forked to background, child pid 3061 no interfaces have a carrier [ 73.942999][ T3062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.949216][ T3062] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.36' (ECDSA) to the list of known hosts. syzkaller login: [ 100.263281][ T115] cfg80211: failed to load regulatory.db 2022/06/25 09:41:21 fuzzer started 2022/06/25 09:41:22 dialing manager at 10.128.0.169:40651 [ 105.765900][ T3488] cgroup: Unknown subsys name 'net' [ 105.892856][ T3488] cgroup: Unknown subsys name 'rlimit' 2022/06/25 09:41:23 syscalls: 3645 2022/06/25 09:41:23 code coverage: enabled 2022/06/25 09:41:23 comparison tracing: enabled 2022/06/25 09:41:23 extra coverage: enabled 2022/06/25 09:41:23 delay kcov mmap: enabled 2022/06/25 09:41:23 setuid sandbox: enabled 2022/06/25 09:41:23 namespace sandbox: enabled 2022/06/25 09:41:23 Android sandbox: /sys/fs/selinux/policy does not exist 2022/06/25 09:41:23 fault injection: enabled 2022/06/25 09:41:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/06/25 09:41:23 net packet injection: enabled 2022/06/25 09:41:23 net device setup: enabled 2022/06/25 09:41:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/06/25 09:41:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/06/25 09:41:23 USB emulation: enabled 2022/06/25 09:41:23 hci packet injection: enabled 2022/06/25 09:41:23 wifi device emulation: enabled 2022/06/25 09:41:23 802.15.4 emulation: enabled 2022/06/25 09:41:23 fetching corpus: 0, signal 0/2000 (executing program) 2022/06/25 09:41:23 fetching corpus: 50, signal 17365/21214 (executing program) 2022/06/25 09:41:23 fetching corpus: 100, signal 25070/30730 (executing program) 2022/06/25 09:41:23 fetching corpus: 150, signal 31070/38514 (executing program) 2022/06/25 09:41:23 fetching corpus: 200, signal 35766/44929 (executing program) 2022/06/25 09:41:23 fetching corpus: 250, signal 38058/48986 (executing program) 2022/06/25 09:41:23 fetching corpus: 300, signal 41775/54397 (executing program) 2022/06/25 09:41:23 fetching corpus: 350, signal 46173/60429 (executing program) 2022/06/25 09:41:23 fetching corpus: 400, signal 49458/65357 (executing program) 2022/06/25 09:41:23 fetching corpus: 450, signal 52400/69919 (executing program) 2022/06/25 09:41:23 fetching corpus: 500, signal 54967/74115 (executing program) 2022/06/25 09:41:23 fetching corpus: 550, signal 58187/78890 (executing program) 2022/06/25 09:41:23 fetching corpus: 600, signal 59936/82261 (executing program) 2022/06/25 09:41:23 fetching corpus: 650, signal 61815/85747 (executing program) 2022/06/25 09:41:23 fetching corpus: 700, signal 63718/89219 (executing program) 2022/06/25 09:41:23 fetching corpus: 750, signal 65885/92947 (executing program) 2022/06/25 09:41:23 fetching corpus: 800, signal 67670/96318 (executing program) 2022/06/25 09:41:24 fetching corpus: 850, signal 69410/99591 (executing program) 2022/06/25 09:41:24 fetching corpus: 900, signal 71740/103389 (executing program) 2022/06/25 09:41:24 fetching corpus: 950, signal 73555/106690 (executing program) 2022/06/25 09:41:24 fetching corpus: 1000, signal 75266/109890 (executing program) 2022/06/25 09:41:24 fetching corpus: 1050, signal 76467/112609 (executing program) 2022/06/25 09:41:24 fetching corpus: 1100, signal 77768/115426 (executing program) 2022/06/25 09:41:24 fetching corpus: 1150, signal 79226/118387 (executing program) 2022/06/25 09:41:24 fetching corpus: 1200, signal 82391/122865 (executing program) 2022/06/25 09:41:24 fetching corpus: 1250, signal 83874/125751 (executing program) 2022/06/25 09:41:24 fetching corpus: 1300, signal 86156/129317 (executing program) 2022/06/25 09:41:24 fetching corpus: 1350, signal 87219/131843 (executing program) 2022/06/25 09:41:24 fetching corpus: 1400, signal 90178/135965 (executing program) 2022/06/25 09:41:24 fetching corpus: 1450, signal 91286/138510 (executing program) 2022/06/25 09:41:24 fetching corpus: 1500, signal 93022/141541 (executing program) 2022/06/25 09:41:24 fetching corpus: 1550, signal 94065/144013 (executing program) 2022/06/25 09:41:24 fetching corpus: 1600, signal 97151/148138 (executing program) 2022/06/25 09:41:24 fetching corpus: 1650, signal 98677/150967 (executing program) 2022/06/25 09:41:24 fetching corpus: 1700, signal 99799/153460 (executing program) 2022/06/25 09:41:24 fetching corpus: 1750, signal 101572/156478 (executing program) 2022/06/25 09:41:24 fetching corpus: 1800, signal 102945/159167 (executing program) 2022/06/25 09:41:25 fetching corpus: 1850, signal 104988/162384 (executing program) 2022/06/25 09:41:25 fetching corpus: 1900, signal 106623/165225 (executing program) 2022/06/25 09:41:25 fetching corpus: 1950, signal 108058/167920 (executing program) 2022/06/25 09:41:25 fetching corpus: 2000, signal 109311/170447 (executing program) 2022/06/25 09:41:25 fetching corpus: 2050, signal 110798/173121 (executing program) 2022/06/25 09:41:25 fetching corpus: 2100, signal 111917/175514 (executing program) 2022/06/25 09:41:25 fetching corpus: 2150, signal 113039/177843 (executing program) 2022/06/25 09:41:25 fetching corpus: 2200, signal 113978/180043 (executing program) 2022/06/25 09:41:25 fetching corpus: 2250, signal 115573/182786 (executing program) 2022/06/25 09:41:25 fetching corpus: 2300, signal 116467/184900 (executing program) 2022/06/25 09:41:25 fetching corpus: 2350, signal 117233/186963 (executing program) 2022/06/25 09:41:25 fetching corpus: 2400, signal 118641/189449 (executing program) 2022/06/25 09:41:25 fetching corpus: 2450, signal 119334/191438 (executing program) 2022/06/25 09:41:25 fetching corpus: 2500, signal 120390/193724 (executing program) 2022/06/25 09:41:25 fetching corpus: 2550, signal 121082/195648 (executing program) 2022/06/25 09:41:25 fetching corpus: 2600, signal 122165/197903 (executing program) 2022/06/25 09:41:25 fetching corpus: 2650, signal 123381/200272 (executing program) 2022/06/25 09:41:26 fetching corpus: 2700, signal 124957/202831 (executing program) 2022/06/25 09:41:26 fetching corpus: 2750, signal 125863/204907 (executing program) 2022/06/25 09:41:26 fetching corpus: 2800, signal 126995/207154 (executing program) 2022/06/25 09:41:26 fetching corpus: 2850, signal 128189/209434 (executing program) 2022/06/25 09:41:26 fetching corpus: 2900, signal 128831/211329 (executing program) 2022/06/25 09:41:26 fetching corpus: 2950, signal 129894/213523 (executing program) 2022/06/25 09:41:26 fetching corpus: 3000, signal 130857/215625 (executing program) 2022/06/25 09:41:26 fetching corpus: 3050, signal 132061/217832 (executing program) 2022/06/25 09:41:26 fetching corpus: 3100, signal 133156/219973 (executing program) 2022/06/25 09:41:26 fetching corpus: 3150, signal 134294/222109 (executing program) 2022/06/25 09:41:26 fetching corpus: 3200, signal 135383/224244 (executing program) 2022/06/25 09:41:26 fetching corpus: 3250, signal 136290/226246 (executing program) 2022/06/25 09:41:26 fetching corpus: 3300, signal 137187/228195 (executing program) 2022/06/25 09:41:26 fetching corpus: 3350, signal 137964/230063 (executing program) 2022/06/25 09:41:26 fetching corpus: 3400, signal 138933/232061 (executing program) 2022/06/25 09:41:26 fetching corpus: 3450, signal 139740/233927 (executing program) 2022/06/25 09:41:26 fetching corpus: 3500, signal 140687/235907 (executing program) 2022/06/25 09:41:26 fetching corpus: 3550, signal 141457/237770 (executing program) 2022/06/25 09:41:27 fetching corpus: 3600, signal 142567/239817 (executing program) 2022/06/25 09:41:27 fetching corpus: 3650, signal 143299/241637 (executing program) 2022/06/25 09:41:27 fetching corpus: 3700, signal 143940/243388 (executing program) 2022/06/25 09:41:27 fetching corpus: 3750, signal 145183/245497 (executing program) 2022/06/25 09:41:27 fetching corpus: 3800, signal 145845/247215 (executing program) 2022/06/25 09:41:27 fetching corpus: 3850, signal 146559/248975 (executing program) 2022/06/25 09:41:27 fetching corpus: 3900, signal 147419/250840 (executing program) 2022/06/25 09:41:27 fetching corpus: 3950, signal 148294/252685 (executing program) 2022/06/25 09:41:27 fetching corpus: 4000, signal 148809/254323 (executing program) 2022/06/25 09:41:27 fetching corpus: 4050, signal 149616/256115 (executing program) 2022/06/25 09:41:27 fetching corpus: 4100, signal 150533/257960 (executing program) 2022/06/25 09:41:27 fetching corpus: 4150, signal 151864/260048 (executing program) 2022/06/25 09:41:27 fetching corpus: 4200, signal 152526/261711 (executing program) 2022/06/25 09:41:27 fetching corpus: 4250, signal 153190/263391 (executing program) 2022/06/25 09:41:27 fetching corpus: 4300, signal 154031/265172 (executing program) 2022/06/25 09:41:27 fetching corpus: 4350, signal 154927/266986 (executing program) 2022/06/25 09:41:27 fetching corpus: 4400, signal 155993/268843 (executing program) 2022/06/25 09:41:27 fetching corpus: 4450, signal 156759/270593 (executing program) 2022/06/25 09:41:28 fetching corpus: 4500, signal 157627/272359 (executing program) 2022/06/25 09:41:28 fetching corpus: 4550, signal 158689/274213 (executing program) 2022/06/25 09:41:28 fetching corpus: 4600, signal 159573/275992 (executing program) 2022/06/25 09:41:28 fetching corpus: 4650, signal 160397/277726 (executing program) 2022/06/25 09:41:28 fetching corpus: 4700, signal 161232/279447 (executing program) 2022/06/25 09:41:28 fetching corpus: 4750, signal 162059/281127 (executing program) 2022/06/25 09:41:28 fetching corpus: 4800, signal 162822/282801 (executing program) 2022/06/25 09:41:28 fetching corpus: 4850, signal 164725/285070 (executing program) 2022/06/25 09:41:28 fetching corpus: 4900, signal 165426/286685 (executing program) 2022/06/25 09:41:28 fetching corpus: 4950, signal 166400/288400 (executing program) 2022/06/25 09:41:28 fetching corpus: 5000, signal 167089/289992 (executing program) 2022/06/25 09:41:28 fetching corpus: 5050, signal 168006/291640 (executing program) 2022/06/25 09:41:28 fetching corpus: 5100, signal 168576/293117 (executing program) 2022/06/25 09:41:28 fetching corpus: 5150, signal 169335/294768 (executing program) 2022/06/25 09:41:28 fetching corpus: 5200, signal 169808/296226 (executing program) 2022/06/25 09:41:28 fetching corpus: 5250, signal 170368/297637 (executing program) 2022/06/25 09:41:28 fetching corpus: 5300, signal 170953/299165 (executing program) 2022/06/25 09:41:29 fetching corpus: 5350, signal 172076/300902 (executing program) 2022/06/25 09:41:29 fetching corpus: 5400, signal 172490/302304 (executing program) 2022/06/25 09:41:29 fetching corpus: 5450, signal 173186/303806 (executing program) 2022/06/25 09:41:29 fetching corpus: 5500, signal 173916/305293 (executing program) 2022/06/25 09:41:29 fetching corpus: 5550, signal 175183/307089 (executing program) 2022/06/25 09:41:29 fetching corpus: 5600, signal 175746/308504 (executing program) 2022/06/25 09:41:29 fetching corpus: 5650, signal 176278/309902 (executing program) 2022/06/25 09:41:29 fetching corpus: 5700, signal 176798/311312 (executing program) 2022/06/25 09:41:29 fetching corpus: 5750, signal 177305/312738 (executing program) 2022/06/25 09:41:29 fetching corpus: 5800, signal 177798/314131 (executing program) 2022/06/25 09:41:29 fetching corpus: 5850, signal 178298/315534 (executing program) 2022/06/25 09:41:29 fetching corpus: 5900, signal 178662/316852 (executing program) 2022/06/25 09:41:29 fetching corpus: 5950, signal 179280/318307 (executing program) 2022/06/25 09:41:29 fetching corpus: 6000, signal 180385/319958 (executing program) 2022/06/25 09:41:29 fetching corpus: 6050, signal 180775/321267 (executing program) 2022/06/25 09:41:30 fetching corpus: 6100, signal 181298/322633 (executing program) 2022/06/25 09:41:30 fetching corpus: 6150, signal 181852/324044 (executing program) 2022/06/25 09:41:30 fetching corpus: 6200, signal 182463/325497 (executing program) 2022/06/25 09:41:30 fetching corpus: 6250, signal 183112/326922 (executing program) 2022/06/25 09:41:30 fetching corpus: 6300, signal 183419/328204 (executing program) 2022/06/25 09:41:30 fetching corpus: 6350, signal 183742/329501 (executing program) 2022/06/25 09:41:30 fetching corpus: 6400, signal 184384/330929 (executing program) 2022/06/25 09:41:30 fetching corpus: 6450, signal 185070/332391 (executing program) 2022/06/25 09:41:30 fetching corpus: 6500, signal 185567/333742 (executing program) 2022/06/25 09:41:30 fetching corpus: 6550, signal 186122/335087 (executing program) 2022/06/25 09:41:30 fetching corpus: 6600, signal 186899/336554 (executing program) 2022/06/25 09:41:30 fetching corpus: 6650, signal 187560/337937 (executing program) 2022/06/25 09:41:30 fetching corpus: 6700, signal 188186/339320 (executing program) 2022/06/25 09:41:31 fetching corpus: 6750, signal 188654/340581 (executing program) 2022/06/25 09:41:31 fetching corpus: 6800, signal 189065/341818 (executing program) 2022/06/25 09:41:31 fetching corpus: 6850, signal 189398/343077 (executing program) 2022/06/25 09:41:31 fetching corpus: 6900, signal 189764/344322 (executing program) 2022/06/25 09:41:31 fetching corpus: 6950, signal 190401/345600 (executing program) 2022/06/25 09:41:31 fetching corpus: 7000, signal 190906/346893 (executing program) 2022/06/25 09:41:31 fetching corpus: 7050, signal 191412/348152 (executing program) 2022/06/25 09:41:31 fetching corpus: 7100, signal 191865/349398 (executing program) 2022/06/25 09:41:31 fetching corpus: 7150, signal 192263/350604 (executing program) 2022/06/25 09:41:31 fetching corpus: 7200, signal 192762/351878 (executing program) 2022/06/25 09:41:31 fetching corpus: 7250, signal 193280/353128 (executing program) 2022/06/25 09:41:31 fetching corpus: 7300, signal 193876/354402 (executing program) 2022/06/25 09:41:31 fetching corpus: 7350, signal 194756/355752 (executing program) 2022/06/25 09:41:31 fetching corpus: 7400, signal 195322/356966 (executing program) 2022/06/25 09:41:31 fetching corpus: 7450, signal 195738/358162 (executing program) 2022/06/25 09:41:31 fetching corpus: 7500, signal 196270/359388 (executing program) 2022/06/25 09:41:32 fetching corpus: 7550, signal 196753/360649 (executing program) 2022/06/25 09:41:32 fetching corpus: 7600, signal 197213/361926 (executing program) 2022/06/25 09:41:32 fetching corpus: 7650, signal 197576/363090 (executing program) 2022/06/25 09:41:32 fetching corpus: 7700, signal 198138/364359 (executing program) 2022/06/25 09:41:32 fetching corpus: 7750, signal 198699/365536 (executing program) 2022/06/25 09:41:32 fetching corpus: 7800, signal 199087/366712 (executing program) 2022/06/25 09:41:32 fetching corpus: 7850, signal 199663/367957 (executing program) 2022/06/25 09:41:32 fetching corpus: 7900, signal 200102/369167 (executing program) 2022/06/25 09:41:32 fetching corpus: 7950, signal 200556/370331 (executing program) 2022/06/25 09:41:32 fetching corpus: 8000, signal 200999/371495 (executing program) 2022/06/25 09:41:32 fetching corpus: 8050, signal 201495/372692 (executing program) 2022/06/25 09:41:32 fetching corpus: 8100, signal 201873/373816 (executing program) 2022/06/25 09:41:32 fetching corpus: 8150, signal 202371/374976 (executing program) 2022/06/25 09:41:32 fetching corpus: 8200, signal 203054/376181 (executing program) 2022/06/25 09:41:32 fetching corpus: 8250, signal 203478/377313 (executing program) 2022/06/25 09:41:32 fetching corpus: 8300, signal 203965/378452 (executing program) 2022/06/25 09:41:32 fetching corpus: 8350, signal 204494/379637 (executing program) 2022/06/25 09:41:32 fetching corpus: 8400, signal 205299/380855 (executing program) 2022/06/25 09:41:32 fetching corpus: 8450, signal 205682/381968 (executing program) 2022/06/25 09:41:33 fetching corpus: 8500, signal 206183/383058 (executing program) 2022/06/25 09:41:33 fetching corpus: 8550, signal 206606/384164 (executing program) 2022/06/25 09:41:33 fetching corpus: 8600, signal 207119/385297 (executing program) 2022/06/25 09:41:33 fetching corpus: 8650, signal 207547/386404 (executing program) 2022/06/25 09:41:33 fetching corpus: 8700, signal 208015/387508 (executing program) 2022/06/25 09:41:33 fetching corpus: 8750, signal 208542/388649 (executing program) 2022/06/25 09:41:33 fetching corpus: 8800, signal 208895/389713 (executing program) 2022/06/25 09:41:33 fetching corpus: 8850, signal 209415/390777 (executing program) 2022/06/25 09:41:33 fetching corpus: 8900, signal 210097/391903 (executing program) 2022/06/25 09:41:33 fetching corpus: 8950, signal 210497/393016 (executing program) 2022/06/25 09:41:33 fetching corpus: 9000, signal 210845/394061 (executing program) 2022/06/25 09:41:33 fetching corpus: 9050, signal 211173/395105 (executing program) 2022/06/25 09:41:33 fetching corpus: 9100, signal 211468/396154 (executing program) 2022/06/25 09:41:33 fetching corpus: 9150, signal 211892/397245 (executing program) 2022/06/25 09:41:34 fetching corpus: 9200, signal 212693/398384 (executing program) 2022/06/25 09:41:34 fetching corpus: 9250, signal 213107/399434 (executing program) 2022/06/25 09:41:34 fetching corpus: 9300, signal 213498/400448 (executing program) 2022/06/25 09:41:34 fetching corpus: 9350, signal 213780/401457 (executing program) 2022/06/25 09:41:34 fetching corpus: 9400, signal 214200/402533 (executing program) 2022/06/25 09:41:34 fetching corpus: 9450, signal 214669/403589 (executing program) 2022/06/25 09:41:34 fetching corpus: 9500, signal 215310/404632 (executing program) 2022/06/25 09:41:34 fetching corpus: 9550, signal 215632/405614 (executing program) 2022/06/25 09:41:34 fetching corpus: 9600, signal 216143/406649 (executing program) 2022/06/25 09:41:34 fetching corpus: 9650, signal 216561/407655 (executing program) 2022/06/25 09:41:34 fetching corpus: 9700, signal 216914/408660 (executing program) 2022/06/25 09:41:34 fetching corpus: 9750, signal 217384/409689 (executing program) 2022/06/25 09:41:34 fetching corpus: 9800, signal 217797/410698 (executing program) 2022/06/25 09:41:34 fetching corpus: 9850, signal 218166/411707 (executing program) 2022/06/25 09:41:34 fetching corpus: 9900, signal 218640/412719 (executing program) 2022/06/25 09:41:34 fetching corpus: 9950, signal 219291/413727 (executing program) 2022/06/25 09:41:34 fetching corpus: 10000, signal 219773/414747 (executing program) 2022/06/25 09:41:34 fetching corpus: 10050, signal 220087/415724 (executing program) 2022/06/25 09:41:34 fetching corpus: 10100, signal 220545/416745 (executing program) 2022/06/25 09:41:35 fetching corpus: 10150, signal 220957/417712 (executing program) 2022/06/25 09:41:35 fetching corpus: 10200, signal 221299/418666 (executing program) 2022/06/25 09:41:35 fetching corpus: 10250, signal 221773/419647 (executing program) 2022/06/25 09:41:35 fetching corpus: 10300, signal 222386/420629 (executing program) 2022/06/25 09:41:35 fetching corpus: 10350, signal 223109/421645 (executing program) 2022/06/25 09:41:35 fetching corpus: 10400, signal 223518/422659 (executing program) 2022/06/25 09:41:35 fetching corpus: 10450, signal 223773/423615 (executing program) 2022/06/25 09:41:35 fetching corpus: 10500, signal 224213/424566 (executing program) 2022/06/25 09:41:35 fetching corpus: 10550, signal 224680/425545 (executing program) 2022/06/25 09:41:35 fetching corpus: 10600, signal 225020/426488 (executing program) 2022/06/25 09:41:35 fetching corpus: 10650, signal 225405/426905 (executing program) 2022/06/25 09:41:35 fetching corpus: 10700, signal 225725/426905 (executing program) 2022/06/25 09:41:35 fetching corpus: 10750, signal 226411/426905 (executing program) 2022/06/25 09:41:35 fetching corpus: 10800, signal 226862/426905 (executing program) 2022/06/25 09:41:35 fetching corpus: 10850, signal 227415/426905 (executing program) 2022/06/25 09:41:35 fetching corpus: 10900, signal 227740/426905 (executing program) 2022/06/25 09:41:36 fetching corpus: 10950, signal 228223/426905 (executing program) 2022/06/25 09:41:36 fetching corpus: 11000, signal 228519/426905 (executing program) 2022/06/25 09:41:36 fetching corpus: 11050, signal 228992/426905 (executing program) 2022/06/25 09:41:36 fetching corpus: 11100, signal 229446/426905 (executing program) 2022/06/25 09:41:36 fetching corpus: 11150, signal 229913/426905 (executing program) 2022/06/25 09:41:36 fetching corpus: 11200, signal 230238/426905 (executing program) 2022/06/25 09:41:36 fetching corpus: 11250, signal 231249/426906 (executing program) 2022/06/25 09:41:36 fetching corpus: 11300, signal 231602/426908 (executing program) 2022/06/25 09:41:36 fetching corpus: 11350, signal 231910/426908 (executing program) 2022/06/25 09:41:36 fetching corpus: 11400, signal 232401/426908 (executing program) 2022/06/25 09:41:36 fetching corpus: 11450, signal 232675/426908 (executing program) 2022/06/25 09:41:36 fetching corpus: 11500, signal 233028/426908 (executing program) 2022/06/25 09:41:36 fetching corpus: 11550, signal 233444/426908 (executing program) 2022/06/25 09:41:36 fetching corpus: 11600, signal 234292/426908 (executing program) 2022/06/25 09:41:36 fetching corpus: 11650, signal 234521/426908 (executing program) 2022/06/25 09:41:36 fetching corpus: 11700, signal 234863/426908 (executing program) 2022/06/25 09:41:37 fetching corpus: 11750, signal 235378/426908 (executing program) 2022/06/25 09:41:37 fetching corpus: 11800, signal 235655/426908 (executing program) 2022/06/25 09:41:37 fetching corpus: 11850, signal 235908/426908 (executing program) 2022/06/25 09:41:37 fetching corpus: 11900, signal 236271/426908 (executing program) 2022/06/25 09:41:37 fetching corpus: 11950, signal 236607/426908 (executing program) 2022/06/25 09:41:37 fetching corpus: 12000, signal 236921/426908 (executing program) 2022/06/25 09:41:37 fetching corpus: 12050, signal 237341/426908 (executing program) 2022/06/25 09:41:37 fetching corpus: 12100, signal 237645/426927 (executing program) 2022/06/25 09:41:37 fetching corpus: 12150, signal 238068/426927 (executing program) 2022/06/25 09:41:37 fetching corpus: 12200, signal 238378/426927 (executing program) 2022/06/25 09:41:37 fetching corpus: 12250, signal 238771/426927 (executing program) 2022/06/25 09:41:37 fetching corpus: 12300, signal 239268/426927 (executing program) 2022/06/25 09:41:37 fetching corpus: 12350, signal 239739/426927 (executing program) 2022/06/25 09:41:37 fetching corpus: 12400, signal 240274/426927 (executing program) 2022/06/25 09:41:38 fetching corpus: 12450, signal 240545/426927 (executing program) 2022/06/25 09:41:38 fetching corpus: 12500, signal 240973/426927 (executing program) 2022/06/25 09:41:38 fetching corpus: 12550, signal 241304/426927 (executing program) 2022/06/25 09:41:38 fetching corpus: 12600, signal 241664/426927 (executing program) 2022/06/25 09:41:38 fetching corpus: 12650, signal 241962/426927 (executing program) 2022/06/25 09:41:38 fetching corpus: 12700, signal 242505/426927 (executing program) 2022/06/25 09:41:38 fetching corpus: 12750, signal 242749/426927 (executing program) 2022/06/25 09:41:38 fetching corpus: 12800, signal 243163/426927 (executing program) 2022/06/25 09:41:38 fetching corpus: 12850, signal 243411/426927 (executing program) 2022/06/25 09:41:38 fetching corpus: 12900, signal 243748/426930 (executing program) 2022/06/25 09:41:38 fetching corpus: 12950, signal 244116/426930 (executing program) 2022/06/25 09:41:38 fetching corpus: 13000, signal 244453/426930 (executing program) 2022/06/25 09:41:38 fetching corpus: 13050, signal 244794/426930 (executing program) 2022/06/25 09:41:38 fetching corpus: 13100, signal 245049/426930 (executing program) 2022/06/25 09:41:38 fetching corpus: 13150, signal 245423/426930 (executing program) 2022/06/25 09:41:38 fetching corpus: 13200, signal 245772/426930 (executing program) 2022/06/25 09:41:38 fetching corpus: 13250, signal 246051/426930 (executing program) 2022/06/25 09:41:38 fetching corpus: 13300, signal 246407/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 13350, signal 246851/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 13400, signal 247121/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 13450, signal 247425/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 13500, signal 247712/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 13550, signal 247949/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 13600, signal 248211/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 13650, signal 248963/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 13700, signal 249266/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 13750, signal 249539/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 13800, signal 250051/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 13850, signal 250377/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 13900, signal 250686/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 13950, signal 250964/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 14000, signal 252089/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 14050, signal 252370/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 14100, signal 252669/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 14150, signal 253205/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 14200, signal 253608/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 14250, signal 253831/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 14300, signal 254149/426930 (executing program) 2022/06/25 09:41:39 fetching corpus: 14350, signal 254557/426930 (executing program) 2022/06/25 09:41:40 fetching corpus: 14400, signal 254975/426930 (executing program) 2022/06/25 09:41:40 fetching corpus: 14450, signal 255177/426930 (executing program) 2022/06/25 09:41:40 fetching corpus: 14500, signal 255516/426930 (executing program) 2022/06/25 09:41:40 fetching corpus: 14550, signal 255809/426930 (executing program) 2022/06/25 09:41:40 fetching corpus: 14600, signal 256010/426930 (executing program) 2022/06/25 09:41:40 fetching corpus: 14650, signal 256271/426930 (executing program) 2022/06/25 09:41:40 fetching corpus: 14700, signal 256553/426930 (executing program) 2022/06/25 09:41:40 fetching corpus: 14750, signal 256782/426930 (executing program) 2022/06/25 09:41:40 fetching corpus: 14800, signal 257165/426930 (executing program) 2022/06/25 09:41:40 fetching corpus: 14850, signal 257600/426930 (executing program) 2022/06/25 09:41:40 fetching corpus: 14900, signal 257877/426930 (executing program) 2022/06/25 09:41:40 fetching corpus: 14950, signal 258225/426930 (executing program) 2022/06/25 09:41:40 fetching corpus: 15000, signal 258574/426931 (executing program) 2022/06/25 09:41:40 fetching corpus: 15050, signal 258769/426931 (executing program) 2022/06/25 09:41:40 fetching corpus: 15100, signal 259044/426931 (executing program) 2022/06/25 09:41:40 fetching corpus: 15150, signal 259326/426931 (executing program) 2022/06/25 09:41:40 fetching corpus: 15200, signal 259916/426931 (executing program) 2022/06/25 09:41:41 fetching corpus: 15250, signal 260236/426931 (executing program) 2022/06/25 09:41:41 fetching corpus: 15300, signal 260516/426931 (executing program) 2022/06/25 09:41:41 fetching corpus: 15350, signal 260914/426931 (executing program) 2022/06/25 09:41:41 fetching corpus: 15400, signal 261255/426931 (executing program) 2022/06/25 09:41:41 fetching corpus: 15450, signal 261678/426931 (executing program) 2022/06/25 09:41:41 fetching corpus: 15500, signal 261960/426931 (executing program) 2022/06/25 09:41:41 fetching corpus: 15550, signal 262532/426931 (executing program) 2022/06/25 09:41:41 fetching corpus: 15600, signal 262862/426931 (executing program) 2022/06/25 09:41:41 fetching corpus: 15650, signal 263159/426931 (executing program) 2022/06/25 09:41:41 fetching corpus: 15700, signal 263402/426933 (executing program) 2022/06/25 09:41:41 fetching corpus: 15750, signal 263693/426933 (executing program) 2022/06/25 09:41:41 fetching corpus: 15800, signal 264008/426933 (executing program) 2022/06/25 09:41:41 fetching corpus: 15850, signal 264278/426933 (executing program) 2022/06/25 09:41:41 fetching corpus: 15900, signal 264566/426933 (executing program) 2022/06/25 09:41:41 fetching corpus: 15950, signal 264930/426933 (executing program) 2022/06/25 09:41:41 fetching corpus: 16000, signal 265354/426933 (executing program) 2022/06/25 09:41:41 fetching corpus: 16050, signal 265580/426933 (executing program) 2022/06/25 09:41:41 fetching corpus: 16100, signal 265887/426933 (executing program) 2022/06/25 09:41:41 fetching corpus: 16150, signal 266162/426933 (executing program) 2022/06/25 09:41:42 fetching corpus: 16200, signal 266682/426933 (executing program) 2022/06/25 09:41:42 fetching corpus: 16250, signal 266922/426933 (executing program) 2022/06/25 09:41:42 fetching corpus: 16300, signal 267254/426933 (executing program) 2022/06/25 09:41:42 fetching corpus: 16350, signal 267474/426935 (executing program) 2022/06/25 09:41:42 fetching corpus: 16400, signal 267954/426935 (executing program) 