ffde33e21932691bffd67ef2a6fc2abbbf5e297e917abf381783fd9bf76024dde5f89c61df58ea875bd46ea6fc6aeffe11497086ae47ebf9578d2b5db6a20e591b139683116766a9fe11c482922994d3e5573f049f9b6ad47ed6576f6419ec4b04ee8a92278f1d23a3089609cfed09a67e47b816cdf1b1f665ab02502dbf7dbd6a23154424bc04ac02474e64f691985dc4a7382ab6532366871d2ac2cca66b943c654b4392bd70e2a6ec899f227e5874b9bc86bbe9657baa2c7a46b96107272295dcfb43506023addbbd619f5049dbef71857f327314019961aec4e2c6e16f1568f898f94044c6e15ccd0586abdac8c0fdce01b9b038e2cac279e5ec3a5d22ce6f067fc9220392aafabaadb7a11370776ddf5ff875ab58c826de6dcefdda95ed12966d8f143f54642b1770c837b181f441aa10bf904b200be5dfbf62b1811011a1e59019a91bc5e7a7938324e52ee90fc9e18d946485e2dd4c1c899b94355e8580422ba6f01c3da158d409904ba02ebb64a68d61a418338f2f5f2322fa058b1f45da6551d5285edea31ac07ca77bd4d43241da0377b60861d74240c22bed9ba0deea24da089d32ece26de6b29d1ec032d7596b1f6bb603086eef6cd5d1d06d7202bbfe9bed3af9135d5a286a8db1293ebb24d7a46b8bbe97b6350c444dcbc6d333279f1be4dbac234effdbcd336820759ce812ccc0d65178df2f78dab24d87c87ffebb09db724a3693993a2e3074171942060aa6aa1c5c4bd47c627b4e3b3018d06a7c06ef6c97e67bfb2786443cb622b586ce31a54eeff37b952946949c482b857a8c8e8bbc1ae93637f6a631f899f4528e6cd529b2e1e2bcf911e9ae8554e8edfdc396c6cd91e2b3bb0f2097cee10dd3b9b0bd21af44552546600100707e14b401085cca9e9f8f638e061f8dea03ac68b6510399b111a65bde68872eb5d4eff7d8c4eb7ade5ff683abd4d2fbb0c170f81dfeb4657371a1c349dd4adc8969c52161eb929e88e9b60104e93cc2eb76ebb9bac2bc8daf215ece5fba461a0b7e9361d078fc506037b0def4aa02d5e6298b7a6b52556f1832234079b29863aefc5cdae83ba58a31b9086558ceab590ac24184f6aaa46f471c76b0da529b256796ace63d596b16ddca2809361bb2b52a2ab19e4facff1ae0f5f98540edfe77b3422f1b5e701e867c304cc0811bd5215d5d45e987344cc76e86dd632c14210364b7090ac2579ed8cc6decad6ab0c30d1efcb2b84df649422f95c8c1117a0cfb2dac03a44148c4fc76136f6ca61ea7b29274cfbec4c0a8a7ea9a855f12e0b7a09dfbb591f8dffa2f6fa8b949eef35da607b59ed1756d39616dab9c130d4779084a4651c313c4eec0a314ca85ccea28eb0b34ce6bbed39faad20809153427d3325dfaccb61f0c97d4ec7dd4799ecc51c1feefb0d53bd3e0b268c20f031fc6c5f061870875af455af2a1f52491273c5fb723e1d3a645f7975b9d4a27e7c23e908bb68cd4fd838297df586a69d0d944e05c5ea641d1cdd1c4f6c565706d058a698e8bfd5de93d6b81cac71444f9610e1156a828ef172e2b30e4d7f50f6c496bde22b925cd34a4810fbf11a51a76ad4a54952a7e091f0568f1ab351832590fd60efe4d27cd2d3444d5a5da0601b3e8a7ce39b140619a6282ee13ec698f0495fcb333fabe0a4a4b534c54b2d3c0cd55c922b04a925e33fece09bd014265b26bc891d30af0a39c951c23f703405f57223ddf37f9582a0b73d0e69e14f84a10e5cdfa99691ff8df741b9e3e4a517b871b53b5bd45fa53731722a658f682d9a2e215eb0796eed789aa274ecf025f55bae7f2b286c1e27f166453bace6453b87e7e7208d910f9033591e8961035435b2cc0fef17c0292468fc030103700a728b98b2f5efbdae208225aca32252e8634750718504fa80777c93b92da9a0cfa54ceac0961c052f4f3c742d3a572ade05a583ae4b4e8f50abac3ef48f046db8855e4d9386fbc3bd7643668707fdf656d117864b29b2928fec61cca236fb6abd39b42a1d72f718bd06bc00a81196a54293a00207b1e10914097817e881abadb9046ecd176dc8777439d208b9da6d61afdefc0632ed5b0dfcdb8e182ee5e439ccc0170c13f38fce40cfc6b4448cd5ca17464e03f9d808d1e28debd901cb388c8dfa09e77d2f453b8fb8c4c5311420601afdcb8a63fcbf2cd35b05ce6d398ac6aae7252f2510afcdd13a582eb43245de33ed97558976d141def64c209219368284e588f44a4314f76cf58659c6814fcb4d520b785ece15ddb8bb743f63b7c9af73d99543bdd18c1d6b08d170e96857c8f218b8bfb0bc095a226ab49ceea3f32bcc5c82c86cb706b75ca083e56772848b145692f29b994ce528db922182d674534e5ca26f2ce41171676e803785bfe26cae0cd0c40c33dc79a7ae789eb4b65e15f5395736bfe9dd7366e754c127e473c5ff606e427261bf7057052a2898d48ebee5d46ffa6622d22e89ceaed36588438599e8ffa288f78fa3d55976efe326cb9c63078fadce2c17b3b18631a10ec71665c999d0667aa933ee6073f8b1a5cce5358676238813812c6e360c255691adaabecc9f59490c198f444f72f2953c1e139462d5fcf434330c62406ced8dda75fddc993c573e2fa517749ca426f9832c10b8f8e8802dd70e4884ca305617b350a8efa4ce87156fe63dab455c6e16ab954e9c047900a0e03e4e18eb55c3d2264fa747617e2891b8847730dbc59d87e66ae28ffda0ee45e88a56fa06aa003fc5a5295db795ac13f531de92e8e30139642f60b112faf7905b28380cc9e423a6d80ce03c1a9bbc06820e782d1f122549512c512c4a5ead02c96e247ce69b6cb23096cbe490fc5bba2318b4621aeb9b510961f201bf4e131d1480104ca991591e0079cb0d300409975faf362bbc2a9d1a22b975cf6a3867e7d34221a728327cb18c122d9414837c55766f8e2849c525533c76e6767fe4ac6c3d9ce7cf141627372212e92bdbb1d8f5cc3c05eef02c45ef5812028bd7a324d56d74e0a72d6169570ea48c2bb6c472e329"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000003200)={{0x0, 0x7, 0x3, 0x9, 0x1f, 0x1f, 0xff, 0x5, 0x3, 0x9b66, 0x2, 0x1000, 0x5, 0xc0000000000, 0xb3bb}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000004200)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000004400)={{0x0, 0x8c2, 0x44, 0x7f, 0x0, 0x2, 0x3, 0x8, 0x6, 0x31, 0xb1, 0x2, 0x0, 0x8, 0x401}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000005400)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000005600)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "e2fb741aecacd7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000006600)={{0x0, 0x35, 0x7fff, 0x3f, 0x10000, 0x800, 0x9, 0x7f, 0x8000, 0xee7, 0x8, 0xfffffffffffffff9, 0x8, 0x1ff, 0x5}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006680)={0xffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "41ac1ffb6311d0"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000007680)={0xac8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "2c8322fe1512c0"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000008680)={{0x0, 0x9, 0xe0000000000, 0xdfd2, 0x4, 0x3, 0x100000001, 0x3f, 0x1, 0x8, 0x3f, 0x1ff, 0x13d, 0x3, 0x100000000}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000008740)={{0x0, 0x8, 0x2, 0x9, 0x5, 0xcd2, 0x8, 0xff, 0x401, 0x80000001, 0x5a1, 0x18, 0x0, 0xec, 0x7}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000087c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000077340)={0x4000000, [{r1}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {r5, r6}, {r7}, {r8}, {r9}, {r10, r11}, {0x0, r12}, {r13}, {r14, r15}], 0x5, "a0528628b1e9d7"}) [ 318.961897][ T4726] usb 3-1: new high-speed USB device number 16 using dummy_hcd 12:52:44 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 319.327750][ T4726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.340216][ T4726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.350655][ T4726] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 319.359913][ T4726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.431490][ T4726] usb 3-1: config 0 descriptor?? [ 319.973741][ T4726] usbhid 3-1:0.0: can't add hid device: -71 [ 319.980060][ T4726] usbhid: probe of 3-1:0.0 failed with error -71 [ 320.074495][ T4726] usb 3-1: USB disconnect, device number 16 12:52:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:52:46 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:46 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 321.324391][ T17] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 321.693972][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.705161][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.715337][ T17] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 321.724618][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.084068][ T17] usb 3-1: config 0 descriptor?? 12:52:47 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:47 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:47 executing program 3: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 322.633892][ T17] usbhid 3-1:0.0: can't add hid device: -71 [ 322.640214][ T17] usbhid: probe of 3-1:0.0 failed with error -71 [ 322.696127][ T17] usb 3-1: USB disconnect, device number 17 [ 323.206537][T10271] IPVS: ftp: loaded support on port[0] = 21 [ 323.547627][T10279] not chained 150000 origins [ 323.552273][T10279] CPU: 0 PID: 10279 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 323.561129][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.571206][T10279] Call Trace: [ 323.574519][T10279] dump_stack+0x21c/0x280 [ 323.578867][T10279] kmsan_internal_chain_origin+0x6f/0x130 [ 323.584606][T10279] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 323.590706][T10279] ? udpv6_recvmsg+0x26bf/0x2b00 12:52:49 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 323.595676][T10279] ? kmsan_get_metadata+0x116/0x180 [ 323.600910][T10279] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 323.606736][T10279] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 323.612837][T10279] ? kmsan_get_metadata+0x116/0x180 [ 323.618088][T10279] ? kmsan_internal_set_origin+0x85/0xc0 [ 323.623843][T10279] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 323.630193][T10279] ? _copy_from_user+0x1fd/0x300 [ 323.635180][T10279] ? kmsan_get_metadata+0x116/0x180 [ 323.640399][T10279] __msan_chain_origin+0x57/0xa0 [ 323.645362][T10279] __get_compat_msghdr+0x6db/0x9d0 [ 323.650502][T10279] get_compat_msghdr+0x108/0x2b0 [ 323.655475][T10279] do_recvmmsg+0xdd1/0x22f0 [ 323.659999][T10279] ? __irq_exit_rcu+0x7a/0x270 [ 323.664781][T10279] ? kmsan_get_metadata+0x116/0x180 [ 323.669989][T10279] ? kmsan_internal_set_origin+0x85/0xc0 [ 323.675634][T10279] ? __msan_poison_alloca+0xe9/0x110 [ 323.680939][T10279] ? __sys_recvmmsg+0xb5/0x6f0 [ 323.685719][T10279] __sys_recvmmsg+0x519/0x6f0 [ 323.690416][T10279] ? sysvec_apic_timer_interrupt+0x11d/0x130 [ 323.696414][T10279] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 323.702588][T10279] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 323.708676][T10279] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 323.714961][T10279] __do_fast_syscall_32+0x102/0x160 [ 323.720211][T10279] do_fast_syscall_32+0x6a/0xc0 [ 323.725082][T10279] do_SYSENTER_32+0x73/0x90 [ 323.729603][T10279] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 323.735937][T10279] RIP: 0023:0xf7f98549 [ 323.740026][T10279] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 323.759650][T10279] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 323.768089][T10279] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 323.776079][T10279] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 323.784064][T10279] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.792032][T10279] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 323.799992][T10279] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.807953][T10279] Uninit was stored to memory at: [ 323.812974][T10279] kmsan_internal_chain_origin+0xad/0x130 [ 323.818682][T10279] __msan_chain_origin+0x57/0xa0 [ 323.823608][T10279] __get_compat_msghdr+0x6db/0x9d0 [ 323.828706][T10279] get_compat_msghdr+0x108/0x2b0 [ 323.833637][T10279] do_recvmmsg+0xdd1/0x22f0 [ 323.838135][T10279] __sys_recvmmsg+0x519/0x6f0 [ 323.842825][T10279] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 323.848884][T10279] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 323.855030][T10279] __do_fast_syscall_32+0x102/0x160 [ 323.860218][T10279] do_fast_syscall_32+0x6a/0xc0 [ 323.865058][T10279] do_SYSENTER_32+0x73/0x90 [ 323.869554][T10279] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 323.875856][T10279] [ 323.878166][T10279] Uninit was stored to memory at: [ 323.883180][T10279] kmsan_internal_chain_origin+0xad/0x130 [ 323.888887][T10279] __msan_chain_origin+0x57/0xa0 [ 323.893815][T10279] __get_compat_msghdr+0x6db/0x9d0 [ 323.898914][T10279] get_compat_msghdr+0x108/0x2b0 [ 323.903843][T10279] do_recvmmsg+0xdd1/0x22f0 [ 323.908337][T10279] __sys_recvmmsg+0x519/0x6f0 [ 323.913020][T10279] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 323.919078][T10279] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 323.925226][T10279] __do_fast_syscall_32+0x102/0x160 [ 323.930415][T10279] do_fast_syscall_32+0x6a/0xc0 [ 323.935256][T10279] do_SYSENTER_32+0x73/0x90 [ 323.939756][T10279] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 323.946061][T10279] [ 323.948374][T10279] Uninit was stored to memory at: [ 323.953391][T10279] kmsan_internal_chain_origin+0xad/0x130 [ 323.959098][T10279] __msan_chain_origin+0x57/0xa0 [ 323.964115][T10279] __get_compat_msghdr+0x6db/0x9d0 [ 323.969214][T10279] get_compat_msghdr+0x108/0x2b0 [ 323.974153][T10279] do_recvmmsg+0xdd1/0x22f0 [ 323.978645][T10279] __sys_recvmmsg+0x519/0x6f0 [ 323.983314][T10279] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 323.989382][T10279] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 323.995526][T10279] __do_fast_syscall_32+0x102/0x160 [ 324.000725][T10279] do_fast_syscall_32+0x6a/0xc0 [ 324.005566][T10279] do_SYSENTER_32+0x73/0x90 [ 324.010061][T10279] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 324.016367][T10279] [ 324.018676][T10279] Uninit was stored to memory at: [ 324.023692][T10279] kmsan_internal_chain_origin+0xad/0x130 [ 324.029397][T10279] __msan_chain_origin+0x57/0xa0 [ 324.034337][T10279] __get_compat_msghdr+0x6db/0x9d0 [ 324.039436][T10279] get_compat_msghdr+0x108/0x2b0 [ 324.044392][T10279] do_recvmmsg+0xdd1/0x22f0 [ 324.048883][T10279] __sys_recvmmsg+0x519/0x6f0 [ 324.053552][T10279] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 324.059608][T10279] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 324.065751][T10279] __do_fast_syscall_32+0x102/0x160 [ 324.070947][T10279] do_fast_syscall_32+0x6a/0xc0 [ 324.075887][T10279] do_SYSENTER_32+0x73/0x90 [ 324.080395][T10279] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 324.086697][T10279] [ 324.089006][T10279] Uninit was stored to memory at: [ 324.094020][T10279] kmsan_internal_chain_origin+0xad/0x130 [ 324.099728][T10279] __msan_chain_origin+0x57/0xa0 [ 324.104657][T10279] __get_compat_msghdr+0x6db/0x9d0 [ 324.109754][T10279] get_compat_msghdr+0x108/0x2b0 [ 324.114681][T10279] do_recvmmsg+0xdd1/0x22f0 [ 324.119172][T10279] __sys_recvmmsg+0x519/0x6f0 [ 324.123841][T10279] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 324.129896][T10279] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 324.136042][T10279] __do_fast_syscall_32+0x102/0x160 [ 324.141230][T10279] do_fast_syscall_32+0x6a/0xc0 [ 324.146071][T10279] do_SYSENTER_32+0x73/0x90 [ 324.150566][T10279] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 324.156868][T10279] [ 324.159185][T10279] Uninit was stored to memory at: [ 324.164196][T10279] kmsan_internal_chain_origin+0xad/0x130 [ 324.169902][T10279] __msan_chain_origin+0x57/0xa0 [ 324.174836][T10279] __get_compat_msghdr+0x6db/0x9d0 [ 324.179935][T10279] get_compat_msghdr+0x108/0x2b0 [ 324.185818][T10279] do_recvmmsg+0xdd1/0x22f0 [ 324.190321][T10279] __sys_recvmmsg+0x519/0x6f0 [ 324.194991][T10279] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 324.201049][T10279] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 324.207193][T10279] __do_fast_syscall_32+0x102/0x160 [ 324.212384][T10279] do_fast_syscall_32+0x6a/0xc0 [ 324.217230][T10279] do_SYSENTER_32+0x73/0x90 [ 324.221724][T10279] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 324.228029][T10279] [ 324.230341][T10279] Uninit was stored to memory at: [ 324.235371][T10279] kmsan_internal_chain_origin+0xad/0x130 [ 324.241080][T10279] __msan_chain_origin+0x57/0xa0 [ 324.246008][T10279] __get_compat_msghdr+0x6db/0x9d0 [ 324.251157][T10279] get_compat_msghdr+0x108/0x2b0 [ 324.256085][T10279] do_recvmmsg+0xdd1/0x22f0 [ 324.260587][T10279] __sys_recvmmsg+0x519/0x6f0 [ 324.265256][T10279] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 324.271319][T10279] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 324.277465][T10279] __do_fast_syscall_32+0x102/0x160 [ 324.282657][T10279] do_fast_syscall_32+0x6a/0xc0 [ 324.287499][T10279] do_SYSENTER_32+0x73/0x90 [ 324.291995][T10279] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 324.298303][T10279] 12:52:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) [ 324.300615][T10279] Local variable ----msg_sys@do_recvmmsg created at: [ 324.307287][T10279] do_recvmmsg+0xbf/0x22f0 [ 324.311700][T10279] do_recvmmsg+0xbf/0x22f0 [ 324.992234][ T9764] Bluetooth: hci4: command 0x0409 tx timeout 12:52:50 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 325.318561][T10271] chnl_net:caif_netlink_parms(): no params data found [ 325.740289][T10271] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.748179][T10271] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.846259][T10271] device bridge_slave_0 entered promiscuous mode [ 325.896104][T10271] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.903665][T10271] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.936355][T10271] device bridge_slave_1 entered promiscuous mode [ 326.120979][T10271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.238018][T10271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 12:52:52 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 326.564466][T10271] team0: Port device team_slave_0 added [ 326.594844][ T4726] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 326.638000][T10271] team0: Port device team_slave_1 added [ 326.933613][T10271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.940841][T10271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.967359][T10271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.026393][ T4726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.037544][ T4726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.047691][ T4726] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 327.057164][ T4726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.063615][ T9764] Bluetooth: hci4: command 0x041b tx timeout [ 327.227275][ T4726] usb 3-1: config 0 descriptor?? [ 327.270232][T10271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.278091][T10271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.304430][T10271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.467426][T10271] device hsr_slave_0 entered promiscuous mode [ 327.544045][T10271] device hsr_slave_1 entered promiscuous mode [ 327.566765][T10271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.574555][T10271] Cannot create hsr debugfs directory [ 327.827994][ T4726] usbhid 3-1:0.0: can't add hid device: -71 [ 327.836439][ T4726] usbhid: probe of 3-1:0.0 failed with error -71 [ 327.918825][ T4726] usb 3-1: USB disconnect, device number 18 [ 328.253699][T10271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 328.302782][T10271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 328.369825][T10271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 328.474847][T10271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.132983][ T9764] Bluetooth: hci4: command 0x040f tx timeout [ 329.615618][T10271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.839315][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.848679][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.891405][T10271] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.986681][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.997121][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.007518][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.015024][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.160107][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.169847][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.179979][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.189596][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.197092][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.206483][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.217647][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.228869][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.239449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.438474][T10271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.449516][T10271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.753675][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.764036][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.774710][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.785940][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.795835][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.806430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.816342][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.826128][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.834157][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.875340][T10271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.178274][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.213279][ T9764] Bluetooth: hci4: command 0x0419 tx timeout [ 331.679521][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 331.689923][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 331.909818][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 331.919772][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.968857][T10271] device veth0_vlan entered promiscuous mode [ 331.980160][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.989847][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.102834][T10271] device veth1_vlan entered promiscuous mode [ 332.205244][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 332.215031][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 332.351924][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.362405][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.418287][T10271] device veth0_macvtap entered promiscuous mode [ 332.500098][T10271] device veth1_macvtap entered promiscuous mode [ 332.626872][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 332.638004][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.648153][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 332.658771][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.668818][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 332.679440][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.689484][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 332.700146][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.714523][T10271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.725036][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 332.734882][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.745263][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 332.749136][ T17] Bluetooth: hci0: command 0x0406 tx timeout [ 332.755388][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 332.821621][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 332.832330][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.843106][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 332.853933][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.863980][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 332.874605][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.884704][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 332.895369][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.909714][T10271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.921993][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.932941][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.027507][T10271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.036904][T10271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.045976][T10271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.058572][T10271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.606872][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.616076][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.634375][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 333.789631][ T903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.797978][ T903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.807140][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:52:59 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0xed5}, 0x40) prlimit64(0x0, 0x5, &(0x7f0000000280)={0x9, 0x4}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={&(0x7f00000000c0)="ebd392bfef9d49590361bcddc77e654ce0cc499eb09aee45c60db274c1c2e2313ffac650f173265ba1f8b327a1ab425ffb0720c4da847c16393211a9caf0c75b9ff20afaed0e8d275c682385956eb5905e00a8a4646dcbe10770892a7165356792e4e4e2101301352513387dc286a36f5f0844bc6de08c081c85f608c27f7647777157d0f9bf7ced431d61f1472c567998ec65260c7ce71fd4e6652125651637f5", &(0x7f0000001600)=""/4096, &(0x7f0000000180)="a861153671ce5a96838389b4c457e0045435b4aeca611e114331ff19e0a2ae938c013b062b490e75690c8addcccd1c59e46f526c5c2f50afd0f2b898a0d20ca1d25e960139a0d2f8cde97507878efd2005973a1af8560d6cc7b418b571e81a860df214dc0ed7dafbdcff0279c1fa64a6b662692819af17a7a58282", &(0x7f00000002c0)="3db6c6fbb0a42f5dfab1a75062d7a8ea8adfc2d14d43e9d3edd5e2fe917483b151e1a9d4b27334b915a5f7239f0d1cf53136e4a8f0d44a1f3e60176838e576486bece0ac161dfa592c8eeb63539a7316668e528d8e3e0feef3adebd1d18f366d57331057f39cc872704efdebc99f6bc89f3588891015335b799c0a9f183530304dc2963acee562e863d0bde15947c55071faee9d51c16407669289b1fd89f2f0fa71", 0x1000, r0}, 0x38) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) setrlimit(0xe, &(0x7f0000000200)={0x8000000, 0x3}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r3 = dup2(r2, r2) read$char_usb(r3, &(0x7f00000001c0)=""/133, 0x85) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) getrlimit(0x2, &(0x7f0000000500)) r5 = dup2(r4, r4) read$char_usb(r5, &(0x7f00000001c0)=""/133, 0x85) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@newchain={0x2c, 0x64, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0x8}, {0x9, 0xffe0}, {0x0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r3, @ANYRESHEX=r3, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200060002000000000005001700000000000800150045e10b0008000a00dbf91f30c4fcb8b759aed16a"], 0x60}}, 0x20040000) 12:52:59 executing program 0: listxattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:59 executing program 3: rmdir(&(0x7f0000000080)='./file0\x00') 12:52:59 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:52:59 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000100)) 12:53:00 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000100)) 12:53:01 executing program 0: listxattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:01 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x0) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x20, 0x0, 0x207a000}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008bc0)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r2, &(0x7f00000066c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f000000abc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r12, 0xee01) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000500)={0x5c8, 0xffffffffffffffda, 0x0, [{{0x1, 0x1, 0x37a, 0x4, 0x9, 0x5, {0x1, 0x8, 0x6, 0x3, 0x9, 0x1, 0x3f, 0x9, 0x7fffffff, 0x2000, 0x6, 0x0, r7, 0x0, 0x1}}, {0x0, 0xfd8f, 0xa, 0xb2f3, '/dev/fuse\x00'}}, {{0x2, 0x3, 0x4, 0x4, 0x3, 0x6, {0x0, 0xda, 0x3, 0x8, 0x10000, 0x3, 0x705d, 0xa4e00000, 0xfffffffc, 0x1000, 0x1, r6, 0x0, 0x7}}, {0x4, 0x65a, 0x0, 0x1}}, {{0x4, 0x2, 0x0, 0x519280c6, 0x7, 0x7750, {0x2, 0x4, 0xb1, 0x0, 0x8001, 0xb93, 0xffff0001, 0x81, 0x163, 0x2000, 0x8, r4, r7, 0x1, 0x7f}}, {0x3, 0xe3f6, 0x2, 0x6b5, '\'.'}}, {{0x6, 0x3, 0x8000, 0x3ff, 0x9dc, 0x7f, {0x6, 0x100000000, 0x401, 0xffffffff, 0x4, 0x0, 0xff, 0x1, 0x112f, 0x8000, 0x7, r4, r7, 0xfffffff7, 0xff}}, {0x5, 0x7f, 0x3, 0x7, '[).'