2022/06/25 09:41:42 fetching corpus: 16450, signal 268219/426935 (executing program) 2022/06/25 09:41:42 fetching corpus: 16500, signal 268531/426935 (executing program) 2022/06/25 09:41:42 fetching corpus: 16550, signal 268817/426935 (executing program) 2022/06/25 09:41:42 fetching corpus: 16600, signal 269054/426935 (executing program) 2022/06/25 09:41:42 fetching corpus: 16650, signal 269371/426935 (executing program) 2022/06/25 09:41:42 fetching corpus: 16700, signal 269805/426935 (executing program) 2022/06/25 09:41:42 fetching corpus: 16750, signal 270151/426935 (executing program) 2022/06/25 09:41:42 fetching corpus: 16800, signal 270460/426935 (executing program) 2022/06/25 09:41:42 fetching corpus: 16850, signal 270717/426935 (executing program) 2022/06/25 09:41:42 fetching corpus: 16900, signal 270948/426935 (executing program) 2022/06/25 09:41:42 fetching corpus: 16950, signal 271260/426935 (executing program) 2022/06/25 09:41:42 fetching corpus: 17000, signal 271469/426935 (executing program) 2022/06/25 09:41:42 fetching corpus: 17050, signal 271707/426935 (executing program) 2022/06/25 09:41:42 fetching corpus: 17100, signal 272087/426935 (executing program) 2022/06/25 09:41:42 fetching corpus: 17150, signal 272323/426937 (executing program) 2022/06/25 09:41:42 fetching corpus: 17200, signal 272537/426937 (executing program) 2022/06/25 09:41:43 fetching corpus: 17250, signal 272813/426937 (executing program) 2022/06/25 09:41:43 fetching corpus: 17300, signal 273080/426937 (executing program) 2022/06/25 09:41:43 fetching corpus: 17350, signal 273476/426937 (executing program) 2022/06/25 09:41:43 fetching corpus: 17400, signal 273760/426937 (executing program) 2022/06/25 09:41:43 fetching corpus: 17450, signal 274059/426937 (executing program) 2022/06/25 09:41:43 fetching corpus: 17500, signal 274331/426937 (executing program) 2022/06/25 09:41:43 fetching corpus: 17550, signal 274610/426937 (executing program) 2022/06/25 09:41:43 fetching corpus: 17600, signal 274875/426937 (executing program) 2022/06/25 09:41:43 fetching corpus: 17650, signal 275375/426937 (executing program) 2022/06/25 09:41:43 fetching corpus: 17700, signal 275644/426937 (executing program) 2022/06/25 09:41:43 fetching corpus: 17750, signal 275932/426937 (executing program) 2022/06/25 09:41:43 fetching corpus: 17800, signal 276228/426937 (executing program) 2022/06/25 09:41:43 fetching corpus: 17850, signal 276430/426938 (executing program) 2022/06/25 09:41:43 fetching corpus: 17900, signal 276792/426938 (executing program) 2022/06/25 09:41:43 fetching corpus: 17950, signal 277024/426938 (executing program) 2022/06/25 09:41:43 fetching corpus: 18000, signal 277270/426938 (executing program) 2022/06/25 09:41:43 fetching corpus: 18050, signal 277540/426938 (executing program) 2022/06/25 09:41:43 fetching corpus: 18100, signal 277719/426938 (executing program) 2022/06/25 09:41:43 fetching corpus: 18150, signal 278010/426938 (executing program) 2022/06/25 09:41:44 fetching corpus: 18200, signal 278292/426938 (executing program) 2022/06/25 09:41:44 fetching corpus: 18250, signal 278514/426938 (executing program) 2022/06/25 09:41:44 fetching corpus: 18300, signal 278756/426938 (executing program) 2022/06/25 09:41:44 fetching corpus: 18350, signal 278988/426938 (executing program) 2022/06/25 09:41:44 fetching corpus: 18400, signal 279225/426938 (executing program) 2022/06/25 09:41:44 fetching corpus: 18450, signal 279490/426938 (executing program) 2022/06/25 09:41:44 fetching corpus: 18500, signal 279872/426938 (executing program) 2022/06/25 09:41:44 fetching corpus: 18550, signal 280096/426938 (executing program) 2022/06/25 09:41:44 fetching corpus: 18600, signal 280345/426938 (executing program) 2022/06/25 09:41:44 fetching corpus: 18650, signal 280591/426938 (executing program) 2022/06/25 09:41:44 fetching corpus: 18700, signal 280845/426939 (executing program) 2022/06/25 09:41:44 fetching corpus: 18750, signal 281214/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 18800, signal 281462/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 18850, signal 281752/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 18900, signal 281963/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 18950, signal 282345/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 19000, signal 282594/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 19050, signal 282890/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 19100, signal 283152/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 19150, signal 283440/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 19200, signal 285826/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 19250, signal 286119/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 19300, signal 286426/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 19350, signal 286640/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 19400, signal 286820/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 19450, signal 287000/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 19500, signal 287297/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 19550, signal 288520/426939 (executing program) 2022/06/25 09:41:45 fetching corpus: 19600, signal 288833/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 19650, signal 289010/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 19700, signal 289226/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 19750, signal 289428/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 19800, signal 289590/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 19850, signal 289894/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 19900, signal 290139/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 19950, signal 290316/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 20000, signal 290550/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 20050, signal 290755/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 20100, signal 290967/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 20150, signal 291168/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 20200, signal 291512/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 20250, signal 291767/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 20300, signal 292072/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 20350, signal 292297/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 20400, signal 292499/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 20450, signal 292850/426939 (executing program) 2022/06/25 09:41:46 fetching corpus: 20500, signal 293091/426939 (executing program) 2022/06/25 09:41:47 fetching corpus: 20550, signal 293469/426939 (executing program) 2022/06/25 09:41:47 fetching corpus: 20600, signal 293735/426939 (executing program) 2022/06/25 09:41:47 fetching corpus: 20650, signal 293917/426939 (executing program) 2022/06/25 09:41:47 fetching corpus: 20700, signal 294149/426939 (executing program) 2022/06/25 09:41:47 fetching corpus: 20750, signal 294500/426939 (executing program) 2022/06/25 09:41:47 fetching corpus: 20800, signal 294754/426939 (executing program) 2022/06/25 09:41:47 fetching corpus: 20850, signal 294981/426939 (executing program) 2022/06/25 09:41:47 fetching corpus: 20900, signal 295241/426939 (executing program) 2022/06/25 09:41:47 fetching corpus: 20950, signal 295506/426939 (executing program) 2022/06/25 09:41:47 fetching corpus: 21000, signal 295730/426939 (executing program) 2022/06/25 09:41:47 fetching corpus: 21050, signal 295917/426939 (executing program) 2022/06/25 09:41:47 fetching corpus: 21100, signal 296103/426939 (executing program) 2022/06/25 09:41:47 fetching corpus: 21150, signal 296301/426939 (executing program) 2022/06/25 09:41:47 fetching corpus: 21200, signal 296513/426939 (executing program) 2022/06/25 09:41:47 fetching corpus: 21250, signal 296745/426943 (executing program) 2022/06/25 09:41:47 fetching corpus: 21300, signal 297071/426943 (executing program) 2022/06/25 09:41:47 fetching corpus: 21350, signal 297241/426943 (executing program) 2022/06/25 09:41:47 fetching corpus: 21400, signal 297426/426943 (executing program) 2022/06/25 09:41:48 fetching corpus: 21450, signal 297605/426943 (executing program) 2022/06/25 09:41:48 fetching corpus: 21500, signal 297860/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 21550, signal 298052/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 21600, signal 298284/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 21650, signal 298562/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 21700, signal 298774/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 21750, signal 298968/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 21800, signal 299241/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 21850, signal 299527/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 21900, signal 299677/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 21950, signal 299971/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 22000, signal 300216/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 22050, signal 300511/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 22100, signal 300789/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 22150, signal 300983/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 22200, signal 301303/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 22250, signal 301767/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 22300, signal 302005/426947 (executing program) 2022/06/25 09:41:48 fetching corpus: 22350, signal 302273/426947 (executing program) 2022/06/25 09:41:49 fetching corpus: 22400, signal 302508/426947 (executing program) 2022/06/25 09:41:49 fetching corpus: 22450, signal 302771/426947 (executing program) 2022/06/25 09:41:49 fetching corpus: 22500, signal 302999/426947 (executing program) 2022/06/25 09:41:49 fetching corpus: 22550, signal 303173/426947 (executing program) 2022/06/25 09:41:49 fetching corpus: 22600, signal 303379/426947 (executing program) 2022/06/25 09:41:49 fetching corpus: 22650, signal 303647/426948 (executing program) 2022/06/25 09:41:49 fetching corpus: 22700, signal 303914/426948 (executing program) 2022/06/25 09:41:49 fetching corpus: 22750, signal 304079/426948 (executing program) 2022/06/25 09:41:49 fetching corpus: 22800, signal 304380/426948 (executing program) 2022/06/25 09:41:49 fetching corpus: 22850, signal 304574/426948 (executing program) 2022/06/25 09:41:49 fetching corpus: 22900, signal 304876/426948 (executing program) 2022/06/25 09:41:49 fetching corpus: 22950, signal 305096/426948 (executing program) 2022/06/25 09:41:49 fetching corpus: 23000, signal 305319/426948 (executing program) 2022/06/25 09:41:49 fetching corpus: 23050, signal 305608/426948 (executing program) 2022/06/25 09:41:49 fetching corpus: 23100, signal 305854/426948 (executing program) 2022/06/25 09:41:49 fetching corpus: 23150, signal 306065/426948 (executing program) 2022/06/25 09:41:49 fetching corpus: 23200, signal 306437/426948 (executing program) 2022/06/25 09:41:49 fetching corpus: 23250, signal 306694/426948 (executing program) 2022/06/25 09:41:49 fetching corpus: 23300, signal 306947/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 23350, signal 307162/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 23400, signal 307410/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 23450, signal 307696/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 23500, signal 307916/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 23550, signal 308097/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 23600, signal 308437/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 23650, signal 308678/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 23700, signal 308892/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 23750, signal 309048/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 23800, signal 309281/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 23850, signal 309544/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 23900, signal 309756/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 23950, signal 309968/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 24000, signal 310211/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 24050, signal 310398/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 24100, signal 310689/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 24150, signal 310922/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 24200, signal 311343/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 24250, signal 311539/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 24300, signal 311832/426950 (executing program) 2022/06/25 09:41:50 fetching corpus: 24350, signal 312067/426950 (executing program) 2022/06/25 09:41:51 fetching corpus: 24400, signal 312272/426950 (executing program) 2022/06/25 09:41:51 fetching corpus: 24450, signal 312464/426950 (executing program) 2022/06/25 09:41:51 fetching corpus: 24500, signal 312706/426950 (executing program) 2022/06/25 09:41:51 fetching corpus: 24550, signal 312882/426950 (executing program) 2022/06/25 09:41:51 fetching corpus: 24600, signal 313152/426950 (executing program) 2022/06/25 09:41:51 fetching corpus: 24650, signal 313346/426950 (executing program) 2022/06/25 09:41:51 fetching corpus: 24700, signal 313537/426950 (executing program) 2022/06/25 09:41:51 fetching corpus: 24750, signal 313767/426950 (executing program) 2022/06/25 09:41:51 fetching corpus: 24800, signal 313959/426950 (executing program) 2022/06/25 09:41:51 fetching corpus: 24850, signal 314179/426950 (executing program) 2022/06/25 09:41:51 fetching corpus: 24900, signal 314427/426952 (executing program) 2022/06/25 09:41:52 fetching corpus: 24950, signal 314604/426952 (executing program) 2022/06/25 09:41:52 fetching corpus: 25000, signal 314835/426952 (executing program) 2022/06/25 09:41:52 fetching corpus: 25050, signal 315032/426952 (executing program) 2022/06/25 09:41:52 fetching corpus: 25100, signal 315224/426952 (executing program) 2022/06/25 09:41:52 fetching corpus: 25150, signal 315393/426952 (executing program) 2022/06/25 09:41:52 fetching corpus: 25200, signal 315562/426952 (executing program) 2022/06/25 09:41:52 fetching corpus: 25250, signal 315757/426952 (executing program) 2022/06/25 09:41:52 fetching corpus: 25300, signal 316050/426952 (executing program) 2022/06/25 09:41:52 fetching corpus: 25350, signal 316268/426952 (executing program) 2022/06/25 09:41:52 fetching corpus: 25400, signal 316728/426952 (executing program) 2022/06/25 09:41:53 fetching corpus: 25450, signal 317140/426952 (executing program) 2022/06/25 09:41:53 fetching corpus: 25500, signal 317300/426952 (executing program) 2022/06/25 09:41:53 fetching corpus: 25550, signal 317504/426952 (executing program) 2022/06/25 09:41:53 fetching corpus: 25600, signal 317661/426952 (executing program) 2022/06/25 09:41:53 fetching corpus: 25650, signal 317912/426952 (executing program) 2022/06/25 09:41:53 fetching corpus: 25700, signal 318245/426952 (executing program) 2022/06/25 09:41:53 fetching corpus: 25750, signal 318445/426952 (executing program) 2022/06/25 09:41:53 fetching corpus: 25800, signal 318681/426952 (executing program) 2022/06/25 09:41:53 fetching corpus: 25850, signal 319031/426953 (executing program) 2022/06/25 09:41:53 fetching corpus: 25900, signal 319200/426953 (executing program) 2022/06/25 09:41:53 fetching corpus: 25950, signal 319489/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26000, signal 319667/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26050, signal 319876/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26100, signal 320075/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26150, signal 320287/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26200, signal 320429/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26250, signal 320606/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26300, signal 320859/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26350, signal 321086/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26400, signal 321347/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26450, signal 321652/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26500, signal 321884/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26550, signal 322102/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26600, signal 322362/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26650, signal 322534/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26700, signal 322778/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26750, signal 322997/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26800, signal 323353/426953 (executing program) 2022/06/25 09:41:54 fetching corpus: 26850, signal 323530/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 26900, signal 323743/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 26950, signal 323914/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27000, signal 324072/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27050, signal 324381/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27100, signal 324583/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27150, signal 324752/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27200, signal 324918/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27250, signal 325106/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27300, signal 325305/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27350, signal 325561/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27400, signal 325807/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27450, signal 325975/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27500, signal 326232/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27550, signal 326444/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27600, signal 326645/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27650, signal 327546/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27700, signal 327795/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27750, signal 327962/426953 (executing program) 2022/06/25 09:41:55 fetching corpus: 27800, signal 328153/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 27850, signal 328354/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 27900, signal 328584/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 27950, signal 328794/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28000, signal 329020/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28050, signal 329266/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28100, signal 329443/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28150, signal 329621/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28200, signal 329860/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28250, signal 330138/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28300, signal 330316/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28350, signal 330504/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28400, signal 330656/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28450, signal 330917/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28500, signal 331191/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28550, signal 331456/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28600, signal 331611/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28650, signal 331777/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28700, signal 331931/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28750, signal 332225/426953 (executing program) 2022/06/25 09:41:56 fetching corpus: 28800, signal 332400/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 28850, signal 332602/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 28900, signal 332810/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 28950, signal 332998/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29000, signal 333243/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29050, signal 333441/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29100, signal 333602/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29150, signal 333755/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29200, signal 333971/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29250, signal 334146/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29300, signal 334341/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29350, signal 334512/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29400, signal 334730/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29450, signal 334888/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29500, signal 335163/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29550, signal 335491/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29600, signal 335683/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29650, signal 335856/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29700, signal 336009/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29750, signal 336170/426953 (executing program) 2022/06/25 09:41:57 fetching corpus: 29800, signal 336315/426953 (executing program) 2022/06/25 09:41:58 fetching corpus: 29850, signal 336493/426953 (executing program) 2022/06/25 09:41:58 fetching corpus: 29900, signal 336736/426953 (executing program) 2022/06/25 09:41:58 fetching corpus: 29950, signal 336891/426953 (executing program) 2022/06/25 09:41:58 fetching corpus: 30000, signal 337051/426953 (executing program) 2022/06/25 09:41:58 fetching corpus: 30050, signal 337193/426953 (executing program) 2022/06/25 09:41:58 fetching corpus: 30100, signal 337353/426953 (executing program) 2022/06/25 09:41:58 fetching corpus: 30150, signal 337586/426953 (executing program) 2022/06/25 09:41:58 fetching corpus: 30200, signal 337890/426953 (executing program) 2022/06/25 09:41:58 fetching corpus: 30250, signal 338094/426954 (executing program) 2022/06/25 09:41:58 fetching corpus: 30300, signal 338318/426954 (executing program) 2022/06/25 09:41:58 fetching corpus: 30350, signal 338498/426954 (executing program) 2022/06/25 09:41:58 fetching corpus: 30400, signal 338695/426954 (executing program) 2022/06/25 09:41:58 fetching corpus: 30450, signal 338947/426954 (executing program) 2022/06/25 09:41:58 fetching corpus: 30500, signal 339151/426954 (executing program) 2022/06/25 09:41:58 fetching corpus: 30550, signal 339339/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 30600, signal 339549/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 30650, signal 339736/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 30700, signal 340080/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 30750, signal 340201/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 30800, signal 340386/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 30850, signal 340565/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 30900, signal 340772/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 30950, signal 340953/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 31000, signal 341082/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 31050, signal 341212/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 31100, signal 341381/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 31150, signal 341612/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 31200, signal 341857/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 31250, signal 341988/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 31300, signal 342249/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 31350, signal 342537/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 31400, signal 342734/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 31450, signal 342887/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 31500, signal 343099/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 31550, signal 343245/426954 (executing program) 2022/06/25 09:41:59 fetching corpus: 31600, signal 343456/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 31650, signal 343594/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 31700, signal 344122/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 31750, signal 344309/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 31800, signal 344450/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 31850, signal 344678/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 31900, signal 344895/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 31950, signal 345064/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 32000, signal 345218/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 32050, signal 345418/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 32100, signal 345561/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 32150, signal 345902/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 32200, signal 346094/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 32250, signal 346256/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 32300, signal 346404/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 32350, signal 346563/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 32400, signal 346936/426954 (executing program) 2022/06/25 09:42:00 fetching corpus: 32450, signal 347189/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 32500, signal 347362/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 32550, signal 347570/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 32600, signal 347706/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 32650, signal 347818/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 32700, signal 347977/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 32750, signal 348183/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 32800, signal 348380/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 32850, signal 348550/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 32900, signal 348858/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 32950, signal 349061/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 33000, signal 349229/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 33050, signal 349371/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 33100, signal 349524/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 33150, signal 349696/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 33200, signal 349888/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 33250, signal 350070/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 33300, signal 350238/426954 (executing program) 2022/06/25 09:42:01 fetching corpus: 33350, signal 350412/426954 (executing program) 2022/06/25 09:42:02 fetching corpus: 33400, signal 350670/426954 (executing program) 2022/06/25 09:42:02 fetching corpus: 33450, signal 350894/426954 (executing program) 2022/06/25 09:42:02 fetching corpus: 33500, signal 351061/426954 (executing program) 2022/06/25 09:42:02 fetching corpus: 33550, signal 351399/426954 (executing program) 2022/06/25 09:42:02 fetching corpus: 33600, signal 351547/426954 (executing program) 2022/06/25 09:42:02 fetching corpus: 33650, signal 351714/426954 (executing program) 2022/06/25 09:42:02 fetching corpus: 33700, signal 351857/426954 (executing program) 2022/06/25 09:42:02 fetching corpus: 33750, signal 352000/426954 (executing program) 2022/06/25 09:42:02 fetching corpus: 33800, signal 352141/426956 (executing program) 2022/06/25 09:42:02 fetching corpus: 33850, signal 352307/426956 (executing program) 2022/06/25 09:42:02 fetching corpus: 33900, signal 352630/426956 (executing program) 2022/06/25 09:42:02 fetching corpus: 33950, signal 352837/426956 (executing program) 2022/06/25 09:42:02 fetching corpus: 34000, signal 352973/426956 (executing program) 2022/06/25 09:42:02 fetching corpus: 34050, signal 353112/426956 (executing program) 2022/06/25 09:42:02 fetching corpus: 34100, signal 353267/426956 (executing program) 2022/06/25 09:42:02 fetching corpus: 34150, signal 353422/426956 (executing program) 2022/06/25 09:42:02 fetching corpus: 34200, signal 353544/426956 (executing program) 2022/06/25 09:42:02 fetching corpus: 34250, signal 353654/426956 (executing program) 2022/06/25 09:42:02 fetching corpus: 34300, signal 353796/426956 (executing program) 2022/06/25 09:42:02 fetching corpus: 34350, signal 353964/426956 (executing program) 2022/06/25 09:42:02 fetching corpus: 34400, signal 354148/426956 (executing program) 2022/06/25 09:42:02 fetching corpus: 34450, signal 354316/426956 (executing program) 2022/06/25 09:42:03 fetching corpus: 34500, signal 354464/426956 (executing program) 2022/06/25 09:42:03 fetching corpus: 34550, signal 354760/426958 (executing program) 2022/06/25 09:42:03 fetching corpus: 34600, signal 354920/426958 (executing program) 2022/06/25 