}}, {{0x1, 0x0, 0xffff, 0x10001, 0x7fffffff, 0x80, {0x5, 0xffffffff, 0xffff, 0x8c, 0x3, 0x9, 0x7, 0x9, 0x3f, 0x2000, 0x7fff, r4, 0x0, 0x6, 0x2}}, {0x3, 0x2, 0x4, 0x2, '-\xc8\xc6('}}, {{0x6, 0x1, 0x5, 0x6, 0x100, 0x5, {0x4, 0x40, 0xffffffffffffff80, 0x3, 0x5, 0x5, 0x38cd, 0x2, 0x8, 0x2000, 0x0, 0x0, 0xee01, 0x3, 0x3}}, {0x5, 0x5, 0x9, 0x7, '/dev/kvm\x00'}}, {{0x0, 0x2, 0x200000000000000, 0x6, 0x4, 0x6, {0x3, 0xb3e, 0xda, 0x3, 0x9, 0x5, 0x45, 0xe3c8, 0xb66, 0x8000, 0x182, 0x0, r8, 0x100, 0x4}}, {0x2, 0x2, 0x9, 0x1f, '/dev/kvm\x00'}}, {{0x5, 0x3, 0x2, 0x7f, 0x401, 0x8, {0x4, 0x100, 0x5, 0x8, 0x5, 0x5, 0x0, 0xf960, 0x0, 0x2000, 0x1000, r4, r9, 0x401, 0x3}}, {0x6, 0x4, 0x5, 0x7, 'fuse\x00'}}, {{0x5, 0x0, 0x7, 0x20, 0x1899, 0x10000, {0x4, 0x8001, 0x31, 0x1, 0x7, 0x2, 0x9, 0x3, 0x9, 0x8000, 0xfffffffe, r10, r12, 0xfffffc01}}, {0x0, 0x7, 0x9, 0x100, '/dev/kvm\x00'}}]}, 0x5c8) write$FUSE_LK(r2, &(0x7f0000000080)={0x28, 0x0, r5, {{0x0, 0xd32}}}, 0xfffffffffffffdb1) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r13, 0x4010aefd, 0x8167000) [ 335.903687][T10584] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 12:53:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r1 = dup2(r0, r0) read$char_usb(r1, &(0x7f00000001c0)=""/133, 0x85) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f00000001c0)={"bbf3b00dcfdf037c8d7126aa02232e51", 0x0, r2, {0x9, 0x2}, {0x3ff, 0x2}, 0x55042e35, [0x0, 0x4, 0x7ff, 0x0, 0x401, 0xfffffffffffffffd, 0x400000000001, 0x950, 0x1000, 0xb, 0xe6cb, 0x0, 0x3, 0xe099, 0x0, 0x512c]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000000c0)=r2) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000002c0)=r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x23c, 0xf0, 0x118, 0x3e020000, 0x0, 0x118, 0x1a8, 0x1d0, 0x1d0, 0x1a8, 0x1d0, 0x3, 0x0, {[{{@ip={@rand_addr, @loopback, 0xff000000, 0xffffffff, 'netdevsim0\x00', 'nr0\x00'}, 0x0, 0x94, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}, {0xb}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x0, 0x0, [0xffff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffc]}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffe, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x298) 12:53:02 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000100)) [ 336.863588][T10589] not chained 160000 origins [ 336.868234][T10589] CPU: 1 PID: 10589 Comm: syz-executor.1 Not tainted 5.10.0-rc4-syzkaller #0 [ 336.876997][T10589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.887061][T10589] Call Trace: [ 336.890392][T10589] dump_stack+0x21c/0x280 [ 336.894744][T10589] kmsan_internal_chain_origin+0x6f/0x130 [ 336.900461][T10589] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 336.906527][T10589] ? udpv6_recvmsg+0x26bf/0x2b00 [ 336.911479][T10589] ? kmsan_get_metadata+0x116/0x180 [ 336.916842][T10589] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 336.923240][T10589] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 336.929318][T10589] ? kmsan_get_metadata+0x116/0x180 [ 336.934513][T10589] ? kmsan_internal_set_origin+0x85/0xc0 [ 336.940145][T10589] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 336.946206][T10589] ? _copy_from_user+0x1fd/0x300 [ 336.951138][T10589] ? kmsan_get_metadata+0x116/0x180 [ 336.956329][T10589] __msan_chain_origin+0x57/0xa0 [ 336.961259][T10589] __get_compat_msghdr+0x6db/0x9d0 [ 336.966368][T10589] get_compat_msghdr+0x108/0x2b0 [ 336.971303][T10589] do_recvmmsg+0xdd1/0x22f0 [ 336.975832][T10589] ? sched_clock_cpu+0x5e/0x920 [ 336.980681][T10589] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 336.986738][T10589] ? idle_cpu+0x9a/0x1d0 [ 336.990971][T10589] ? kmsan_get_metadata+0x116/0x180 [ 336.996160][T10589] ? kmsan_internal_set_origin+0x85/0xc0 [ 337.001783][T10589] ? __msan_poison_alloca+0xe9/0x110 [ 337.007063][T10589] ? __sys_recvmmsg+0xb5/0x6f0 [ 337.011820][T10589] __sys_recvmmsg+0x519/0x6f0 [ 337.016498][T10589] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 337.022660][T10589] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 337.028815][T10589] __do_fast_syscall_32+0x102/0x160 [ 337.034008][T10589] do_fast_syscall_32+0x6a/0xc0 [ 337.038853][T10589] do_SYSENTER_32+0x73/0x90 [ 337.043348][T10589] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 337.049661][T10589] RIP: 0023:0xf7fda549 [ 337.053722][T10589] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 337.073317][T10589] RSP: 002b:00000000f55d45fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 337.081721][T10589] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 337.089769][T10589] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 337.097728][T10589] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 337.105691][T10589] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 337.113767][T10589] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 337.121734][T10589] Uninit was stored to memory at: [ 337.126755][T10589] kmsan_internal_chain_origin+0xad/0x130 [ 337.132464][T10589] __msan_chain_origin+0x57/0xa0 [ 337.137481][T10589] __get_compat_msghdr+0x6db/0x9d0 [ 337.142588][T10589] get_compat_msghdr+0x108/0x2b0 [ 337.147518][T10589] do_recvmmsg+0xdd1/0x22f0 [ 337.152011][T10589] __sys_recvmmsg+0x519/0x6f0 [ 337.156684][T10589] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 337.162743][T10589] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 337.168896][T10589] __do_fast_syscall_32+0x102/0x160 [ 337.174086][T10589] do_fast_syscall_32+0x6a/0xc0 [ 337.178929][T10589] do_SYSENTER_32+0x73/0x90 [ 337.183541][T10589] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 337.189844][T10589] [ 337.192163][T10589] Uninit was stored to memory at: [ 337.197177][T10589] kmsan_internal_chain_origin+0xad/0x130 [ 337.202886][T10589] __msan_chain_origin+0x57/0xa0 [ 337.207813][T10589] __get_compat_msghdr+0x6db/0x9d0 [ 337.212915][T10589] get_compat_msghdr+0x108/0x2b0 [ 337.217845][T10589] do_recvmmsg+0xdd1/0x22f0 [ 337.222339][T10589] __sys_recvmmsg+0x519/0x6f0 [ 337.227006][T10589] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 337.233084][T10589] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 337.239234][T10589] __do_fast_syscall_32+0x102/0x160 [ 337.244427][T10589] do_fast_syscall_32+0x6a/0xc0 [ 337.249265][T10589] do_SYSENTER_32+0x73/0x90 [ 337.253763][T10589] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 337.260067][T10589] [ 337.262376][T10589] Uninit was stored to memory at: [ 337.267415][T10589] kmsan_internal_chain_origin+0xad/0x130 [ 337.273121][T10589] __msan_chain_origin+0x57/0xa0 [ 337.278047][T10589] __get_compat_msghdr+0x6db/0x9d0 [ 337.283158][T10589] get_compat_msghdr+0x108/0x2b0 [ 337.288087][T10589] do_recvmmsg+0xdd1/0x22f0 [ 337.292602][T10589] __sys_recvmmsg+0x519/0x6f0 [ 337.297271][T10589] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 337.303331][T10589] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 337.309475][T10589] __do_fast_syscall_32+0x102/0x160 [ 337.314665][T10589] do_fast_syscall_32+0x6a/0xc0 [ 337.319509][T10589] do_SYSENTER_32+0x73/0x90 [ 337.324006][T10589] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 337.330308][T10589] [ 337.332626][T10589] Uninit was stored to memory at: [ 337.337657][T10589] kmsan_internal_chain_origin+0xad/0x130 [ 337.343509][T10589] __msan_chain_origin+0x57/0xa0 [ 337.348447][T10589] __get_compat_msghdr+0x6db/0x9d0 [ 337.353748][T10589] get_compat_msghdr+0x108/0x2b0 [ 337.358675][T10589] do_recvmmsg+0xdd1/0x22f0 [ 337.363171][T10589] __sys_recvmmsg+0x519/0x6f0 [ 337.367841][T10589] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 337.373899][T10589] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 337.380061][T10589] __do_fast_syscall_32+0x102/0x160 [ 337.385256][T10589] do_fast_syscall_32+0x6a/0xc0 [ 337.390105][T10589] do_SYSENTER_32+0x73/0x90 [ 337.394601][T10589] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 337.400917][T10589] [ 337.403245][T10589] Uninit was stored to memory at: [ 337.408287][T10589] kmsan_internal_chain_origin+0xad/0x130 [ 337.414006][T10589] __msan_chain_origin+0x57/0xa0 [ 337.418940][T10589] __get_compat_msghdr+0x6db/0x9d0 [ 337.426131][T10589] get_compat_msghdr+0x108/0x2b0 [ 337.431062][T10589] do_recvmmsg+0xdd1/0x22f0 [ 337.435561][T10589] __sys_recvmmsg+0x519/0x6f0 [ 337.440230][T10589] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 337.446290][T10589] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 337.452568][T10589] __do_fast_syscall_32+0x102/0x160 [ 337.457787][T10589] do_fast_syscall_32+0x6a/0xc0 [ 337.462636][T10589] do_SYSENTER_32+0x73/0x90 [ 337.467140][T10589] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 337.473448][T10589] [ 337.475763][T10589] Uninit was stored to memory at: [ 337.480781][T10589] kmsan_internal_chain_origin+0xad/0x130 [ 337.486494][T10589] __msan_chain_origin+0x57/0xa0 [ 337.491433][T10589] __get_compat_msghdr+0x6db/0x9d0 [ 337.496535][T10589] get_compat_msghdr+0x108/0x2b0 [ 337.501479][T10589] do_recvmmsg+0xdd1/0x22f0 [ 337.506434][T10589] __sys_recvmmsg+0x519/0x6f0 [ 337.511120][T10589] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 337.517182][T10589] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 337.523342][T10589] __do_fast_syscall_32+0x102/0x160 [ 337.528532][T10589] do_fast_syscall_32+0x6a/0xc0 [ 337.533384][T10589] do_SYSENTER_32+0x73/0x90 [ 337.537882][T10589] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 337.544184][T10589] [ 337.546674][T10589] Uninit was stored to memory at: [ 337.551701][T10589] kmsan_internal_chain_origin+0xad/0x130 [ 337.557416][T10589] __msan_chain_origin+0x57/0xa0 [ 337.562342][T10589] __get_compat_msghdr+0x6db/0x9d0 [ 337.567443][T10589] get_compat_msghdr+0x108/0x2b0 [ 337.572372][T10589] do_recvmmsg+0xdd1/0x22f0 [ 337.576886][T10589] __sys_recvmmsg+0x519/0x6f0 [ 337.581568][T10589] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 337.587644][T10589] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 337.593795][T10589] __do_fast_syscall_32+0x102/0x160 [ 337.598986][T10589] do_fast_syscall_32+0x6a/0xc0 [ 337.603828][T10589] do_SYSENTER_32+0x73/0x90 [ 337.608323][T10589] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 337.614625][T10589] [ 337.616940][T10589] Local variable ----msg_sys@do_recvmmsg created at: [ 337.623617][T10589] do_recvmmsg+0xbf/0x22f0 [ 337.628037][T10589] do_recvmmsg+0xbf/0x22f0 12:53:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r1 = dup2(r0, r0) read$char_usb(r1, &(0x7f00000001c0)=""/133, 0x85) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000080)) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000180)={'bridge_slave_0\x00', {0x2, 0x0, @initdev}}) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r4 = dup2(r3, r3) read$char_usb(r4, &(0x7f00000001c0)=""/133, 0x85) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r6 = dup2(r5, r5) read$char_usb(r6, &(0x7f00000001c0)=""/133, 0x85) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x28, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r4, @ANYRES16=r6], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8084) sendmmsg$sock(r2, &(0x7f0000000840)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}}, {{&(0x7f00000003c0)=@ax25={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, 0x0, 0x0, 0x0, 0x33}}], 0x2, 0x64001) 12:53:03 executing program 0: listxattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:04 executing program 4: perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffb, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800}], 0x1c) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 12:53:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:53:05 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r2 = dup2(r1, r1) read$char_usb(r2, &(0x7f00000001c0)=""/133, 0x85) recvfrom$l2tp6(r2, &(0x7f0000000100)=""/76, 0x4c, 0x20000041, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "9ff78d6a6964eee9", "cddb11865c292e31ebc886c9086173c15131acfc7996504aef449aac4f810e39", "1ca61ad6", "df1494b8286d2691"}, 0x38) sendmsg(r3, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:05 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:53:06 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:06 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:07 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r2 = dup2(r1, r1) read$char_usb(r2, &(0x7f00000001c0)=""/133, 0x85) recvfrom$l2tp6(r2, &(0x7f0000000100)=""/76, 0x4c, 0x20000041, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "9ff78d6a6964eee9", "cddb11865c292e31ebc886c9086173c15131acfc7996504aef449aac4f810e39", "1ca61ad6", "df1494b8286d2691"}, 0x38) sendmsg(r3, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:07 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:53:07 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:07 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x107140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)={0x2, 0x0, [{0xd, 0x7ec5}, {0x1}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001800)={0x14, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0022050000000000005a"], 0x0}, 0x0) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, &(0x7f00000009c0)={0xc, &(0x7f0000000880)={0x0, 0x11, 0xdf, {0xdf, 0x22, "3e8a53212757c09ac470c6938d0192b63d1a0b7dd05809199f3dd1591b99e50862d1c86b9a1c8ba7d29db0f97584d328db5ca0fcc520a12b855f5d13c44749cd5000c5266ac7d3448c5a03128cd2a8d78ed24b7714ef0aea6b4958bb22000c180c594988205ce9ec178f0d16f34970d04908117d4849f61da249809563dc7fb50c3df0bd514b37b4fa88af82c825fab35cc30f36e0e95dde14d00db45d818a7732425d432d0920b373ae0601a6667e7ef06cc38643fae892c053ea3cfb3f1e9616bfcffe65e13c04d49fb9fcbdea12a965040cef6a9a2f44db50fe6ff3"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, &(0x7f0000000c00)={0x24, &(0x7f0000000a00)={0x40, 0x8, 0x23, "0bf88a1efa1cffb0209398d4a5c48bbb95f77657de418a11c5aaa543d518e221edd713"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0xb1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xcd}, &(0x7f0000000ac0)={0x20, 0x81, 0x1, "8c"}, &(0x7f0000000b00)={0x20, 0x82, 0x3, "a80c68"}, &(0x7f0000000b40)={0x20, 0x83, 0x2, "96bd"}, &(0x7f0000000b80)={0x20, 0x84, 0x1, 'Y'}, &(0x7f0000000bc0)={0x20, 0x85, 0x3, "d551cf"}}) syz_usb_control_io(r4, &(0x7f0000000380)={0x18, &(0x7f00000000c0)={0x60, 0x6, 0x7f, {0x7f, 0x21, "8c022e7658c153d8495ec310b594de174bece341eb26a36eb64d1d76d5bdff3eb3fda9291c30322444127007cc2d66d1445f2dc514d06d1ace5da66b2911810be4200f9ff9a778b33dbfdcc11e1ea8b5be50547aa68a82048e11e13be122ce4eb2f33f5f74071a1254bc51e1ad7fd370c4f497c0aca105ce4e203fa1d3"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x849}}, &(0x7f00000001c0)={0x0, 0xf, 0x12a, {0x5, 0xf, 0x12a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "d0f98c86549d31429eac4af08f02f6ba"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x101, 0x10, 0xa, "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"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0x9, 0x9}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x3, 0x1, 0x0, "1ec1b11e", "fb660394"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf9, 0x0, 0x6, 0x6, 0x8, 0xca64, 0x5}}}, &(0x7f0000000800)={0x44, &(0x7f00000003c0)={0x20, 0x14, 0x41, "7354e31256080688cf40be89bb1069eedd5227bcef6f9fe715a5412e7c2c641ee053d208fde1779be9c285d33580026236fffd6a3aea63f23fe4a68aea7637b470"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x1}}, &(0x7f0000000540)={0x40, 0x7, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "f169"}, &(0x7f0000000600)={0x40, 0xf, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={[], 0xd}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "57e9"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0xf24}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0xa5}, &(0x7f00000007c0)={0x40, 0x21, 0x1}}) 12:53:08 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:08 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r2 = dup2(r1, r1) read$char_usb(r2, &(0x7f00000001c0)=""/133, 0x85) recvfrom$l2tp6(r2, &(0x7f0000000100)=""/76, 0x4c, 0x20000041, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "9ff78d6a6964eee9", "cddb11865c292e31ebc886c9086173c15131acfc7996504aef449aac4f810e39", "1ca61ad6", "df1494b8286d2691"}, 0x38) sendmsg(r3, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 343.302912][ T5] usb 4-1: new high-speed USB device number 3 using dummy_hcd 12:53:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) [ 343.658734][T10653] not chained 170000 origins [ 343.663392][T10653] CPU: 1 PID: 10653 Comm: syz-executor.1 Not tainted 5.10.0-rc4-syzkaller #0 [ 343.663647][ T5] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 343.672149][T10653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.672262][T10653] Call Trace: [ 343.683381][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.693169][T10653] dump_stack+0x21c/0x280 [ 343.693191][T10653] kmsan_internal_chain_origin+0x6f/0x130 [ 343.693209][T10653] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 343.693227][T10653] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 343.693248][T10653] ? sched_clock_cpu+0x5e/0x920 [ 343.693265][T10653] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 343.693284][T10653] ? sched_clock_cpu+0x5e/0x920 [ 343.693302][T10653] ? kmsan_get_metadata+0x116/0x180 [ 343.693319][T10653] ? kmsan_get_metadata+0x116/0x180 [ 343.693337][T10653] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 343.693353][T10653] ? kmsan_get_metadata+0x116/0x180 [ 343.693370][T10653] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 343.693386][T10653] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 343.693441][T10653] ? kmsan_get_metadata+0x116/0x180 [ 343.696778][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.707550][T10653] ? kmsan_internal_set_origin+0x85/0xc0 [ 343.707574][T10653] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 343.707594][T10653] ? _copy_from_user+0x1fd/0x300 [ 343.707610][T10653] ? kmsan_get_metadata+0x116/0x180 [ 343.707625][T10653] __msan_chain_origin+0x57/0xa0 [ 343.707645][T10653] __get_compat_msghdr+0x6db/0x9d0 [ 343.707668][T10653] get_compat_msghdr+0x108/0x2b0 [ 343.707690][T10653] do_recvmmsg+0xdd1/0x22f0 [ 343.707705][T10653] ? kmsan_get_metadata+0x116/0x180 [ 343.707725][T10653] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 343.707742][T10653] ? __irq_exit_rcu+0x7a/0x270 [ 343.707760][T10653] ? irqentry_exit+0x12/0x50 [ 343.707781][T10653] ? kmsan_internal_set_origin+0xb1/0xc0 [ 343.707800][T10653] ? __msan_poison_alloca+0xe9/0x110 [ 343.707819][T10653] ? __sys_recvmmsg+0xb5/0x6f0 [ 343.707838][T10653] __sys_recvmmsg+0x519/0x6f0 [ 343.707857][T10653] ? __msan_get_context_state+0x9/0x20 [ 343.707881][T10653] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 343.707906][T10653] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 343.707930][T10653] __do_fast_syscall_32+0x102/0x160 [ 343.707951][T10653] do_fast_syscall_32+0x6a/0xc0 [ 343.707971][T10653] do_SYSENTER_32+0x73/0x90 [ 343.707993][T10653] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 343.708006][T10653] RIP: 0023:0xf7fda549 [ 343.708027][T10653] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 343.708037][T10653] RSP: 002b:00000000f55d45fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 343.708058][T10653] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 343.708071][T10653] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 343.708082][T10653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.708095][T10653] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 343.708106][T10653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.708117][T10653] Uninit was stored to memory at: [ 343.708136][T10653] kmsan_internal_chain_origin+0xad/0x130 [ 343.708152][T10653] __msan_chain_origin+0x57/0xa0 [ 343.708170][T10653] __get_compat_msghdr+0x6db/0x9d0 [ 343.708187][T10653] get_compat_msghdr+0x108/0x2b0 [ 343.708205][T10653] do_recvmmsg+0xdd1/0x22f0 [ 343.708222][T10653] __sys_recvmmsg+0x519/0x6f0 [ 343.708241][T10653] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 343.708260][T10653] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 343.708281][T10653] __do_fast_syscall_32+0x102/0x160 [ 343.708301][T10653] do_fast_syscall_32+0x6a/0xc0 [ 343.708319][T10653] do_SYSENTER_32+0x73/0x90 [ 343.708339][T10653] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 343.708342][T10653] [ 343.708348][T10653] Uninit was stored to memory at: [ 343.708365][T10653] kmsan_internal_chain_origin+0xad/0x130 [ 343.708380][T10653] __msan_chain_origin+0x57/0xa0 [ 343.708397][T10653] __get_compat_msghdr+0x6db/0x9d0 [ 343.708414][T10653] get_compat_msghdr+0x108/0x2b0 [ 343.708431][T10653] do_recvmmsg+0xdd1/0x22f0 [ 343.708449][T10653] __sys_recvmmsg+0x519/0x6f0 [ 343.708468][T10653] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 343.708487][T10653] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 343.708506][T10653] __do_fast_syscall_32+0x102/0x160 [ 343.708525][T10653] do_fast_syscall_32+0x6a/0xc0 [ 343.708550][T10653] do_SYSENTER_32+0x73/0x90 [ 343.708570][T10653] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 343.708573][T10653] [ 343.708578][T10653] Uninit was stored to memory at: [ 343.708594][T10653] kmsan_internal_chain_origin+0xad/0x130 [ 343.708609][T10653] __msan_chain_origin+0x57/0xa0 [ 343.708626][T10653] __get_compat_msghdr+0x6db/0x9d0 [ 343.708643][T10653] get_compat_msghdr+0x108/0x2b0 [ 343.708660][T10653] do_recvmmsg+0xdd1/0x22f0 [ 343.708677][T10653] __sys_recvmmsg+0x519/0x6f0 [ 343.708697][T10653] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 343.708716][T10653] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 343.708736][T10653] __do_fast_syscall_32+0x102/0x160 [ 343.708755][T10653] do_fast_syscall_32+0x6a/0xc0 [ 343.708774][T10653] do_SYSENTER_32+0x73/0x90 [ 343.708794][T10653] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 343.708797][T10653] [ 343.708803][T10653] Uninit was stored to memory at: [ 343.708819][T10653] kmsan_internal_chain_origin+0xad/0x130 [ 343.708833][T10653] __msan_chain_origin+0x57/0xa0 [ 343.708850][T10653] __get_compat_msghdr+0x6db/0x9d0 [ 343.708867][T10653] get_compat_msghdr+0x108/0x2b0 [ 343.708883][T10653] do_recvmmsg+0xdd1/0x22f0 [ 343.708901][T10653] __sys_recvmmsg+0x519/0x6f0 [ 343.708920][T10653] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 343.708939][T10653] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 343.708959][T10653] __do_fast_syscall_32+0x102/0x160 [ 343.708979][T10653] do_fast_syscall_32+0x6a/0xc0 [ 343.708999][T10653] do_SYSENTER_32+0x73/0x90 [ 343.709020][T10653] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 343.709023][T10653] [ 343.709028][T10653] Uninit was stored to memory at: [ 343.709044][T10653] kmsan_internal_chain_origin+0xad/0x130 [ 343.709059][T10653] __msan_chain_origin+0x57/0xa0 [ 343.709075][T10653] __get_compat_msghdr+0x6db/0x9d0 [ 343.709092][T10653] get_compat_msghdr+0x108/0x2b0 [ 343.709108][T10653] do_recvmmsg+0xdd1/0x22f0 [ 343.709126][T10653] __sys_recvmmsg+0x519/0x6f0 [ 343.709145][T10653] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 343.709164][T10653] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 343.709183][T10653] __do_fast_syscall_32+0x102/0x160 [ 343.709203][T10653] do_fast_syscall_32+0x6a/0xc0 [ 343.709222][T10653] do_SYSENTER_32+0x73/0x90 [ 343.709243][T10653] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 343.709246][T10653] [ 343.709252][T10653] Uninit was stored to memory at: [ 343.709268][T10653] kmsan_internal_chain_origin+0xad/0x130 [ 343.709284][T10653] __msan_chain_origin+0x57/0xa0 [ 343.709300][T10653] __get_compat_msghdr+0x6db/0x9d0 [ 343.709317][T10653] get_compat_msghdr+0x108/0x2b0 [ 343.709333][T10653] do_recvmmsg+0xdd1/0x22f0 [ 343.709348][T10653] __sys_recvmmsg+0x519/0x6f0 [ 343.709366][T10653] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 343.709383][T10653] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 343.709440][T10653] __do_fast_syscall_32+0x102/0x160 [ 343.714218][ T5] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 343.719486][T10653] do_fast_syscall_32+0x6a/0xc0 [ 343.719542][T10653] do_SYSENTER_32+0x73/0x90 [ 343.725512][ T5] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 343.731367][T10653] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 343.731406][T10653] [ 343.736563][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.743326][T10653] Uninit was stored to memory at: [ 343.743347][T10653] kmsan_internal_chain_origin+0xad/0x130 [ 343.743362][T10653] __msan_chain_origin+0x57/0xa0 [ 343.743380][T10653] __get_compat_msghdr+0x6db/0x9d0 [ 343.743396][T10653] get_compat_msghdr+0x108/0x2b0 [ 343.743415][T10653] do_recvmmsg+0xdd1/0x22f0 [ 343.743466][T10653] __sys_recvmmsg+0x519/0x6f0 [ 344.479525][T10653] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 344.489962][T10653] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 344.496724][T10653] __do_fast_syscall_32+0x102/0x160 [ 344.502088][T10653] do_fast_syscall_32+0x6a/0xc0 [ 344.507656][T10653] do_SYSENTER_32+0x73/0x90 [ 344.512555][T10653] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 344.518865][T10653] [ 344.521213][T10653] Local variable ----msg_sys@do_recvmmsg created at: [ 344.527881][T10653] do_recvmmsg+0xbf/0x22f0 [ 344.532291][T10653] do_recvmmsg+0xbf/0x22f0 12:53:10 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 344.614053][ T5] usb 4-1: config 0 descriptor?? 12:53:10 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r2 = dup2(r1, r1) read$char_usb(r2, &(0x7f00000001c0)=""/133, 0x85) recvfrom$l2tp6(r2, &(0x7f0000000100)=""/76, 0x4c, 0x20000041, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "9ff78d6a6964eee9", "cddb11865c292e31ebc886c9086173c15131acfc7996504aef449aac4f810e39", "1ca61ad6", "df1494b8286d2691"}, 0x38) sendmsg(r3, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:10 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 345.053944][ T9801] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 345.106715][ T5] betop 0003:11C2:2208.000C: unknown main item tag 0x0 [ 345.114499][ T5] betop 0003:11C2:2208.000C: unknown main item tag 0x0 [ 345.123202][ T5] betop 0003:11C2:2208.000C: unknown main item tag 0x0 [ 345.133881][ T5] betop 0003:11C2:2208.000C: item fetching failed at offset 3/5 [ 345.245693][ T9801] usb 3-1: device descriptor read/64, error 18 [ 345.307669][T10655] udc-core: couldn't find an available UDC or it's busy [ 345.314960][T10655] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 345.353031][ T5] betop 0003:11C2:2208.000C: parse failed [ 345.359652][ T5] betop: probe of 0003:11C2:2208.000C failed with error -22 [ 345.423087][T10655] udc-core: couldn't find an available UDC or it's busy [ 345.430405][T10655] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 345.536692][ T9801] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 345.568852][T10655] udc-core: couldn't find an available UDC or it's busy [ 345.577069][T10655] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:53:11 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 345.794738][ T9801] usb 3-1: device descriptor read/64, error 18 [ 345.796712][ T9764] usb 4-1: USB disconnect, device number 3 [ 345.914033][ T9801] usb usb3-port1: attempt power cycle 12:53:11 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r2 = dup2(r1, r1) read$char_usb(r2, &(0x7f00000001c0)=""/133, 0x85) recvfrom$l2tp6(r2, &(0x7f0000000100)=""/76, 0x4c, 0x20000041, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r3, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:11 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 346.583844][ T8770] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 346.643132][ T9801] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 346.833839][ T9801] usb 3-1: Invalid ep0 maxpacket: 0 12:53:12 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 346.963527][ T8770] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 346.975081][ T8770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.986950][ T9801] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 346.996247][ T8770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.006444][ T8770] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 347.021030][ T8770] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 347.030598][ T8770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.073888][ T9801] usb 3-1: Invalid ep0 maxpacket: 0 [ 347.088346][ T9801] usb usb3-port1: unable to enumerate USB device 12:53:12 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r2 = dup2(r1, r1) read$char_usb(r2, &(0x7f00000001c0)=""/133, 0x85) recvfrom$l2tp6(r2, &(0x7f0000000100)=""/76, 0x4c, 0x20000041, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 347.458489][ T8770] usb 4-1: config 0 descriptor?? 12:53:13 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 347.508307][ T8770] usb 4-1: can't set config #0, error -71 [ 347.556314][ T8770] usb 4-1: USB disconnect, device number 4 12:53:13 executing program 1: listxattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:53:13 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r2 = dup2(r1, r1) read$char_usb(r2, &(0x7f00000001c0)=""/133, 0x85) recvfrom$l2tp6(r2, &(0x7f0000000100)=""/76, 0x4c, 0x20000041, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:13 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 348.093815][ T8770] Bluetooth: hci1: command 0x0406 tx timeout [ 348.836897][T10720] not chained 180000 origins [ 348.841542][T10720] CPU: 0 PID: 10720 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 348.852431][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.862499][T10720] Call Trace: [ 348.866422][T10720] dump_stack+0x21c/0x280 [ 348.870948][T10720] kmsan_internal_chain_origin+0x6f/0x130 [ 348.876780][T10720] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 348.884082][T10720] ? udpv6_recvmsg+0x26bf/0x2b00 [ 348.889148][T10720] ? kmsan_get_metadata+0x116/0x180 [ 348.894358][T10720] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 348.900171][T10720] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 348.906251][T10720] ? kmsan_get_metadata+0x116/0x180 [ 348.911463][T10720] ? kmsan_internal_set_origin+0x85/0xc0 [ 348.917107][T10720] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 348.923192][T10720] ? _copy_from_user+0x1fd/0x300 [ 348.928133][T10720] ? kmsan_get_metadata+0x116/0x180 [ 348.933829][T10720] __msan_chain_origin+0x57/0xa0 [ 348.938780][T10720] __get_compat_msghdr+0x6db/0x9d0 [ 348.943903][T10720] get_compat_msghdr+0x108/0x2b0 [ 348.948858][T10720] do_recvmmsg+0xdd1/0x22f0 [ 348.953375][T10720] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 348.959873][T10720] ? kmsan_get_metadata+0x116/0x180 [ 348.965081][T10720] ? kmsan_internal_set_origin+0x85/0xc0 [ 348.970722][T10720] ? _copy_from_user+0x1fd/0x300 [ 348.976033][T10720] ? kmsan_get_metadata+0x116/0x180 [ 348.981236][T10720] ? kmsan_get_metadata+0x116/0x180 [ 348.986438][T10720] ? kmsan_internal_set_origin+0x85/0xc0 [ 348.992075][T10720] ? __msan_poison_alloca+0xe9/0x110 [ 348.997866][T10720] ? __sys_recvmmsg+0xb5/0x6f0 [ 349.002641][T10720] __sys_recvmmsg+0x519/0x6f0 [ 349.007327][T10720] ? kmsan_get_metadata+0x116/0x180 [ 349.012555][T10720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 349.018641][T10720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 349.025508][T10720] __do_fast_syscall_32+0x102/0x160 [ 349.030721][T10720] do_fast_syscall_32+0x6a/0xc0 [ 349.035810][T10720] do_SYSENTER_32+0x73/0x90 [ 349.040336][T10720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 349.046708][T10720] RIP: 0023:0xf7f98549 [ 349.050786][T10720] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 349.070397][T10720] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 349.078923][T10720] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020008880 [ 349.086911][T10720] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 349.094891][T10720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.102868][T10720] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 349.111224][T10720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.119202][T10720] Uninit was stored to memory at: [ 349.124253][T10720] kmsan_internal_chain_origin+0xad/0x130 [ 349.130075][T10720] __msan_chain_origin+0x57/0xa0 [ 349.135124][T10720] __get_compat_msghdr+0x6db/0x9d0 [ 349.140337][T10720] get_compat_msghdr+0x108/0x2b0 [ 349.145288][T10720] do_recvmmsg+0xdd1/0x22f0 [ 349.149787][T10720] __sys_recvmmsg+0x519/0x6f0 [ 349.154457][T10720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 349.160513][T10720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 349.166659][T10720] __do_fast_syscall_32+0x102/0x160 [ 349.171848][T10720] do_fast_syscall_32+0x6a/0xc0 [ 349.176702][T10720] do_SYSENTER_32+0x73/0x90 [ 349.181202][T10720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 349.187504][T10720] [ 349.189817][T10720] Uninit was stored to memory at: [ 349.194834][T10720] kmsan_internal_chain_origin+0xad/0x130 [ 349.200540][T10720] __msan_chain_origin+0x57/0xa0 [ 349.205465][T10720] __get_compat_msghdr+0x6db/0x9d0 [ 349.210573][T10720] get_compat_msghdr+0x108/0x2b0 [ 349.215507][T10720] do_recvmmsg+0xdd1/0x22f0 [ 349.220001][T10720] __sys_recvmmsg+0x519/0x6f0 [ 349.224669][T10720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 349.230739][T10720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 349.236888][T10720] __do_fast_syscall_32+0x102/0x160 [ 349.242079][T10720] do_fast_syscall_32+0x6a/0xc0 [ 349.246924][T10720] do_SYSENTER_32+0x73/0x90 [ 349.251416][T10720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 349.257720][T10720] [ 349.260030][T10720] Uninit was stored to memory at: [ 349.265052][T10720] kmsan_internal_chain_origin+0xad/0x130 [ 349.270757][T10720] __msan_chain_origin+0x57/0xa0 [ 349.275685][T10720] __get_compat_msghdr+0x6db/0x9d0 [ 349.280782][T10720] get_compat_msghdr+0x108/0x2b0 [ 349.285724][T10720] do_recvmmsg+0xdd1/0x22f0 [ 349.290215][T10720] __sys_recvmmsg+0x519/0x6f0 [ 349.294881][T10720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 349.300937][T10720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 349.307082][T10720] __do_fast_syscall_32+0x102/0x160 [ 349.312268][T10720] do_fast_syscall_32+0x6a/0xc0 [ 349.317112][T10720] do_SYSENTER_32+0x73/0x90 [ 349.321612][T10720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 349.328002][T10720] [ 349.330313][T10720] Uninit was stored to memory at: [ 349.335329][T10720] kmsan_internal_chain_origin+0xad/0x130 [ 349.341033][T10720] __msan_chain_origin+0x57/0xa0 [ 349.345959][T10720] __get_compat_msghdr+0x6db/0x9d0 [ 349.351058][T10720] get_compat_msghdr+0x108/0x2b0 [ 349.355984][T10720] do_recvmmsg+0xdd1/0x22f0 [ 349.360474][T10720] __sys_recvmmsg+0x519/0x6f0 [ 349.365142][T10720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 349.371197][T10720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 349.377341][T10720] __do_fast_syscall_32+0x102/0x160 [ 349.382534][T10720] do_fast_syscall_32+0x6a/0xc0 [ 349.387376][T10720] do_SYSENTER_32+0x73/0x90 [ 349.391874][T10720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 349.398177][T10720] [ 349.400505][T10720] Uninit was stored to memory at: [ 349.405521][T10720] kmsan_internal_chain_origin+0xad/0x130 [ 349.411231][T10720] __msan_chain_origin+0x57/0xa0 [ 349.416157][T10720] __get_compat_msghdr+0x6db/0x9d0 [ 349.421253][T10720] get_compat_msghdr+0x108/0x2b0 [ 349.426181][T10720] do_recvmmsg+0xdd1/0x22f0 [ 349.430674][T10720] __sys_recvmmsg+0x519/0x6f0 [ 349.435341][T10720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 349.441412][T10720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 349.447564][T10720] __do_fast_syscall_32+0x102/0x160 [ 349.452800][T10720] do_fast_syscall_32+0x6a/0xc0 [ 349.457668][T10720] do_SYSENTER_32+0x73/0x90 [ 349.462186][T10720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 349.468503][T10720] [ 349.470825][T10720] Uninit was stored to memory at: [ 349.475845][T10720] kmsan_internal_chain_origin+0xad/0x130 [ 349.481566][T10720] __msan_chain_origin+0x57/0xa0 [ 349.486499][T10720] __get_compat_msghdr+0x6db/0x9d0 [ 349.491604][T10720] get_compat_msghdr+0x108/0x2b0 [ 349.496565][T10720] do_recvmmsg+0xdd1/0x22f0 [ 349.501059][T10720] __sys_recvmmsg+0x519/0x6f0 [ 349.505728][T10720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 349.512741][T10720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 349.518888][T10720] __do_fast_syscall_32+0x102/0x160 [ 349.524081][T10720] do_fast_syscall_32+0x6a/0xc0 [ 349.528926][T10720] do_SYSENTER_32+0x73/0x90 [ 349.533423][T10720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 349.539734][T10720] [ 349.542054][T10720] Uninit was stored to memory at: [ 349.547689][T10720] kmsan_internal_chain_origin+0xad/0x130 [ 349.553408][T10720] __msan_chain_origin+0x57/0xa0 [ 349.558364][T10720] __get_compat_msghdr+0x6db/0x9d0 [ 349.563470][T10720] get_compat_msghdr+0x108/0x2b0 [ 349.568400][T10720] do_recvmmsg+0xdd1/0x22f0 [ 349.572898][T10720] __sys_recvmmsg+0x519/0x6f0 [ 349.578348][T10720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 12:53:15 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 349.584406][T10720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 349.590555][T10720] __do_fast_syscall_32+0x102/0x160 [ 349.595745][T10720] do_fast_syscall_32+0x6a/0xc0 [ 349.600586][T10720] do_SYSENTER_32+0x73/0x90 [ 349.605083][T10720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 349.611387][T10720] [ 349.613699][T10720] Local variable ----msg_sys@do_recvmmsg created at: [ 349.620484][T10720] do_recvmmsg+0xbf/0x22f0 [ 349.624900][T10720] do_recvmmsg+0xbf/0x22f0 12:53:15 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r2 = dup2(r1, r1) read$char_usb(r2, &(0x7f00000001c0)=""/133, 0x85) recvfrom$l2tp6(r2, &(0x7f0000000100)=""/76, 0x4c, 0x20000041, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:15 executing program 1: listxattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 349.884540][ T9801] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 350.073566][ T9801] usb 3-1: device descriptor read/64, error 18 [ 350.343945][ T9801] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 350.534393][ T9801] usb 3-1: device descriptor read/64, error 18 [ 350.653354][ T9801] usb usb3-port1: attempt power cycle [ 351.363162][ T9801] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 351.463677][ T9801] usb 3-1: Invalid ep0 maxpacket: 0 [ 351.622980][ T9801] usb 3-1: new high-speed USB device number 26 using dummy_hcd 12:53:17 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r2 = dup2(r1, r1) read$char_usb(r2, &(0x7f00000001c0)=""/133, 0x85) recvfrom$l2tp6(r2, &(0x7f0000000100)=""/76, 0x4c, 0x20000041, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r3, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:17 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) [ 351.964260][ T9801] usb 3-1: device descriptor read/8, error -71 [ 352.086284][ T9801] usb usb3-port1: unable to enumerate USB device 12:53:18 executing program 1: listxattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:18 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r2 = dup2(r1, r1) read$char_usb(r2, &(0x7f00000001c0)=""/133, 0x85) recvfrom$l2tp6(r2, &(0x7f0000000100)=""/76, 0x4c, 0x20000041, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r3, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:18 executing program 3: listxattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 352.982656][ T17] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 353.223221][ T17] usb 3-1: device descriptor read/64, error 18 12:53:19 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 353.493145][ T17] usb 3-1: new high-speed USB device number 28 using dummy_hcd 12:53:19 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r2 = dup2(r1, r1) read$char_usb(r2, &(0x7f00000001c0)=""/133, 0x85) recvfrom$l2tp6(r2, &(0x7f0000000100)=""/76, 0x4c, 0x20000041, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r3, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 353.695486][ T17] usb 3-1: device descriptor read/64, error 18 [ 353.813559][ T17] usb usb3-port1: attempt power cycle 12:53:19 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) r3 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x86000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000180)={0x0, 0x99, [0x2, 0x1, 0x400, 0x4, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x6, 0x1, 0x1d}) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x2}) [ 354.170712][T10760] not chained 190000 origins [ 354.175358][T10760] CPU: 0 PID: 10760 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 354.184119][T10760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.194168][T10760] Call Trace: [ 354.197461][T10760] dump_stack+0x21c/0x280 [ 354.201784][T10760] kmsan_internal_chain_origin+0x6f/0x130 [ 354.207493][T10760] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 354.213550][T10760] ? udpv6_recvmsg+0x26bf/0x2b00 [ 354.218485][T10760] ? kmsan_get_metadata+0x116/0x180 [ 354.223687][T10760] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 354.229483][T10760] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 354.235579][T10760] ? kmsan_get_metadata+0x116/0x180 [ 354.240952][T10760] ? kmsan_internal_set_origin+0x85/0xc0 [ 354.246582][T10760] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 354.252747][T10760] ? _copy_from_user+0x1fd/0x300 [ 354.257714][T10760] ? kmsan_get_metadata+0x116/0x180 [ 354.262904][T10760] __msan_chain_origin+0x57/0xa0 [ 354.267836][T10760] __get_compat_msghdr+0x6db/0x9d0 [ 354.272949][T10760] get_compat_msghdr+0x108/0x2b0 [ 354.277880][T10760] do_recvmmsg+0xdd1/0x22f0 [ 354.282378][T10760] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 354.288520][T10760] ? kmsan_get_metadata+0x116/0x180 [ 354.293712][T10760] ? kmsan_internal_set_origin+0x85/0xc0 [ 354.299348][T10760] ? _copy_from_user+0x1fd/0x300 [ 354.304285][T10760] ? kmsan_get_metadata+0x116/0x180 [ 354.309473][T10760] ? kmsan_get_metadata+0x116/0x180 [ 354.314685][T10760] ? kmsan_internal_set_origin+0x85/0xc0 [ 354.320308][T10760] ? __msan_poison_alloca+0xe9/0x110 [ 354.325588][T10760] ? __sys_recvmmsg+0xb5/0x6f0 [ 354.330346][T10760] __sys_recvmmsg+0x519/0x6f0 [ 354.335018][T10760] ? kmsan_get_metadata+0x116/0x180 [ 354.340213][T10760] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 354.346279][T10760] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 354.352521][T10760] __do_fast_syscall_32+0x102/0x160 [ 354.357717][T10760] do_fast_syscall_32+0x6a/0xc0 [ 354.362564][T10760] do_SYSENTER_32+0x73/0x90 [ 354.367063][T10760] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 354.373394][T10760] RIP: 0023:0xf7f98549 [ 354.377456][T10760] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 354.397150][T10760] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 354.405558][T10760] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020008880 [ 354.413529][T10760] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 354.421489][T10760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 354.429455][T10760] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 354.437418][T10760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 354.445380][T10760] Uninit was stored to memory at: [ 354.450509][T10760] kmsan_internal_chain_origin+0xad/0x130 [ 354.456254][T10760] __msan_chain_origin+0x57/0xa0 [ 354.461222][T10760] __get_compat_msghdr+0x6db/0x9d0 [ 354.466349][T10760] get_compat_msghdr+0x108/0x2b0 [ 354.471290][T10760] do_recvmmsg+0xdd1/0x22f0 [ 354.475788][T10760] __sys_recvmmsg+0x519/0x6f0 [ 354.480551][T10760] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 354.486642][T10760] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 354.492802][T10760] __do_fast_syscall_32+0x102/0x160 [ 354.497994][T10760] do_fast_syscall_32+0x6a/0xc0 [ 354.502836][T10760] do_SYSENTER_32+0x73/0x90 [ 354.507421][T10760] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 354.513728][T10760] [ 354.516042][T10760] Uninit was stored to memory at: [ 354.521060][T10760] kmsan_internal_chain_origin+0xad/0x130 [ 354.526788][T10760] __msan_chain_origin+0x57/0xa0 [ 354.531718][T10760] __get_compat_msghdr+0x6db/0x9d0 [ 354.536821][T10760] get_compat_msghdr+0x108/0x2b0 [ 354.541747][T10760] do_recvmmsg+0xdd1/0x22f0 [ 354.546239][T10760] __sys_recvmmsg+0x519/0x6f0 [ 354.550909][T10760] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 354.557756][T10760] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 354.563903][T10760] __do_fast_syscall_32+0x102/0x160 [ 354.569098][T10760] do_fast_syscall_32+0x6a/0xc0 [ 354.573939][T10760] do_SYSENTER_32+0x73/0x90 [ 354.578435][T10760] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 354.584737][T10760] [ 354.587047][T10760] Uninit was stored to memory at: [ 354.592084][T10760] kmsan_internal_chain_origin+0xad/0x130 [ 354.597812][T10760] __msan_chain_origin+0x57/0xa0 [ 354.602759][T10760] __get_compat_msghdr+0x6db/0x9d0 [ 354.607881][T10760] get_compat_msghdr+0x108/0x2b0 [ 354.612822][T10760] do_recvmmsg+0xdd1/0x22f0 [ 354.617410][T10760] __sys_recvmmsg+0x519/0x6f0 [ 354.622099][T10760] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 354.628172][T10760] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 354.634331][T10760] __do_fast_syscall_32+0x102/0x160 [ 354.639528][T10760] do_fast_syscall_32+0x6a/0xc0 [ 354.644370][T10760] do_SYSENTER_32+0x73/0x90 [ 354.648875][T10760] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 354.655191][T10760] [ 354.657503][T10760] Uninit was stored to memory at: [ 354.662524][T10760] kmsan_internal_chain_origin+0xad/0x130 [ 354.668244][T10760] __msan_chain_origin+0x57/0xa0 [ 354.673176][T10760] __get_compat_msghdr+0x6db/0x9d0 [ 354.678311][T10760] get_compat_msghdr+0x108/0x2b0 [ 354.683393][T10760] do_recvmmsg+0xdd1/0x22f0 [ 354.687913][T10760] __sys_recvmmsg+0x519/0x6f0 [ 354.692591][T10760] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 354.698657][T10760] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 354.704804][T10760] __do_fast_syscall_32+0x102/0x160 [ 354.709992][T10760] do_fast_syscall_32+0x6a/0xc0 [ 354.715354][T10760] do_SYSENTER_32+0x73/0x90 [ 354.719859][T10760] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 354.726366][T10760] [ 354.728691][T10760] Uninit was stored to memory at: [ 354.733707][T10760] kmsan_internal_chain_origin+0xad/0x130 [ 354.739761][T10760] __msan_chain_origin+0x57/0xa0 [ 354.744694][T10760] __get_compat_msghdr+0x6db/0x9d0 [ 354.749826][T10760] get_compat_msghdr+0x108/0x2b0 [ 354.754755][T10760] do_recvmmsg+0xdd1/0x22f0 [ 354.759251][T10760] __sys_recvmmsg+0x519/0x6f0 [ 354.764006][T10760] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 354.770064][T10760] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 354.776233][T10760] __do_fast_syscall_32+0x102/0x160 [ 354.781433][T10760] do_fast_syscall_32+0x6a/0xc0 [ 354.786361][T10760] do_SYSENTER_32+0x73/0x90 [ 354.790860][T10760] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 354.797165][T10760] [ 354.799478][T10760] Uninit was stored to memory at: [ 354.804492][T10760] kmsan_internal_chain_origin+0xad/0x130 [ 354.810203][T10760] __msan_chain_origin+0x57/0xa0 [ 354.815133][T10760] __get_compat_msghdr+0x6db/0x9d0 [ 354.820233][T10760] get_compat_msghdr+0x108/0x2b0 [ 354.825176][T10760] do_recvmmsg+0xdd1/0x22f0 [ 354.829670][T10760] __sys_recvmmsg+0x519/0x6f0 [ 354.834339][T10760] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 354.840395][T10760] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 354.846552][T10760] __do_fast_syscall_32+0x102/0x160 [ 354.851739][T10760] do_fast_syscall_32+0x6a/0xc0 [ 354.856580][T10760] do_SYSENTER_32+0x73/0x90 [ 354.861079][T10760] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 354.867382][T10760] [ 354.869694][T10760] Uninit was stored to memory at: [ 354.874715][T10760] kmsan_internal_chain_origin+0xad/0x130 [ 354.880421][T10760] __msan_chain_origin+0x57/0xa0 [ 354.885613][T10760] __get_compat_msghdr+0x6db/0x9d0 [ 354.890724][T10760] get_compat_msghdr+0x108/0x2b0 [ 354.895652][T10760] do_recvmmsg+0xdd1/0x22f0 [ 354.900145][T10760] __sys_recvmmsg+0x519/0x6f0 [ 354.904990][T10760] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 354.911056][T10760] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 354.917209][T10760] __do_fast_syscall_32+0x102/0x160 [ 354.922395][T10760] do_fast_syscall_32+0x6a/0xc0 [ 354.927333][T10760] do_SYSENTER_32+0x73/0x90 [ 354.931832][T10760] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 354.938135][T10760] [ 354.940449][T10760] Local variable ----msg_sys@do_recvmmsg created at: [ 354.947111][T10760] do_recvmmsg+0xbf/0x22f0 [ 354.951517][T10760] do_recvmmsg+0xbf/0x22f0 12:53:20 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r2 = dup2(r1, r1) read$char_usb(r2, &(0x7f00000001c0)=""/133, 0x85) recvfrom$l2tp6(r2, &(0x7f0000000100)=""/76, 0x4c, 0x20000041, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) listen(r0, 0x1ff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r3, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 355.281065][ T17] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 355.387426][ T17] usb 3-1: Invalid ep0 maxpacket: 0 [ 355.557246][ T17] usb 3-1: new high-speed USB device number 30 using dummy_hcd 12:53:21 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) [ 355.791081][ T17] usb 3-1: device descriptor read/8, error -71 [ 355.928496][ T17] usb usb3-port1: unable to enumerate USB device [ 357.072759][ T17] usb 3-1: new high-speed USB device number 31 using dummy_hcd 12:53:23 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 357.663312][ T17] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 357.676507][ T17] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 357.685983][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:53:23 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r2 = dup2(r1, r1) read$char_usb(r2, &(0x7f00000001c0)=""/133, 0x85) recvfrom$l2tp6(r2, &(0x7f0000000100)=""/76, 0x4c, 0x20000041, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) listen(r0, 0x1ff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r3, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 357.857880][T10788] Unknown ioctl 44672 [ 357.934675][ T17] usb 3-1: config 0 descriptor?? 12:53:23 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 357.981184][ T17] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 12:53:23 executing program 3: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:24 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r2 = dup2(r1, r1) read$char_usb(r2, &(0x7f00000001c0)=""/133, 0x85) recvfrom$l2tp6(r2, &(0x7f0000000100)=""/76, 0x4c, 0x20000041, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) listen(r0, 0x1ff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r3, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:24 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:25 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) r2 = dup2(r1, r1) read$char_usb(r2, &(0x7f00000001c0)=""/133, 0x85) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r3, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:25 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:25 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:53:25 executing program 3: timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {r1, r2+10000000}}, &(0x7f0000000080)) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x882, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)='h', 0x1}], 0x1) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) pselect6(0x40, &(0x7f0000000300), 0x0, &(0x7f0000000480)={0x9}, &(0x7f00000004c0), 0x0) [ 360.179206][ T4726] usb 3-1: USB disconnect, device number 31 12:53:26 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) dup2(r1, r1) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 360.992179][T10827] not chained 200000 origins [ 360.996819][T10827] CPU: 1 PID: 10827 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 361.005615][T10827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.015679][T10827] Call Trace: [ 361.018991][T10827] dump_stack+0x21c/0x280 [ 361.023339][T10827] kmsan_internal_chain_origin+0x6f/0x130 [ 361.029073][T10827] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 361.035159][T10827] ? udpv6_recvmsg+0x26bf/0x2b00 [ 361.040116][T10827] ? kmsan_get_metadata+0x116/0x180 [ 361.045411][T10827] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 361.051225][T10827] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 361.057303][T10827] ? kmsan_get_metadata+0x116/0x180 [ 361.062508][T10827] ? kmsan_internal_set_origin+0x85/0xc0 [ 361.068153][T10827] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 361.074227][T10827] ? _copy_from_user+0x1fd/0x300 [ 361.079172][T10827] ? kmsan_get_metadata+0x116/0x180 [ 361.084377][T10827] __msan_chain_origin+0x57/0xa0 [ 361.089324][T10827] __get_compat_msghdr+0x6db/0x9d0 [ 361.094457][T10827] get_compat_msghdr+0x108/0x2b0 [ 361.099417][T10827] do_recvmmsg+0xdd1/0x22f0 [ 361.104034][T10827] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 361.110132][T10827] ? kmsan_get_metadata+0x116/0x180 [ 361.115607][T10827] ? kmsan_internal_set_origin+0x85/0xc0 [ 361.121265][T10827] ? _copy_from_user+0x1fd/0x300 [ 361.126224][T10827] ? kmsan_get_metadata+0x116/0x180 [ 361.131441][T10827] ? kmsan_get_metadata+0x116/0x180 [ 361.136755][T10827] ? kmsan_internal_set_origin+0x85/0xc0 [ 361.142508][T10827] ? __msan_poison_alloca+0xe9/0x110 [ 361.147820][T10827] ? __sys_recvmmsg+0xb5/0x6f0 [ 361.152610][T10827] __sys_recvmmsg+0x519/0x6f0 [ 361.157311][T10827] ? kmsan_get_metadata+0x116/0x180 [ 361.162538][T10827] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 361.168624][T10827] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 361.174807][T10827] __do_fast_syscall_32+0x102/0x160 [ 361.180027][T10827] do_fast_syscall_32+0x6a/0xc0 [ 361.184895][T10827] do_SYSENTER_32+0x73/0x90 [ 361.189417][T10827] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 361.195846][T10827] RIP: 0023:0xf7f98549 [ 361.199928][T10827] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 361.219550][T10827] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 361.228013][T10827] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 361.235999][T10827] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 361.244161][T10827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 361.252153][T10827] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 361.260156][T10827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 361.268150][T10827] Uninit was stored to memory at: [ 361.273210][T10827] kmsan_internal_chain_origin+0xad/0x130 [ 361.278938][T10827] __msan_chain_origin+0x57/0xa0 [ 361.283881][T10827] __get_compat_msghdr+0x6db/0x9d0 [ 361.288994][T10827] get_compat_msghdr+0x108/0x2b0 [ 361.293940][T10827] do_recvmmsg+0xdd1/0x22f0 [ 361.298446][T10827] __sys_recvmmsg+0x519/0x6f0 [ 361.303132][T10827] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 361.309209][T10827] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 361.315375][T10827] __do_fast_syscall_32+0x102/0x160 [ 361.320589][T10827] do_fast_syscall_32+0x6a/0xc0 [ 361.325456][T10827] do_SYSENTER_32+0x73/0x90 [ 361.329976][T10827] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 361.336293][T10827] [ 361.338618][T10827] Uninit was stored to memory at: [ 361.344431][T10827] kmsan_internal_chain_origin+0xad/0x130 [ 361.350192][T10827] __msan_chain_origin+0x57/0xa0 [ 361.355142][T10827] __get_compat_msghdr+0x6db/0x9d0 [ 361.360270][T10827] get_compat_msghdr+0x108/0x2b0 [ 361.365330][T10827] do_recvmmsg+0xdd1/0x22f0 [ 361.369839][T10827] __sys_recvmmsg+0x519/0x6f0 [ 361.374531][T10827] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 361.381052][T10827] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 361.387229][T10827] __do_fast_syscall_32+0x102/0x160 [ 361.392561][T10827] do_fast_syscall_32+0x6a/0xc0 [ 361.397428][T10827] do_SYSENTER_32+0x73/0x90 [ 361.401950][T10827] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 361.408272][T10827] [ 361.410633][T10827] Uninit was stored to memory at: [ 361.415693][T10827] kmsan_internal_chain_origin+0xad/0x130 [ 361.421432][T10827] __msan_chain_origin+0x57/0xa0 [ 361.426390][T10827] __get_compat_msghdr+0x6db/0x9d0 [ 361.431520][T10827] get_compat_msghdr+0x108/0x2b0 [ 361.437549][T10827] do_recvmmsg+0xdd1/0x22f0 [ 361.442072][T10827] __sys_recvmmsg+0x519/0x6f0 [ 361.447129][T10827] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 361.453213][T10827] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 361.459532][T10827] __do_fast_syscall_32+0x102/0x160 [ 361.464836][T10827] do_fast_syscall_32+0x6a/0xc0 [ 361.469698][T10827] do_SYSENTER_32+0x73/0x90 [ 361.474215][T10827] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 361.480535][T10827] [ 361.482870][T10827] Uninit was stored to memory at: [ 361.487910][T10827] kmsan_internal_chain_origin+0xad/0x130 [ 361.493724][T10827] __msan_chain_origin+0x57/0xa0 [ 361.498757][T10827] __get_compat_msghdr+0x6db/0x9d0 [ 361.503877][T10827] get_compat_msghdr+0x108/0x2b0 [ 361.508837][T10827] do_recvmmsg+0xdd1/0x22f0 [ 361.513364][T10827] __sys_recvmmsg+0x519/0x6f0 [ 361.518053][T10827] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 361.524146][T10827] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 361.530316][T10827] __do_fast_syscall_32+0x102/0x160 [ 361.536190][T10827] do_fast_syscall_32+0x6a/0xc0 [ 361.541052][T10827] do_SYSENTER_32+0x73/0x90 [ 