09:42:03 fetching corpus: 34650, signal 355156/426958 (executing program) 2022/06/25 09:42:03 fetching corpus: 34700, signal 355361/426958 (executing program) 2022/06/25 09:42:03 fetching corpus: 34750, signal 355494/426958 (executing program) 2022/06/25 09:42:03 fetching corpus: 34800, signal 355653/426958 (executing program) 2022/06/25 09:42:03 fetching corpus: 34850, signal 355774/426958 (executing program) 2022/06/25 09:42:03 fetching corpus: 34900, signal 355975/426958 (executing program) 2022/06/25 09:42:03 fetching corpus: 34950, signal 356332/426958 (executing program) 2022/06/25 09:42:03 fetching corpus: 35000, signal 356543/426958 (executing program) 2022/06/25 09:42:03 fetching corpus: 35050, signal 356755/426958 (executing program) 2022/06/25 09:42:03 fetching corpus: 35100, signal 356917/426958 (executing program) 2022/06/25 09:42:03 fetching corpus: 35150, signal 357090/426958 (executing program) 2022/06/25 09:42:03 fetching corpus: 35200, signal 357225/426958 (executing program) 2022/06/25 09:42:04 fetching corpus: 35250, signal 357420/426958 (executing program) 2022/06/25 09:42:04 fetching corpus: 35300, signal 357594/426958 (executing program) 2022/06/25 09:42:04 fetching corpus: 35350, signal 357774/426958 (executing program) 2022/06/25 09:42:04 fetching corpus: 35400, signal 357920/426958 (executing program) 2022/06/25 09:42:04 fetching corpus: 35450, signal 358042/426958 (executing program) 2022/06/25 09:42:04 fetching corpus: 35500, signal 358187/426958 (executing program) 2022/06/25 09:42:04 fetching corpus: 35550, signal 358392/426958 (executing program) 2022/06/25 09:42:04 fetching corpus: 35600, signal 358639/426958 (executing program) 2022/06/25 09:42:04 fetching corpus: 35650, signal 358925/426958 (executing program) 2022/06/25 09:42:04 fetching corpus: 35700, signal 359092/426958 (executing program) 2022/06/25 09:42:04 fetching corpus: 35750, signal 359261/426960 (executing program) 2022/06/25 09:42:04 fetching corpus: 35800, signal 359421/426960 (executing program) 2022/06/25 09:42:04 fetching corpus: 35850, signal 359570/426960 (executing program) 2022/06/25 09:42:04 fetching corpus: 35900, signal 359978/426960 (executing program) 2022/06/25 09:42:04 fetching corpus: 35950, signal 360142/426962 (executing program) 2022/06/25 09:42:04 fetching corpus: 36000, signal 360334/426962 (executing program) 2022/06/25 09:42:04 fetching corpus: 36050, signal 360481/426962 (executing program) 2022/06/25 09:42:04 fetching corpus: 36100, signal 360653/426962 (executing program) 2022/06/25 09:42:04 fetching corpus: 36150, signal 360787/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 36200, signal 360957/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 36250, signal 361129/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 36300, signal 361267/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 36350, signal 361441/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 36400, signal 361612/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 36450, signal 361770/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 36500, signal 362018/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 36550, signal 362199/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 36600, signal 362362/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 36650, signal 362588/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 36700, signal 362764/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 36750, signal 362890/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 36800, signal 363101/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 36850, signal 363291/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 36900, signal 363447/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 36950, signal 363622/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 37000, signal 363770/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 37050, signal 363901/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 37100, signal 364053/426962 (executing program) 2022/06/25 09:42:05 fetching corpus: 37150, signal 364201/426962 (executing program) 2022/06/25 09:42:06 fetching corpus: 37200, signal 364335/426962 (executing program) 2022/06/25 09:42:06 fetching corpus: 37250, signal 364466/426962 (executing program) 2022/06/25 09:42:06 fetching corpus: 37300, signal 364670/426962 (executing program) 2022/06/25 09:42:06 fetching corpus: 37350, signal 364846/426962 (executing program) 2022/06/25 09:42:06 fetching corpus: 37400, signal 365029/426962 (executing program) 2022/06/25 09:42:06 fetching corpus: 37450, signal 365210/426962 (executing program) 2022/06/25 09:42:06 fetching corpus: 37500, signal 365374/426962 (executing program) 2022/06/25 09:42:06 fetching corpus: 37550, signal 365512/426962 (executing program) 2022/06/25 09:42:06 fetching corpus: 37600, signal 365675/426962 (executing program) 2022/06/25 09:42:06 fetching corpus: 37650, signal 365814/426962 (executing program) 2022/06/25 09:42:06 fetching corpus: 37700, signal 365972/426962 (executing program) 2022/06/25 09:42:06 fetching corpus: 37750, signal 366150/426962 (executing program) 2022/06/25 09:42:06 fetching corpus: 37800, signal 366291/426968 (executing program) 2022/06/25 09:42:06 fetching corpus: 37850, signal 366582/426968 (executing program) 2022/06/25 09:42:06 fetching corpus: 37900, signal 366849/426968 (executing program) 2022/06/25 09:42:06 fetching corpus: 37950, signal 367080/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38000, signal 367246/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38050, signal 367414/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38100, signal 367807/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38150, signal 368008/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38200, signal 368270/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38250, signal 368471/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38300, signal 368591/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38350, signal 368730/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38400, signal 368884/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38450, signal 369063/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38500, signal 369197/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38550, signal 369412/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38600, signal 369526/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38650, signal 369695/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38700, signal 369919/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38750, signal 370059/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38800, signal 370167/426968 (executing program) 2022/06/25 09:42:07 fetching corpus: 38850, signal 370307/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 38900, signal 370610/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 38950, signal 370789/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 39000, signal 370931/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 39050, signal 371116/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 39100, signal 371262/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 39150, signal 371381/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 39200, signal 371563/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 39250, signal 371727/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 39300, signal 371939/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 39350, signal 372120/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 39400, signal 372250/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 39450, signal 372421/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 39500, signal 372694/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 39550, signal 372810/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 39600, signal 373010/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 39650, signal 373212/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 39700, signal 373411/426968 (executing program) 2022/06/25 09:42:08 fetching corpus: 39750, signal 373527/426968 (executing program) 2022/06/25 09:42:09 fetching corpus: 39800, signal 373650/426968 (executing program) 2022/06/25 09:42:09 fetching corpus: 39850, signal 373878/426968 (executing program) 2022/06/25 09:42:09 fetching corpus: 39900, signal 374010/426968 (executing program) 2022/06/25 09:42:09 fetching corpus: 39950, signal 374203/426968 (executing program) 2022/06/25 09:42:09 fetching corpus: 40000, signal 374367/426968 (executing program) 2022/06/25 09:42:09 fetching corpus: 40050, signal 374514/426968 (executing program) 2022/06/25 09:42:09 fetching corpus: 40100, signal 374674/426968 (executing program) 2022/06/25 09:42:09 fetching corpus: 40150, signal 374904/426968 (executing program) 2022/06/25 09:42:09 fetching corpus: 40200, signal 375014/426968 (executing program) 2022/06/25 09:42:09 fetching corpus: 40250, signal 375146/426969 (executing program) 2022/06/25 09:42:09 fetching corpus: 40300, signal 375278/426969 (executing program) 2022/06/25 09:42:09 fetching corpus: 40350, signal 375491/426969 (executing program) 2022/06/25 09:42:09 fetching corpus: 40400, signal 375632/426969 (executing program) 2022/06/25 09:42:09 fetching corpus: 40450, signal 375792/426969 (executing program) 2022/06/25 09:42:09 fetching corpus: 40500, signal 375946/426969 (executing program) 2022/06/25 09:42:09 fetching corpus: 40550, signal 376176/426969 (executing program) 2022/06/25 09:42:09 fetching corpus: 40600, signal 376385/426969 (executing program) 2022/06/25 09:42:10 fetching corpus: 40650, signal 376545/426969 (executing program) 2022/06/25 09:42:10 fetching corpus: 40700, signal 376785/426969 (executing program) 2022/06/25 09:42:10 fetching corpus: 40750, signal 376927/426969 (executing program) 2022/06/25 09:42:10 fetching corpus: 40800, signal 377062/426969 (executing program) 2022/06/25 09:42:10 fetching corpus: 40850, signal 377239/426969 (executing program) 2022/06/25 09:42:10 fetching corpus: 40900, signal 377413/426969 (executing program) 2022/06/25 09:42:10 fetching corpus: 40950, signal 377597/426969 (executing program) 2022/06/25 09:42:10 fetching corpus: 41000, signal 377819/426969 (executing program) 2022/06/25 09:42:10 fetching corpus: 41050, signal 377961/426969 (executing program) 2022/06/25 09:42:10 fetching corpus: 41100, signal 378092/426969 (executing program) 2022/06/25 09:42:11 fetching corpus: 41150, signal 378274/426970 (executing program) 2022/06/25 09:42:11 fetching corpus: 41200, signal 378424/426970 (executing program) 2022/06/25 09:42:11 fetching corpus: 41250, signal 378573/426970 (executing program) 2022/06/25 09:42:11 fetching corpus: 41300, signal 378815/426970 (executing program) 2022/06/25 09:42:11 fetching corpus: 41350, signal 378941/426970 (executing program) 2022/06/25 09:42:11 fetching corpus: 41400, signal 379138/426970 (executing program) 2022/06/25 09:42:11 fetching corpus: 41450, signal 379255/426970 (executing program) 2022/06/25 09:42:11 fetching corpus: 41500, signal 379431/426970 (executing program) 2022/06/25 09:42:11 fetching corpus: 41550, signal 379683/426970 (executing program) 2022/06/25 09:42:11 fetching corpus: 41600, signal 379833/426970 (executing program) 2022/06/25 09:42:11 fetching corpus: 41650, signal 379969/426970 (executing program) 2022/06/25 09:42:11 fetching corpus: 41700, signal 380104/426970 (executing program) 2022/06/25 09:42:11 fetching corpus: 41750, signal 380245/426971 (executing program) 2022/06/25 09:42:11 fetching corpus: 41800, signal 380441/426971 (executing program) 2022/06/25 09:42:11 fetching corpus: 41850, signal 380599/426971 (executing program) 2022/06/25 09:42:11 fetching corpus: 41900, signal 380733/426971 (executing program) 2022/06/25 09:42:11 fetching corpus: 41950, signal 380911/426971 (executing program) 2022/06/25 09:42:11 fetching corpus: 42000, signal 381198/426971 (executing program) 2022/06/25 09:42:11 fetching corpus: 42050, signal 381289/426971 (executing program) 2022/06/25 09:42:11 fetching corpus: 42100, signal 381419/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42150, signal 381565/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42200, signal 381722/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42250, signal 381940/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42300, signal 382190/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42350, signal 382407/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42400, signal 382551/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42450, signal 382653/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42500, signal 382842/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42550, signal 382959/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42600, signal 383079/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42650, signal 383206/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42700, signal 383379/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42750, signal 383525/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42800, signal 383621/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42850, signal 383782/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42900, signal 384325/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 42950, signal 384456/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 43000, signal 384583/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 43050, signal 384757/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 43100, signal 384888/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 43150, signal 385022/426971 (executing program) 2022/06/25 09:42:12 fetching corpus: 43200, signal 385146/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 43250, signal 385331/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 43300, signal 385520/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 43350, signal 385662/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 43400, signal 385772/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 43450, signal 385941/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 43500, signal 386063/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 43550, signal 386190/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 43600, signal 386308/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 43650, signal 386427/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 43700, signal 386620/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 43750, signal 386814/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 43800, signal 386961/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 43850, signal 387100/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 43900, signal 387256/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 43950, signal 387356/426971 (executing program) [ 156.586279][ T1198] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.586467][ T1198] ieee802154 phy1 wpan1: encryption failed: -22 2022/06/25 09:42:13 fetching corpus: 44000, signal 387799/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 44050, signal 387919/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 44100, signal 388127/426971 (executing program) 2022/06/25 09:42:13 fetching corpus: 44150, signal 388243/426971 (executing program) 2022/06/25 09:42:14 fetching corpus: 44200, signal 388343/426971 (executing program) 2022/06/25 09:42:14 fetching corpus: 44250, signal 388479/426971 (executing program) 2022/06/25 09:42:14 fetching corpus: 44300, signal 388659/426971 (executing program) 2022/06/25 09:42:14 fetching corpus: 44350, signal 388799/426971 (executing program) 2022/06/25 09:42:14 fetching corpus: 44400, signal 388993/426971 (executing program) 2022/06/25 09:42:14 fetching corpus: 44450, signal 389107/426971 (executing program) 2022/06/25 09:42:14 fetching corpus: 44500, signal 389273/426971 (executing program) 2022/06/25 09:42:14 fetching corpus: 44550, signal 389402/426971 (executing program) 2022/06/25 09:42:14 fetching corpus: 44600, signal 389527/426971 (executing program) 2022/06/25 09:42:14 fetching corpus: 44650, signal 389633/426971 (executing program) 2022/06/25 09:42:14 fetching corpus: 44700, signal 389764/426971 (executing program) 2022/06/25 09:42:14 fetching corpus: 44750, signal 389905/426971 (executing program) 2022/06/25 09:42:14 fetching corpus: 44800, signal 390335/426971 (executing program) 2022/06/25 09:42:14 fetching corpus: 44850, signal 390449/426971 (executing program) 2022/06/25 09:42:14 fetching corpus: 44900, signal 390564/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 44950, signal 390710/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45000, signal 390877/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45050, signal 390981/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45100, signal 391284/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45150, signal 391516/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45200, signal 391682/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45250, signal 391830/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45300, signal 392035/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45350, signal 392150/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45400, signal 392286/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45450, signal 392428/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45500, signal 392572/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45550, signal 392720/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45600, signal 392876/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45650, signal 393112/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45700, signal 393278/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45750, signal 393429/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45800, signal 393557/426971 (executing program) 2022/06/25 09:42:15 fetching corpus: 45850, signal 393687/426973 (executing program) 2022/06/25 09:42:15 fetching corpus: 45900, signal 393830/426973 (executing program) 2022/06/25 09:42:15 fetching corpus: 45950, signal 393976/426973 (executing program) 2022/06/25 09:42:15 fetching corpus: 46000, signal 394124/426973 (executing program) 2022/06/25 09:42:15 fetching corpus: 46050, signal 394244/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46100, signal 394346/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46150, signal 394459/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46200, signal 394645/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46250, signal 394796/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46300, signal 394936/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46350, signal 395062/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46400, signal 395260/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46450, signal 395435/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46500, signal 395610/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46550, signal 395733/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46600, signal 396118/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46650, signal 396222/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46700, signal 396357/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46750, signal 396490/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46800, signal 396605/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46850, signal 396700/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46900, signal 396796/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 46950, signal 397049/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 47000, signal 397379/426973 (executing program) 2022/06/25 09:42:16 fetching corpus: 47050, signal 397519/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47100, signal 397631/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47150, signal 397775/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47200, signal 397923/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47250, signal 398051/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47300, signal 398537/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47350, signal 398665/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47400, signal 398879/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47450, signal 399009/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47500, signal 399158/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47550, signal 399284/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47600, signal 399465/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47650, signal 399587/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47700, signal 399694/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47750, signal 399825/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47800, signal 399957/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47850, signal 400173/426973 (executing program) 2022/06/25 09:42:17 fetching corpus: 47900, signal 400358/426973 (executing program) 2022/06/25 09:42:18 fetching corpus: 47950, signal 400570/426973 (executing program) 2022/06/25 09:42:18 fetching corpus: 48000, signal 400681/426973 (executing program) 2022/06/25 09:42:18 fetching corpus: 48050, signal 400853/426973 (executing program) 2022/06/25 09:42:18 fetching corpus: 48100, signal 400963/426973 (executing program) 2022/06/25 09:42:18 fetching corpus: 48150, signal 401079/426973 (executing program) 2022/06/25 09:42:18 fetching corpus: 48200, signal 401234/426973 (executing program) 2022/06/25 09:42:18 fetching corpus: 48250, signal 401382/426973 (executing program) 2022/06/25 09:42:18 fetching corpus: 48300, signal 401531/426973 (executing program) 2022/06/25 09:42:18 fetching corpus: 48350, signal 401700/426973 (executing program) 2022/06/25 09:42:18 fetching corpus: 48400, signal 401830/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 48450, signal 401961/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 48500, signal 402117/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 48550, signal 402235/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 48600, signal 402401/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 48650, signal 402523/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 48700, signal 402680/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 48750, signal 402836/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 48800, signal 402988/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 48850, signal 403149/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 48900, signal 403289/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 48950, signal 403406/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 49000, signal 403526/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 49050, signal 403654/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 49100, signal 403766/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 49150, signal 403883/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 49200, signal 404047/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 49250, signal 404181/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 49300, signal 404339/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 49350, signal 404474/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 49400, signal 404591/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 49450, signal 404732/426973 (executing program) 2022/06/25 09:42:19 fetching corpus: 49500, signal 404891/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 49550, signal 405034/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 49600, signal 405178/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 49650, signal 405298/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 49700, signal 405485/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 49750, signal 405651/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 49800, signal 405787/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 49850, signal 405909/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 49900, signal 406036/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 49950, signal 406177/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 50000, signal 406360/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 50050, signal 406468/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 50100, signal 406587/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 50150, signal 406730/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 50200, signal 406845/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 50250, signal 406968/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 50300, signal 407068/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 50350, signal 407188/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 50400, signal 407335/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 50450, signal 407492/426973 (executing program) 2022/06/25 09:42:20 fetching corpus: 50500, signal 407630/426973 (executing program) 2022/06/25 09:42:21 fetching corpus: 50550, signal 407806/426973 (executing program) 2022/06/25 09:42:21 fetching corpus: 50600, signal 407955/426973 (executing program) 2022/06/25 09:42:21 fetching corpus: 50650, signal 408082/426973 (executing program) 2022/06/25 09:42:21 fetching corpus: 50700, signal 408209/426973 (executing program) 2022/06/25 09:42:21 fetching corpus: 50750, signal 408334/426973 (executing program) 2022/06/25 09:42:21 fetching corpus: 50800, signal 408433/426973 (executing program) 2022/06/25 09:42:21 fetching corpus: 50850, signal 408573/426973 (executing program) 2022/06/25 09:42:22 fetching corpus: 50900, signal 408690/426973 (executing program) 2022/06/25 09:42:22 fetching corpus: 50950, signal 408798/426973 (executing program) 2022/06/25 09:42:22 fetching corpus: 51000, signal 408933/426973 (executing program) 2022/06/25 09:42:22 fetching corpus: 51050, signal 409061/426973 (executing program) 2022/06/25 09:42:22 fetching corpus: 51100, signal 409167/426973 (executing program) 2022/06/25 09:42:22 fetching corpus: 51150, signal 409285/426973 (executing program) 2022/06/25 09:42:22 fetching corpus: 51200, signal 409418/426973 (executing program) 2022/06/25 09:42:22 fetching corpus: 51250, signal 409569/426973 (executing program) 2022/06/25 09:42:22 fetching corpus: 51300, signal 409672/426973 (executing program) 2022/06/25 09:42:22 fetching corpus: 51350, signal 409787/426973 (executing program) 2022/06/25 09:42:22 fetching corpus: 51400, signal 409890/426973 (executing program) 2022/06/25 09:42:22 fetching corpus: 51450, signal 410113/426973 (executing program) 2022/06/25 09:42:22 fetching corpus: 51500, signal 410258/426973 (executing program) 2022/06/25 09:42:22 fetching corpus: 51550, signal 410464/426973 (executing program) 2022/06/25 09:42:22 fetching corpus: 51600, signal 410616/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 51650, signal 410862/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 51700, signal 410977/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 51750, signal 411113/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 51800, signal 411213/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 51850, signal 411329/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 51900, signal 411453/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 51950, signal 411617/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 52000, signal 411725/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 52050, signal 411862/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 52100, signal 411951/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 52150, signal 412114/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 52200, signal 412245/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 52250, signal 412383/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 52300, signal 412584/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 52350, signal 412716/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 52400, signal 412852/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 52450, signal 412993/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 52500, signal 413082/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 52550, signal 413200/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 52600, signal 413428/426973 (executing program) 2022/06/25 09:42:23 fetching corpus: 52650, signal 413537/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 52700, signal 413668/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 52750, signal 413754/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 52800, signal 413923/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 52850, signal 414059/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 52900, signal 414189/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 52950, signal 414346/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 53000, signal 414492/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 53050, signal 414615/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 53100, signal 414735/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 53150, signal 414868/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 53200, signal 415173/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 53250, signal 415315/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 53300, signal 415446/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 53350, signal 415613/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 53400, signal 415723/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 53450, signal 415831/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 53500, signal 415949/426973 (executing program) 2022/06/25 09:42:24 fetching corpus: 53550, signal 416084/426973 (executing program) 2022/06/25 09:42:25 fetching corpus: 53600, signal 416195/426973 (executing program) 2022/06/25 09:42:25 fetching corpus: 53650, signal 416318/426973 (executing program) 2022/06/25 09:42:25 fetching corpus: 53693, signal 416409/426973 (executing program) 2022/06/25 09:42:25 fetching corpus: 53693, signal 416409/426973 (executing program) 2022/06/25 09:42:29 starting 6 fuzzer processes 09:42:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000064000000750000000000000007edffff010000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) 09:42:29 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x50e42, 0x0) 09:42:29 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) 09:42:29 executing program 2: getrlimit(0x4, &(0x7f0000000040)) 09:42:29 executing program 3: timer_create(0x2, &(0x7f0000001140)={0x0, 0x1f, 0x0, @thr={0x0, 0x0}}, &(0x7f0000001180)) 09:42:29 executing program 4: prlimit64(0x0, 0x9, &(0x7f0000000000), 0x0) [ 173.867246][ T3521] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.868193][ T3521] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.869074][ T3521] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.871494][ T3521] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.899853][ T3521] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 173.900796][ T3521] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.974554][ T3519] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.975200][ T3519] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.976106][ T3519] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.976975][ T3519] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.979330][ T3519] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.980870][ T3519] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 173.982035][ T3519] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.049358][ T3526] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.061364][ T46] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.063412][ T46] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.064349][ T46] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.068307][ T46] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.075282][ T3528] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.076667][ T3528] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.077348][ T3529] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 174.080232][ T3528] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.090836][ T3529] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 174.094714][ T3521] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.121345][ T3521] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.123194][ T3521] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.128424][ T3521] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.138443][ T3521] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.143856][ T3521] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 174.155440][ T3521] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.204616][ T3521] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.232232][ T3521] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.246788][ T3521] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.417931][ T3521] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.442470][ T3521] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 174.444235][ T3521] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.572417][ T3513] chnl_net:caif_netlink_parms(): no params data found [ 175.024703][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.025073][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.027295][ T3513] device bridge_slave_0 entered promiscuous mode [ 175.109023][ T3515] chnl_net:caif_netlink_parms(): no params data found [ 175.117089][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.117387][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.119740][ T3513] device bridge_slave_1 entered promiscuous mode [ 175.314554][ T3513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.391298][ T3513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.409732][ T3514] chnl_net:caif_netlink_parms(): no params data found [ 175.417628][ T3517] chnl_net:caif_netlink_parms(): no params data found [ 175.540538][ T3513] team0: Port device team_slave_0 added [ 175.609802][ T3513] team0: Port device team_slave_1 added [ 175.796721][ T3513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.796781][ T3513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.796892][ T3513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.872976][ T3513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.873031][ T3513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.873142][ T3513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.883275][ T3518] chnl_net:caif_netlink_parms(): no params data found [ 175.943296][ T115] Bluetooth: hci0: command 0x0409 tx timeout [ 175.951352][ T3516] chnl_net:caif_netlink_parms(): no params data found [ 176.102310][ T115] Bluetooth: hci1: command 0x0409 tx timeout [ 176.102449][ T115] Bluetooth: hci2: command 0x0409 tx timeout [ 176.182100][ T124] Bluetooth: hci4: command 0x0409 tx timeout [ 176.182241][ T124] Bluetooth: hci3: command 0x0409 tx timeout [ 176.219812][ T3513] device hsr_slave_0 entered promiscuous mode [ 176.222219][ T3513] device hsr_slave_1 entered promiscuous mode [ 176.243124][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.243420][ T3515] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.245779][ T3515] device bridge_slave_0 entered promiscuous mode [ 176.346818][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.347115][ T3515] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.349536][ T3515] device bridge_slave_1 entered promiscuous mode [ 176.503350][ T115] Bluetooth: hci5: command 0x0409 tx timeout [ 176.535011][ T3515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.538354][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.538648][ T3514] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.541011][ T3514] device bridge_slave_0 entered promiscuous mode [ 176.592499][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.592808][ T3514] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.595172][ T3514] device bridge_slave_1 entered promiscuous mode [ 176.602401][ T3515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.770277][ T3514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.810877][ T3515] team0: Port device team_slave_0 added [ 176.832347][ T3515] team0: Port device team_slave_1 added [ 176.838249][ T3514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.968442][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.968740][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.971033][ T3517] device bridge_slave_0 entered promiscuous mode [ 177.007860][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.008152][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.010573][ T3517] device bridge_slave_1 entered promiscuous mode [ 177.014590][ T3515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.014640][ T3515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.014750][ T3515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.177781][ T3514] team0: Port device team_slave_0 added [ 177.181988][ T3515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.182041][ T3515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.182154][ T3515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.250967][ T3517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.287651][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.287948][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.290422][ T3518] device bridge_slave_0 entered promiscuous mode [ 177.299053][ T3514] team0: Port device team_slave_1 added [ 177.349732][ T3517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.350153][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.350447][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.352961][ T3518] device bridge_slave_1 entered promiscuous mode [ 177.420907][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.421206][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.424620][ T3516] device bridge_slave_0 entered promiscuous mode [ 177.441403][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.441935][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.445535][ T3516] device bridge_slave_1 entered promiscuous mode [ 177.614528][ T3515] device hsr_slave_0 entered promiscuous mode [ 177.617417][ T3515] device hsr_slave_1 entered promiscuous mode [ 177.619129][ T3515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.619188][ T3515] Cannot create hsr debugfs directory [ 177.653509][ T3516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.679364][ T3514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.679419][ T3514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.679530][ T3514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.761360][ T3516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.789377][ T3517] team0: Port device team_slave_0 added [ 177.801619][ T3514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.801788][ T3514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.801899][ T3514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.806626][ T3517] team0: Port device team_slave_1 added [ 177.814140][ T3518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.965662][ T3518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.041526][ T6] Bluetooth: hci0: command 0x041b tx timeout [ 178.055791][ T3516] team0: Port device team_slave_0 added [ 178.057898][ T3517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.057954][ T3517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.058066][ T3517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.073260][ T3516] team0: Port device team_slave_1 added [ 178.184170][ T3170] Bluetooth: hci2: command 0x041b tx timeout [ 178.184320][ T3170] Bluetooth: hci1: command 0x041b tx timeout [ 178.185816][ T3517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.185868][ T3517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.185981][ T3517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.261959][ T26] Bluetooth: hci3: command 0x041b tx timeout [ 178.262301][ T26] Bluetooth: hci4: command 0x041b tx timeout [ 178.316088][ T3518] team0: Port device team_slave_0 added [ 178.326053][ T3514] device hsr_slave_0 entered promiscuous mode [ 178.335800][ T3514] device hsr_slave_1 entered promiscuous mode [ 178.337205][ T3514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.337247][ T3514] Cannot create hsr debugfs directory [ 178.339688][ T3513] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.406846][ T3516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.406901][ T3516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.407012][ T3516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.416681][ T3517] device hsr_slave_0 entered promiscuous mode [ 178.422830][ T3517] device hsr_slave_1 entered promiscuous mode [ 178.476592][ T3517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.476657][ T3517] Cannot create hsr debugfs directory [ 178.480525][ T3518] team0: Port device team_slave_1 added [ 178.509884][ T3513] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.550964][ T3516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.551018][ T3516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.551129][ T3516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.596750][ T26] Bluetooth: hci5: command 0x041b tx timeout [ 178.649146][ T3513] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.659640][ T3513] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.691840][ T3518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.691894][ T3518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.692004][ T3518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.804968][ T3518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.805024][ T3518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.805134][ T3518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.063693][ T3516] device hsr_slave_0 entered promiscuous mode [ 179.067298][ T3516] device hsr_slave_1 entered promiscuous mode [ 179.069149][ T3516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.069208][ T3516] Cannot create hsr debugfs directory [ 179.110146][ T3518] device hsr_slave_0 entered promiscuous mode [ 179.112557][ T3518] device hsr_slave_1 entered promiscuous mode [ 179.125495][ T3518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.125556][ T3518] Cannot create hsr debugfs directory [ 179.406878][ T3515] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 179.498654][ T3515] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 179.511344][ T3515] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 179.534646][ T3515] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.890648][ T3514] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.944693][ T3514] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.967039][ T3514] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.007362][ T3514] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.093188][ T3517] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 180.108881][ T26] Bluetooth: hci0: command 0x040f tx timeout [ 180.150527][ T3517] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 180.184572][ T3517] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 180.221076][ T3517] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 180.306767][ T3559] Bluetooth: hci1: command 0x040f tx timeout [ 180.317330][ T3559] Bluetooth: hci2: command 0x040f tx timeout [ 180.350898][ T3559] Bluetooth: hci4: command 0x040f tx timeout [ 180.351238][ T3559] Bluetooth: hci3: command 0x040f tx timeout [ 180.365522][ T3513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.413775][ T3516] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.480550][ T3516] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.500518][ T3516] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.521781][ T3513] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.545999][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.548013][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.600755][ T3516] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 180.636511][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.638432][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.639933][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.640208][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.645843][ T3518] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.692983][ T3564] Bluetooth: hci5: command 0x040f tx timeout [ 180.696428][ T3518] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 180.727472][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.738539][ T3515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.739555][ T3518] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 180.782886][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.784804][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.786304][ T3170] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.786572][ T3170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.812361][ T3518] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.829861][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.899715][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.902534][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.930658][ T3515] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.933034][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.956413][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.959190][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.988690][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.991443][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.994332][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.995883][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.996154][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.026195][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.028171][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.030085][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.031591][ T3170] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.032083][ T3170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.034044][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.036817][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.091402][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.093679][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.095677][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.158571][ T3514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.197291][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.200729][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.203412][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.205400][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.208121][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.225440][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.228150][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.230829][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.236347][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.386826][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.388894][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.492061][ T3514] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.523372][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.523855][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.524289][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.526334][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.572062][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.574157][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.582958][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.603380][ T3513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.633739][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.635813][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.637340][ T3170] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.637625][ T3170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.640542][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.713166][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.715123][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.716652][ T3170] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.716933][ T3170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.737162][ T3517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.739106][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.762670][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.794120][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.797005][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.818496][ T3516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.824446][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.827118][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.827570][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.869279][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.872499][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.882855][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.884849][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.895319][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.897257][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.920636][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.924083][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.947732][ T3515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.962401][ T3516] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.974520][ T3517] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.978824][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.980866][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.214899][ T3514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.238533][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.240426][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.242103][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.242367][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.244309][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.246268][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.247683][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.247951][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.249780][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.251569][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.253729][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.254009][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.255872][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.259129][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.353094][ T3564] Bluetooth: hci0: command 0x0419 tx timeout [ 182.358896][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.360974][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.363235][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.365958][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.368739][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.370675][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.372351][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.372628][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.374494][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.377888][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.378356][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.378790][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.382426][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.385138][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.387889][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.390590][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.408478][ T3514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.482060][ T3518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.483086][ T3564] Bluetooth: hci2: command 0x0419 tx timeout [ 182.483310][ T3564] Bluetooth: hci1: command 0x0419 tx timeout [ 182.485066][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.487895][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.490615][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.492962][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.495075][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.497764][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.500468][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.502588][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.504614][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.506625][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.508572][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.510549][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.526515][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.563387][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.622305][ T3564] Bluetooth: hci3: command 0x0419 tx timeout [ 182.622521][ T3564] Bluetooth: hci4: command 0x0419 tx timeout [ 182.667523][ T3518] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.673608][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.674127][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.674566][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.676586][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.688067][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.689966][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.691452][ T3170] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.691924][ T3170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.700431][ T3516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.720723][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.757503][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.759472][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.761010][ T3170] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.761290][ T3170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.763799][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.764253][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.776471][ T6] Bluetooth: hci5: command 0x0419 tx timeout [ 182.797329][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.854581][ T3517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.856893][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.935187][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.937938][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.940651][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.943581][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.998233][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.001265][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.004596][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.059067][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.061172][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.075244][ T3518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.308652][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.309156][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.429334][ T3518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.492105][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.494712][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.654265][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.656981][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.707128][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.709722][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.734594][ T3513] device veth0_vlan entered promiscuous mode [ 183.831876][ T3513] device veth1_vlan entered promiscuous mode [ 184.083467][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.085941][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.088307][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.090468][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.138241][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.140952][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.179326][ T3513] device veth0_macvtap entered promiscuous mode [ 184.227849][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.230358][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.233398][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.266134][ T3513] device veth1_macvtap entered promiscuous mode [ 184.270019][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.273076][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.275357][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.369242][ T3514] device veth0_vlan entered promiscuous mode [ 184.459564][ T3513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.470185][ T3514] device veth1_vlan entered promiscuous mode [ 184.475881][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.478345][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.546959][ T3513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.558050][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.560724][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.572792][ T3513] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.572966][ T3513] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.573129][ T3513] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.573297][ T3513] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.744820][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.747345][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.819146][ T3514] device