361.545574][T10827] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 361.551893][T10827] [ 361.555410][T10827] Uninit was stored to memory at: [ 361.560448][T10827] kmsan_internal_chain_origin+0xad/0x130 [ 361.567004][T10827] __msan_chain_origin+0x57/0xa0 [ 361.571952][T10827] __get_compat_msghdr+0x6db/0x9d0 [ 361.577070][T10827] get_compat_msghdr+0x108/0x2b0 [ 361.582014][T10827] do_recvmmsg+0xdd1/0x22f0 [ 361.586528][T10827] __sys_recvmmsg+0x519/0x6f0 [ 361.591224][T10827] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 361.597302][T10827] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 361.603466][T10827] __do_fast_syscall_32+0x102/0x160 [ 361.608675][T10827] do_fast_syscall_32+0x6a/0xc0 [ 361.613538][T10827] do_SYSENTER_32+0x73/0x90 [ 361.618057][T10827] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 361.624380][T10827] [ 361.626823][T10827] Uninit was stored to memory at: [ 361.632385][T10827] kmsan_internal_chain_origin+0xad/0x130 [ 361.638114][T10827] __msan_chain_origin+0x57/0xa0 [ 361.643079][T10827] __get_compat_msghdr+0x6db/0x9d0 [ 361.648225][T10827] get_compat_msghdr+0x108/0x2b0 [ 361.653176][T10827] do_recvmmsg+0xdd1/0x22f0 [ 361.657687][T10827] __sys_recvmmsg+0x519/0x6f0 [ 361.662377][T10827] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 361.668454][T10827] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 361.674625][T10827] __do_fast_syscall_32+0x102/0x160 [ 361.679833][T10827] do_fast_syscall_32+0x6a/0xc0 [ 361.684699][T10827] do_SYSENTER_32+0x73/0x90 [ 361.689219][T10827] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 361.695622][T10827] [ 361.697946][T10827] Uninit was stored to memory at: [ 361.702985][T10827] kmsan_internal_chain_origin+0xad/0x130 [ 361.708711][T10827] __msan_chain_origin+0x57/0xa0 [ 361.713655][T10827] __get_compat_msghdr+0x6db/0x9d0 [ 361.718774][T10827] get_compat_msghdr+0x108/0x2b0 [ 361.723716][T10827] do_recvmmsg+0xdd1/0x22f0 [ 361.729146][T10827] __sys_recvmmsg+0x519/0x6f0 [ 361.733841][T10827] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 361.740711][T10827] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 361.746882][T10827] __do_fast_syscall_32+0x102/0x160 [ 361.752359][T10827] do_fast_syscall_32+0x6a/0xc0 [ 361.757229][T10827] do_SYSENTER_32+0x73/0x90 [ 361.761747][T10827] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 361.768065][T10827] [ 361.770395][T10827] Local variable ----msg_sys@do_recvmmsg created at: [ 361.777165][T10827] do_recvmmsg+0xbf/0x22f0 [ 361.781588][T10827] do_recvmmsg+0xbf/0x22f0 [ 361.813167][ T9764] usb 3-1: new high-speed USB device number 32 using dummy_hcd 12:53:27 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:27 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 362.226548][ T9764] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 362.241010][ T9764] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 362.250636][ T9764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.393380][ T9764] usb 3-1: config 0 descriptor?? [ 362.442436][ T9764] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 12:53:28 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:28 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:28 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:28 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:29 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:29 executing program 3: clone3(&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:53:30 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:30 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:53:30 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 364.968198][ T9764] usb 3-1: USB disconnect, device number 32 12:53:30 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:31 executing program 3: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="0e", 0x1, 0xfffffffffffffffd) 12:53:31 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 365.814243][ T9801] usb 3-1: new high-speed USB device number 33 using dummy_hcd 12:53:31 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 366.140124][T10876] not chained 210000 origins [ 366.144760][T10876] CPU: 0 PID: 10876 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 366.153612][T10876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.163670][T10876] Call Trace: [ 366.166978][T10876] dump_stack+0x21c/0x280 [ 366.172205][T10876] kmsan_internal_chain_origin+0x6f/0x130 [ 366.177938][T10876] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 366.187565][T10876] ? udpv6_recvmsg+0x26bf/0x2b00 [ 366.192520][T10876] ? kmsan_get_metadata+0x116/0x180 [ 366.197715][T10876] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 366.203527][T10876] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 366.209974][T10876] ? kmsan_get_metadata+0x116/0x180 [ 366.215181][T10876] ? kmsan_internal_set_origin+0x85/0xc0 [ 366.220820][T10876] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 366.226893][T10876] ? _copy_from_user+0x1fd/0x300 [ 366.231913][T10876] ? kmsan_get_metadata+0x116/0x180 [ 366.237120][T10876] __msan_chain_origin+0x57/0xa0 [ 366.242051][T10876] __get_compat_msghdr+0x6db/0x9d0 [ 366.247158][T10876] get_compat_msghdr+0x108/0x2b0 [ 366.252206][T10876] do_recvmmsg+0xdd1/0x22f0 [ 366.256701][T10876] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 366.262766][T10876] ? native_apic_mem_write+0x45/0x90 [ 366.268047][T10876] ? apic_is_clustered_box+0xa0/0xa0 [ 366.273423][T10876] ? kmsan_get_metadata+0x116/0x180 [ 366.278608][T10876] ? kmsan_internal_set_origin+0x85/0xc0 [ 366.284231][T10876] ? __msan_poison_alloca+0xe9/0x110 [ 366.289525][T10876] ? __sys_recvmmsg+0xb5/0x6f0 [ 366.294307][T10876] __sys_recvmmsg+0x519/0x6f0 [ 366.299000][T10876] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 366.305071][T10876] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 366.311232][T10876] __do_fast_syscall_32+0x102/0x160 [ 366.316428][T10876] do_fast_syscall_32+0x6a/0xc0 [ 366.321271][T10876] do_SYSENTER_32+0x73/0x90 [ 366.325769][T10876] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 366.332258][T10876] RIP: 0023:0xf7f98549 [ 366.336319][T10876] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 366.355915][T10876] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 366.364320][T10876] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 366.372281][T10876] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 366.380242][T10876] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.388206][T10876] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 366.396192][T10876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.404152][T10876] Uninit was stored to memory at: [ 366.409172][T10876] kmsan_internal_chain_origin+0xad/0x130 [ 366.414880][T10876] __msan_chain_origin+0x57/0xa0 [ 366.419820][T10876] __get_compat_msghdr+0x6db/0x9d0 [ 366.424930][T10876] get_compat_msghdr+0x108/0x2b0 [ 366.429865][T10876] do_recvmmsg+0xdd1/0x22f0 [ 366.434369][T10876] __sys_recvmmsg+0x519/0x6f0 [ 366.439052][T10876] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 366.445121][T10876] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 366.451368][T10876] __do_fast_syscall_32+0x102/0x160 [ 366.456589][T10876] do_fast_syscall_32+0x6a/0xc0 [ 366.461447][T10876] do_SYSENTER_32+0x73/0x90 [ 366.465955][T10876] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 366.472263][T10876] [ 366.474576][T10876] Uninit was stored to memory at: [ 366.479595][T10876] kmsan_internal_chain_origin+0xad/0x130 [ 366.485651][T10876] __msan_chain_origin+0x57/0xa0 [ 366.490577][T10876] __get_compat_msghdr+0x6db/0x9d0 [ 366.495677][T10876] get_compat_msghdr+0x108/0x2b0 [ 366.500612][T10876] do_recvmmsg+0xdd1/0x22f0 [ 366.505111][T10876] __sys_recvmmsg+0x519/0x6f0 [ 366.509869][T10876] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 366.515925][T10876] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 366.522076][T10876] __do_fast_syscall_32+0x102/0x160 [ 366.527266][T10876] do_fast_syscall_32+0x6a/0xc0 [ 366.532109][T10876] do_SYSENTER_32+0x73/0x90 [ 366.536612][T10876] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 366.542920][T10876] [ 366.545247][T10876] Uninit was stored to memory at: [ 366.550264][T10876] kmsan_internal_chain_origin+0xad/0x130 [ 366.555972][T10876] __msan_chain_origin+0x57/0xa0 [ 366.560911][T10876] __get_compat_msghdr+0x6db/0x9d0 [ 366.566011][T10876] get_compat_msghdr+0x108/0x2b0 [ 366.570938][T10876] do_recvmmsg+0xdd1/0x22f0 [ 366.575433][T10876] __sys_recvmmsg+0x519/0x6f0 [ 366.580109][T10876] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 366.586196][T10876] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 366.592346][T10876] __do_fast_syscall_32+0x102/0x160 [ 366.597534][T10876] do_fast_syscall_32+0x6a/0xc0 [ 366.602377][T10876] do_SYSENTER_32+0x73/0x90 [ 366.606889][T10876] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 366.613209][T10876] [ 366.615528][T10876] Uninit was stored to memory at: [ 366.620560][T10876] kmsan_internal_chain_origin+0xad/0x130 [ 366.626273][T10876] __msan_chain_origin+0x57/0xa0 [ 366.631221][T10876] __get_compat_msghdr+0x6db/0x9d0 [ 366.636330][T10876] get_compat_msghdr+0x108/0x2b0 [ 366.641261][T10876] do_recvmmsg+0xdd1/0x22f0 [ 366.645757][T10876] __sys_recvmmsg+0x519/0x6f0 [ 366.650431][T10876] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 366.656496][T10876] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 366.662645][T10876] __do_fast_syscall_32+0x102/0x160 [ 366.667923][T10876] do_fast_syscall_32+0x6a/0xc0 [ 366.672772][T10876] do_SYSENTER_32+0x73/0x90 [ 366.677284][T10876] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 366.683586][T10876] [ 366.685896][T10876] Uninit was stored to memory at: [ 366.690915][T10876] kmsan_internal_chain_origin+0xad/0x130 [ 366.696627][T10876] __msan_chain_origin+0x57/0xa0 [ 366.701558][T10876] __get_compat_msghdr+0x6db/0x9d0 [ 366.706658][T10876] get_compat_msghdr+0x108/0x2b0 [ 366.711587][T10876] do_recvmmsg+0xdd1/0x22f0 [ 366.716079][T10876] __sys_recvmmsg+0x519/0x6f0 [ 366.720751][T10876] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 366.726806][T10876] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 366.732952][T10876] __do_fast_syscall_32+0x102/0x160 [ 366.738139][T10876] do_fast_syscall_32+0x6a/0xc0 [ 366.742979][T10876] do_SYSENTER_32+0x73/0x90 [ 366.747473][T10876] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 366.753788][T10876] [ 366.756098][T10876] Uninit was stored to memory at: [ 366.761110][T10876] kmsan_internal_chain_origin+0xad/0x130 [ 366.766820][T10876] __msan_chain_origin+0x57/0xa0 [ 366.771748][T10876] __get_compat_msghdr+0x6db/0x9d0 [ 366.777299][T10876] get_compat_msghdr+0x108/0x2b0 [ 366.782232][T10876] do_recvmmsg+0xdd1/0x22f0 [ 366.786742][T10876] __sys_recvmmsg+0x519/0x6f0 [ 366.791423][T10876] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 366.797492][T10876] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 366.803650][T10876] __do_fast_syscall_32+0x102/0x160 [ 366.808837][T10876] do_fast_syscall_32+0x6a/0xc0 [ 366.813680][T10876] do_SYSENTER_32+0x73/0x90 [ 366.818175][T10876] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 366.824476][T10876] [ 366.826787][T10876] Uninit was stored to memory at: [ 366.831802][T10876] kmsan_internal_chain_origin+0xad/0x130 [ 366.837692][T10876] __msan_chain_origin+0x57/0xa0 [ 366.842630][T10876] __get_compat_msghdr+0x6db/0x9d0 [ 366.847730][T10876] get_compat_msghdr+0x108/0x2b0 [ 366.852654][T10876] do_recvmmsg+0xdd1/0x22f0 [ 366.857145][T10876] __sys_recvmmsg+0x519/0x6f0 [ 366.861812][T10876] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 366.867871][T10876] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 366.874035][T10876] __do_fast_syscall_32+0x102/0x160 [ 366.879222][T10876] do_fast_syscall_32+0x6a/0xc0 [ 366.884061][T10876] do_SYSENTER_32+0x73/0x90 [ 366.888559][T10876] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 366.894861][T10876] [ 366.897171][T10876] Local variable ----msg_sys@do_recvmmsg created at: [ 366.903834][T10876] do_recvmmsg+0xbf/0x22f0 [ 366.908241][T10876] do_recvmmsg+0xbf/0x22f0 [ 367.013781][ T9801] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 367.026963][ T9801] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 367.036386][ T9801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.102505][ T9801] usb 3-1: config 0 descriptor?? [ 367.155062][ T9801] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 12:53:32 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/ocfs2_control\x00', 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 12:53:33 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 368.984663][ T17] Bluetooth: hci2: command 0x0406 tx timeout 12:53:34 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 369.496831][ T17] usb 3-1: USB disconnect, device number 33 [ 369.737698][T10903] IPVS: ftp: loaded support on port[0] = 21 [ 370.577735][T10903] chnl_net:caif_netlink_parms(): no params data found [ 370.948166][T10903] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.956214][T10903] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.967709][T10903] device bridge_slave_0 entered promiscuous mode [ 370.984685][T10903] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.992983][T10903] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.003165][T10903] device bridge_slave_1 entered promiscuous mode [ 371.068600][T10903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.113824][T10903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.221047][T10903] team0: Port device team_slave_0 added [ 371.251864][T10903] team0: Port device team_slave_1 added [ 371.340239][T10903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.348329][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.375987][T10903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.396268][T10903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.404186][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.430530][T10903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.458120][ T5] Bluetooth: hci5: command 0x0409 tx timeout [ 371.588116][T10903] device hsr_slave_0 entered promiscuous mode [ 371.618519][T10903] device hsr_slave_1 entered promiscuous mode [ 371.629831][T10903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.638450][T10903] Cannot create hsr debugfs directory [ 372.156951][T10903] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 372.227990][T10903] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 372.267062][T10903] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 372.315917][T10903] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 373.403016][T10903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.479710][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 373.491983][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 373.524497][T10903] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.535733][ T5] Bluetooth: hci5: command 0x041b tx timeout [ 373.566501][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.579025][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.588845][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.596290][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.668130][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.677605][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.689474][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.698920][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.706364][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.718742][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.729937][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.741258][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.751789][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 373.840238][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 373.859495][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 373.870223][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 373.896668][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 373.907021][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.934712][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.945215][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.964007][T10903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 374.036254][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 374.045895][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 374.083094][T10903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.295620][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 374.305707][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 374.374859][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 374.384497][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 374.404385][T10903] device veth0_vlan entered promiscuous mode [ 374.412180][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 374.422330][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 374.461368][T10903] device veth1_vlan entered promiscuous mode [ 374.518024][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 374.529284][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 374.540329][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 374.551248][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 374.571873][T10903] device veth0_macvtap entered promiscuous mode [ 374.585805][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 374.603864][T10903] device veth1_macvtap entered promiscuous mode [ 374.654480][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 374.665511][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.675880][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 374.688973][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.699062][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 374.711696][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.721873][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 374.732575][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.742717][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 374.753656][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.768062][T10903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.778529][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 374.791918][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 374.820928][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 374.833612][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.847441][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 374.860219][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.871241][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 374.882581][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.892869][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 374.903494][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.914826][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 374.925580][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.940110][T10903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.954462][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.964866][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.994570][T10903] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.008910][T10903] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.017958][T10903] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.027024][T10903] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.441546][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.450750][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.503189][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 375.545545][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.555279][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.572152][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 375.614276][ T4726] Bluetooth: hci5: command 0x040f tx timeout 12:53:41 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:41 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:53:41 executing program 3: syz_mount_image$afs(&(0x7f0000004c00)='afs\x00', &(0x7f0000004c40)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000005040)) 12:53:41 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:41 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:41 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 376.244918][T11180] kAFS: No cell specified [ 376.251982][T11180] kAFS: No cell specified 12:53:42 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 376.552917][ T5] usb 3-1: new high-speed USB device number 34 using dummy_hcd 12:53:42 executing program 3: r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="0e", 0x1, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000001400)='rxrpc_s\x00', &(0x7f0000001440)={'syz', 0x2}, 0x0) 12:53:42 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:42 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 376.948361][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.959840][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.970104][ T5] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 376.979601][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.293746][ T5] usb 3-1: config 0 descriptor?? [ 377.341197][ T5] usbhid 3-1:0.0: can't add hid device: -22 [ 377.347775][ T5] usbhid: probe of 3-1:0.0 failed with error -22 12:53:43 executing program 4: setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x1ff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:43 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:43 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x1, 0x4, 0x0, 0x70bd2c, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0xff, 0x0, 0xbb}]}, 0x20}}, 0x20000000) [ 377.693316][ T5] Bluetooth: hci5: command 0x0419 tx timeout [ 377.967482][T11199] not chained 220000 origins [ 377.972129][T11199] CPU: 0 PID: 11199 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 377.980884][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.990967][T11199] Call Trace: [ 377.994259][T11199] dump_stack+0x21c/0x280 [ 377.998602][T11199] kmsan_internal_chain_origin+0x6f/0x130 [ 378.004331][T11199] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 378.010404][T11199] ? sched_clock_cpu+0x5e/0x920 [ 378.015249][T11199] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 378.021311][T11199] ? sched_clock_cpu+0x5e/0x920 [ 378.026166][T11199] ? kmsan_get_metadata+0x116/0x180 [ 378.031368][T11199] ? kmsan_get_metadata+0x116/0x180 [ 378.036904][T11199] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 378.042722][T11199] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 378.048782][T11199] ? idle_cpu+0x9a/0x1d0 [ 378.053028][T11199] ? __irq_exit_rcu+0x7a/0x270 [ 378.057782][T11199] ? __msan_get_context_state+0x9/0x20 [ 378.063230][T11199] ? irqentry_exit+0x12/0x50 [ 378.067812][T11199] ? sysvec_apic_timer_interrupt+0x11d/0x130 [ 378.073785][T11199] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 378.079930][T11199] ? kmsan_get_metadata+0x116/0x180 [ 378.085120][T11199] __msan_chain_origin+0x57/0xa0 [ 378.090055][T11199] __get_compat_msghdr+0x6db/0x9d0 [ 378.095165][T11199] get_compat_msghdr+0x108/0x2b0 [ 378.100095][T11199] do_recvmmsg+0xdd1/0x22f0 [ 378.104593][T11199] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 378.110663][T11199] ? kmsan_get_metadata+0x116/0x180 [ 378.115938][T11199] ? kmsan_internal_set_origin+0x85/0xc0 [ 378.121563][T11199] ? _copy_from_user+0x1fd/0x300 [ 378.126511][T11199] ? kmsan_get_metadata+0x116/0x180 [ 378.131708][T11199] ? kmsan_get_metadata+0x116/0x180 [ 378.136897][T11199] ? kmsan_internal_set_origin+0x85/0xc0 [ 378.142522][T11199] ? __msan_poison_alloca+0xe9/0x110 [ 378.147822][T11199] ? __sys_recvmmsg+0xb5/0x6f0 [ 378.152610][T11199] __sys_recvmmsg+0x519/0x6f0 [ 378.157297][T11199] ? kmsan_get_metadata+0x116/0x180 [ 378.162500][T11199] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 378.168577][T11199] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 378.174731][T11199] __do_fast_syscall_32+0x102/0x160 [ 378.179924][T11199] do_fast_syscall_32+0x6a/0xc0 [ 378.184768][T11199] do_SYSENTER_32+0x73/0x90 [ 378.189265][T11199] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 378.195593][T11199] RIP: 0023:0xf7f98549 [ 378.199692][T11199] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 378.219292][T11199] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 378.227701][T11199] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 378.235661][T11199] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 378.243626][T11199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 378.251587][T11199] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 378.259549][T11199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 378.267597][T11199] Uninit was stored to memory at: [ 378.272615][T11199] kmsan_internal_chain_origin+0xad/0x130 [ 378.278324][T11199] __msan_chain_origin+0x57/0xa0 [ 378.283253][T11199] __get_compat_msghdr+0x6db/0x9d0 [ 378.288351][T11199] get_compat_msghdr+0x108/0x2b0 [ 378.293277][T11199] do_recvmmsg+0xdd1/0x22f0 [ 378.297768][T11199] __sys_recvmmsg+0x519/0x6f0 [ 378.302455][T11199] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 378.308527][T11199] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 378.314673][T11199] __do_fast_syscall_32+0x102/0x160 [ 378.319862][T11199] do_fast_syscall_32+0x6a/0xc0 [ 378.324703][T11199] do_SYSENTER_32+0x73/0x90 [ 378.329198][T11199] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 378.335507][T11199] [ 378.337818][T11199] Uninit was stored to memory at: [ 378.342836][T11199] kmsan_internal_chain_origin+0xad/0x130 [ 378.348542][T11199] __msan_chain_origin+0x57/0xa0 [ 378.353469][T11199] __get_compat_msghdr+0x6db/0x9d0 [ 378.358569][T11199] get_compat_msghdr+0x108/0x2b0 [ 378.363496][T11199] do_recvmmsg+0xdd1/0x22f0 [ 378.367988][T11199] __sys_recvmmsg+0x519/0x6f0 [ 378.372654][T11199] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 378.378710][T11199] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 378.384855][T11199] __do_fast_syscall_32+0x102/0x160 [ 378.390044][T11199] do_fast_syscall_32+0x6a/0xc0 [ 378.394889][T11199] do_SYSENTER_32+0x73/0x90 [ 378.399383][T11199] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 378.405688][T11199] [ 378.408001][T11199] Uninit was stored to memory at: [ 378.413015][T11199] kmsan_internal_chain_origin+0xad/0x130 [ 378.418719][T11199] __msan_chain_origin+0x57/0xa0 [ 378.423648][T11199] __get_compat_msghdr+0x6db/0x9d0 [ 378.428838][T11199] get_compat_msghdr+0x108/0x2b0 [ 378.433783][T11199] do_recvmmsg+0xdd1/0x22f0 [ 378.438288][T11199] __sys_recvmmsg+0x519/0x6f0 [ 378.442964][T11199] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 378.449030][T11199] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 378.455191][T11199] __do_fast_syscall_32+0x102/0x160 [ 378.460385][T11199] do_fast_syscall_32+0x6a/0xc0 [ 378.465430][T11199] do_SYSENTER_32+0x73/0x90 [ 378.469950][T11199] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 378.476264][T11199] [ 378.478586][T11199] Uninit was stored to memory at: [ 378.483622][T11199] kmsan_internal_chain_origin+0xad/0x130 [ 378.489770][T11199] __msan_chain_origin+0x57/0xa0 [ 378.494701][T11199] __get_compat_msghdr+0x6db/0x9d0 [ 378.499830][T11199] get_compat_msghdr+0x108/0x2b0 [ 378.504761][T11199] do_recvmmsg+0xdd1/0x22f0 [ 378.509266][T11199] __sys_recvmmsg+0x519/0x6f0 [ 378.513933][T11199] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 378.520096][T11199] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 378.526246][T11199] __do_fast_syscall_32+0x102/0x160 [ 378.531433][T11199] do_fast_syscall_32+0x6a/0xc0 [ 378.536274][T11199] do_SYSENTER_32+0x73/0x90 [ 378.540769][T11199] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 378.547076][T11199] [ 378.549396][T11199] Uninit was stored to memory at: [ 378.555017][T11199] kmsan_internal_chain_origin+0xad/0x130 [ 378.560728][T11199] __msan_chain_origin+0x57/0xa0 [ 378.565653][T11199] __get_compat_msghdr+0x6db/0x9d0 [ 378.570754][T11199] get_compat_msghdr+0x108/0x2b0 [ 378.575680][T11199] do_recvmmsg+0xdd1/0x22f0 [ 378.580172][T11199] __sys_recvmmsg+0x519/0x6f0 [ 378.584841][T11199] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 378.590897][T11199] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 378.597058][T11199] __do_fast_syscall_32+0x102/0x160 [ 378.602257][T11199] do_fast_syscall_32+0x6a/0xc0 [ 378.607099][T11199] do_SYSENTER_32+0x73/0x90 [ 378.611595][T11199] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 378.617898][T11199] [ 378.620211][T11199] Uninit was stored to memory at: [ 378.625241][T11199] kmsan_internal_chain_origin+0xad/0x130 [ 378.630969][T11199] __msan_chain_origin+0x57/0xa0 [ 378.635917][T11199] __get_compat_msghdr+0x6db/0x9d0 [ 378.641025][T11199] get_compat_msghdr+0x108/0x2b0 [ 378.646046][T11199] do_recvmmsg+0xdd1/0x22f0 [ 378.650628][T11199] __sys_recvmmsg+0x519/0x6f0 [ 378.655303][T11199] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 378.661364][T11199] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 378.667531][T11199] __do_fast_syscall_32+0x102/0x160 [ 378.672718][T11199] do_fast_syscall_32+0x6a/0xc0 [ 378.677560][T11199] do_SYSENTER_32+0x73/0x90 [ 378.682060][T11199] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 378.688361][T11199] [ 378.690670][T11199] Uninit was stored to memory at: [ 378.695691][T11199] kmsan_internal_chain_origin+0xad/0x130 [ 378.701400][T11199] __msan_chain_origin+0x57/0xa0 [ 378.706324][T11199] __get_compat_msghdr+0x6db/0x9d0 [ 378.711423][T11199] get_compat_msghdr+0x108/0x2b0 [ 378.716348][T11199] do_recvmmsg+0xdd1/0x22f0 [ 378.720840][T11199] __sys_recvmmsg+0x519/0x6f0 [ 378.725520][T11199] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 378.731574][T11199] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 378.737720][T11199] __do_fast_syscall_32+0x102/0x160 [ 378.742909][T11199] do_fast_syscall_32+0x6a/0xc0 [ 378.747753][T11199] do_SYSENTER_32+0x73/0x90 [ 378.752249][T11199] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 378.758553][T11199] [ 378.760865][T11199] Local variable ----msg_sys@do_recvmmsg created at: [ 378.767526][T11199] do_recvmmsg+0xbf/0x22f0 [ 378.771932][T11199] do_recvmmsg+0xbf/0x22f0 12:53:45 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:53:45 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:45 executing program 4: setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x1ff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:45 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 380.048565][ T17] usb 3-1: USB disconnect, device number 34 12:53:46 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:46 executing program 4: setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x1ff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:46 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 380.852986][ T7] usb 3-1: new high-speed USB device number 35 using dummy_hcd 12:53:46 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 381.215958][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.227181][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.237469][ T7] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 381.247032][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.407666][ T7] usb 3-1: config 0 descriptor?? [ 381.464710][ T7] usbhid 3-1:0.0: can't add hid device: -22 [ 381.471150][ T7] usbhid: probe of 3-1:0.0 failed with error -22 12:53:47 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:47 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:47 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:48 executing program 3: syz_mount_image$afs(&(0x7f00000004c0)='afs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x8010, &(0x7f0000000600)={[], [{@seclabel='seclabel'}]}) 12:53:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:53:49 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:49 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:49 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:49 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 383.609505][ T17] usb 3-1: USB disconnect, device number 35 [ 383.810649][T11356] kAFS: unparsable volume name [ 383.963148][T11356] kAFS: unparsable volume name 12:53:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001200)={'wlan0\x00'}) 12:53:50 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:50 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:50 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:50 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 384.955201][ T17] usb 3-1: new high-speed USB device number 36 using dummy_hcd 12:53:50 executing program 3: write$dsp(0xffffffffffffffff, 0x0, 0x0) 12:53:50 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) listen(r0, 0x1ff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 385.343977][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.355206][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.365527][ T17] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 385.374767][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.561591][ T17] usb 3-1: config 0 descriptor?? [ 385.659679][ T17] usbhid 3-1:0.0: can't add hid device: -22 [ 385.666164][ T17] usbhid: probe of 3-1:0.0 failed with error -22 [ 386.428540][T11392] not chained 230000 origins [ 386.433194][T11392] CPU: 1 PID: 11392 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 386.441959][T11392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.452017][T11392] Call Trace: [ 386.455451][T11392] dump_stack+0x21c/0x280 [ 386.459805][T11392] kmsan_internal_chain_origin+0x6f/0x130 [ 386.466507][T11392] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 386.474456][T11392] ? udpv6_recvmsg+0x26bf/0x2b00 [ 386.479416][T11392] ? kmsan_get_metadata+0x116/0x180 [ 386.484675][T11392] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 386.490498][T11392] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 386.496571][T11392] ? kmsan_get_metadata+0x116/0x180 [ 386.501767][T11392] ? kmsan_internal_set_origin+0x85/0xc0 [ 386.507433][T11392] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 386.513496][T11392] ? _copy_from_user+0x1fd/0x300 [ 386.518431][T11392] ? kmsan_get_metadata+0x116/0x180 [ 386.523625][T11392] __msan_chain_origin+0x57/0xa0 [ 386.528557][T11392] __get_compat_msghdr+0x6db/0x9d0 [ 386.533670][T11392] get_compat_msghdr+0x108/0x2b0 [ 386.538608][T11392] do_recvmmsg+0xdd1/0x22f0 [ 386.543111][T11392] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 386.549171][T11392] ? sched_clock_cpu+0x5e/0x920 [ 386.554028][T11392] ? kmsan_get_metadata+0x116/0x180 [ 386.559226][T11392] ? kmsan_internal_set_origin+0x85/0xc0 [ 386.564849][T11392] ? __msan_poison_alloca+0xe9/0x110 [ 386.570128][T11392] ? __sys_recvmmsg+0xb5/0x6f0 [ 386.575149][T11392] __sys_recvmmsg+0x519/0x6f0 [ 386.579819][T11392] ? __msan_get_context_state+0x9/0x20 [ 386.585274][T11392] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 386.591337][T11392] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 386.597489][T11392] __do_fast_syscall_32+0x102/0x160 [ 386.602683][T11392] do_fast_syscall_32+0x6a/0xc0 [ 386.607529][T11392] do_SYSENTER_32+0x73/0x90 [ 386.612675][T11392] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 386.619015][T11392] RIP: 0023:0xf7f98549 [ 386.623129][T11392] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 386.642867][T11392] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 386.651284][T11392] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020008880 [ 386.659384][T11392] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 386.667355][T11392] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.675493][T11392] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 386.683455][T11392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.691505][T11392] Uninit was stored to memory at: [ 386.696526][T11392] kmsan_internal_chain_origin+0xad/0x130 [ 386.702236][T11392] __msan_chain_origin+0x57/0xa0 [ 386.707170][T11392] __get_compat_msghdr+0x6db/0x9d0 [ 386.712268][T11392] get_compat_msghdr+0x108/0x2b0 [ 386.717197][T11392] do_recvmmsg+0xdd1/0x22f0 [ 386.721778][T11392] __sys_recvmmsg+0x519/0x6f0 [ 386.726446][T11392] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 386.732517][T11392] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 386.738686][T11392] __do_fast_syscall_32+0x102/0x160 [ 386.743875][T11392] do_fast_syscall_32+0x6a/0xc0 [ 386.748718][T11392] do_SYSENTER_32+0x73/0x90 [ 386.753218][T11392] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 386.759522][T11392] [ 386.761853][T11392] Uninit was stored to memory at: [ 386.766869][T11392] kmsan_internal_chain_origin+0xad/0x130 [ 386.772576][T11392] __msan_chain_origin+0x57/0xa0 [ 386.777501][T11392] __get_compat_msghdr+0x6db/0x9d0 [ 386.782599][T11392] get_compat_msghdr+0x108/0x2b0 [ 386.787543][T11392] do_recvmmsg+0xdd1/0x22f0 [ 386.792042][T11392] __sys_recvmmsg+0x519/0x6f0 [ 386.797666][T11392] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 386.803751][T11392] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 386.809907][T11392] __do_fast_syscall_32+0x102/0x160 [ 386.815098][T11392] do_fast_syscall_32+0x6a/0xc0 [ 386.819955][T11392] do_SYSENTER_32+0x73/0x90 [ 386.824450][T11392] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 386.830753][T11392] [ 386.833067][T11392] Uninit was stored to memory at: [ 386.838082][T11392] kmsan_internal_chain_origin+0xad/0x130 [ 386.843791][T11392] __msan_chain_origin+0x57/0xa0 [ 386.848717][T11392] __get_compat_msghdr+0x6db/0x9d0 [ 386.853821][T11392] get_compat_msghdr+0x108/0x2b0 [ 386.858747][T11392] do_recvmmsg+0xdd1/0x22f0 [ 386.863245][T11392] __sys_recvmmsg+0x519/0x6f0 [ 386.867924][T11392] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 386.873991][T11392] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 386.881003][T11392] __do_fast_syscall_32+0x102/0x160 [ 386.886193][T11392] do_fast_syscall_32+0x6a/0xc0 [ 386.891051][T11392] do_SYSENTER_32+0x73/0x90 [ 386.895554][T11392] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 386.901870][T11392] [ 386.904211][T11392] Uninit was stored to memory at: [ 386.909234][T11392] kmsan_internal_chain_origin+0xad/0x130 [ 386.914943][T11392] __msan_chain_origin+0x57/0xa0 [ 386.919870][T11392] __get_compat_msghdr+0x6db/0x9d0 [ 386.924969][T11392] get_compat_msghdr+0x108/0x2b0 [ 386.930004][T11392] do_recvmmsg+0xdd1/0x22f0 [ 386.934584][T11392] __sys_recvmmsg+0x519/0x6f0 [ 386.939252][T11392] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 386.945310][T11392] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 386.951453][T11392] __do_fast_syscall_32+0x102/0x160 [ 386.956646][T11392] do_fast_syscall_32+0x6a/0xc0 [ 386.961597][T11392] do_SYSENTER_32+0x73/0x90 [ 386.966093][T11392] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 386.972397][T11392] [ 386.974710][T11392] Uninit was stored to memory at: [ 386.979724][T11392] kmsan_internal_chain_origin+0xad/0x130 [ 386.985431][T11392] __msan_chain_origin+0x57/0xa0 [ 386.990363][T11392] __get_compat_msghdr+0x6db/0x9d0 [ 386.995472][T11392] get_compat_msghdr+0x108/0x2b0 [ 387.000398][T11392] do_recvmmsg+0xdd1/0x22f0 [ 387.004892][T11392] __sys_recvmmsg+0x519/0x6f0 [ 387.009572][T11392] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 387.015629][T11392] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 387.021775][T11392] __do_fast_syscall_32+0x102/0x160 [ 387.026964][T11392] do_fast_syscall_32+0x6a/0xc0 [ 387.031805][T11392] do_SYSENTER_32+0x73/0x90 [ 387.036303][T11392] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 387.042606][T11392] [ 387.044917][T11392] Uninit was stored to memory at: [ 387.049931][T11392] kmsan_internal_chain_origin+0xad/0x130 [ 387.055651][T11392] __msan_chain_origin+0x57/0xa0 [ 387.060576][T11392] __get_compat_msghdr+0x6db/0x9d0 [ 387.065676][T11392] get_compat_msghdr+0x108/0x2b0 [ 387.070602][T11392] do_recvmmsg+0xdd1/0x22f0 [ 387.075094][T11392] __sys_recvmmsg+0x519/0x6f0 [ 387.079763][T11392] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 387.085822][T11392] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 387.091970][T11392] __do_fast_syscall_32+0x102/0x160 [ 387.097168][T11392] do_fast_syscall_32+0x6a/0xc0 [ 387.102007][T11392] do_SYSENTER_32+0x73/0x90 [ 387.106504][T11392] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 387.112808][T11392] [ 387.115119][T11392] Uninit was stored to memory at: [ 387.120148][T11392] kmsan_internal_chain_origin+0xad/0x130 [ 387.125855][T11392] __msan_chain_origin+0x57/0xa0 [ 387.130779][T11392] __get_compat_msghdr+0x6db/0x9d0 [ 387.135879][T11392] get_compat_msghdr+0x108/0x2b0 [ 387.140806][T11392] do_recvmmsg+0xdd1/0x22f0 [ 387.145357][T11392] __sys_recvmmsg+0x519/0x6f0 [ 387.150026][T11392] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 387.156129][T11392] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 387.162291][T11392] __do_fast_syscall_32+0x102/0x160 [ 387.167486][T11392] do_fast_syscall_32+0x6a/0xc0 [ 387.172333][T11392] do_SYSENTER_32+0x73/0x90 [ 387.176857][T11392] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 387.183196][T11392] [ 387.185522][T11392] Local variable ----msg_sys@do_recvmmsg created at: [ 387.192212][T11392] do_recvmmsg+0xbf/0x22f0 [ 387.196624][T11392] do_recvmmsg+0xbf/0x22f0 12:53:53 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:53:53 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:53 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) listen(r0, 0x1ff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 12:53:53 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 388.391675][ T7] usb 3-1: USB disconnect, device number 36 12:53:54 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:54 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x400100000001, 0x4) listen(r0, 0x1ff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 389.193254][ T54] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 389.604487][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.616105][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.626283][ T54] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 389.635910][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:53:55 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 389.861368][ T54] usb 3-1: config 0 descriptor?? 12:53:55 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x4800) 12:53:55 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:55 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:55 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 390.473160][ T54] usbhid 3-1:0.0: can't add hid device: -71 [ 390.479622][ T54] usbhid: probe of 3-1:0.0 failed with error -71 [ 390.565310][ T54] usb 3-1: USB disconnect, device number 37 12:53:56 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:53:56 executing program 3: clone3(&(0x7f00000017c0)={0x4010000, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, &(0x7f0000001780)=[0x0], 0x1}, 0x58) 12:53:56 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:57 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:57 executing program 3: syz_emit_ethernet(0x68, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @remote, {[@ra={0x94, 0x4}]}}, {0x0, 0x0, 0x42, 0x0, @opaque="80e7f8c8f8b78414cffea7a22de00c9818794a400477d1e3f1169cc53fd32d59f76fc6dfd7d27ad18ecf9c7825d2bca56232a8d4a13b837bf73e"}}}}}, 0x0) 12:53:57 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:57 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:53:57 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 392.138968][ T8770] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 392.545783][ T8770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.559139][ T8770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.569568][ T8770] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 392.579129][ T8770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:53:58 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 12:53:58 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 393.039473][ T8770] usb 3-1: config 0 descriptor?? 12:53:58 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:53:58 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 394.006994][ T8770] usbhid 3-1:0.0: can't add hid device: -71 [ 394.015419][ T8770] usbhid: probe of 3-1:0.0 failed with error -71 [ 394.132669][ T8770] usb 3-1: USB disconnect, device number 38 [ 394.258548][T11479] not chained 240000 origins [ 394.263765][T11479] CPU: 1 PID: 11479 Comm: syz-executor.1 Not tainted 5.10.0-rc4-syzkaller #0 [ 394.273337][T11479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.284659][T11479] Call Trace: [ 394.288423][T11479] dump_stack+0x21c/0x280 [ 394.292901][T11479] kmsan_internal_chain_origin+0x6f/0x130 [ 394.300044][T11479] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 394.307801][T11479] ? udpv6_recvmsg+0x26bf/0x2b00 [ 394.312921][T11479] ? kmsan_get_metadata+0x116/0x180 [ 394.318941][T11479] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 394.326845][T11479] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 394.334970][T11479] ? kmsan_get_metadata+0x116/0x180 [ 394.342438][T11479] ? kmsan_internal_set_origin+0x85/0xc0 [ 394.349418][T11479] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 394.356093][T11479] ? _copy_from_user+0x1fd/0x300 [ 394.361474][T11479] ? kmsan_get_metadata+0x116/0x180 [ 394.366702][T11479] __msan_chain_origin+0x57/0xa0 [ 394.371798][T11479] __get_compat_msghdr+0x6db/0x9d0 [ 394.376981][T11479] get_compat_msghdr+0x108/0x2b0 [ 394.382041][T11479] do_recvmmsg+0xdd1/0x22f0 [ 394.386590][T11479] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 394.392966][T11479] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 394.399400][T11479] ? sched_clock_cpu+0x5e/0x920 [ 394.404313][T11479] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 394.410426][T11479] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 394.416786][T11479] ? kmsan_get_metadata+0x116/0x180 [ 394.422112][T11479] ? kmsan_internal_set_origin+0x85/0xc0 [ 394.428976][T11479] ? __msan_poison_alloca+0xe9/0x110 [ 394.434381][T11479] ? __sys_recvmmsg+0xb5/0x6f0 [ 394.439181][T11479] __sys_recvmmsg+0x519/0x6f0 [ 394.443899][T11479] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 394.450210][T11479] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 394.456639][T11479] __do_fast_syscall_32+0x102/0x160 [ 394.462136][T11479] do_fast_syscall_32+0x6a/0xc0 [ 394.467020][T11479] do_SYSENTER_32+0x73/0x90 [ 394.471853][T11479] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 394.478202][T11479] RIP: 0023:0xf7fda549 [ 394.482622][T11479] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 394.504635][T11479] RSP: 002b:00000000f55d45fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 394.513430][T11479] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020008880 [ 394.521635][T11479] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 394.529742][T11479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 394.537827][T11479] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 394.546059][T11479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 394.554189][T11479] Uninit was stored to memory at: [ 394.559269][T11479] kmsan_internal_chain_origin+0xad/0x130 [ 394.565156][T11479] __msan_chain_origin+0x57/0xa0 [ 394.570133][T11479] __get_compat_msghdr+0x6db/0x9d0 [ 394.575390][T11479] get_compat_msghdr+0x108/0x2b0 [ 394.581424][T11479] do_recvmmsg+0xdd1/0x22f0 [ 394.585973][T11479] __sys_recvmmsg+0x519/0x6f0 [ 394.590688][T11479] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 394.596788][T11479] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 394.604921][T11479] __do_fast_syscall_32+0x102/0x160 [ 394.610259][T11479] do_fast_syscall_32+0x6a/0xc0 [ 394.615411][T11479] do_SYSENTER_32+0x73/0x90 [ 394.619947][T11479] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 394.626558][T11479] [ 394.628901][T11479] Uninit was stored to memory at: [ 394.634242][T11479] kmsan_internal_chain_origin+0xad/0x130 [ 394.640077][T11479] __msan_chain_origin+0x57/0xa0 [ 394.645220][T11479] __get_compat_msghdr+0x6db/0x9d0 [ 394.650484][T11479] get_compat_msghdr+0x108/0x2b0 [ 394.655440][T11479] do_recvmmsg+0xdd1/0x22f0 [ 394.659951][T11479] __sys_recvmmsg+0x519/0x6f0 [ 394.664954][T11479] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 394.671034][T11479] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 394.677348][T11479] __do_fast_syscall_32+0x102/0x160 [ 394.683166][T11479] do_fast_syscall_32+0x6a/0xc0 [ 394.688122][T11479] do_SYSENTER_32+0x73/0x90 [ 394.692630][T11479] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 394.698991][T11479] [ 394.701320][T11479] Uninit was stored to memory at: [ 394.706354][T11479] kmsan_internal_chain_origin+0xad/0x130 [ 394.712075][T11479] __msan_chain_origin+0x57/0xa0 [ 394.717296][T11479] __get_compat_msghdr+0x6db/0x9d0 [ 394.722409][T11479] get_compat_msghdr+0x108/0x2b0 [ 394.727352][T11479] do_recvmmsg+0xdd1/0x22f0 [ 394.731862][T11479] __sys_recvmmsg+0x519/0x6f0 [ 394.736551][T11479] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 394.742625][T11479] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 394.748790][T11479] __do_fast_syscall_32+0x102/0x160 [ 394.753997][T11479] do_fast_syscall_32+0x6a/0xc0 [ 394.759047][T11479] do_SYSENTER_32+0x73/0x90 [ 394.763557][T11479] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 394.769897][T11479] [ 394.772231][T11479] Uninit was stored to memory at: [ 394.777269][T11479] kmsan_internal_chain_origin+0xad/0x130 [ 394.783213][T11479] __msan_chain_origin+0x57/0xa0 [ 394.788154][T11479] __get_compat_msghdr+0x6db/0x9d0 [ 394.793440][T11479] get_compat_msghdr+0x108/0x2b0 [ 394.798381][T11479] do_recvmmsg+0xdd1/0x22f0 [ 394.802890][T11479] __sys_recvmmsg+0x519/0x6f0 [ 394.807568][T11479] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 394.813678][T11479] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 394.819948][T11479] __do_fast_syscall_32+0x102/0x160 [ 394.825165][T11479] do_fast_syscall_32+0x6a/0xc0 [ 394.830113][T11479] do_SYSENTER_32+0x73/0x90 [ 394.834632][T11479] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 394.841087][T11479] [ 394.843413][T11479] Uninit was stored to memory at: [ 394.848657][T11479] kmsan_internal_chain_origin+0xad/0x130 [ 394.854388][T11479] __msan_chain_origin+0x57/0xa0 [ 394.859460][T11479] __get_compat_msghdr+0x6db/0x9d0 [ 394.864577][T11479] get_compat_msghdr+0x108/0x2b0 [ 394.869526][T11479] do_recvmmsg+0xdd1/0x22f0 [ 394.874034][T11479] __sys_recvmmsg+0x519/0x6f0 [ 394.878856][T11479] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 394.885278][T11479] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 394.891485][T11479] __do_fast_syscall_32+0x102/0x160 [ 394.896695][T11479] do_fast_syscall_32+0x6a/0xc0 [ 394.902509][T11479] do_SYSENTER_32+0x73/0x90 [ 394.907035][T11479] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 394.913497][T11479] [ 394.915823][T11479] Uninit was stored to memory at: [ 394.920852][T11479] kmsan_internal_chain_origin+0xad/0x130 [ 394.926649][T11479] __msan_chain_origin+0x57/0xa0 [ 394.931589][T11479] __get_compat_msghdr+0x6db/0x9d0 [ 394.936803][T11479] get_compat_msghdr+0x108/0x2b0 [ 394.941745][T11479] do_recvmmsg+0xdd1/0x22f0 [ 394.946256][T11479] __sys_recvmmsg+0x519/0x6f0 [ 394.950937][T11479] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 394.957030][T11479] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 394.963192][T11479] __do_fast_syscall_32+0x102/0x160 [ 394.968531][T11479] do_fast_syscall_32+0x6a/0xc0 [ 394.973388][T11479] do_SYSENTER_32+0x73/0x90 [ 394.978030][T11479] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 394.984354][T11479] [ 394.986676][T11479] Uninit was stored to memory at: [ 394.991777][T11479] kmsan_internal_chain_origin+0xad/0x130 [ 394.997503][T11479] __msan_chain_origin+0x57/0xa0 [ 395.002550][T11479] __get_compat_msghdr+0x6db/0x9d0 [ 395.007665][T11479] get_compat_msghdr+0x108/0x2b0 [ 395.012609][T11479] do_recvmmsg+0xdd1/0x22f0 [ 395.017194][T11479] __sys_recvmmsg+0x519/0x6f0 [ 395.021880][T11479] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 395.028081][T11479] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 395.034249][T11479] __do_fast_syscall_32+0x102/0x160 [ 395.039496][T11479] do_fast_syscall_32+0x6a/0xc0 [ 395.044438][T11479] do_SYSENTER_32+0x73/0x90 [ 395.048948][T11479] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 395.055319][T11479] [ 395.057712][T11479] Local variable ----msg_sys@do_recvmmsg created at: [ 395.064398][T11479] do_recvmmsg+0xbf/0x22f0 [ 395.068905][T11479] do_recvmmsg+0xbf/0x22f0 12:54:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:54:00 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000ac0)) 12:54:00 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:00 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300), 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:00 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:01 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:01 executing program 3: clone3(&(0x7f00000017c0)={0x4010000, 0x0, 0x0, 0x0, {}, &(0x7f0000001640)=""/58, 0x3a, 0x0, &(0x7f0000001780)=[0x0], 0x1}, 0x58) 12:54:01 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300), 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 396.423207][ T7] usb 3-1: new high-speed USB device number 39 using dummy_hcd 12:54:02 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 396.824231][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.835856][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.846366][ T7] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 396.855852][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.021591][ T7] usb 3-1: config 0 descriptor?? 12:54:02 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:02 executing program 3: keyctl$search(0xa, 0x0, &(0x7f0000001240)='rxrpc_s\x00', 0x0, 0x0) 12:54:02 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 397.553391][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 397.559981][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 397.644978][ T7] usb 3-1: USB disconnect, device number 39 12:54:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:54:04 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300), 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:04 executing program 3: clone3(&(0x7f00000017c0)={0x4010000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:54:04 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:04 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:04 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:04 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:04 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/150, 0x96}], 0x2) [ 399.344403][ T17] usb 3-1: new high-speed USB device number 40 using dummy_hcd 12:54:05 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 399.788648][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.800118][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.810152][ T17] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 399.821167][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.107978][ T17] usb 3-1: config 0 descriptor?? 