veth0_macvtap entered promiscuous mode [ 184.844759][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.847161][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.849462][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.883522][ T3514] device veth1_macvtap entered promiscuous mode [ 184.886277][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.888703][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.891107][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.996081][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.998557][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.047650][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.050006][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.113887][ T3517] device veth0_vlan entered promiscuous mode [ 185.138243][ T3514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.138325][ T3514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.143141][ T3514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.162199][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.164706][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.167984][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.170458][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.189026][ T3517] device veth1_vlan entered promiscuous mode [ 185.198969][ T3514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.199042][ T3514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.203582][ T3514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.204568][ T3516] device veth0_vlan entered promiscuous mode [ 185.240087][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.243377][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.245706][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.247813][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.250004][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.252789][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.291440][ T3516] device veth1_vlan entered promiscuous mode [ 185.301367][ T3514] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.301543][ T3514] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.301919][ T3514] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.302077][ T3514] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.358861][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.361312][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.364203][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.366706][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.384860][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.387344][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.472134][ T3517] device veth0_macvtap entered promiscuous mode [ 185.539264][ T3517] device veth1_macvtap entered promiscuous mode [ 185.553549][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.556232][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.558667][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.561184][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.565100][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.567511][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.590014][ T3515] device veth0_vlan entered promiscuous mode [ 185.601356][ T3516] device veth0_macvtap entered promiscuous mode [ 185.609413][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.612445][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.614946][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.686820][ T3516] device veth1_macvtap entered promiscuous mode [ 185.711618][ T3515] device veth1_vlan entered promiscuous mode [ 185.744715][ T3517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.744793][ T3517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.744848][ T3517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.744912][ T3517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.749619][ T3517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.750289][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.753012][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.755406][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.757916][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.760387][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.788712][ T3517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.788789][ T3517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.788846][ T3517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.788911][ T3517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.793494][ T3517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.832551][ T3516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.832625][ T3516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.832680][ T3516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.832743][ T3516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.832787][ T3516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.832849][ T3516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.837344][ T3516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.855951][ T3517] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.856125][ T3517] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.856287][ T3517] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.856449][ T3517] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.868886][ T3516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.868960][ T3516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.869017][ T3516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.869081][ T3516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.869125][ T3516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.869190][ T3516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.873823][ T3516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.884228][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.886804][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.889227][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.892409][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.894785][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.897151][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.933670][ T3516] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.933841][ T3516] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.933997][ T3516] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.934155][ T3516] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.965122][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.967676][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.983958][ T3515] device veth0_macvtap entered promiscuous mode [ 186.052232][ T3515] device veth1_macvtap entered promiscuous mode [ 186.164467][ T3515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 186.164542][ T3515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.164601][ T3515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 186.164664][ T3515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.164716][ T3515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 186.164778][ T3515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.164819][ T3515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 186.164881][ T3515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.169240][ T3515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.169917][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.172776][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.175262][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.177723][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.217448][ T3515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.217524][ T3515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.217588][ T3515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.217654][ T3515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.217703][ T3515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.217768][ T3515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.217812][ T3515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.217875][ T3515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.222540][ T3515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.223191][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.225656][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.279595][ T3515] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.279781][ T3515] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.279945][ T3515] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.280109][ T3515] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.464429][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.467017][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.609560][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.612451][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.626653][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.629054][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.638728][ T3518] device veth0_vlan entered promiscuous mode [ 186.767380][ T3518] device veth1_vlan entered promiscuous mode [ 186.980193][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.983421][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.985877][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.988292][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.043717][ T3518] device veth0_macvtap entered promiscuous mode [ 187.109944][ T3518] device veth1_macvtap entered promiscuous mode [ 187.195191][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.195273][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.195325][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.195390][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.195434][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.195500][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.195546][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.195610][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.195651][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.195730][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.200607][ T3518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.201277][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.204255][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.206799][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.209225][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.231947][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.232020][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.232071][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.232136][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.232183][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.232249][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.232300][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.232366][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.232407][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.232468][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.236935][ T3518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.243936][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.246374][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.319853][ T3518] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.320030][ T3518] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.320195][ T3518] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.320365][ T3518] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.462258][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.462331][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.463447][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.671427][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.671500][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.675325][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.061487][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.061558][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.063844][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.198632][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.198703][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.199197][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 09:42:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000015c0)=0x3, 0x4) 09:42:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x1a0}]}) 09:42:47 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000140)={0x24, @long}, 0x14) [ 190.932835][ T1409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.932904][ T1409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.935904][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.060016][ T3731] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 191.090201][ T924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.090273][ T924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:42:48 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) [ 191.149624][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.236581][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.236654][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.237128][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.259074][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.259147][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:42:48 executing program 0: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001000)={'wlan0\x00'}) [ 191.259621][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.525880][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.525953][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.569378][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 09:42:48 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x8901, 0x0) [ 191.758160][ T1354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.758232][ T1354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.758708][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 09:42:48 executing program 2: socket(0x1d, 0x0, 0xfffffffa) 09:42:49 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f00000005c0)) 09:42:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "e766fc", 0xea}) 09:42:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x0, &(0x7f00000001c0)={0x77359400}) r4 = fsmount(0xffffffffffffffff, 0x1, 0xa) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="00000000789329a45d8d2e1a8998322913f38d1b08fd5b1de1566cabd394657d388d043facaaf3e76290d30d76ed55f9ab15ad7cb6877d3bf730c07b5bc0c68a205b8beab74d422072276a035f82612fb8b1ae57c41ebecef7b9fa764d37563772d6a109aa8c73f6e5bf5196ddad36", @ANYRES16=r5, @ANYBLOB="000125bd7000fbdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008c0002000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r7, @ANYBLOB="0e0001006e65746465766e657464657673696d30000008008c0002000000080001007063690011000200303030303a30303a313e2e300000000008008b000000000000a90784ea000000006d0b593234ac3a2d4365e0859c70b64932d1f2a95faf4cf55093ff3aa7c408325f0a69d047d270bab476308b23613860acf90897881bff6b570c5a35", @ANYRES32=r0, @ANYBLOB="08000100706369001100020030303030", @ANYRES32, @ANYBLOB], 0xcc}, 0x1, 0x0, 0x0, 0x8800}, 0x4) 09:42:49 executing program 0: r0 = io_uring_setup(0x2bb6, &(0x7f0000000100)={0x0, 0x0, 0x1}) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) [ 192.380357][ T1354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.380427][ T1354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.380905][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.592223][ T1409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.592294][ T1409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.593261][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.835025][ T25] audit: type=1804 audit(1656150169.889:2): pid=3764 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2282604573/syzkaller.e4gENt/3/bus" dev="sda1" ino=1164 res=1 errno=0 [ 192.835188][ T25] audit: type=1800 audit(1656150169.889:3): pid=3764 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1164 res=0 errno=0 09:42:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1af83ef026daf47a}, 0x6) 09:42:50 executing program 3: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) 09:42:50 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000015c0), 0x4) 09:42:50 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={0x0, 0x1950}, 0x1, 0x0, 0x7000000}, 0x0) 09:42:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[], 0xf}}, 0x0) 09:42:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)) 09:42:50 executing program 2: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) 09:42:50 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x302, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 09:42:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80001) write$evdev(r0, &(0x7f0000000180)=[{{}, 0x0, 0x6}], 0x18) 09:42:50 executing program 4: syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@logbsize={'logbsize', 0x3d, [0x38, 0x0]}}]}) [ 193.841822][ T3791] XFS (loop4): invalid logbufsize: 8 [not 16k,32k,64k,128k or 256k] [ 193.982314][ T3564] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 194.137280][ T3760] not chained 10000 origins [ 194.137302][ T3760] CPU: 1 PID: 3760 Comm: syz-executor.1 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 194.137347][ T3760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.137369][ T3760] Call Trace: [ 194.137382][ T3760] [ 194.137394][ T3760] dump_stack_lvl+0x1c8/0x256 [ 194.137464][ T3760] dump_stack+0x1a/0x1c [ 194.137518][ T3760] kmsan_internal_chain_origin+0x78/0x120 [ 194.137570][ T3760] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 194.137622][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 194.137671][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 194.137727][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 194.137777][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 194.137834][ T3760] ? __get_compat_msghdr+0x5b/0x750 [ 194.137896][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 194.137946][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 194.138008][ T3760] ? should_fail+0x3f/0x810 [ 194.138058][ T3760] ? __stack_depot_save+0x21/0x4b0 [ 194.138110][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 194.138161][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 194.138215][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 194.138270][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 194.138326][ T3760] __msan_chain_origin+0xbd/0x140 [ 194.138376][ T3760] __get_compat_msghdr+0x514/0x750 [ 194.138449][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 194.138511][ T3760] ? ___sys_recvmsg+0xa9/0x870 [ 194.138552][ T3760] ? do_recvmmsg+0x63a/0x10a0 [ 194.138596][ T3760] ___sys_recvmsg+0x19d/0x870 [ 194.138640][ T3760] ? __schedule+0x1609/0x21d0 [ 194.138685][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 194.138735][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 194.138790][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 194.138839][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 194.138895][ T3760] do_recvmmsg+0x63a/0x10a0 [ 194.138949][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 194.139006][ T3760] ? __sys_recvmmsg+0x52/0x450 [ 194.139046][ T3760] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 194.139098][ T3760] __sys_recvmmsg+0x113/0x450 [ 194.139138][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 194.139194][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 194.139257][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 194.139300][ T3760] ? exit_to_user_mode_prepare+0x119/0x220 [ 194.139352][ T3760] do_fast_syscall_32+0x33/0x70 [ 194.139395][ T3760] do_SYSENTER_32+0x1b/0x20 [ 194.139436][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 194.139504][ T3760] RIP: 0023:0xf7f09549 [ 194.139534][ T3760] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 194.139575][ T3760] RSP: 002b:00000000f7ee35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 194.139616][ T3760] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 194.139644][ T3760] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 194.139669][ T3760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.139693][ T3760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.139718][ T3760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.139755][ T3760] [ 194.139861][ T3760] Uninit was stored to memory at: [ 194.139926][ T3760] __get_compat_msghdr+0x514/0x750 [ 194.139986][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 194.140043][ T3760] ___sys_recvmsg+0x19d/0x870 [ 194.140081][ T3760] do_recvmmsg+0x63a/0x10a0 [ 194.140118][ T3760] __sys_recvmmsg+0x113/0x450 [ 194.140157][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 194.140202][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 194.140247][ T3760] do_fast_syscall_32+0x33/0x70 [ 194.140284][ T3760] do_SYSENTER_32+0x1b/0x20 [ 194.140321][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 194.140385][ T3760] [ 194.140391][ T3760] Uninit was stored to memory at: [ 194.140452][ T3760] __get_compat_msghdr+0x514/0x750 [ 194.140511][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 194.140568][ T3760] ___sys_recvmsg+0x19d/0x870 [ 194.140606][ T3760] do_recvmmsg+0x63a/0x10a0 [ 194.140644][ T3760] __sys_recvmmsg+0x113/0x450 [ 194.140683][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 194.140729][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 194.140769][ T3760] do_fast_syscall_32+0x33/0x70 [ 194.140807][ T3760] do_SYSENTER_32+0x1b/0x20 [ 194.140845][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 194.140910][ T3760] [ 194.140916][ T3760] Uninit was stored to memory at: [ 194.140978][ T3760] __get_compat_msghdr+0x514/0x750 [ 194.141037][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 194.141093][ T3760] ___sys_recvmsg+0x19d/0x870 [ 194.141130][ T3760] do_recvmmsg+0x63a/0x10a0 [ 194.141167][ T3760] __sys_recvmmsg+0x113/0x450 [ 194.141206][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 194.141260][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 194.141300][ T3760] do_fast_syscall_32+0x33/0x70 [ 194.141337][ T3760] do_SYSENTER_32+0x1b/0x20 [ 194.141374][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 194.141437][ T3760] [ 194.141443][ T3760] Uninit was stored to memory at: [ 194.141512][ T3760] __get_compat_msghdr+0x514/0x750 [ 194.141569][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 194.142065][ T3760] ___sys_recvmsg+0x19d/0x870 [ 194.142106][ T3760] do_recvmmsg+0x63a/0x10a0 [ 194.142143][ T3760] __sys_recvmmsg+0x113/0x450 [ 194.142181][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 194.142227][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 194.142274][ T3760] do_fast_syscall_32+0x33/0x70 [ 194.142311][ T3760] do_SYSENTER_32+0x1b/0x20 [ 194.142347][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 194.142412][ T3760] [ 194.142418][ T3760] Uninit was stored to memory at: [ 194.142480][ T3760] __get_compat_msghdr+0x514/0x750 [ 194.142539][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 194.142595][ T3760] ___sys_recvmsg+0x19d/0x870 [ 194.142632][ T3760] do_recvmmsg+0x63a/0x10a0 [ 194.142669][ T3760] __sys_recvmmsg+0x113/0x450 [ 194.142708][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 194.142755][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 194.142793][ T3760] do_fast_syscall_32+0x33/0x70 [ 194.142830][ T3760] do_SYSENTER_32+0x1b/0x20 [ 194.142866][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 194.142929][ T3760] [ 194.142935][ T3760] Uninit was stored to memory at: [ 194.142996][ T3760] __get_compat_msghdr+0x514/0x750 [ 194.143055][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 194.143111][ T3760] ___sys_recvmsg+0x19d/0x870 [ 194.143148][ T3760] do_recvmmsg+0x63a/0x10a0 [ 194.143186][ T3760] __sys_recvmmsg+0x113/0x450 [ 194.143225][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 194.143277][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 194.143316][ T3760] do_fast_syscall_32+0x33/0x70 [ 194.143352][ T3760] do_SYSENTER_32+0x1b/0x20 [ 194.143388][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 194.143451][ T3760] [ 194.143457][ T3760] Uninit was stored to memory at: [ 194.143519][ T3760] __get_compat_msghdr+0x514/0x750 [ 194.143576][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 194.143632][ T3760] ___sys_recvmsg+0x19d/0x870 [ 194.143670][ T3760] do_recvmmsg+0x63a/0x10a0 [ 194.143707][ T3760] __sys_recvmmsg+0x113/0x450 [ 194.143745][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 194.143790][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 194.143829][ T3760] do_fast_syscall_32+0x33/0x70 [ 194.143866][ T3760] do_SYSENTER_32+0x1b/0x20 [ 194.143904][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 194.143967][ T3760] [ 194.143974][ T3760] Local variable msg_sys created at: [ 194.143987][ T3760] do_recvmmsg+0x5f/0x10a0 [ 194.144021][ T3760] __sys_recvmmsg+0x113/0x450 [ 194.242055][ T3564] usb 4-1: Using ep0 maxpacket: 8 [ 194.453396][ T3564] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.532877][ T3564] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 194.712701][ T3564] usb 4-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.40 [ 194.712837][ T3564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.712942][ T3564] usb 4-1: Product: syz [ 194.713023][ T3564] usb 4-1: Manufacturer: syz [ 194.713107][ T3564] usb 4-1: SerialNumber: syz [ 194.875284][ T3564] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 195.084071][ T26] usb 4-1: USB disconnect, device number 2 [ 195.117810][ T3760] not chained 20000 origins [ 195.117833][ T3760] CPU: 1 PID: 3760 Comm: syz-executor.1 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 195.117879][ T3760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.117901][ T3760] Call Trace: [ 195.117914][ T3760] [ 195.117926][ T3760] dump_stack_lvl+0x1c8/0x256 [ 195.117996][ T3760] dump_stack+0x1a/0x1c [ 195.118051][ T3760] kmsan_internal_chain_origin+0x78/0x120 [ 195.118103][ T3760] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 195.118157][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 195.118218][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 195.118274][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 195.118324][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 195.118383][ T3760] ? __get_compat_msghdr+0x5b/0x750 [ 195.118446][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 195.118497][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 195.118555][ T3760] ? should_fail+0x3f/0x810 [ 195.118607][ T3760] ? __stack_depot_save+0x21/0x4b0 [ 195.118656][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 195.118706][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 195.118765][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 195.118815][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 195.118869][ T3760] __msan_chain_origin+0xbd/0x140 [ 195.118917][ T3760] __get_compat_msghdr+0x514/0x750 [ 195.118990][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 195.119049][ T3760] ? ___sys_recvmsg+0xa9/0x870 [ 195.119090][ T3760] ? do_recvmmsg+0x63a/0x10a0 [ 195.119132][ T3760] ___sys_recvmsg+0x19d/0x870 [ 195.119178][ T3760] ? __schedule+0x1609/0x21d0 [ 195.119224][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 195.119274][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 195.119329][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 195.119378][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 195.119435][ T3760] do_recvmmsg+0x63a/0x10a0 [ 195.119489][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 195.119546][ T3760] ? __sys_recvmmsg+0x52/0x450 [ 195.119587][ T3760] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.119640][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.119683][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 195.119745][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.119803][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 195.119846][ T3760] ? exit_to_user_mode_prepare+0x119/0x220 [ 195.119895][ T3760] do_fast_syscall_32+0x33/0x70 [ 195.119937][ T3760] do_SYSENTER_32+0x1b/0x20 [ 195.119977][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 195.120045][ T3760] RIP: 0023:0xf7f09549 [ 195.120073][ T3760] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 195.120115][ T3760] RSP: 002b:00000000f7ee35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 195.120157][ T3760] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 195.120186][ T3760] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 195.120212][ T3760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.120237][ T3760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.120263][ T3760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.120300][ T3760] [ 195.120312][ T3760] Uninit was stored to memory at: [ 195.120376][ T3760] __get_compat_msghdr+0x514/0x750 [ 195.120436][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 195.120493][ T3760] ___sys_recvmsg+0x19d/0x870 [ 195.120531][ T3760] do_recvmmsg+0x63a/0x10a0 [ 195.120569][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.120608][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.120655][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 195.120694][ T3760] do_fast_syscall_32+0x33/0x70 [ 195.120738][ T3760] do_SYSENTER_32+0x1b/0x20 [ 195.120775][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 195.120840][ T3760] [ 195.120846][ T3760] Uninit was stored to memory at: [ 195.120908][ T3760] __get_compat_msghdr+0x514/0x750 [ 195.120966][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 195.121024][ T3760] ___sys_recvmsg+0x19d/0x870 [ 195.121062][ T3760] do_recvmmsg+0x63a/0x10a0 [ 195.121099][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.121138][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.121184][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 195.121223][ T3760] do_fast_syscall_32+0x33/0x70 [ 195.121262][ T3760] do_SYSENTER_32+0x1b/0x20 [ 195.121300][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 195.121365][ T3760] [ 195.121371][ T3760] Uninit was stored to memory at: [ 195.121433][ T3760] __get_compat_msghdr+0x514/0x750 [ 195.121491][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 195.121548][ T3760] ___sys_recvmsg+0x19d/0x870 [ 195.121587][ T3760] do_recvmmsg+0x63a/0x10a0 [ 195.122236][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.122278][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.122325][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 195.122363][ T3760] do_fast_syscall_32+0x33/0x70 [ 195.122399][ T3760] do_SYSENTER_32+0x1b/0x20 [ 195.122434][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 195.122496][ T3760] [ 195.122502][ T3760] Uninit was stored to memory at: [ 195.122563][ T3760] __get_compat_msghdr+0x514/0x750 [ 195.122618][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 195.122676][ T3760] ___sys_recvmsg+0x19d/0x870 [ 195.122714][ T3760] do_recvmmsg+0x63a/0x10a0 [ 195.122758][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.122797][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.122843][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 195.122883][ T3760] do_fast_syscall_32+0x33/0x70 [ 195.122921][ T3760] do_SYSENTER_32+0x1b/0x20 [ 195.122958][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 195.123023][ T3760] [ 195.123029][ T3760] Uninit was stored to memory at: [ 195.123091][ T3760] __get_compat_msghdr+0x514/0x750 [ 195.123150][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 195.123207][ T3760] ___sys_recvmsg+0x19d/0x870 [ 195.123245][ T3760] do_recvmmsg+0x63a/0x10a0 [ 195.123282][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.123321][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.123367][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 195.123406][ T3760] do_fast_syscall_32+0x33/0x70 [ 195.123444][ T3760] do_SYSENTER_32+0x1b/0x20 [ 195.123481][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 195.123546][ T3760] [ 195.123551][ T3760] Uninit was stored to memory at: [ 195.123613][ T3760] __get_compat_msghdr+0x514/0x750 [ 195.123670][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 195.123727][ T3760] ___sys_recvmsg+0x19d/0x870 [ 195.123771][ T3760] do_recvmmsg+0x63a/0x10a0 [ 195.123809][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.123848][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.123894][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 195.123934][ T3760] do_fast_syscall_32+0x33/0x70 [ 195.123972][ T3760] do_SYSENTER_32+0x1b/0x20 [ 195.124009][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 195.124074][ T3760] [ 195.124079][ T3760] Uninit was stored to memory at: [ 195.124142][ T3760] __get_compat_msghdr+0x514/0x750 [ 195.124201][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 195.124258][ T3760] ___sys_recvmsg+0x19d/0x870 [ 195.124296][ T3760] do_recvmmsg+0x63a/0x10a0 [ 195.124334][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.124372][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.124418][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 195.124458][ T3760] do_fast_syscall_32+0x33/0x70 [ 195.124496][ T3760] do_SYSENTER_32+0x1b/0x20 [ 195.124533][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 195.124597][ T3760] [ 195.124604][ T3760] Local variable msg_sys created at: [ 195.124617][ T3760] do_recvmmsg+0x5f/0x10a0 [ 195.124652][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.539107][ T3760] not chained 30000 origins [ 195.539129][ T3760] CPU: 1 PID: 3760 Comm: syz-executor.1 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 195.539177][ T3760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.539200][ T3760] Call Trace: [ 195.539213][ T3760] [ 195.539227][ T3760] dump_stack_lvl+0x1c8/0x256 [ 195.539297][ T3760] dump_stack+0x1a/0x1c [ 195.539352][ T3760] kmsan_internal_chain_origin+0x78/0x120 [ 195.539406][ T3760] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 195.539460][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 195.539515][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 195.539573][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 195.539625][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 195.539685][ T3760] ? __get_compat_msghdr+0x5b/0x750 [ 195.539750][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 195.539808][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 195.539868][ T3760] ? should_fail+0x3f/0x810 [ 195.539921][ T3760] ? __stack_depot_save+0x21/0x4b0 [ 195.539970][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 195.540022][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 195.540079][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 195.540131][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 195.540188][ T3760] __msan_chain_origin+0xbd/0x140 [ 195.540240][ T3760] __get_compat_msghdr+0x514/0x750 [ 195.540316][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 195.540380][ T3760] ? ___sys_recvmsg+0xa9/0x870 [ 195.540422][ T3760] ? do_recvmmsg+0x63a/0x10a0 [ 195.540467][ T3760] ___sys_recvmsg+0x19d/0x870 [ 195.540515][ T3760] ? __schedule+0x1609/0x21d0 [ 195.540564][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 195.540615][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 195.540671][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 195.540723][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 195.540786][ T3760] do_recvmmsg+0x63a/0x10a0 [ 195.540841][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 195.540902][ T3760] ? __sys_recvmmsg+0x52/0x450 [ 195.540944][ T3760] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.540999][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.541041][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 195.541099][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.541158][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 195.541202][ T3760] ? exit_to_user_mode_prepare+0x119/0x220 [ 195.541258][ T3760] do_fast_syscall_32+0x33/0x70 [ 195.541302][ T3760] do_SYSENTER_32+0x1b/0x20 [ 195.541344][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 195.541415][ T3760] RIP: 0023:0xf7f09549 [ 195.541446][ T3760] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 195.541488][ T3760] RSP: 002b:00000000f7ee35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 195.541529][ T3760] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 195.541561][ T3760] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 195.541587][ T3760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.541613][ T3760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.541639][ T3760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.541677][ T3760] [ 195.542069][ T3760] Uninit was stored to memory at: [ 195.542137][ T3760] __get_compat_msghdr+0x514/0x750 [ 195.542198][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 195.542258][ T3760] ___sys_recvmsg+0x19d/0x870 [ 195.542298][ T3760] do_recvmmsg+0x63a/0x10a0 [ 195.542337][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.542377][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.542426][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 195.542467][ T3760] do_fast_syscall_32+0x33/0x70 [ 195.542506][ T3760] do_SYSENTER_32+0x1b/0x20 [ 195.542545][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 195.542612][ T3760] [ 195.542619][ T3760] Uninit was stored to memory at: [ 195.542684][ T3760] __get_compat_msghdr+0x514/0x750 [ 195.542744][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 195.542812][ T3760] ___sys_recvmsg+0x19d/0x870 [ 195.542851][ T3760] do_recvmmsg+0x63a/0x10a0 [ 195.542891][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.542930][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.542979][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 195.543020][ T3760] do_fast_syscall_32+0x33/0x70 [ 195.543059][ T3760] do_SYSENTER_32+0x1b/0x20 [ 195.543098][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 195.543165][ T3760] [ 195.543171][ T3760] Uninit was stored to memory at: [ 195.543236][ T3760] __get_compat_msghdr+0x514/0x750 [ 195.543296][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 195.543355][ T3760] ___sys_recvmsg+0x19d/0x870 [ 195.543394][ T3760] do_recvmmsg+0x63a/0x10a0 [ 195.543433][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.543473][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.543521][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 195.543562][ T3760] do_fast_syscall_32+0x33/0x70 [ 195.543601][ T3760] do_SYSENTER_32+0x1b/0x20 [ 195.543640][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 195.543716][ T3760] [ 195.543722][ T3760] Uninit was stored to memory at: [ 195.543793][ T3760] __get_compat_msghdr+0x514/0x750 [ 195.543853][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 195.543912][ T3760] ___sys_recvmsg+0x19d/0x870 [ 195.543951][ T3760] do_recvmmsg+0x63a/0x10a0 [ 195.543990][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.544030][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.544078][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 195.544119][ T3760] do_fast_syscall_32+0x33/0x70 [ 195.544158][ T3760] do_SYSENTER_32+0x1b/0x20 [ 195.544197][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 195.544264][ T3760] [ 195.544270][ T3760] Uninit was stored to memory at: [ 195.544334][ T3760] __get_compat_msghdr+0x514/0x750 [ 195.544395][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 195.544454][ T3760] ___sys_recvmsg+0x19d/0x870 [ 195.544494][ T3760] do_recvmmsg+0x63a/0x10a0 [ 195.544533][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.544573][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.544621][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 195.544662][ T3760] do_fast_syscall_32+0x33/0x70 [ 195.544702][ T3760] do_SYSENTER_32+0x1b/0x20 [ 195.544740][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 195.544812][ T3760] [ 195.544818][ T3760] Uninit was stored to memory at: [ 195.544883][ T3760] __get_compat_msghdr+0x514/0x750 [ 195.544943][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 195.545002][ T3760] ___sys_recvmsg+0x19d/0x870 [ 195.545042][ T3760] do_recvmmsg+0x63a/0x10a0 [ 195.545081][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.545122][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.545170][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 195.545210][ T3760] do_fast_syscall_32+0x33/0x70 [ 195.545250][ T3760] do_SYSENTER_32+0x1b/0x20 [ 195.545288][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 195.545355][ T3760] [ 195.545361][ T3760] Uninit was stored to memory at: [ 195.545425][ T3760] __get_compat_msghdr+0x514/0x750 [ 195.545483][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 195.545541][ T3760] ___sys_recvmsg+0x19d/0x870 [ 195.545579][ T3760] do_recvmmsg+0x63a/0x10a0 [ 195.545618][ T3760] __sys_recvmmsg+0x113/0x450 [ 195.545658][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 195.545706][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 195.545747][ T3760] do_fast_syscall_32+0x33/0x70 [ 195.545792][ T3760] do_SYSENTER_32+0x1b/0x20 [ 195.545831][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 195.545898][ T3760] [ 195.545905][ T3760] Local variable msg_sys created at: [ 195.545918][ T3760] do_recvmmsg+0x5f/0x10a0 [ 195.545954][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.161314][ T3760] not chained 40000 origins [ 196.161335][ T3760] CPU: 1 PID: 3760 Comm: syz-executor.1 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 196.161382][ T3760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.161405][ T3760] Call Trace: [ 196.161418][ T3760] [ 196.161430][ T3760] dump_stack_lvl+0x1c8/0x256 [ 196.161501][ T3760] dump_stack+0x1a/0x1c [ 196.161557][ T3760] kmsan_internal_chain_origin+0x78/0x120 [ 196.161611][ T3760] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 196.161671][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.161724][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 196.161783][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.161835][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 196.161897][ T3760] ? __get_compat_msghdr+0x5b/0x750 [ 196.161962][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.162015][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 196.162075][ T3760] ? should_fail+0x3f/0x810 [ 196.162128][ T3760] ? __stack_depot_save+0x21/0x4b0 [ 196.162178][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.162231][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 196.162296][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.162349][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 196.162406][ T3760] __msan_chain_origin+0xbd/0x140 [ 196.162459][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.162536][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.162601][ T3760] ? ___sys_recvmsg+0xa9/0x870 [ 196.162643][ T3760] ? do_recvmmsg+0x63a/0x10a0 [ 196.162690][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.162738][ T3760] ? __schedule+0x1609/0x21d0 [ 196.162786][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.162839][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 196.162896][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.162948][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 196.163009][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.163065][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 196.163126][ T3760] ? __sys_recvmmsg+0x52/0x450 [ 196.163169][ T3760] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.163225][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.163273][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.163332][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.163392][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.163437][ T3760] ? exit_to_user_mode_prepare+0x119/0x220 [ 196.163490][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.163534][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.163576][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.163649][ T3760] RIP: 0023:0xf7f09549 [ 196.163679][ T3760] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 196.163722][ T3760] RSP: 002b:00000000f7ee35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 196.163764][ T3760] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 196.163795][ T3760] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 196.163822][ T3760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.163848][ T3760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.163874][ T3760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.163912][ T3760] [ 196.164266][ T3760] Uninit was stored to memory at: [ 196.164333][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.164395][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.164454][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.164494][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.164533][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.164573][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.164621][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.164662][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.164701][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.164740][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.164807][ T3760] [ 196.164813][ T3760] Uninit was stored to memory at: [ 196.164878][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.164938][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.164998][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.165038][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.165077][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.165117][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.165165][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.165206][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.165245][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.165288][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.165356][ T3760] [ 196.165362][ T3760] Uninit was stored to memory at: [ 196.165428][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.165489][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.165549][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.165588][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.165628][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.165669][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.165717][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.165758][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.165798][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.165836][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.165904][ T3760] [ 196.165910][ T3760] Uninit was stored to memory at: [ 196.165975][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.166036][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.166095][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.166135][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.166174][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.166214][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.166268][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.166309][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.166348][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.166387][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.166454][ T3760] 09:42:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:42:54 executing program 0: ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000200)={0x0, 0x0, "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", "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"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001240), 0xc, &(0x7f0000001640)={&(0x7f00000012c0)={0xac, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x4}, {0xb, 0x0, @random="be07a3b0541c6f"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0x6d, 0x2a, [@perr={0x84, 0x3c, {0x0, 0x4, [@not_ext={{}, @device_a, 0x0, "", 0x12}, @not_ext={{}, @device_b, 0x6}, @ext={{}, @device_b, 0x0, @device_b}, @not_ext={{}, @device_b}]}}, @measure_req={0x26, 0x3}, @random_vendor={0xdd, 0x6, "875e6723c3fc"}, @random, @ht={0x2d, 0x1a, {0x0, 0x0, 0x1, 0x0, {}, 0x0, 0x3}}]}, @NL80211_ATTR_SCAN_FLAGS={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001740), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket(0x1d, 0x0, 0x0) 09:42:54 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x1) 09:42:54 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={0x0, 0x7ffffffb}}, 0x0) 09:42:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='%#\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x14}}, 0x0) 09:42:54 executing program 3: socket(0x29, 0x2, 0x2) [ 196.166460][ T3760] Uninit was stored to memory at: [ 196.166525][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.166586][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.166645][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.166685][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.166722][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.166762][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.166810][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.166852][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.166892][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.166931][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.166998][ T3760] [ 196.167004][ T3760] Uninit was stored to memory at: [ 196.167069][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.167130][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.167189][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.167229][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.167276][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.167317][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.167366][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.167406][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.167446][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.167485][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.167552][ T3760] [ 196.167558][ T3760] Uninit was stored to memory at: [ 196.167623][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.167684][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.167743][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.167783][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.167821][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.167862][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.167910][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.167951][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.167990][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.168029][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.168096][ T3760] [ 196.168103][ T3760] Local variable msg_sys created at: [ 196.168116][ T3760] do_recvmmsg+0x5f/0x10a0 [ 196.168152][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.586726][ T3760] not chained 50000 origins [ 196.586748][ T3760] CPU: 1 PID: 3760 Comm: syz-executor.1 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 196.586795][ T3760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.586818][ T3760] Call Trace: [ 196.586832][ T3760] [ 196.586845][ T3760] dump_stack_lvl+0x1c8/0x256 [ 196.586916][ T3760] dump_stack+0x1a/0x1c [ 196.586972][ T3760] kmsan_internal_chain_origin+0x78/0x120 [ 196.587027][ T3760] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 196.587083][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.587134][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 196.587193][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.587245][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 196.587311][ T3760] ? __get_compat_msghdr+0x5b/0x750 [ 196.587377][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.587429][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 196.587489][ T3760] ? should_fail+0x3f/0x810 [ 196.587541][ T3760] ? __stack_depot_save+0x21/0x4b0 [ 196.587591][ T3760] ? kmsan_get_metadata+0x33/0x220 09:42:54 executing program 2: r0 = socket(0x18, 0x0, 0x2) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 196.587648][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 196.587706][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.587758][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 196.587815][ T3760] __msan_chain_origin+0xbd/0x140 [ 196.587867][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.587943][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.588008][ T3760] ? ___sys_recvmsg+0xa9/0x870 [ 196.588051][ T3760] ? do_recvmmsg+0x63a/0x10a0 [ 196.588097][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.588144][ T3760] ? __schedule+0x1609/0x21d0 [ 196.588192][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.588244][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 196.588301][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.588357][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 196.588417][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.588471][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 196.588531][ T3760] ? __sys_recvmmsg+0x52/0x450 [ 196.588573][ T3760] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.588628][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.588670][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.588728][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.588787][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.588831][ T3760] ? exit_to_user_mode_prepare+0x119/0x220 [ 196.588884][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.588928][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.588969][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.589040][ T3760] RIP: 0023:0xf7f09549 [ 196.589070][ T3760] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 196.589113][ T3760] RSP: 002b:00000000f7ee35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 196.589154][ T3760] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 196.589185][ T3760] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 196.589211][ T3760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.589237][ T3760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.589263][ T3760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.589300][ T3760] [ 196.589318][ T3760] Uninit was stored to memory at: [ 196.589384][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.589447][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.589506][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.589546][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.589585][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.589625][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.589674][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.589714][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.589754][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.589792][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.589859][ T3760] [ 196.589865][ T3760] Uninit was stored to memory at: [ 196.589930][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.589990][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.590049][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.590089][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.590128][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.590168][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.590216][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.590256][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.590296][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.590356][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.590424][ T3760] [ 196.590430][ T3760] Uninit was stored to memory at: [ 196.590494][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.590554][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.590614][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.590653][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.590692][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.590732][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.590781][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.590822][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.590861][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.590900][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.590967][ T3760] [ 196.590973][ T3760] Uninit was stored to memory at: [ 196.591038][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.591098][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.591158][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.591197][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.591236][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.591277][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.591331][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.591372][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.591411][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.591449][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.591521][ T3760] [ 196.591528][ T3760] Uninit was stored to memory at: [ 196.591592][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.591983][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.592043][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.592083][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.592122][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.592162][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.592211][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.592251][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.592291][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.592336][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.592409][ T3760] [ 196.592415][ T3760] Uninit was stored to memory at: [ 196.592480][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.592541][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.592601][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.592640][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.592680][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.592720][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.592767][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.592807][ T3760] do_fast_syscall_32+0x33/0x70 09:42:55 executing program 5: r0 = socket(0x18, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xf0ff7f00000000}}, 0x0) [ 196.592845][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.592882][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.592950][ T3760] [ 196.592956][ T3760] Uninit was stored to memory at: [ 196.593021][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.593081][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.593140][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.593179][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.593219][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.593258][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.593312][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.593352][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.593392][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.593430][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.593497][ T3760] [ 196.593504][ T3760] Local variable msg_sys created at: [ 196.593517][ T3760] do_recvmmsg+0x5f/0x10a0 [ 196.593553][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.886065][ T3760] not chained 60000 origins [ 196.886087][ T3760] CPU: 1 PID: 3760 Comm: syz-executor.1 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 196.886134][ T3760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.886158][ T3760] Call Trace: [ 196.886172][ T3760] [ 196.886186][ T3760] dump_stack_lvl+0x1c8/0x256 [ 196.886257][ T3760] dump_stack+0x1a/0x1c [ 196.886317][ T3760] kmsan_internal_chain_origin+0x78/0x120 [ 196.886371][ T3760] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 196.886427][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.886479][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 196.886538][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.886590][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 196.886654][ T3760] ? __get_compat_msghdr+0x5b/0x750 [ 196.886719][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.886771][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 196.886831][ T3760] ? should_fail+0x3f/0x810 [ 196.886884][ T3760] ? __stack_depot_save+0x21/0x4b0 [ 196.886934][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.886986][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 196.887044][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.887096][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 196.887154][ T3760] __msan_chain_origin+0xbd/0x140 [ 196.887206][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.887283][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.887351][ T3760] ? ___sys_recvmsg+0xa9/0x870 [ 196.887394][ T3760] ? do_recvmmsg+0x63a/0x10a0 [ 196.887440][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.887488][ T3760] ? __schedule+0x1609/0x21d0 [ 196.887537][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.887589][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 196.887646][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.887698][ T3760] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 196.887758][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.887813][ T3760] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 196.887874][ T3760] ? __sys_recvmmsg+0x52/0x450 [ 196.887916][ T3760] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.887971][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.888014][ T3760] ? kmsan_get_metadata+0x33/0x220 [ 196.888072][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.888131][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.888175][ T3760] ? exit_to_user_mode_prepare+0x119/0x220 [ 196.888228][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.888272][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.888319][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.888390][ T3760] RIP: 0023:0xf7f09549 [ 196.888419][ T3760] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 196.888462][ T3760] RSP: 002b:00000000f7ee35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 196.888503][ T3760] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 196.888534][ T3760] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 196.888561][ T3760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.888586][ T3760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.888612][ T3760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:42:55 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x300}, 0x0) [ 196.888650][ T3760] [ 196.888663][ T3760] Uninit was stored to memory at: [ 196.888729][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.888790][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.888850][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.888890][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.888929][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.888969][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.889018][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.889059][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.889098][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.889137][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.889204][ T3760] [ 196.889211][ T3760] Uninit was stored to memory at: [ 196.889276][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.889342][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.889402][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.889441][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.889480][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.889521][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.889569][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.889609][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.889649][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.889688][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.889755][ T3760] [ 196.889761][ T3760] Uninit was stored to memory at: [ 196.889826][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.889887][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.889946][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.889986][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.890025][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.890065][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.890114][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.890155][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.890194][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.890233][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.890301][ T3760] [ 196.890311][ T3760] Uninit was stored to memory at: [ 196.890376][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.890437][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.890497][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.890537][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.890576][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.890616][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.890666][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.890707][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.890747][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.890785][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.890853][ T3760] [ 196.890859][ T3760] Uninit was stored to memory at: [ 196.890924][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.890985][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.891050][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.891090][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.891129][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.891170][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.891218][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.891259][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.891299][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.891342][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.891410][ T3760] [ 196.891416][ T3760] Uninit was stored to memory at: [ 196.891481][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.891542][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.891601][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.891844][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.891884][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.891924][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.891972][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.892013][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.892053][ T3760] do_SYSENTER_32+0x1b/0x20 09:42:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000000)='\x13\xbc\xef\rt\x81`#N\xcf\xb8VZ\xd51\xe1\xfcq\xf1\xd2\xa2\x86QQv\"\xcf\xfd\xabb\xcd\x11\xb2\x8a\xa3\xa6\xc3D\x8b\xd1\x17%\x95\xab\xb6\xbf\x91=\x00'/59, 0x7) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) [ 196.892091][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.892159][ T3760] [ 196.892165][ T3760] Uninit was stored to memory at: [ 196.892229][ T3760] __get_compat_msghdr+0x514/0x750 [ 196.892290][ T3760] get_compat_msghdr+0x8c/0x1c0 [ 196.892354][ T3760] ___sys_recvmsg+0x19d/0x870 [ 196.892394][ T3760] do_recvmmsg+0x63a/0x10a0 [ 196.892433][ T3760] __sys_recvmmsg+0x113/0x450 [ 196.892473][ T3760] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 196.892521][ T3760] __do_fast_syscall_32+0x95/0xf0 [ 196.892562][ T3760] do_fast_syscall_32+0x33/0x70 [ 196.892601][ T3760] do_SYSENTER_32+0x1b/0x20 [ 196.892640][ T3760] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 196.892707][ T3760] [ 196.892714][ T3760] Local variable msg_sys created at: [ 196.892727][ T3760] do_recvmmsg+0x5f/0x10a0 [ 196.892763][ T3760] __sys_recvmmsg+0x113/0x450 [ 198.143539][ T3796] can: request_module (can-proto-0) failed. 09:42:56 executing program 2: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:42:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x38}, 0x1, 0x0, 0x3f00}, 0x0) 09:42:56 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={0x0, 0x1950}}, 0x7) 09:42:56 executing program 1: pipe2(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 09:42:56 executing program 5: r0 = socket(0x18, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xf0ff7f00000000}}, 0x0) 09:42:56 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001000404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad5000000000000000063910000000000000000000000000173292f17cee1e060307f7ebd3093cbe196db769d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xe, 0x0, &(0x7f00000000c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0x2a020000}, 0x28) 09:42:56 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x8903, 0x0) 09:42:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[], 0x7ffffffff000}}, 0x0) 09:42:56 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x894c, 0x0) 09:42:56 executing program 2: socket(0x2, 0x1, 0x106) 09:42:56 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000200)) 09:42:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x33fe0}}, 0x0) 09:42:57 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x751880, 0x0) 09:42:57 executing program 2: r0 = io_uring_setup(0x2bb6, &(0x7f0000000080)) io_uring_enter(r0, 0x0, 0xeed5, 0x3, &(0x7f0000000140), 0x8) 09:42:57 executing program 1: r0 = socket(0x18, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 09:42:57 executing program 5: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 09:42:57 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000001200), 0xffffffffffffffff) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000001540), 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) 09:42:57 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0xc0189436, 0x0) 09:42:57 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) 09:42:57 executing program 1: socket$packet(0x11, 0x2, 0x300) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) 09:42:57 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00ff030000000905000000000006000904"], 0x0) 09:42:57 executing program 3: r0 = socket(0x2b, 0x1, 0x0) connect$pppl2tp(r0, 0x0, 0x0) 09:42:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:42:58 executing program 1: syz_io_uring_setup(0x4e31, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) syz_io_uring_setup(0x5a59, &(0x7f0000000140)={0x0, 0xa3c1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 09:42:58 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x80108906, 0x0) [ 201.092183][ T115] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 201.241867][ C1] hrtimer: interrupt took 292638 ns [ 201.332278][ T115] usb 6-1: Using ep0 maxpacket: 8 09:42:58 executing program 2: r0 = io_uring_setup(0x3bf1, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 09:42:58 executing program 3: mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000), &(0x7f0000000040)=0x10) 09:42:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:42:58 executing program 1: open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) [ 201.455743][ T115] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 2 09:42:58 executing program 0: socket(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) 09:42:58 executing program 3: r0 = socket(0x11, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 09:42:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) [ 201.613543][ T115] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 201.613676][ T115] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.613778][ T115] usb 6-1: Product: syz [ 201.613864][ T115] usb 6-1: Manufacturer: syz [ 201.613945][ T115] usb 6-1: SerialNumber: syz [ 201.678779][ T115] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 201.678861][ T115] dvb-usb: bulk message failed: -22 (2/0) [ 201.678921][ T115] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 201.710490][ T115] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 201.710787][ T115] usb 6-1: media controller created [ 201.714583][ T115] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.754938][ T115] usb 6-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 201.755119][ T115] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 201.951967][ T3878] Zero length message leads to an empty skb [ 202.182820][ T115] rc_core: IR keymap rc-dtt200u not found [ 202.182872][ T115] Registered IR keymap rc-empty [ 202.184240][ T115] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 202.186410][ T115] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input5 [ 202.197626][ T115] dvb-usb: schedule remote query interval to 300 msecs. [ 202.197687][ T115] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 202.201965][ T115] usb 6-1: USB disconnect, device number 2 [ 202.326273][ T115] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. 09:42:59 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00ff030000000905000000000006000904"], 0x0) 09:42:59 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000001080), 0x4) 09:42:59 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='tails=of']) 09:42:59 executing program 2: symlinkat(&(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0) 09:42:59 executing program 3: symlinkat(&(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 09:42:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:42:59 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000002380), 0x100000000000029c) 09:42:59 executing program 1: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) chown(&(0x7f00000000c0)='./file1\x00', 0x0, 0xffffffffffffffff) 09:42:59 executing program 2: setitimer(0x0, &(0x7f0000000100)={{0x0, 0xffffffffffffffc0}}, 0x0) [ 202.588862][ T3886] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "of" for option "tails" [ 202.588862][ T3886] 09:42:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:42:59 executing program 0: madvise(&(0x7f0000fa0000/0x3000)=nil, 0x3000, 0xa) 09:43:00 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x80, 0x0, 0x0) [ 203.132364][ T26] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 203.380281][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 203.492976][ T26] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 203.652123][ T26] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 203.652345][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.652448][ T26] usb 6-1: Product: syz [ 203.652529][ T26] usb 6-1: Manufacturer: syz [ 203.652611][ T26] usb 6-1: SerialNumber: syz [ 203.728743][ T26] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 203.728811][ T26] dvb-usb: bulk message failed: -22 (2/0) [ 203.728872][ T26] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 203.753023][ T26] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 203.753138][ T26] usb 6-1: media controller created [ 203.836909][ T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.855549][ T26] usb 6-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 203.855736][ T26] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 204.183568][ T26] rc_core: IR keymap rc-dtt200u not found [ 204.183618][ T26] Registered IR keymap rc-empty [ 204.212732][ T26] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 204.214886][ T26] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input6 [ 204.233133][ T26] dvb-usb: schedule remote query interval to 300 msecs. [ 204.233189][ T26] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 204.245972][ T26] usb 6-1: USB disconnect, device number 3 [ 204.409844][ T26] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. 09:43:01 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00ff030000000905000000000006000904"], 0x0) 09:43:01 executing program 0: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) 09:43:01 executing program 1: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) lchown(&(0x7f00000004c0)='./file0\x00', 0x0, 0xffffffffffffffff) 09:43:01 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000001080), 0x4) 09:43:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:43:01 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x1, 0x0) 09:43:01 executing program 1: open$dir(0xfffffffffffffffe, 0x0, 0x0) 09:43:01 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f0000001080), 0x4) 09:43:01 executing program 0: mlock(&(0x7f0000001000/0x2000)=nil, 0x2000) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) 09:43:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:43:01 executing program 2: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 09:43:02 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in={0x2, 0x2}, 0x1) [ 205.172150][ T115] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 205.411901][ T115] usb 6-1: Using ep0 maxpacket: 8 [ 205.532096][ T115] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 205.702423][ T115] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 205.702558][ T115] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.702661][ T115] usb 6-1: Product: syz [ 205.702742][ T115] usb 6-1: Manufacturer: syz [ 205.702823][ T115] usb 6-1: SerialNumber: syz [ 205.761810][ T115] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 205.761878][ T115] dvb-usb: bulk message failed: -22 (2/0) [ 205.761937][ T115] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 205.782865][ T115] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 205.782985][ T115] usb 6-1: media controller created [ 205.813000][ T115] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.829624][ T115] usb 6-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 205.829797][ T115] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 205.941933][ T115] rc_core: IR keymap rc-dtt200u not found [ 205.941983][ T115] Registered IR keymap rc-empty [ 205.943101][ T115] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 205.945089][ T115] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input7 [ 205.947280][ T115] dvb-usb: schedule remote query interval to 300 msecs. [ 205.947336][ T115] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 206.049388][ T115] usb 6-1: USB disconnect, device number 4 [ 206.104840][ T115] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. 09:43:03 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00ff030000000905000000000006000904"], 0x0) 09:43:03 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000080)) 09:43:03 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:43:03 executing program 0: mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) setsockopt$sock_int(r1, 0xffff, 0x1004, &(0x7f0000000000), 0x4) 09:43:03 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, 0x0, 0x0) 09:43:03 executing program 1: mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 09:43:03 executing program 2: mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 09:43:03 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040), 0x10) 09:43:03 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:43:03 executing program 1: mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0) 09:43:03 executing program 3: r0 = getpgid(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) fcntl$setown(r1, 0x6, r0) fcntl$setown(r1, 0x6, r0) 09:43:04 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000003000/0x3000)=nil, 0x300, 0x0) [ 207.122273][ T26] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 207.362297][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 207.483206][ T26] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 207.643010][ T26] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 207.643144][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.643249][ T26] usb 6-1: Product: syz [ 207.643337][ T26] usb 6-1: Manufacturer: syz [ 207.643418][ T26] usb 6-1: SerialNumber: syz [ 207.728938][ T26] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 207.729005][ T26] dvb-usb: bulk message failed: -22 (2/0) [ 207.729066][ T26] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 207.743326][ T26] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 207.743442][ T26] usb 6-1: media controller created [ 207.763188][ T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.832771][ T26] usb 6-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 207.832943][ T26] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 207.952261][ T26] rc_core: IR keymap rc-dtt200u not found [ 207.952312][ T26] Registered IR keymap rc-empty [ 207.953721][ T26] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 207.955769][ T26] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input8 [ 207.961053][ T26] dvb-usb: schedule remote query interval to 300 msecs. [ 207.961111][ T26] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 207.968293][ T26] usb 6-1: USB disconnect, device number 5 [ 208.061199][ T26] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 208.083354][ T3738] udevd[3738]: setting owner of /dev/bus/usb/006/005 to uid=0, gid=0 failed: No such file or directory 09:43:05 executing program 5: 09:43:05 executing program 1: setitimer(0x0, &(0x7f0000000100)={{0xc600000000000000}}, 0x0) 09:43:05 executing program 0: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) 09:43:05 executing program 3: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 09:43:05 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:43:05 executing program 2: symlinkat(&(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) 09:43:05 executing program 1: open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x200, 0x0) 09:43:05 executing program 0: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2) 09:43:05 executing program 3: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 09:43:05 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:43:05 executing program 2: setitimer(0x0, &(0x7f00000000c0)={{}, {0x9a}}, 0x0) setitimer(0x0, &(0x7f0000000140), &(0x7f0000000180)) 09:43:05 executing program 5: 09:43:06 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x3}, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x7}, &(0x7f0000000080)={0x1}, &(0x7f00000000c0)={0xec}, 0x0) 09:43:06 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1004, 0x0, 0x0) 09:43:06 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:43:06 executing program 3: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6) 09:43:06 executing program 2: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 09:43:06 executing program 5: 09:43:06 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:43:06 executing program 3: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) select(0x40, &(0x7f0000000040)={0xffff}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x4}, 0x0, 0x0) 09:43:06 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001, 0xffffffffffffffff}) syz_open_pts(0xffffffffffffffff, 0x0) 09:43:06 executing program 2: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) r0 = getgid() lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r0) 09:43:06 executing program 1: utimensat(0xffffffffffffffff, 0x0, 0x0, 0x8bde0e86792495d5) 09:43:06 executing program 5: syz_usb_connect(0x0, 0x48, 0x0, 0x0) 09:43:06 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:43:07 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, &(0x7f0000000300)={'batadv_slave_0\x00'}) 09:43:07 executing program 2: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x4, 0x0) mbind(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) 09:43:07 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = getpgid(0x0) sendmsg$unix(r0, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x40}, 0x0) 09:43:07 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0xc2242, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc028660f, 0x0) [ 210.204321][ T4011] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 210.220395][ T4011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 09:43:07 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:43:07 executing program 2: socket$inet(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x9}, 0x0, 0x0) 09:43:07 executing program 5: syz_usb_connect(0x0, 0x48, 0x0, 0x0) 09:43:07 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x1}, 0xfffffd34, 0x0, 0xc, &(0x7f0000000040)=[{0x28, 0x0, 0x0, "dd2506a3032b85e4e7f475e48682be364332"}, {0x10}], 0x38}, 0x404) 09:43:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback=0x7f000002, @loopback}}}], 0x20}, 0x0) 09:43:07 executing program 3: r0 = socket(0xa, 0x1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000040)=0x1c) 09:43:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x65, 0x0, 0x0) 09:43:07 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:43:08 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x2, &(0x7f00000015c0)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:08 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@raw=[@exit, @call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xb7, &(0x7f0000000080)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:08 executing program 3: mq_open(&(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0, 0x0) 09:43:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x17, 0x0, 0x0}) 09:43:08 executing program 5: syz_usb_connect(0x0, 0x48, 0x0, 0x0) 09:43:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:43:08 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x3}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000140)=""/242, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 09:43:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x6f, 0x0, &(0x7f0000000080)) 09:43:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x72, &(0x7f0000000000), &(0x7f0000000040)=0xe) 09:43:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:43:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x30, 0x0, 0x1d) 09:43:08 executing program 1: fanotify_mark(0xffffffffffffffff, 0x3d, 0x0, 0xffffffffffffffff, 0x0) 09:43:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x71, 0x0, 0x14}]}}, &(0x7f0000000100)=""/157, 0x2a, 0x9d, 0x1}, 0x20) 09:43:09 executing program 2: syz_io_uring_setup(0x50c6, &(0x7f0000000040), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x8, 0x0) 09:43:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:43:09 