12:54:05 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:05 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:06 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 400.738567][ T17] usbhid 3-1:0.0: can't add hid device: -71 [ 400.745152][ T17] usbhid: probe of 3-1:0.0 failed with error -71 [ 400.802737][ T17] usb 3-1: USB disconnect, device number 40 12:54:07 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:54:07 executing program 5: setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x1ff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:07 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/150, 0x96}], 0x2) 12:54:07 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 401.643696][T11568] not chained 250000 origins [ 401.648346][T11568] CPU: 0 PID: 11568 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 401.657463][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.667530][T11568] Call Trace: [ 401.671121][T11568] dump_stack+0x21c/0x280 [ 401.675453][T11568] kmsan_internal_chain_origin+0x6f/0x130 [ 401.681163][T11568] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 401.687222][T11568] ? udpv6_recvmsg+0x26bf/0x2b00 [ 401.692157][T11568] ? kmsan_get_metadata+0x116/0x180 [ 401.697349][T11568] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 401.703147][T11568] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 401.709207][T11568] ? kmsan_get_metadata+0x116/0x180 [ 401.714394][T11568] ? kmsan_internal_set_origin+0x85/0xc0 [ 401.720031][T11568] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 401.726611][T11568] ? _copy_from_user+0x1fd/0x300 [ 401.731539][T11568] ? kmsan_get_metadata+0x116/0x180 [ 401.736726][T11568] __msan_chain_origin+0x57/0xa0 [ 401.741655][T11568] __get_compat_msghdr+0x6db/0x9d0 [ 401.746761][T11568] get_compat_msghdr+0x108/0x2b0 [ 401.751692][T11568] do_recvmmsg+0xdd1/0x22f0 [ 401.756198][T11568] ? sysvec_apic_timer_interrupt+0x11d/0x130 [ 401.762175][T11568] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 401.768327][T11568] ? kmsan_get_metadata+0x116/0x180 [ 401.773522][T11568] ? kmsan_internal_set_origin+0x85/0xc0 [ 401.779231][T11568] ? __msan_poison_alloca+0xe9/0x110 [ 401.784507][T11568] ? __sys_recvmmsg+0xb5/0x6f0 [ 401.789261][T11568] __sys_recvmmsg+0x519/0x6f0 [ 401.793950][T11568] ? kmsan_get_metadata+0x116/0x180 [ 401.799239][T11568] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 401.806210][T11568] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 401.812626][T11568] __do_fast_syscall_32+0x102/0x160 [ 401.817860][T11568] do_fast_syscall_32+0x6a/0xc0 [ 401.822717][T11568] do_SYSENTER_32+0x73/0x90 [ 401.827226][T11568] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 401.833547][T11568] RIP: 0023:0xf7f98549 [ 401.837609][T11568] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 401.857204][T11568] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 401.865618][T11568] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 401.873603][T11568] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 401.881567][T11568] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.889618][T11568] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 401.897580][T11568] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 401.905544][T11568] Uninit was stored to memory at: [ 401.910567][T11568] kmsan_internal_chain_origin+0xad/0x130 [ 401.916279][T11568] __msan_chain_origin+0x57/0xa0 [ 401.921206][T11568] __get_compat_msghdr+0x6db/0x9d0 [ 401.926308][T11568] get_compat_msghdr+0x108/0x2b0 [ 401.931237][T11568] do_recvmmsg+0xdd1/0x22f0 [ 401.935729][T11568] __sys_recvmmsg+0x519/0x6f0 [ 401.940399][T11568] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 401.947414][T11568] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 401.953656][T11568] __do_fast_syscall_32+0x102/0x160 [ 401.958844][T11568] do_fast_syscall_32+0x6a/0xc0 [ 401.963684][T11568] do_SYSENTER_32+0x73/0x90 [ 401.968267][T11568] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 401.974577][T11568] [ 401.976891][T11568] Uninit was stored to memory at: [ 401.981923][T11568] kmsan_internal_chain_origin+0xad/0x130 [ 401.987717][T11568] __msan_chain_origin+0x57/0xa0 [ 401.992664][T11568] __get_compat_msghdr+0x6db/0x9d0 [ 401.997777][T11568] get_compat_msghdr+0x108/0x2b0 [ 402.002709][T11568] do_recvmmsg+0xdd1/0x22f0 [ 402.007212][T11568] __sys_recvmmsg+0x519/0x6f0 [ 402.011912][T11568] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 402.017973][T11568] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 402.024123][T11568] __do_fast_syscall_32+0x102/0x160 [ 402.029314][T11568] do_fast_syscall_32+0x6a/0xc0 [ 402.034252][T11568] do_SYSENTER_32+0x73/0x90 [ 402.039098][T11568] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 402.047139][T11568] [ 402.049452][T11568] Uninit was stored to memory at: [ 402.054495][T11568] kmsan_internal_chain_origin+0xad/0x130 [ 402.060214][T11568] __msan_chain_origin+0x57/0xa0 [ 402.065143][T11568] __get_compat_msghdr+0x6db/0x9d0 [ 402.070417][T11568] get_compat_msghdr+0x108/0x2b0 [ 402.075348][T11568] do_recvmmsg+0xdd1/0x22f0 [ 402.079843][T11568] __sys_recvmmsg+0x519/0x6f0 [ 402.084521][T11568] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 402.090590][T11568] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 402.096740][T11568] __do_fast_syscall_32+0x102/0x160 [ 402.101931][T11568] do_fast_syscall_32+0x6a/0xc0 [ 402.106774][T11568] do_SYSENTER_32+0x73/0x90 [ 402.111274][T11568] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 402.117589][T11568] [ 402.119900][T11568] Uninit was stored to memory at: [ 402.125048][T11568] kmsan_internal_chain_origin+0xad/0x130 [ 402.130773][T11568] __msan_chain_origin+0x57/0xa0 [ 402.135724][T11568] __get_compat_msghdr+0x6db/0x9d0 [ 402.140833][T11568] get_compat_msghdr+0x108/0x2b0 [ 402.145767][T11568] do_recvmmsg+0xdd1/0x22f0 [ 402.150264][T11568] __sys_recvmmsg+0x519/0x6f0 [ 402.154968][T11568] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 402.161025][T11568] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 402.167182][T11568] __do_fast_syscall_32+0x102/0x160 [ 402.172456][T11568] do_fast_syscall_32+0x6a/0xc0 [ 402.177300][T11568] do_SYSENTER_32+0x73/0x90 [ 402.181798][T11568] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 402.188102][T11568] [ 402.190415][T11568] Uninit was stored to memory at: [ 402.195441][T11568] kmsan_internal_chain_origin+0xad/0x130 [ 402.201147][T11568] __msan_chain_origin+0x57/0xa0 [ 402.206072][T11568] __get_compat_msghdr+0x6db/0x9d0 [ 402.211173][T11568] get_compat_msghdr+0x108/0x2b0 [ 402.216110][T11568] do_recvmmsg+0xdd1/0x22f0 [ 402.220702][T11568] __sys_recvmmsg+0x519/0x6f0 [ 402.225393][T11568] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 402.231452][T11568] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 402.237599][T11568] __do_fast_syscall_32+0x102/0x160 [ 402.242787][T11568] do_fast_syscall_32+0x6a/0xc0 [ 402.247627][T11568] do_SYSENTER_32+0x73/0x90 [ 402.252168][T11568] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 402.258762][T11568] [ 402.261207][T11568] Uninit was stored to memory at: [ 402.266241][T11568] kmsan_internal_chain_origin+0xad/0x130 [ 402.271969][T11568] __msan_chain_origin+0x57/0xa0 [ 402.276917][T11568] __get_compat_msghdr+0x6db/0x9d0 [ 402.282022][T11568] get_compat_msghdr+0x108/0x2b0 [ 402.286956][T11568] do_recvmmsg+0xdd1/0x22f0 [ 402.291451][T11568] __sys_recvmmsg+0x519/0x6f0 [ 402.296138][T11568] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 402.302231][T11568] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 402.308385][T11568] __do_fast_syscall_32+0x102/0x160 [ 402.313592][T11568] do_fast_syscall_32+0x6a/0xc0 [ 402.318441][T11568] do_SYSENTER_32+0x73/0x90 [ 402.323303][T11568] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 402.329610][T11568] [ 402.331921][T11568] Uninit was stored to memory at: [ 402.336946][T11568] kmsan_internal_chain_origin+0xad/0x130 [ 402.342655][T11568] __msan_chain_origin+0x57/0xa0 [ 402.347586][T11568] __get_compat_msghdr+0x6db/0x9d0 [ 402.352686][T11568] get_compat_msghdr+0x108/0x2b0 [ 402.357614][T11568] do_recvmmsg+0xdd1/0x22f0 [ 402.362109][T11568] __sys_recvmmsg+0x519/0x6f0 [ 402.366795][T11568] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 402.372865][T11568] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 402.379010][T11568] __do_fast_syscall_32+0x102/0x160 [ 402.384203][T11568] do_fast_syscall_32+0x6a/0xc0 [ 402.389045][T11568] do_SYSENTER_32+0x73/0x90 [ 402.393542][T11568] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 402.399858][T11568] [ 402.402197][T11568] Local variable ----msg_sys@do_recvmmsg created at: [ 402.408881][T11568] do_recvmmsg+0xbf/0x22f0 [ 402.413320][T11568] do_recvmmsg+0xbf/0x22f0 12:54:08 executing program 5: setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x1ff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:08 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:09 executing program 5: setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x1ff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 404.453105][T11157] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 404.511872][ T17] Bluetooth: hci3: command 0x0406 tx timeout 12:54:10 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:10 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 404.815979][T11157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.827670][T11157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.837729][T11157] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 404.847037][T11157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.090285][T11157] usb 3-1: config 0 descriptor?? 12:54:10 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/150, 0x96}], 0x2) 12:54:10 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:11 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 405.624095][T11157] usbhid 3-1:0.0: can't add hid device: -71 [ 405.630423][T11157] usbhid: probe of 3-1:0.0 failed with error -71 [ 405.716477][T11157] usb 3-1: USB disconnect, device number 41 12:54:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:54:11 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:12 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:12 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/150, 0x96}], 0x2) 12:54:12 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:12 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:12 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 407.353818][ T5] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 407.713949][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.725522][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.735900][ T5] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 407.745972][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.080686][ T5] usb 3-1: config 0 descriptor?? 12:54:13 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:13 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:14 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:14 executing program 3: readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/150, 0x96}], 0x2) [ 408.623323][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 408.629956][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 408.687573][ T5] usb 3-1: USB disconnect, device number 42 12:54:14 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:14 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) [ 409.514863][T11658] not chained 260000 origins [ 409.519596][T11658] CPU: 1 PID: 11658 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 409.528454][T11658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.538520][T11658] Call Trace: [ 409.541849][T11658] dump_stack+0x21c/0x280 [ 409.546206][T11658] kmsan_internal_chain_origin+0x6f/0x130 [ 409.551960][T11658] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 409.558053][T11658] ? udpv6_recvmsg+0x26bf/0x2b00 [ 409.563109][T11658] ? __irq_exit_rcu+0x7a/0x270 [ 409.567915][T11658] ? kmsan_get_metadata+0x116/0x180 [ 409.573142][T11658] ? kmsan_get_metadata+0x116/0x180 [ 409.578387][T11658] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 409.584307][T11658] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 409.590401][T11658] ? kmsan_get_metadata+0x116/0x180 [ 409.595605][T11658] ? kmsan_internal_set_origin+0x85/0xc0 [ 409.601343][T11658] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 409.607518][T11658] ? _copy_from_user+0x1fd/0x300 [ 409.612475][T11658] ? kmsan_get_metadata+0x116/0x180 [ 409.617670][T11658] __msan_chain_origin+0x57/0xa0 [ 409.623213][T11658] __get_compat_msghdr+0x6db/0x9d0 [ 409.628484][T11658] get_compat_msghdr+0x108/0x2b0 [ 409.633437][T11658] do_recvmmsg+0xdd1/0x22f0 [ 409.638124][T11658] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 409.643934][T11658] ? __irq_exit_rcu+0x7a/0x270 [ 409.648695][T11658] ? __msan_get_context_state+0x9/0x20 [ 409.654767][T11658] ? irqentry_exit+0x12/0x50 [ 409.659350][T11658] ? kmsan_get_metadata+0x116/0x180 [ 409.664548][T11658] ? kmsan_internal_set_origin+0x85/0xc0 [ 409.670221][T11658] ? __msan_poison_alloca+0xe9/0x110 [ 409.675514][T11658] ? __sys_recvmmsg+0xb5/0x6f0 [ 409.680271][T11658] __sys_recvmmsg+0x519/0x6f0 [ 409.684962][T11658] ? kmsan_get_metadata+0x116/0x180 [ 409.690359][T11658] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 409.696534][T11658] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 409.702867][T11658] __do_fast_syscall_32+0x102/0x160 [ 409.708062][T11658] do_fast_syscall_32+0x6a/0xc0 [ 409.712909][T11658] do_SYSENTER_32+0x73/0x90 [ 409.717408][T11658] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.723895][T11658] RIP: 0023:0xf7f98549 [ 409.727958][T11658] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 409.747573][T11658] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 409.755997][T11658] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 409.763959][T11658] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 409.772024][T11658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 409.780083][T11658] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 409.788056][T11658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 409.796019][T11658] Uninit was stored to memory at: [ 409.801043][T11658] kmsan_internal_chain_origin+0xad/0x130 [ 409.806939][T11658] __msan_chain_origin+0x57/0xa0 [ 409.811869][T11658] __get_compat_msghdr+0x6db/0x9d0 [ 409.816992][T11658] get_compat_msghdr+0x108/0x2b0 [ 409.823050][T11658] do_recvmmsg+0xdd1/0x22f0 [ 409.827659][T11658] __sys_recvmmsg+0x519/0x6f0 [ 409.832384][T11658] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 409.838541][T11658] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 409.844707][T11658] __do_fast_syscall_32+0x102/0x160 [ 409.849998][T11658] do_fast_syscall_32+0x6a/0xc0 [ 409.854839][T11658] do_SYSENTER_32+0x73/0x90 [ 409.859336][T11658] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.865666][T11658] [ 409.867980][T11658] Uninit was stored to memory at: [ 409.873105][T11658] kmsan_internal_chain_origin+0xad/0x130 [ 409.879167][T11658] __msan_chain_origin+0x57/0xa0 [ 409.884097][T11658] __get_compat_msghdr+0x6db/0x9d0 [ 409.890152][T11658] get_compat_msghdr+0x108/0x2b0 [ 409.895087][T11658] do_recvmmsg+0xdd1/0x22f0 [ 409.899681][T11658] __sys_recvmmsg+0x519/0x6f0 [ 409.904353][T11658] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 409.910412][T11658] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 409.916566][T11658] __do_fast_syscall_32+0x102/0x160 [ 409.921760][T11658] do_fast_syscall_32+0x6a/0xc0 [ 409.926618][T11658] do_SYSENTER_32+0x73/0x90 [ 409.934069][T11658] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.940377][T11658] [ 409.943224][T11658] Uninit was stored to memory at: [ 409.948442][T11658] kmsan_internal_chain_origin+0xad/0x130 [ 409.954171][T11658] __msan_chain_origin+0x57/0xa0 [ 409.959115][T11658] __get_compat_msghdr+0x6db/0x9d0 [ 409.964228][T11658] get_compat_msghdr+0x108/0x2b0 [ 409.969156][T11658] do_recvmmsg+0xdd1/0x22f0 [ 409.973652][T11658] __sys_recvmmsg+0x519/0x6f0 [ 409.978322][T11658] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 409.984385][T11658] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 409.990533][T11658] __do_fast_syscall_32+0x102/0x160 [ 409.995732][T11658] do_fast_syscall_32+0x6a/0xc0 [ 410.000574][T11658] do_SYSENTER_32+0x73/0x90 [ 410.005070][T11658] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.011377][T11658] [ 410.013778][T11658] Uninit was stored to memory at: [ 410.018880][T11658] kmsan_internal_chain_origin+0xad/0x130 [ 410.024586][T11658] __msan_chain_origin+0x57/0xa0 [ 410.029520][T11658] __get_compat_msghdr+0x6db/0x9d0 [ 410.034630][T11658] get_compat_msghdr+0x108/0x2b0 [ 410.039651][T11658] do_recvmmsg+0xdd1/0x22f0 [ 410.044232][T11658] __sys_recvmmsg+0x519/0x6f0 [ 410.048917][T11658] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 410.054978][T11658] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 410.061127][T11658] __do_fast_syscall_32+0x102/0x160 [ 410.067466][T11658] do_fast_syscall_32+0x6a/0xc0 [ 410.072323][T11658] do_SYSENTER_32+0x73/0x90 [ 410.076839][T11658] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.083150][T11658] [ 410.085465][T11658] Uninit was stored to memory at: [ 410.090482][T11658] kmsan_internal_chain_origin+0xad/0x130 [ 410.096400][T11658] __msan_chain_origin+0x57/0xa0 [ 410.101346][T11658] __get_compat_msghdr+0x6db/0x9d0 [ 410.106464][T11658] get_compat_msghdr+0x108/0x2b0 [ 410.111402][T11658] do_recvmmsg+0xdd1/0x22f0 [ 410.115902][T11658] __sys_recvmmsg+0x519/0x6f0 [ 410.120573][T11658] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 410.126713][T11658] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 410.132949][T11658] __do_fast_syscall_32+0x102/0x160 [ 410.138574][T11658] do_fast_syscall_32+0x6a/0xc0 [ 410.143417][T11658] do_SYSENTER_32+0x73/0x90 [ 410.147918][T11658] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.154326][T11658] [ 410.156746][T11658] Uninit was stored to memory at: [ 410.161794][T11658] kmsan_internal_chain_origin+0xad/0x130 [ 410.167530][T11658] __msan_chain_origin+0x57/0xa0 [ 410.172460][T11658] __get_compat_msghdr+0x6db/0x9d0 [ 410.177582][T11658] get_compat_msghdr+0x108/0x2b0 [ 410.182513][T11658] do_recvmmsg+0xdd1/0x22f0 [ 410.187008][T11658] __sys_recvmmsg+0x519/0x6f0 [ 410.191708][T11658] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 410.197764][T11658] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 410.203910][T11658] __do_fast_syscall_32+0x102/0x160 [ 410.209098][T11658] do_fast_syscall_32+0x6a/0xc0 [ 410.213943][T11658] do_SYSENTER_32+0x73/0x90 [ 410.218437][T11658] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.224751][T11658] [ 410.227061][T11658] Uninit was stored to memory at: [ 410.232079][T11658] kmsan_internal_chain_origin+0xad/0x130 [ 410.237790][T11658] __msan_chain_origin+0x57/0xa0 [ 410.243426][T11658] __get_compat_msghdr+0x6db/0x9d0 [ 410.248549][T11658] get_compat_msghdr+0x108/0x2b0 [ 410.253494][T11658] do_recvmmsg+0xdd1/0x22f0 [ 410.257990][T11658] __sys_recvmmsg+0x519/0x6f0 [ 410.262661][T11658] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 410.268892][T11658] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 410.275038][T11658] __do_fast_syscall_32+0x102/0x160 [ 410.280246][T11658] do_fast_syscall_32+0x6a/0xc0 [ 410.285616][T11658] do_SYSENTER_32+0x73/0x90 [ 410.290128][T11658] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.296455][T11658] [ 410.298781][T11658] Local variable ----msg_sys@do_recvmmsg created at: [ 410.305533][T11658] do_recvmmsg+0xbf/0x22f0 [ 410.309954][T11658] do_recvmmsg+0xbf/0x22f0 12:54:15 executing program 3: readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/150, 0x96}], 0x2) 12:54:16 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:16 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:16 executing program 3: readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/150, 0x96}], 0x2) [ 411.397902][ T5] usb 3-1: new high-speed USB device number 43 using dummy_hcd 12:54:17 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:17 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 411.766977][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.778432][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.788708][ T5] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 411.801260][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.959487][ T5] usb 3-1: config 0 descriptor?? 12:54:17 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/150, 0x96}], 0x2) [ 412.513466][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 412.519925][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 412.568895][ T5] usb 3-1: USB disconnect, device number 43 12:54:18 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:18 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:18 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:18 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/150, 0x96}], 0x2) 12:54:18 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:54:19 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/150, 0x96}], 0x2) [ 413.912960][ T5] usb 3-1: new high-speed USB device number 44 using dummy_hcd 12:54:19 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:19 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 414.287899][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.299537][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.309707][ T5] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 414.319075][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.580824][ T5] usb 3-1: config 0 descriptor?? 12:54:20 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:20 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/150, 0x96}], 0x2) [ 415.123100][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 415.129636][ T5] usbhid: probe of 3-1:0.0 failed with error -71 12:54:20 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:20 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 415.206338][ T5] usb 3-1: USB disconnect, device number 44 12:54:20 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:21 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:54:21 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/150, 0x96}], 0x2) 12:54:21 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 416.534907][T11745] not chained 270000 origins [ 416.539558][T11745] CPU: 1 PID: 11745 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 416.549092][T11745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.559151][T11745] Call Trace: [ 416.562464][T11745] dump_stack+0x21c/0x280 [ 416.568117][T11745] kmsan_internal_chain_origin+0x6f/0x130 [ 416.573851][T11745] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 416.579934][T11745] ? udpv6_recvmsg+0x26bf/0x2b00 [ 416.584890][T11745] ? kmsan_get_metadata+0x116/0x180 [ 416.590094][T11745] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 416.595912][T11745] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 416.601987][T11745] ? kmsan_get_metadata+0x116/0x180 [ 416.608098][T11745] ? kmsan_internal_set_origin+0x85/0xc0 [ 416.613750][T11745] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 416.623009][T11745] ? _copy_from_user+0x1fd/0x300 [ 416.627963][T11745] ? kmsan_get_metadata+0x116/0x180 [ 416.633298][T11745] __msan_chain_origin+0x57/0xa0 [ 416.641272][T11745] __get_compat_msghdr+0x6db/0x9d0 [ 416.646408][T11745] get_compat_msghdr+0x108/0x2b0 [ 416.653718][T11745] do_recvmmsg+0xdd1/0x22f0 [ 416.658251][T11745] ? __irq_exit_rcu+0x7a/0x270 [ 416.663029][T11745] ? kmsan_get_metadata+0x116/0x180 [ 416.668239][T11745] ? kmsan_internal_set_origin+0x85/0xc0 [ 416.673882][T11745] ? __msan_poison_alloca+0xe9/0x110 [ 416.679183][T11745] ? __sys_recvmmsg+0xb5/0x6f0 [ 416.683954][T11745] __sys_recvmmsg+0x519/0x6f0 [ 416.688639][T11745] ? kmsan_get_metadata+0x116/0x180 [ 416.693848][T11745] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 416.699925][T11745] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 416.706094][T11745] __do_fast_syscall_32+0x102/0x160 [ 416.711304][T11745] do_fast_syscall_32+0x6a/0xc0 [ 416.716184][T11745] do_SYSENTER_32+0x73/0x90 [ 416.721380][T11745] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 416.727709][T11745] RIP: 0023:0xf7f98549 [ 416.731790][T11745] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 416.751404][T11745] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 416.759863][T11745] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 416.767843][T11745] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 416.779863][T11745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 416.787847][T11745] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 416.795821][T11745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 416.803786][T11745] Uninit was stored to memory at: [ 416.808809][T11745] kmsan_internal_chain_origin+0xad/0x130 [ 416.814603][T11745] __msan_chain_origin+0x57/0xa0 [ 416.819577][T11745] __get_compat_msghdr+0x6db/0x9d0 [ 416.824683][T11745] get_compat_msghdr+0x108/0x2b0 [ 416.829611][T11745] do_recvmmsg+0xdd1/0x22f0 [ 416.834104][T11745] __sys_recvmmsg+0x519/0x6f0 [ 416.838773][T11745] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 416.844831][T11745] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 416.850977][T11745] __do_fast_syscall_32+0x102/0x160 [ 416.856166][T11745] do_fast_syscall_32+0x6a/0xc0 [ 416.861986][T11745] do_SYSENTER_32+0x73/0x90 [ 416.866480][T11745] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 416.872791][T11745] [ 416.875100][T11745] Uninit was stored to memory at: [ 416.880117][T11745] kmsan_internal_chain_origin+0xad/0x130 [ 416.885828][T11745] __msan_chain_origin+0x57/0xa0 [ 416.890757][T11745] __get_compat_msghdr+0x6db/0x9d0 [ 416.895856][T11745] get_compat_msghdr+0x108/0x2b0 [ 416.900783][T11745] do_recvmmsg+0xdd1/0x22f0 [ 416.905289][T11745] __sys_recvmmsg+0x519/0x6f0 [ 416.910043][T11745] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 416.916103][T11745] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 416.922248][T11745] __do_fast_syscall_32+0x102/0x160 [ 416.927438][T11745] do_fast_syscall_32+0x6a/0xc0 [ 416.932292][T11745] do_SYSENTER_32+0x73/0x90 [ 416.936789][T11745] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 416.943103][T11745] [ 416.945417][T11745] Uninit was stored to memory at: [ 416.950431][T11745] kmsan_internal_chain_origin+0xad/0x130 [ 416.956138][T11745] __msan_chain_origin+0x57/0xa0 [ 416.961067][T11745] __get_compat_msghdr+0x6db/0x9d0 [ 416.966168][T11745] get_compat_msghdr+0x108/0x2b0 [ 416.971115][T11745] do_recvmmsg+0xdd1/0x22f0 [ 416.975607][T11745] __sys_recvmmsg+0x519/0x6f0 [ 416.980300][T11745] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 416.986358][T11745] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 416.992507][T11745] __do_fast_syscall_32+0x102/0x160 [ 416.997713][T11745] do_fast_syscall_32+0x6a/0xc0 [ 417.002559][T11745] do_SYSENTER_32+0x73/0x90 [ 417.007053][T11745] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.013358][T11745] [ 417.015669][T11745] Uninit was stored to memory at: [ 417.020680][T11745] kmsan_internal_chain_origin+0xad/0x130 [ 417.026386][T11745] __msan_chain_origin+0x57/0xa0 [ 417.031313][T11745] __get_compat_msghdr+0x6db/0x9d0 [ 417.036411][T11745] get_compat_msghdr+0x108/0x2b0 [ 417.041340][T11745] do_recvmmsg+0xdd1/0x22f0 [ 417.045830][T11745] __sys_recvmmsg+0x519/0x6f0 [ 417.050506][T11745] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 417.056564][T11745] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 417.062713][T11745] __do_fast_syscall_32+0x102/0x160 [ 417.067907][T11745] do_fast_syscall_32+0x6a/0xc0 [ 417.072751][T11745] do_SYSENTER_32+0x73/0x90 [ 417.077350][T11745] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.083658][T11745] [ 417.085968][T11745] Uninit was stored to memory at: [ 417.090982][T11745] kmsan_internal_chain_origin+0xad/0x130 [ 417.096700][T11745] __msan_chain_origin+0x57/0xa0 [ 417.101628][T11745] __get_compat_msghdr+0x6db/0x9d0 [ 417.106731][T11745] get_compat_msghdr+0x108/0x2b0 [ 417.111657][T11745] do_recvmmsg+0xdd1/0x22f0 [ 417.116148][T11745] __sys_recvmmsg+0x519/0x6f0 [ 417.120817][T11745] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 417.126873][T11745] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 417.133052][T11745] __do_fast_syscall_32+0x102/0x160 [ 417.138249][T11745] do_fast_syscall_32+0x6a/0xc0 [ 417.143089][T11745] do_SYSENTER_32+0x73/0x90 [ 417.147584][T11745] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.153886][T11745] [ 417.156212][T11745] Uninit was stored to memory at: [ 417.161237][T11745] kmsan_internal_chain_origin+0xad/0x130 [ 417.166943][T11745] __msan_chain_origin+0x57/0xa0 [ 417.171872][T11745] __get_compat_msghdr+0x6db/0x9d0 [ 417.176970][T11745] get_compat_msghdr+0x108/0x2b0 [ 417.181896][T11745] do_recvmmsg+0xdd1/0x22f0 [ 417.186387][T11745] __sys_recvmmsg+0x519/0x6f0 [ 417.191059][T11745] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 417.197123][T11745] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 417.203531][T11745] __do_fast_syscall_32+0x102/0x160 [ 417.208720][T11745] do_fast_syscall_32+0x6a/0xc0 [ 417.213567][T11745] do_SYSENTER_32+0x73/0x90 [ 417.218159][T11745] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.224468][T11745] [ 417.226778][T11745] Uninit was stored to memory at: [ 417.231816][T11745] kmsan_internal_chain_origin+0xad/0x130 [ 417.237522][T11745] __msan_chain_origin+0x57/0xa0 [ 417.242445][T11745] __get_compat_msghdr+0x6db/0x9d0 [ 417.247561][T11745] get_compat_msghdr+0x108/0x2b0 [ 417.252491][T11745] do_recvmmsg+0xdd1/0x22f0 [ 417.256991][T11745] __sys_recvmmsg+0x519/0x6f0 [ 417.261670][T11745] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 417.267733][T11745] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 417.273892][T11745] __do_fast_syscall_32+0x102/0x160 [ 417.279088][T11745] do_fast_syscall_32+0x6a/0xc0 [ 417.283931][T11745] do_SYSENTER_32+0x73/0x90 [ 417.288425][T11745] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.294731][T11745] [ 417.297072][T11745] Local variable ----msg_sys@do_recvmmsg created at: [ 417.303741][T11745] do_recvmmsg+0xbf/0x22f0 [ 417.308145][T11745] do_recvmmsg+0xbf/0x22f0 12:54:22 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 417.944420][ T3483] usb 3-1: new high-speed USB device number 45 using dummy_hcd 12:54:23 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/150, 0x96}], 0x2) 12:54:23 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:23 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300), 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 418.303500][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.314643][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.324667][ T3483] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 418.334081][ T3483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.555208][ T3483] usb 3-1: config 0 descriptor?? 12:54:24 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:24 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 419.103313][ T3483] usbhid 3-1:0.0: can't add hid device: -71 [ 419.109684][ T3483] usbhid: probe of 3-1:0.0 failed with error -71 [ 419.186224][ T3483] usb 3-1: USB disconnect, device number 45 12:54:26 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300), 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:26 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 12:54:26 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:26 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:54:26 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:26 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:26 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:26 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) [ 421.254108][ T54] usb 3-1: new high-speed USB device number 46 using dummy_hcd 12:54:26 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300), 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 421.713918][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.725114][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.737783][ T54] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 421.747680][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.983579][ T54] usb 3-1: config 0 descriptor?? 12:54:27 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:28 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:28 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 12:54:28 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 422.524281][ T54] usbhid 3-1:0.0: can't add hid device: -71 [ 422.530648][ T54] usbhid: probe of 3-1:0.0 failed with error -71 [ 422.589883][ T54] usb 3-1: USB disconnect, device number 46 12:54:28 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:54:29 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}], 0x1) 12:54:29 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:29 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:29 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:29 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:29 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 424.366588][T11157] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 424.774098][T11157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.785303][T11157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.795400][T11157] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 424.807531][T11157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:54:30 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 425.195681][T11157] usb 3-1: config 0 descriptor?? 12:54:30 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:30 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}], 0x1) [ 425.381052][T11853] not chained 280000 origins [ 425.385707][T11853] CPU: 1 PID: 11853 Comm: syz-executor.1 Not tainted 5.10.0-rc4-syzkaller #0 [ 425.394472][T11853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.404532][T11853] Call Trace: [ 425.407841][T11853] dump_stack+0x21c/0x280 [ 425.412174][T11853] kmsan_internal_chain_origin+0x6f/0x130 [ 425.417915][T11853] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 425.424096][T11853] ? udpv6_recvmsg+0x26bf/0x2b00 [ 425.431903][T11853] ? kmsan_get_metadata+0x116/0x180 [ 425.437130][T11853] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 425.442948][T11853] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 425.449024][T11853] ? kmsan_get_metadata+0x116/0x180 [ 425.454422][T11853] ? kmsan_internal_set_origin+0x85/0xc0 [ 425.462847][T11853] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 425.468938][T11853] ? _copy_from_user+0x1fd/0x300 [ 425.473893][T11853] ? kmsan_get_metadata+0x116/0x180 [ 425.479098][T11853] __msan_chain_origin+0x57/0xa0 [ 425.484050][T11853] __get_compat_msghdr+0x6db/0x9d0 [ 425.489180][T11853] get_compat_msghdr+0x108/0x2b0 [ 425.494139][T11853] do_recvmmsg+0xdd1/0x22f0 [ 425.498839][T11853] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 425.504925][T11853] ? native_apic_mem_write+0x45/0x90 [ 425.510323][T11853] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 425.516407][T11853] ? sched_clock_cpu+0x5e/0x920 [ 425.521283][T11853] ? apic_is_clustered_box+0xa0/0xa0 [ 425.526580][T11853] ? kmsan_get_metadata+0x116/0x180 [ 425.531783][T11853] ? kmsan_internal_set_origin+0x85/0xc0 [ 425.537422][T11853] ? __msan_poison_alloca+0xe9/0x110 [ 425.542808][T11853] ? __sys_recvmmsg+0xb5/0x6f0 [ 425.547581][T11853] __sys_recvmmsg+0x519/0x6f0 [ 425.552276][T11853] ? __msan_get_context_state+0x9/0x20 [ 425.557763][T11853] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 425.564416][T11853] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 425.570604][T11853] __do_fast_syscall_32+0x102/0x160 [ 425.575827][T11853] do_fast_syscall_32+0x6a/0xc0 [ 425.580700][T11853] do_SYSENTER_32+0x73/0x90 [ 425.585227][T11853] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.591730][T11853] RIP: 0023:0xf7fda549 [ 425.595818][T11853] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 425.615601][T11853] RSP: 002b:00000000f55d45fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 425.624214][T11853] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 425.632904][T11853] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 425.641506][T11853] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 425.649501][T11853] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 425.657527][T11853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 425.665517][T11853] Uninit was stored to memory at: [ 425.670586][T11853] kmsan_internal_chain_origin+0xad/0x130 [ 425.676351][T11853] __msan_chain_origin+0x57/0xa0 [ 425.681299][T11853] __get_compat_msghdr+0x6db/0x9d0 [ 425.686452][T11853] get_compat_msghdr+0x108/0x2b0 [ 425.691415][T11853] do_recvmmsg+0xdd1/0x22f0 [ 425.695947][T11853] __sys_recvmmsg+0x519/0x6f0 [ 425.700653][T11853] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 425.706747][T11853] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 425.712926][T11853] __do_fast_syscall_32+0x102/0x160 [ 425.718144][T11853] do_fast_syscall_32+0x6a/0xc0 [ 425.723010][T11853] do_SYSENTER_32+0x73/0x90 [ 425.727530][T11853] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.733519][T11157] usbhid 3-1:0.0: can't add hid device: -71 [ 425.733903][T11853] [ 425.740082][T11157] usbhid: probe of 3-1:0.0 failed with error -71 [ 425.742097][T11853] Uninit was stored to memory at: [ 425.742154][T11853] kmsan_internal_chain_origin+0xad/0x130 [ 425.759203][T11853] __msan_chain_origin+0x57/0xa0 [ 425.764152][T11853] __get_compat_msghdr+0x6db/0x9d0 [ 425.769275][T11853] get_compat_msghdr+0x108/0x2b0 [ 425.774222][T11853] do_recvmmsg+0xdd1/0x22f0 [ 425.778737][T11853] __sys_recvmmsg+0x519/0x6f0 [ 425.783423][T11853] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 425.792083][T11853] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 425.798264][T11853] __do_fast_syscall_32+0x102/0x160 [ 425.803480][T11853] do_fast_syscall_32+0x6a/0xc0 [ 425.808345][T11853] do_SYSENTER_32+0x73/0x90 [ 425.813156][T11853] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.819482][T11853] [ 425.821807][T11853] Uninit was stored to memory at: [ 425.826849][T11853] kmsan_internal_chain_origin+0xad/0x130 [ 425.831050][T11157] usb 3-1: USB disconnect, device number 47 [ 425.832567][T11853] __msan_chain_origin+0x57/0xa0 [ 425.832586][T11853] __get_compat_msghdr+0x6db/0x9d0 [ 425.832602][T11853] get_compat_msghdr+0x108/0x2b0 [ 425.832622][T11853] do_recvmmsg+0xdd1/0x22f0 [ 425.832640][T11853] __sys_recvmmsg+0x519/0x6f0 [ 425.832657][T11853] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 425.832675][T11853] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 425.832696][T11853] __do_fast_syscall_32+0x102/0x160 [ 425.832718][T11853] do_fast_syscall_32+0x6a/0xc0 [ 425.832736][T11853] do_SYSENTER_32+0x73/0x90 [ 425.832758][T11853] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.832762][T11853] [ 425.832767][T11853] Uninit was stored to memory at: [ 425.832799][T11853] kmsan_internal_chain_origin+0xad/0x130 [ 425.832817][T11853] __msan_chain_origin+0x57/0xa0 [ 425.832833][T11853] __get_compat_msghdr+0x6db/0x9d0 [ 425.832887][T11853] get_compat_msghdr+0x108/0x2b0 [ 425.926351][T11853] do_recvmmsg+0xdd1/0x22f0 [ 425.930873][T11853] __sys_recvmmsg+0x519/0x6f0 [ 425.935555][T11853] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 425.941628][T11853] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 425.947777][T11853] __do_fast_syscall_32+0x102/0x160 [ 425.952967][T11853] do_fast_syscall_32+0x6a/0xc0 [ 425.957812][T11853] do_SYSENTER_32+0x73/0x90 [ 425.962310][T11853] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.968617][T11853] [ 425.970930][T11853] Uninit was stored to memory at: [ 425.976042][T11853] kmsan_internal_chain_origin+0xad/0x130 [ 425.981760][T11853] __msan_chain_origin+0x57/0xa0 [ 425.986689][T11853] __get_compat_msghdr+0x6db/0x9d0 [ 425.991810][T11853] get_compat_msghdr+0x108/0x2b0 [ 425.996740][T11853] do_recvmmsg+0xdd1/0x22f0 [ 426.001231][T11853] __sys_recvmmsg+0x519/0x6f0 [ 426.005902][T11853] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 426.011962][T11853] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 426.018117][T11853] __do_fast_syscall_32+0x102/0x160 [ 426.023307][T11853] do_fast_syscall_32+0x6a/0xc0 [ 426.028149][T11853] do_SYSENTER_32+0x73/0x90 [ 426.032646][T11853] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 426.038951][T11853] [ 426.041271][T11853] Uninit was stored to memory at: [ 426.046302][T11853] kmsan_internal_chain_origin+0xad/0x130 [ 426.052014][T11853] __msan_chain_origin+0x57/0xa0 [ 426.056941][T11853] __get_compat_msghdr+0x6db/0x9d0 [ 426.062041][T11853] get_compat_msghdr+0x108/0x2b0 [ 426.066970][T11853] do_recvmmsg+0xdd1/0x22f0 [ 426.071474][T11853] __sys_recvmmsg+0x519/0x6f0 [ 426.076161][T11853] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 426.082217][T11853] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 426.088363][T11853] __do_fast_syscall_32+0x102/0x160 [ 426.093554][T11853] do_fast_syscall_32+0x6a/0xc0 [ 426.098404][T11853] do_SYSENTER_32+0x73/0x90 [ 426.102907][T11853] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 426.109227][T11853] [ 426.111542][T11853] Uninit was stored to memory at: [ 426.116570][T11853] kmsan_internal_chain_origin+0xad/0x130 [ 426.122278][T11853] __msan_chain_origin+0x57/0xa0 [ 426.127208][T11853] __get_compat_msghdr+0x6db/0x9d0 [ 426.132324][T11853] get_compat_msghdr+0x108/0x2b0 [ 426.137253][T11853] do_recvmmsg+0xdd1/0x22f0 [ 426.141749][T11853] __sys_recvmmsg+0x519/0x6f0 [ 426.146424][T11853] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 426.152495][T11853] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 426.158660][T11853] __do_fast_syscall_32+0x102/0x160 [ 426.163881][T11853] do_fast_syscall_32+0x6a/0xc0 [ 426.168735][T11853] do_SYSENTER_32+0x73/0x90 [ 426.173234][T11853] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 426.179637][T11853] [ 426.181955][T11853] Local variable ----msg_sys@do_recvmmsg created at: [ 426.188749][T11853] do_recvmmsg+0xbf/0x22f0 [ 426.193157][T11853] do_recvmmsg+0xbf/0x22f0 12:54:31 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:32 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:54:32 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:32 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 427.438061][ T3483] usb 3-1: new high-speed USB device number 48 using dummy_hcd 12:54:33 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}], 0x1) [ 427.813252][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.825469][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.835593][ T3483] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 427.844972][ T3483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.078134][ T3483] usb 3-1: config 0 descriptor?? 12:54:33 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:33 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:33 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:33 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, 0x0, 0x0) [ 428.648467][ T3483] usbhid 3-1:0.0: can't add hid device: -71 [ 428.655080][ T3483] usbhid: probe of 3-1:0.0 failed with error -71 [ 428.745588][ T3483] usb 3-1: USB disconnect, device number 48 12:54:34 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, 0x0, 0x0) 12:54:34 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:34 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}, {0x0}], 0x2) 12:54:35 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:54:35 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:35 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, 0x0, 0x0) 12:54:35 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:35 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 430.432898][ T4726] usb 3-1: new high-speed USB device number 49 using dummy_hcd 12:54:36 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 430.803476][ T4726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.815721][ T4726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.825836][ T4726] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 430.835307][ T4726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:54:36 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}, {0x0}], 0x2) [ 431.288113][ T4726] usb 3-1: config 0 descriptor?? 12:54:36 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:37 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:37 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:37 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 432.023660][ T4726] usbhid 3-1:0.0: can't add hid device: -71 [ 432.029980][ T4726] usbhid: probe of 3-1:0.0 failed with error -71 [ 432.113465][ T4726] usb 3-1: USB disconnect, device number 49 12:54:37 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 432.617152][T11947] not chained 290000 origins [ 432.621808][T11947] CPU: 1 PID: 11947 Comm: syz-executor.1 Not tainted 5.10.0-rc4-syzkaller #0 [ 432.630587][T11947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.640637][T11947] Call Trace: [ 432.643939][T11947] dump_stack+0x21c/0x280 [ 432.648279][T11947] kmsan_internal_chain_origin+0x6f/0x130 [ 432.653991][T11947] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 432.660053][T11947] ? udpv6_recvmsg+0x26bf/0x2b00 [ 432.664985][T11947] ? kmsan_get_metadata+0x116/0x180 [ 432.670206][T11947] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 432.676009][T11947] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 432.682071][T11947] ? kmsan_get_metadata+0x116/0x180 [ 432.687299][T11947] ? kmsan_internal_set_origin+0x85/0xc0 [ 432.692942][T11947] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 432.699006][T11947] ? _copy_from_user+0x1fd/0x300 [ 432.703938][T11947] ? kmsan_get_metadata+0x116/0x180 [ 432.709584][T11947] __msan_chain_origin+0x57/0xa0 [ 432.714517][T11947] __get_compat_msghdr+0x6db/0x9d0 [ 432.719624][T11947] get_compat_msghdr+0x108/0x2b0 [ 432.724557][T11947] do_recvmmsg+0xdd1/0x22f0 [ 432.729059][T11947] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 432.734858][T11947] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 432.740914][T11947] ? idle_cpu+0x9a/0x1d0 [ 432.745148][T11947] ? irqentry_exit+0x12/0x50 [ 432.749735][T11947] ? sysvec_apic_timer_interrupt+0x11d/0x130 [ 432.755712][T11947] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 432.761866][T11947] __sys_recvmmsg+0x519/0x6f0 [ 432.766544][T11947] ? kmsan_get_metadata+0x116/0x180 [ 432.771765][T11947] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 432.777826][T11947] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 432.783997][T11947] __do_fast_syscall_32+0x102/0x160 [ 432.789189][T11947] do_fast_syscall_32+0x6a/0xc0 [ 432.794040][T11947] do_SYSENTER_32+0x73/0x90 [ 432.798539][T11947] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 432.804858][T11947] RIP: 0023:0xf7fda549 [ 432.808919][T11947] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 432.828516][T11947] RSP: 002b:00000000f55d45fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 432.836938][T11947] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 432.844912][T11947] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 432.852875][T11947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.860834][T11947] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 432.868809][T11947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.876786][T11947] Uninit was stored to memory at: [ 432.881807][T11947] kmsan_internal_chain_origin+0xad/0x130 [ 432.887520][T11947] __msan_chain_origin+0x57/0xa0 [ 432.892453][T11947] __get_compat_msghdr+0x6db/0x9d0 [ 432.897551][T11947] get_compat_msghdr+0x108/0x2b0 [ 432.902486][T11947] do_recvmmsg+0xdd1/0x22f0 [ 432.906986][T11947] __sys_recvmmsg+0x519/0x6f0 [ 432.911654][T11947] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 432.917724][T11947] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 432.923980][T11947] __do_fast_syscall_32+0x102/0x160 [ 432.929169][T11947] do_fast_syscall_32+0x6a/0xc0 [ 432.934029][T11947] do_SYSENTER_32+0x73/0x90 [ 432.938551][T11947] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 432.944861][T11947] [ 432.947173][T11947] Uninit was stored to memory at: [ 432.952425][T11947] kmsan_internal_chain_origin+0xad/0x130 [ 432.958398][T11947] __msan_chain_origin+0x57/0xa0 [ 432.964040][T11947] __get_compat_msghdr+0x6db/0x9d0 [ 432.969139][T11947] get_compat_msghdr+0x108/0x2b0 [ 432.974069][T11947] do_recvmmsg+0xdd1/0x22f0 [ 432.978562][T11947] __sys_recvmmsg+0x519/0x6f0 [ 432.983668][T11947] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 432.989737][T11947] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 432.995887][T11947] __do_fast_syscall_32+0x102/0x160 [ 433.001077][T11947] do_fast_syscall_32+0x6a/0xc0 [ 433.005926][T11947] do_SYSENTER_32+0x73/0x90 [ 433.010425][T11947] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 433.017094][T11947] [ 433.019403][T11947] Uninit was stored to memory at: [ 433.024419][T11947] kmsan_internal_chain_origin+0xad/0x130 [ 433.030128][T11947] __msan_chain_origin+0x57/0xa0 [ 433.035055][T11947] __get_compat_msghdr+0x6db/0x9d0 [ 433.040170][T11947] get_compat_msghdr+0x108/0x2b0 [ 433.045098][T11947] do_recvmmsg+0xdd1/0x22f0 [ 433.049593][T11947] __sys_recvmmsg+0x519/0x6f0 [ 433.054275][T11947] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 433.060333][T11947] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 433.066479][T11947] __do_fast_syscall_32+0x102/0x160 [ 433.071667][T11947] do_fast_syscall_32+0x6a/0xc0 [ 433.076511][T11947] do_SYSENTER_32+0x73/0x90 [ 433.081069][T11947] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 433.087372][T11947] [ 433.089694][T11947] Uninit was stored to memory at: [ 433.094716][T11947] kmsan_internal_chain_origin+0xad/0x130 [ 433.100426][T11947] __msan_chain_origin+0x57/0xa0 [ 433.105361][T11947] __get_compat_msghdr+0x6db/0x9d0 [ 433.110462][T11947] get_compat_msghdr+0x108/0x2b0 [ 433.115391][T11947] do_recvmmsg+0xdd1/0x22f0 [ 433.119883][T11947] __sys_recvmmsg+0x519/0x6f0 [ 433.124551][T11947] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 433.130617][T11947] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 433.137023][T11947] __do_fast_syscall_32+0x102/0x160 [ 433.142213][T11947] do_fast_syscall_32+0x6a/0xc0 [ 433.147055][T11947] do_SYSENTER_32+0x73/0x90 [ 433.151550][T11947] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 433.157866][T11947] [ 433.160179][T11947] Uninit was stored to memory at: [ 433.165195][T11947] kmsan_internal_chain_origin+0xad/0x130 [ 433.170901][T11947] __msan_chain_origin+0x57/0xa0 [ 433.175826][T11947] __get_compat_msghdr+0x6db/0x9d0 [ 433.180931][T11947] get_compat_msghdr+0x108/0x2b0 [ 433.185864][T11947] do_recvmmsg+0xdd1/0x22f0 [ 433.190371][T11947] __sys_recvmmsg+0x519/0x6f0 [ 433.195052][T11947] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 433.201122][T11947] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 433.207545][T11947] __do_fast_syscall_32+0x102/0x160 [ 433.212752][T11947] do_fast_syscall_32+0x6a/0xc0 [ 433.217624][T11947] do_SYSENTER_32+0x73/0x90 [ 433.222145][T11947] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 433.228453][T11947] [ 433.230770][T11947] Uninit was stored to memory at: [ 433.235795][T11947] kmsan_internal_chain_origin+0xad/0x130 [ 433.241510][T11947] __msan_chain_origin+0x57/0xa0 [ 433.246442][T11947] __get_compat_msghdr+0x6db/0x9d0 [ 433.251547][T11947] get_compat_msghdr+0x108/0x2b0 [ 433.256484][T11947] do_recvmmsg+0xdd1/0x22f0 [ 433.260976][T11947] __sys_recvmmsg+0x519/0x6f0 [ 433.265645][T11947] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 433.271698][T11947] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 433.277845][T11947] __do_fast_syscall_32+0x102/0x160 [ 433.283036][T11947] do_fast_syscall_32+0x6a/0xc0 [ 433.287875][T11947] do_SYSENTER_32+0x73/0x90 [ 433.292370][T11947] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 433.298674][T11947] [ 433.300984][T11947] Uninit was stored to memory at: [ 433.305998][T11947] kmsan_internal_chain_origin+0xad/0x130 [ 433.311703][T11947] __msan_chain_origin+0x57/0xa0 [ 433.316628][T11947] __get_compat_msghdr+0x6db/0x9d0 [ 433.321730][T11947] get_compat_msghdr+0x108/0x2b0 [ 433.326656][T11947] do_recvmmsg+0xdd1/0x22f0 [ 433.331236][T11947] __sys_recvmmsg+0x519/0x6f0 [ 433.335903][T11947] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 433.341959][T11947] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 433.348115][T11947] __do_fast_syscall_32+0x102/0x160 [ 433.353304][T11947] do_fast_syscall_32+0x6a/0xc0 [ 433.358145][T11947] do_SYSENTER_32+0x73/0x90 [ 433.362639][T11947] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 433.368944][T11947] [ 433.371431][T11947] Local variable ----msg_sys@do_recvmmsg created at: [ 433.378094][T11947] do_recvmmsg+0xbf/0x22f0 [ 433.382503][T11947] do_recvmmsg+0xbf/0x22f0 12:54:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:54:39 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/217, 0xd9}, {0x0}], 0x2) 12:54:39 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:39 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:39 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:40 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 434.563901][ T5] usb 3-1: new high-speed USB device number 50 using dummy_hcd 12:54:40 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 434.923207][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.934540][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.946326][ T5] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 434.956172][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.184716][ T5] usb 3-1: config 0 descriptor?? 12:54:40 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/150, 0x96}], 0x1) 12:54:40 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:41 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:41 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:41 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 435.953081][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 435.959502][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 435.991554][ T5] usb 3-1: USB disconnect, device number 50 12:54:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:54:42 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:42 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:42 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/150, 0x96}], 0x1) 12:54:42 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:42 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:42 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 437.632881][ T3483] usb 3-1: new high-speed USB device number 51 using dummy_hcd 12:54:43 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:43 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 438.003730][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.019699][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.030161][ T3483] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 438.042107][ T3483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:54:43 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 438.247556][ T3483] usb 3-1: config 0 descriptor?? 12:54:43 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/150, 0x96}], 0x1) 12:54:44 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 438.993758][ T3483] usbhid 3-1:0.0: can't add hid device: -71 [ 439.000072][ T3483] usbhid: probe of 3-1:0.0 failed with error -71 [ 439.066209][ T3483] usb 3-1: USB disconnect, device number 51 12:54:45 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:54:45 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:45 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:45 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:45 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:45 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000002c0)=""/150, 0x96}], 0x2) 12:54:45 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:45 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 440.374207][T11157] usb 3-1: new high-speed USB device number 52 using dummy_hcd 12:54:46 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:46 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 440.740616][T11157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.751755][T11157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.761802][T11157] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 440.771114][T11157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.010498][T11157] usb 3-1: config 0 descriptor?? 12:54:46 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 441.501588][T11157] cm6533_jd 0003:0D8C:0022.000D: No inputs registered, leaving 12:54:47 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 441.552713][T11157] cm6533_jd 0003:0D8C:0022.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 441.701572][T11157] usb 3-1: USB disconnect, device number 52 12:54:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:54:47 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:47 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:47 executing program 3: add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="0e", 0x1, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="0e", 0x1, 0xfffffffffffffffd) request_key(0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:54:47 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:47 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9000004}, 0x0) 12:54:48 executing program 3: clone3(&(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000cc0)=""/107, &(0x7f0000000d40)=[0xffffffffffffffff], 0x1}, 0x58) fork() 12:54:48 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:48 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9000004}, 0x0) [ 443.212824][ T3483] usb 3-1: new high-speed USB device number 53 using dummy_hcd 12:54:49 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 443.624247][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.635459][ T3483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.647175][ T3483] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 443.656798][ T3483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:54:49 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:49 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9000004}, 0x0) [ 443.813235][ T3483] usb 3-1: config 0 descriptor?? [ 444.316314][ T3483] cm6533_jd 0003:0D8C:0022.000E: No inputs registered, leaving [ 444.374886][ T3483] cm6533_jd 0003:0D8C:0022.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 444.518426][ T3483] usb 3-1: USB disconnect, device number 53 12:54:50 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)) 12:54:50 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, 0x0, 0x0) 12:54:50 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:50 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x2) poll(&(0x7f00000000c0)=[{r0, 0x2166}], 0x1, 0x0) 12:54:50 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x9000004}, 0x0) 12:54:50 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 445.376486][T11157] Bluetooth: hci4: command 0x0406 tx timeout 12:54:51 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, 0x0, 0x0) 12:54:51 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x9000004}, 0x0) 12:54:51 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000001980)='/dev/dri/renderD128\x00', 0x105000, 0x0) [ 445.972917][T11157] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 446.344900][T11157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.356751][T11157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.368195][T11157] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 446.377611][T11157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:54:52 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x9000004}, 0x0) 12:54:52 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 446.547606][T11157] usb 3-1: config 0 descriptor?? 12:54:52 executing program 3: clone3(&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001780)}, 0x58) [ 447.016442][T11157] cm6533_jd 0003:0D8C:0022.000F: No inputs registered, leaving [ 447.049579][T11157] cm6533_jd 0003:0D8C:0022.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 447.222148][ T54] usb 3-1: USB disconnect, device number 54 12:54:53 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000100)) 12:54:53 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:53 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, 0x0, 0x0) 12:54:53 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x154, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40000004}, 0x8080) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8001}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x960}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x61}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001200)={'wlan0\x00'}) 12:54:53 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:53 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:53 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:54 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001680)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) [ 448.785518][T11157] usb 3-1: new high-speed USB device number 55 using dummy_hcd 12:54:54 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:54 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:54 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/ocfs2_control\x00', 0x0, 0x0) clone3(&(0x7f0000000180)={0x8000000, 0x0, 0x0, &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x29, 0xb3, 0x4, 0x5, 0x52, @dev={0xfe, 0x80, [], 0x1a}, @local, 0x10, 0x8}}) [ 449.154333][T11157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.165662][T11157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.177641][T11157] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 449.187453][T11157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.354484][T11157] usb 3-1: config 0 descriptor?? [ 449.837541][T11157] cm6533_jd 0003:0D8C:0022.0010: No inputs registered, leaving [ 449.874651][T11157] cm6533_jd 0003:0D8C:0022.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 450.107010][T11157] usb 3-1: USB disconnect, device number 55 12:54:56 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000100)) 12:54:56 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:56 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4), 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:56 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:56 executing program 3: r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="0e", 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x0) 12:54:56 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4), 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:56 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:56 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:56 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @remote}, {0x0, 0x0, 0x8}}}}}, 0x0) [ 451.553985][T11157] usb 3-1: new high-speed USB device number 56 using dummy_hcd 12:54:57 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4), 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:57 executing program 3: add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="ee", 0x1, 0xfffffffffffffffe) 12:54:57 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4), 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 451.913797][T11157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.925283][T11157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.935371][T11157] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 451.946457][T11157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.151917][T11157] usb 3-1: config 0 descriptor?? [ 452.392677][T12303] encrypted_key: insufficient parameters specified [ 452.420683][T12303] encrypted_key: insufficient parameters specified [ 452.636749][T11157] cm6533_jd 0003:0D8C:0022.0011: No inputs registered, leaving [ 452.693899][T11157] cm6533_jd 0003:0D8C:0022.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 452.910813][ T7] usb 3-1: USB disconnect, device number 56 12:54:59 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000100)) 12:54:59 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:59 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000180)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) 12:54:59 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:59 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4), 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:59 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4), 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:54:59 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:54:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 454.413558][ T7] usb 3-1: new high-speed USB device number 57 using dummy_hcd 12:55:00 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, 0x0) clone3(&(0x7f0000000180)={0x8000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xf}, &(0x7f00000000c0)=""/52, 0x34, &(0x7f0000000100)=""/14, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x29, 0xb3, 0x4, 0x5, 0x52, @dev={0xfe, 0x80, [], 0x1a}, @local, 0x10, 0x8, 0x3}}) [ 454.773821][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.787043][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.797238][ T7] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 454.808983][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:55:00 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:55:00 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:55:00 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 455.007795][ T7] usb 3-1: config 0 descriptor?? [ 455.477265][ T7] cm6533_jd 0003:0D8C:0022.0012: No inputs registered, leaving [ 455.590104][ T7] cm6533_jd 0003:0D8C:0022.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 455.767783][ T7] usb 3-1: USB disconnect, device number 57 [ 456.196061][T12359] not chained 300000 origins [ 456.200720][T12359] CPU: 0 PID: 12359 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 456.209572][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.220160][T12359] Call Trace: [ 456.223816][T12359] dump_stack+0x21c/0x280 [ 456.228466][T12359] kmsan_internal_chain_origin+0x6f/0x130 [ 456.234393][T12359] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 456.240849][T12359] ? udpv6_recvmsg+0x26bf/0x2b00 [ 456.245910][T12359] ? kmsan_get_metadata+0x116/0x180 [ 456.251161][T12359] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 456.257169][T12359] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 456.264650][T12359] ? kmsan_get_metadata+0x116/0x180 [ 456.269887][T12359] ? kmsan_internal_set_origin+0x85/0xc0 [ 456.275638][T12359] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 456.282424][T12359] ? _copy_from_user+0x1fd/0x300 [ 456.289040][T12359] ? kmsan_get_metadata+0x116/0x180 [ 456.294346][T12359] __msan_chain_origin+0x57/0xa0 [ 456.299440][T12359] __get_compat_msghdr+0x6db/0x9d0 [ 456.304583][T12359] get_compat_msghdr+0x108/0x2b0 [ 456.309613][T12359] do_recvmmsg+0xdd1/0x22f0 [ 456.314121][T12359] ? native_apic_mem_write+0x45/0x90 [ 456.319405][T12359] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 456.325774][T12359] ? sched_clock_cpu+0x5e/0x920 [ 456.331078][T12359] ? apic_is_clustered_box+0xa0/0xa0 [ 456.336791][T12359] ? kmsan_get_metadata+0x116/0x180 [ 456.342766][T12359] ? kmsan_internal_set_origin+0x85/0xc0 [ 456.349553][T12359] ? __msan_poison_alloca+0xe9/0x110 [ 456.355556][T12359] ? __sys_recvmmsg+0xb5/0x6f0 [ 456.360882][T12359] __sys_recvmmsg+0x519/0x6f0 [ 456.366092][T12359] ? kmsan_get_metadata+0x116/0x180 [ 456.371386][T12359] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 456.377484][T12359] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 456.383684][T12359] __do_fast_syscall_32+0x102/0x160 [ 456.388977][T12359] do_fast_syscall_32+0x6a/0xc0 [ 456.394265][T12359] do_SYSENTER_32+0x73/0x90 [ 456.398787][T12359] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.405683][T12359] RIP: 0023:0xf7f98549 [ 456.410018][T12359] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 456.430365][T12359] RSP: 002b:00000000f55925fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 456.439068][T12359] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020008880 [ 456.447232][T12359] RDX: 00000000000005e3 RSI: 0000000044000102 RDI: 0000000000000000 [ 456.456578][T12359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.466312][T12359] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 456.476550][T12359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.486325][T12359] Uninit was stored to memory at: [ 456.492312][T12359] kmsan_internal_chain_origin+0xad/0x130 [ 456.499260][T12359] __msan_chain_origin+0x57/0xa0 [ 456.504290][T12359] __get_compat_msghdr+0x6db/0x9d0 [ 456.510153][T12359] get_compat_msghdr+0x108/0x2b0 [ 456.516154][T12359] do_recvmmsg+0xdd1/0x22f0 [ 456.521038][T12359] __sys_recvmmsg+0x519/0x6f0 [ 456.525820][T12359] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 456.531882][T12359] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 456.538177][T12359] __do_fast_syscall_32+0x102/0x160 [ 456.543371][T12359] do_fast_syscall_32+0x6a/0xc0 [ 456.549342][T12359] do_SYSENTER_32+0x73/0x90 [ 456.554496][T12359] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.561067][T12359] [ 456.563387][T12359] Uninit was stored to memory at: [ 456.568410][T12359] kmsan_internal_chain_origin+0xad/0x130 [ 456.574124][T12359] __msan_chain_origin+0x57/0xa0 [ 456.579141][T12359] __get_compat_msghdr+0x6db/0x9d0 [ 456.584530][T12359] get_compat_msghdr+0x108/0x2b0 [ 456.589911][T12359] do_recvmmsg+0xdd1/0x22f0 [ 456.594819][T12359] __sys_recvmmsg+0x519/0x6f0 [ 456.599674][T12359] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 456.607650][T12359] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 456.613820][T12359] __do_fast_syscall_32+0x102/0x160 [ 456.619118][T12359] do_fast_syscall_32+0x6a/0xc0 [ 456.624021][T12359] do_SYSENTER_32+0x73/0x90 [ 456.628615][T12359] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.635228][T12359] [ 456.638192][T12359] Uninit was stored to memory at: [ 456.643384][T12359] kmsan_internal_chain_origin+0xad/0x130 [ 456.649092][T12359] __msan_chain_origin+0x57/0xa0 [ 456.654035][T12359] __get_compat_msghdr+0x6db/0x9d0 [ 456.659135][T12359] get_compat_msghdr+0x108/0x2b0 [ 456.664081][T12359] do_recvmmsg+0xdd1/0x22f0 [ 456.668575][T12359] __sys_recvmmsg+0x519/0x6f0 [ 456.673244][T12359] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 456.679357][T12359] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 456.685509][T12359] __do_fast_syscall_32+0x102/0x160 [ 456.690718][T12359] do_fast_syscall_32+0x6a/0xc0 [ 456.695563][T12359] do_SYSENTER_32+0x73/0x90 [ 456.700258][T12359] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.706593][T12359] [ 456.708906][T12359] Uninit was stored to memory at: [ 456.713923][T12359] kmsan_internal_chain_origin+0xad/0x130 [ 456.719752][T12359] __msan_chain_origin+0x57/0xa0 [ 456.724688][T12359] __get_compat_msghdr+0x6db/0x9d0 [ 456.729787][T12359] get_compat_msghdr+0x108/0x2b0 [ 456.734719][T12359] do_recvmmsg+0xdd1/0x22f0 [ 456.739211][T12359] __sys_recvmmsg+0x519/0x6f0 [ 456.743903][T12359] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 456.749963][T12359] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 456.756144][T12359] __do_fast_syscall_32+0x102/0x160 [ 456.761333][T12359] do_fast_syscall_32+0x6a/0xc0 [ 456.766179][T12359] do_SYSENTER_32+0x73/0x90 [ 456.770673][T12359] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.777064][T12359] [ 456.779383][T12359] Uninit was stored to memory at: [ 456.784402][T12359] kmsan_internal_chain_origin+0xad/0x130 [ 456.790118][T12359] __msan_chain_origin+0x57/0xa0 [ 456.795047][T12359] __get_compat_msghdr+0x6db/0x9d0 [ 456.800187][T12359] get_compat_msghdr+0x108/0x2b0 [ 456.806188][T12359] do_recvmmsg+0xdd1/0x22f0 [ 456.810956][T12359] __sys_recvmmsg+0x519/0x6f0 [ 456.815718][T12359] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 456.821793][T12359] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 456.827943][T12359] __do_fast_syscall_32+0x102/0x160 [ 456.833221][T12359] do_fast_syscall_32+0x6a/0xc0 [ 456.838065][T12359] do_SYSENTER_32+0x73/0x90 [ 456.842563][T12359] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.848869][T12359] [ 456.851199][T12359] Uninit was stored to memory at: [ 456.856214][T12359] kmsan_internal_chain_origin+0xad/0x130 [ 456.861923][T12359] __msan_chain_origin+0x57/0xa0 [ 456.866850][T12359] __get_compat_msghdr+0x6db/0x9d0 [ 456.871963][T12359] get_compat_msghdr+0x108/0x2b0 [ 456.876890][T12359] do_recvmmsg+0xdd1/0x22f0 [ 456.881404][T12359] __sys_recvmmsg+0x519/0x6f0 [ 456.886072][T12359] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 456.892129][T12359] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 456.898884][T12359] __do_fast_syscall_32+0x102/0x160 [ 456.904074][T12359] do_fast_syscall_32+0x6a/0xc0 [ 456.908917][T12359] do_SYSENTER_32+0x73/0x90 [ 456.913411][T12359] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.919715][T12359] [ 456.922033][T12359] Uninit was stored to memory at: [ 456.927047][T12359] kmsan_internal_chain_origin+0xad/0x130 [ 456.932753][T12359] __msan_chain_origin+0x57/0xa0 [ 456.937692][T12359] __get_compat_msghdr+0x6db/0x9d0 [ 456.942791][T12359] get_compat_msghdr+0x108/0x2b0 [ 456.947717][T12359] do_recvmmsg+0xdd1/0x22f0 [ 456.952228][T12359] __sys_recvmmsg+0x519/0x6f0 [ 456.956897][T12359] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 456.962986][T12359] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 456.969142][T12359] __do_fast_syscall_32+0x102/0x160 [ 456.974330][T12359] do_fast_syscall_32+0x6a/0xc0 [ 456.979187][T12359] do_SYSENTER_32+0x73/0x90 [ 456.983681][T12359] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.989986][T12359] [ 456.992299][T12359] Local variable ----msg_sys@do_recvmmsg created at: [ 456.998963][T12359] do_recvmmsg+0xbf/0x22f0 [ 457.003368][T12359] do_recvmmsg+0xbf/0x22f0 12:55:02 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, 0x0) 12:55:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:55:02 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 12:55:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0x13, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558000800ffff", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 12:55:02 executing program 1: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) 12:55:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={0x0}}, 0x0) 12:55:03 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 458.813591][T11157] usb 3-1: new high-speed USB device number 58 using dummy_hcd 12:55:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 459.174154][T11157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.185538][T11157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.195614][T11157] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 459.204914][T11157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:55:04 executing program 0: listxattr(0x0, &(0x7f0000000180)=""/131, 0x83) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x980, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/111, 0x6f}], 0x8, &(0x7f00000007c0)=""/225, 0xe1}, 0x5a}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x1, 0xee01}, {0x2, 0x7}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x5}, {}, {0x8, 0x2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1}, {0x8, 0x7}], {0x10, 0x1}}, 0xa4, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) [ 459.412110][T12402] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 459.418833][T12402] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 459.444243][T11157] usb 3-1: config 0 descriptor?? [ 459.500519][T12402] ===================================================== [ 459.507879][T12402] BUG: KMSAN: uninit-value in hsr_get_node+0x45d/0xba0 [ 459.514853][T12402] CPU: 1 PID: 12402 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 459.523627][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.533696][T12402] Call Trace: [ 459.537006][T12402] dump_stack+0x21c/0x280 [ 459.541347][T12402] kmsan_report+0xfb/0x1e0 [ 459.545772][T12402] __msan_warning+0x5f/0xa0 [ 459.550286][T12402] hsr_get_node+0x45d/0xba0 [ 459.554806][T12402] hsr_forward_skb+0x9d9/0x2610 [ 459.559671][T12402] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 459.565591][T12402] hsr_dev_xmit+0x133/0x230 [ 459.570193][T12402] ? is_hsr_master+0xb0/0xb0 [ 459.574825][T12402] xmit_one+0x2b6/0x760 [ 459.579002][T12402] __dev_queue_xmit+0x3426/0x4590 [ 459.584041][T12402] ? skb_release_data+0x6df/0xdb0 [ 459.589093][T12402] dev_queue_xmit+0x4b/0x60 [ 459.593685][T12402] __bpf_redirect+0x148d/0x1700 [ 459.598572][T12402] bpf_clone_redirect+0x4a1/0x660 [ 459.603673][T12402] ___bpf_prog_run+0x4279/0x93e0 [ 459.608636][T12402] ? bpf_csum_level+0x760/0x760 [ 459.613510][T12402] __bpf_prog_run512+0x12e/0x190 [ 459.618625][T12402] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 459.624459][T12402] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 459.630600][T12402] ? __perf_event_task_sched_in+0xf62/0xfd0 [ 459.636512][T12402] ? kmsan_get_metadata+0x116/0x180 [ 459.641729][T12402] ? kmsan_get_metadata+0x116/0x180 [ 459.646938][T12402] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 459.652758][T12402] ? kmsan_get_metadata+0x116/0x180 [ 459.657984][T12402] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 459.663798][T12402] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 459.669933][T12402] ? ktime_get+0x390/0x470 [ 459.674359][T12402] ? kmsan_get_metadata+0x4f/0x180 [ 459.679481][T12402] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 459.685296][T12402] ? __bpf_prog_run480+0x190/0x190 [ 459.690499][T12402] bpf_test_run+0x54c/0xe40 [ 459.695022][T12402] ? kmsan_get_metadata+0x116/0x180 [ 459.700255][T12402] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 459.706075][T12402] bpf_prog_test_run_skb+0x1906/0x34f0 [ 459.711559][T12402] ? __bpf_prog_test_run_raw_tp+0x410/0x410 [ 459.719181][T12402] __do_sys_bpf+0xbfd9/0x1aee0 [ 459.724340][T12402] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 459.730433][T12402] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 459.736536][T12402] ? sched_clock_cpu+0x5e/0x920 [ 459.741410][T12402] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 459.747585][T12402] ? sched_clock_cpu+0x5e/0x920 [ 459.752551][T12402] ? flat_init_apic_ldr+0x170/0x170 [ 459.757771][T12402] ? kmsan_get_metadata+0x116/0x180 [ 459.762988][T12402] ? kmsan_get_metadata+0x116/0x180 [ 459.768293][T12402] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 459.774116][T12402] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 459.780196][T12402] ? idle_cpu+0x9a/0x1d0 [ 459.785156][T12402] ? kmsan_internal_set_origin+0x85/0xc0 [ 459.790816][T12402] ? kmsan_internal_unpoison_shadow+0x42/0x70 12:55:05 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 459.797091][T12402] ? kmsan_get_metadata+0x116/0x180 [ 459.802574][T12402] ? kmsan_get_metadata+0x116/0x180 [ 459.807806][T12402] __se_sys_bpf+0x8e/0xa0 [ 459.812155][T12402] __ia32_sys_bpf+0x4a/0x70 [ 459.816677][T12402] __do_fast_syscall_32+0x102/0x160 [ 459.821892][T12402] do_fast_syscall_32+0x6a/0xc0 [ 459.826796][T12402] do_SYSENTER_32+0x73/0x90 [ 459.831323][T12402] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.837659][T12402] RIP: 0023:0xf7f98549 [ 459.841737][T12402] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 459.861619][T12402] RSP: 002b:00000000f55715fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 459.870052][T12402] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 459.878021][T12402] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 459.885985][T12402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 459.893951][T12402] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 459.901947][T12402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.909908][T12402] [ 459.912228][T12402] Uninit was created at: [ 459.916470][T12402] kmsan_internal_poison_shadow+0x5c/0xf0 [ 459.922178][T12402] kmsan_slab_alloc+0x8d/0xe0 [ 459.926857][T12402] __kmalloc_node_track_caller+0xa48/0x1610 [ 459.933077][T12402] pskb_expand_head+0x25e/0x1e20 [ 459.938130][T12402] skb_ensure_writable+0x4cf/0x590 [ 459.943238][T12402] bpf_clone_redirect+0x25d/0x660 [ 459.948254][T12402] ___bpf_prog_run+0x4279/0x93e0 [ 459.953186][T12402] __bpf_prog_run512+0x12e/0x190 [ 459.958124][T12402] bpf_test_run+0x54c/0xe40 [ 459.962624][T12402] bpf_prog_test_run_skb+0x1906/0x34f0 [ 459.968161][T12402] __do_sys_bpf+0xbfd9/0x1aee0 [ 459.972915][T12402] __se_sys_bpf+0x8e/0xa0 [ 459.977243][T12402] __ia32_sys_bpf+0x4a/0x70 [ 459.981738][T12402] __do_fast_syscall_32+0x102/0x160 [ 459.986945][T12402] do_fast_syscall_32+0x6a/0xc0 [ 459.991891][T12402] do_SYSENTER_32+0x73/0x90 [ 459.996398][T12402] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.002704][T12402] ===================================================== [ 460.009658][T12402] Disabling lock debugging due to kernel taint [ 460.015815][T12402] Kernel panic - not syncing: panic_on_warn set ... [ 460.022495][T12402] CPU: 1 PID: 12402 Comm: syz-executor.3 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 460.032632][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.042671][T12402] Call Trace: [ 460.045959][T12402] dump_stack+0x21c/0x280 [ 460.050331][T12402] panic+0x4c6/0xea7 [ 460.054221][T12402] ? add_taint+0x17c/0x210 [ 460.058631][T12402] kmsan_report+0x1de/0x1e0 [ 460.063125][T12402] __msan_warning+0x5f/0xa0 [ 460.067633][T12402] hsr_get_node+0x45d/0xba0 [ 460.072165][T12402] hsr_forward_skb+0x9d9/0x2610 [ 460.077008][T12402] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 460.082811][T12402] hsr_dev_xmit+0x133/0x230 [ 460.087315][T12402] ? is_hsr_master+0xb0/0xb0 [ 460.091897][T12402] xmit_one+0x2b6/0x760 [ 460.096060][T12402] __dev_queue_xmit+0x3426/0x4590 [ 460.101073][T12402] ? skb_release_data+0x6df/0xdb0 [ 460.106097][T12402] dev_queue_xmit+0x4b/0x60 [ 460.110590][T12402] __bpf_redirect+0x148d/0x1700 [ 460.115437][T12402] bpf_clone_redirect+0x4a1/0x660 [ 460.120475][T12402] ___bpf_prog_run+0x4279/0x93e0 [ 460.125403][T12402] ? bpf_csum_level+0x760/0x760 [ 460.130247][T12402] __bpf_prog_run512+0x12e/0x190 [ 460.135180][T12402] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 460.140978][T12402] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 460.147178][T12402] ? __perf_event_task_sched_in+0xf62/0xfd0 [ 460.153410][T12402] ? kmsan_get_metadata+0x116/0x180 [ 460.158602][T12402] ? kmsan_get_metadata+0x116/0x180 [ 460.163794][T12402] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 460.169589][T12402] ? kmsan_get_metadata+0x116/0x180 [ 460.174870][T12402] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 460.181112][T12402] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 460.187168][T12402] ? ktime_get+0x390/0x470 [ 460.191574][T12402] ? kmsan_get_metadata+0x4f/0x180 [ 460.196692][T12402] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 460.202493][T12402] ? __bpf_prog_run480+0x190/0x190 [ 460.207604][T12402] bpf_test_run+0x54c/0xe40 [ 460.212125][T12402] ? kmsan_get_metadata+0x116/0x180 [ 460.217403][T12402] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 460.223201][T12402] bpf_prog_test_run_skb+0x1906/0x34f0 [ 460.228664][T12402] ? __bpf_prog_test_run_raw_tp+0x410/0x410 [ 460.234568][T12402] __do_sys_bpf+0xbfd9/0x1aee0 [ 460.239324][T12402] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 460.245119][T12402] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 460.251180][T12402] ? sched_clock_cpu+0x5e/0x920 [ 460.256021][T12402] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 460.262170][T12402] ? sched_clock_cpu+0x5e/0x920 [ 460.267020][T12402] ? flat_init_apic_ldr+0x170/0x170 [ 460.272207][T12402] ? kmsan_get_metadata+0x116/0x180 [ 460.277397][T12402] ? kmsan_get_metadata+0x116/0x180 [ 460.282587][T12402] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 460.288386][T12402] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 460.294450][T12402] ? idle_cpu+0x9a/0x1d0 [ 460.298685][T12402] ? kmsan_internal_set_origin+0x85/0xc0 [ 460.304313][T12402] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 460.310370][T12402] ? kmsan_get_metadata+0x116/0x180 [ 460.315557][T12402] ? kmsan_get_metadata+0x116/0x180 [ 460.320747][T12402] __se_sys_bpf+0x8e/0xa0 [ 460.325072][T12402] __ia32_sys_bpf+0x4a/0x70 [ 460.329569][T12402] __do_fast_syscall_32+0x102/0x160 [ 460.334764][T12402] do_fast_syscall_32+0x6a/0xc0 [ 460.339703][T12402] do_SYSENTER_32+0x73/0x90 [ 460.344203][T12402] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.350521][T12402] RIP: 0023:0xf7f98549 [ 460.354586][T12402] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 460.375317][T12402] RSP: 002b:00000000f55715fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 460.383821][T12402] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 460.391782][T12402] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 460.399744][T12402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 460.407704][T12402] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 460.415674][T12402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 460.424352][T12402] Kernel Offset: disabled [ 460.428670][T12402] Rebooting in 86400 seconds..