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[], 0x0) 09:43:09 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x700, 0x0, @empty}, 0x80) 09:43:09 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) 09:43:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x71, 0x0, 0x14}]}}, &(0x7f0000000100)=""/157, 0x2a, 0x9d, 0x1}, 0x20) 09:43:09 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0xc2242, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x4020940d, 0x0) 09:43:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:43:09 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000001580)={&(0x7f0000000000)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) 09:43:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) 09:43:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0xe) 09:43:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x4, 0x0, 0x1d) [ 212.852186][ T26] usb 6-1: new high-speed USB device number 6 using dummy_hcd 09:43:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x4a, 0x0, 0x0) 09:43:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) [ 213.042368][ T26] usb 6-1: device descriptor read/64, error 18 [ 213.312326][ T26] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 213.502130][ T26] usb 6-1: device descriptor read/64, error 18 [ 213.622514][ T26] usb usb6-port1: attempt power cycle [ 214.032343][ T26] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 214.203003][ T26] usb 6-1: device descriptor read/8, error -61 [ 214.471872][ T26] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 214.642100][ T26] usb 6-1: device descriptor read/8, error -61 [ 214.762296][ T26] usb usb6-port1: unable to enumerate USB device 09:43:12 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[], 0x0) 09:43:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000840)={0x0, 0x3}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x890b, &(0x7f0000000800)={'syztnl2\x00', 0x0}) 09:43:12 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8955, 0x0) 09:43:12 executing program 2: r0 = mq_open(&(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/184, 0xb8, 0x0, &(0x7f00000000c0)={0x77359400}) 09:43:12 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) 09:43:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:43:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x18, 0x1}, 0x48) [ 215.628648][ T25] audit: type=1326 audit(1656150192.679:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4093 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fec549 code=0x0 09:43:12 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x7, &(0x7f00000015c0)=@raw=[@call, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @map_idx, @alu={0x0, 0x0, 0x5}, @ldst], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:12 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002dc0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1, &(0x7f0000003180)=[{0x0}, {&(0x7f0000000600)=""/18, 0x12}, {&(0x7f0000002f00)=""/224, 0xe0}, {0x0}], 0x4, 0x0) 09:43:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:43:13 executing program 2: bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x488d184d827abfd6}, 0x84) 09:43:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', 0x0}) [ 216.162362][ T26] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 216.352750][ T26] usb 6-1: device descriptor read/64, error 18 [ 216.622221][ T26] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 216.813360][ T26] usb 6-1: device descriptor read/64, error 18 [ 216.932318][ T26] usb usb6-port1: attempt power cycle [ 217.342015][ T26] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 217.512077][ T26] usb 6-1: device descriptor read/8, error -61 [ 217.782013][ T26] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 217.952040][ T26] usb 6-1: device descriptor read/8, error -61 [ 218.038783][ T1198] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.038948][ T1198] ieee802154 phy1 wpan1: encryption failed: -22 [ 218.072462][ T26] usb usb6-port1: unable to enumerate USB device 09:43:15 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[], 0x0) 09:43:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:43:15 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000002500)=[{&(0x7f0000000080)='=', 0xfffe}], 0x0, &(0x7f00000025c0)) 09:43:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000100)={'lo\x00', @ifru_settings={0x0, 0x0, @te1=0x0}}) 09:43:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 09:43:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x2, 0x8, 0x400}, 0x48) [ 218.970981][ T4126] loop0: detected capacity change from 0 to 127 09:43:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 09:43:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, 0x4}, 0x80) 09:43:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:43:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00N\x00\x00\x00', @ANYRES32, @ANYBLOB="00200700000008000000000345bd0094006800000829"]}) 09:43:16 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000040)=0xfffffffffffffedc) 09:43:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x1d, 0x0, 0x0) [ 219.563294][ T3561] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 219.752165][ T3561] usb 6-1: device descriptor read/64, error 18 [ 220.023289][ T3561] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 220.211974][ T3561] usb 6-1: device descriptor read/64, error 18 [ 220.332300][ T3561] usb usb6-port1: attempt power cycle [ 220.751905][ T3561] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 220.942202][ T3561] usb 6-1: device descriptor read/8, error -61 [ 221.232570][ T3561] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 221.412012][ T3561] usb 6-1: device descriptor read/8, error -61 [ 221.532354][ T3561] usb usb6-port1: unable to enumerate USB device 09:43:19 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) 09:43:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:43:19 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x8, 0x0) syz_io_uring_setup(0x1d21, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 09:43:19 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000001580)={&(0x7f0000000000)=@hci={0x1f, 0x0, 0x1}, 0x80, 0x0}, 0x0) 09:43:19 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0x3, &(0x7f0000000140)=@raw=[@initr0, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000180)='GPL\x00', 0x7, 0x1000, &(0x7f0000000480)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x890b, &(0x7f0000000800)={'ip6gre0\x00', 0x0}) 09:43:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x33, 0x0, 0x1d) 09:43:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x10) 09:43:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:43:19 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000027c0)=@bpf_lsm={0x1d, 0x3, &(0x7f00000014c0)=@framed, &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, 0x80) 09:43:19 executing program 1: r0 = mq_open(&(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000640)=""/21, 0x15, 0x0, &(0x7f0000000680)) 09:43:19 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) bind(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80) [ 222.922062][ T3564] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 223.112858][ T3564] usb 6-1: device descriptor read/64, error 18 [ 223.386820][ T3564] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 223.581868][ T3564] usb 6-1: device descriptor read/64, error 18 [ 223.702425][ T3564] usb usb6-port1: attempt power cycle [ 224.132051][ T3564] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 224.332108][ T3564] usb 6-1: device descriptor read/8, error -61 [ 224.601817][ T3564] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 224.822191][ T3564] usb 6-1: device descriptor read/8, error -61 [ 224.946102][ T3564] usb usb6-port1: unable to enumerate USB device 09:43:22 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) 09:43:22 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8915, &(0x7f0000000300)={'batadv_slave_0\x00'}) 09:43:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000020000180140002", @ANYBLOB], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) 09:43:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:43:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x9, 0x0, 0x0) 09:43:22 executing program 3: r0 = socket$inet(0x2, 0x3, 0xa4) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x44}}, 0x0) 09:43:22 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189371, 0x0) 09:43:22 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, 0xffffffffffffffff, 0x0) [ 225.731337][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:43:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x83, 0x0, &(0x7f0000000080)) 09:43:22 executing program 4: keyctl$search(0x8, 0x0, &(0x7f0000000000)='.dead\x00', 0x0, 0x0) 09:43:22 executing program 1: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x8, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x9, 0x9, 0x0) 09:43:23 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003540)=[@rights={{0x10}}], 0x10}, 0x0) [ 226.242268][ T3564] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 226.442231][ T3564] usb 6-1: device descriptor read/64, error 18 [ 226.731893][ T3564] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 226.932030][ T3564] usb 6-1: device descriptor read/64, error 18 [ 227.053218][ T3564] usb usb6-port1: attempt power cycle [ 227.462545][ T3564] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 227.632169][ T3564] usb 6-1: device descriptor read/8, error -61 [ 227.912006][ T3564] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 228.102180][ T3564] usb 6-1: device descriptor read/8, error -61 [ 228.222158][ T3564] usb usb6-port1: unable to enumerate USB device 09:43:25 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) 09:43:25 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0xfffffea7}, './file0\x00'}) 09:43:25 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) 09:43:25 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 09:43:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x42, 0x0, 0x1d) 09:43:25 executing program 3: set_mempolicy(0xffffffffffffffff, 0x0, 0x0) [ 229.000745][ T25] audit: type=1326 audit(1656150206.049:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4197 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f09549 code=0x0 09:43:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf25090040000e0001006e5fb164657673696d0000000f0002e36d657464657673696d300000180003"], 0x70}}, 0x0) 09:43:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x4, 0x0, &(0x7f0000000000)) 09:43:26 executing program 0: syz_clone(0x42002700, 0x0, 0x0, 0x0, 0x0, 0x0) 09:43:26 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x7, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1405, 0x0, 0x0, 0x0, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x40}}, 0x0) [ 229.355099][ T4207] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 229.355164][ T4207] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 229.472270][ T3561] usb 6-1: new high-speed USB device number 26 using dummy_hcd 09:43:26 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x200010000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 09:43:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf25090040000e0001006e5fb164657673696d0000000f0002e36d657464657673696d300000180003"], 0x70}}, 0x0) [ 229.742581][ T3561] usb 6-1: device descriptor read/64, error 18 [ 229.830519][ T4217] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 229.830584][ T4217] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.012410][ T3561] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 230.201959][ T3561] usb 6-1: device descriptor read/64, error 18 [ 230.322246][ T3561] usb usb6-port1: attempt power cycle [ 230.732012][ T3561] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 230.907087][ T3561] usb 6-1: device descriptor read/8, error -61 [ 231.171872][ T3561] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 231.342539][ T3561] usb 6-1: device descriptor read/8, error -61 [ 231.462878][ T3561] usb usb6-port1: unable to enumerate USB device 09:43:29 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e"], 0x0) 09:43:29 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0xc2242, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x400c6615, 0x0) 09:43:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000080)) 09:43:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x66, 0x0, &(0x7f0000000080)) 09:43:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@loopback, @dev, 0x0, 0xa4}}) 09:43:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) 09:43:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00N\x00\x00\x00', @ANYRES32, @ANYBLOB="00200700000008000000000345"]}) 09:43:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x1b, 0x0, 0x1d) 09:43:29 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) 09:43:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x36, 0x0, 0x1d) 09:43:29 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) 09:43:29 executing program 1: r0 = fsopen(&(0x7f00000004c0)='hugetlbfs\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000002c0)='syztnl0\x00', 0x0, r1) [ 232.783256][ T3564] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 233.022364][ T3564] usb 6-1: Using ep0 maxpacket: 8 [ 233.143042][ T3564] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 233.143149][ T3564] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 233.312261][ T3564] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 233.312410][ T3564] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.312513][ T3564] usb 6-1: Product: syz [ 233.312595][ T3564] usb 6-1: Manufacturer: syz [ 233.312677][ T3564] usb 6-1: SerialNumber: syz [ 233.564420][ T21] usb 6-1: USB disconnect, device number 30 09:43:31 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e"], 0x0) 09:43:31 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:43:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x8, 0x3, &(0x7f0000001640)=@framed, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:31 executing program 4: shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/104) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) 09:43:31 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000840)={0x2, &(0x7f0000000800)=[{}, {0x5}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 09:43:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xe) [ 234.173309][ T25] audit: type=1326 audit(1656150211.229:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4243 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc7549 code=0x0 09:43:31 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@default_permissions}, {}, {@allow_other}, {@default_permissions}, {}]}}) 09:43:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 09:43:31 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000027c0)=@bpf_lsm={0x9, 0x3, &(0x7f00000014c0)=@framed, &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:31 executing program 0: clock_gettime(0xcdaceaf9b75527eb, 0x0) 09:43:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 09:43:31 executing program 2: request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='+C&\x00', 0xfffffffffffffffb) [ 234.758180][ T21] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 234.992787][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 235.112515][ T21] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 235.112624][ T21] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 235.292214][ T21] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 235.292361][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.292464][ T21] usb 6-1: Product: syz [ 235.292545][ T21] usb 6-1: Manufacturer: syz [ 235.292627][ T21] usb 6-1: SerialNumber: syz [ 235.565562][ T3564] usb 6-1: USB disconnect, device number 31 09:43:33 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e"], 0x0) 09:43:33 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$revoke(0x3, r0) 09:43:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x39, 0x0, 0x0) 09:43:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0xfffffffffffffe8a}, 0x10) 09:43:33 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000001580)={&(0x7f0000000000)=@hci={0x1f, 0x0, 0x6}, 0x80, 0x0}, 0x0) 09:43:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 09:43:33 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x5421, &(0x7f0000000640)=ANY=[]) 09:43:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x0, 0x0, 0x5, 0x4}, 0x48) 09:43:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x0, @private}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)='_', 0x1}], 0x1}, 0x0) 09:43:33 executing program 2: r0 = fsopen(&(0x7f00000004c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 09:43:33 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x4020940d, &(0x7f0000000640)=ANY=[]) 09:43:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000002840)=[{&(0x7f0000002740)='(', 0x1}], 0x1) [ 236.652042][ T21] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 236.892503][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 237.012274][ T21] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 237.012460][ T21] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 237.202256][ T21] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 237.202402][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.202507][ T21] usb 6-1: Product: syz [ 237.202589][ T21] usb 6-1: Manufacturer: syz [ 237.202670][ T21] usb 6-1: SerialNumber: syz [ 237.459719][ T21] usb 6-1: USB disconnect, device number 32 09:43:35 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00"], 0x0) 09:43:35 executing program 4: syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@fat=@uid={'uid', 0x3d, 0xee00}}]}) 09:43:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 09:43:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 09:43:35 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x12000) 09:43:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={[{@fat=@errors_continue}]}) [ 238.067328][ T4298] FAT-fs (loop3): bogus number of reserved sectors [ 238.067399][ T4298] FAT-fs (loop3): Can't find a valid FAT filesystem [ 238.092295][ T4300] FAT-fs (loop4): bogus number of reserved sectors [ 238.092365][ T4300] FAT-fs (loop4): Can't find a valid FAT filesystem 09:43:35 executing program 1: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 09:43:35 executing program 2: mq_open(&(0x7f0000000080)='.T\fT\t]\x03K\x9d\x1f\xb6\x84y(eE\x98', 0x0, 0x0, 0x0) 09:43:35 executing program 0: r0 = socket$inet(0x2, 0x3, 0xa4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8934, 0x0) 09:43:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x75, &(0x7f0000000000), &(0x7f0000000040)=0xe) 09:43:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000006800010029bd7000fbdbdf25000004003b0000000c"], 0x60}}, 0x0) 09:43:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x70, 0x0, &(0x7f0000000080)) [ 238.702182][ T3559] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 238.952426][ T3559] usb 6-1: Using ep0 maxpacket: 8 [ 239.082723][ T3559] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 239.082838][ T3559] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 239.262396][ T3559] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 239.262531][ T3559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.262631][ T3559] usb 6-1: Product: syz [ 239.262717][ T3559] usb 6-1: Manufacturer: syz [ 239.262801][ T3559] usb 6-1: SerialNumber: syz [ 239.511225][ T3564] usb 6-1: USB disconnect, device number 33 09:43:37 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00"], 0x0) 09:43:37 executing program 1: r0 = socket$inet(0x2, 0x3, 0xa4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8915, &(0x7f0000000300)={'batadv_slave_1\x00'}) 09:43:37 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000002500)=[{&(0x7f0000000080)='=', 0x1, 0x2000}], 0x0, &(0x7f00000025c0)) 09:43:37 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}], 0x20}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000a000000200001801400020067656e6576653000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="8122a768ccd4b09ececa51a8d79bd75852f8b2201acad6a3e6fb6a009ee4093358a47ee30e9be72dac319d95ae7e08e47993126392ed491cd03d593213b11445c8ebe8fb58f83e7a7237d20e62bc8feb1fdc8ea0fad903dda55dca26ca8a864e8aef7a007099a01ec06d48dc22701eea69584732a9bac43d475cb4a47dd2c0eac531cd4491a64b621f5be7143036d2c4da1a1d000000005f57b81168690332c62880fa7da056c9096037f591969bd34b19ac973840"], 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x44, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x44}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x34, r7, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', r3, 0x4, 0xff, 0x9, 0x3, 0x10, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xea, 0x10001}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x34, r11, 0x20, 0x1, 0x0, {0xa}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x204, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9c442f5177329bce}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdbc1120c21345dd7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c08d) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r9, 0x29, 0x8, 0x8, 0xca52, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x8000, 0x7, 0x8000}}) 09:43:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x0) 09:43:37 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0x0) [ 240.134887][ T4323] loop2: detected capacity change from 0 to 32 09:43:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7a, &(0x7f0000000000), &(0x7f0000000040)=0xe) 09:43:37 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x40086602, &(0x7f0000000640)=ANY=[]) 09:43:37 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x3, 0x0, &(0x7f0000000080)=0x4) 09:43:37 executing program 2: r0 = socket$inet(0x2, 0x3, 0xa4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) 09:43:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0xd, 0x0, &(0x7f0000000080)) 09:43:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x11, 0x0, &(0x7f0000000080)) [ 240.712119][ T3564] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 240.951935][ T3564] usb 6-1: Using ep0 maxpacket: 8 [ 241.082587][ T3564] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 241.082699][ T3564] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 241.243357][ T3564] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 241.243495][ T3564] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.243601][ T3564] usb 6-1: Product: syz [ 241.243681][ T3564] usb 6-1: Manufacturer: syz [ 241.243762][ T3564] usb 6-1: SerialNumber: syz [ 241.500272][ T21] usb 6-1: USB disconnect, device number 34 09:43:39 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00"], 0x0) 09:43:39 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xe00) 09:43:39 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x6, 0x0, 0x6}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:39 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x2}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x19) 09:43:39 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000080)=@framed={{}, [], {0x95, 0x0, 0x61}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:39 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x4, 0x0, 0xb, 0x0, 0x0, 0x7900}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) 09:43:39 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@alu={0x4, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:39 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x12, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:39 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x1, 0x3}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0841, 0x0) close(r0) [ 242.591999][ T3559] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 242.842066][ T3559] usb 6-1: Using ep0 maxpacket: 8 [ 242.963004][ T3559] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 242.963112][ T3559] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 243.123115][ T3559] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 243.123248][ T3559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.123351][ T3559] usb 6-1: Product: syz [ 243.123432][ T3559] usb 6-1: Manufacturer: syz [ 243.123514][ T3559] usb 6-1: SerialNumber: syz [ 243.423692][ T21] usb 6-1: USB disconnect, device number 35 09:43:40 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00ff03000000090500"], 0x0) 09:43:40 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x12, 0x4, &(0x7f0000000040)=@framed={{}, [@call]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan1\x00', 0x1}) ioctl$TUNSETVNETLE(r0, 0x400454d4, &(0x7f0000000000)) 09:43:40 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x4, 0x0, 0x0, 0x0, 0x0, 0x7100}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:40 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff9c}, [@jmp={0x5, 0x0, 0x6}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:41 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000480)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x8}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) close(r0) 09:43:41 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x12, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:41 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xd}]}}, &(0x7f0000000100)=""/203, 0x26, 0xcb, 0x1}, 0x20) 09:43:41 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f0000000100)=""/203, 0x26, 0xcb, 0x1}, 0x20) ioctl$TUNSETIFINDEX(r0, 0x40049409, 0x0) 09:43:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12002) 09:43:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001500)='b', 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 244.542604][ T3559] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 244.802199][ T3559] usb 6-1: Using ep0 maxpacket: 8 [ 244.923624][ T3559] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 244.923732][ T3559] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 245.102498][ T3559] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 245.102629][ T3559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.102730][ T3559] usb 6-1: Product: syz [ 245.102815][ T3559] usb 6-1: Manufacturer: syz [ 245.102897][ T3559] usb 6-1: SerialNumber: syz [ 245.396865][ T3559] usb 6-1: USB disconnect, device number 36 09:43:42 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00ff03000000090500"], 0x0) 09:43:42 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x6}]}}, &(0x7f0000000240)=""/203, 0x26, 0xcb, 0x1}, 0x20) 09:43:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001500)='b', 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000080), 0x6e, &(0x7f0000000000)=[{&(0x7f0000000100)=""/156, 0x9c}], 0x1, &(0x7f00000001c0)}, 0x20) 09:43:42 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}]}}, &(0x7f0000000100)=""/203, 0x32, 0xcb, 0x1}, 0x20) 09:43:42 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}}, &(0x7f0000000100)=""/203, 0x26, 0xcb, 0x1}, 0x20) 09:43:42 executing program 0: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file0/file0\x00') 09:43:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000100)=[{0x0, 0x63}, {0x0}, {&(0x7f0000001500)='b', 0xff69}, {&(0x7f0000000080)="c24e46aaae7c23f4823f3f7f9acb93a4f6e83f3e8adae5d07f9eeba0947ef2a5ffb98dfe22779eefd64fc1fd40c196668d85e0e87e8a4ef162c93d2ccf5166c8c7f135268c40215569eee412fc9de723867db7ae83c603ec681be4256379"}], 0x3}, 0x0) 09:43:43 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f0000000100)=""/203, 0x26, 0xcb, 0x1}, 0x20) ioctl$TUNSETIFINDEX(r0, 0x4b47, 0x0) 09:43:43 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f0000000100)=""/203, 0x26, 0xcb, 0x1}, 0x20) ioctl$TUNSETIFINDEX(r0, 0x5450, 0x0) 09:43:43 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000) 09:43:43 executing program 0: fanotify_mark(0xffffffffffffffff, 0x22, 0x40000000, 0xffffffffffffffff, 0x0) 09:43:43 executing program 2: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 246.532658][ T3559] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 246.782910][ T3559] usb 6-1: Using ep0 maxpacket: 8 [ 246.903316][ T3559] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 246.903420][ T3559] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 247.063019][ T3559] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 247.063151][ T3559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.063251][ T3559] usb 6-1: Product: syz [ 247.063331][ T3559] usb 6-1: Manufacturer: syz [ 247.063411][ T3559] usb 6-1: SerialNumber: syz [ 247.309774][ T21] usb 6-1: USB disconnect, device number 37 09:43:44 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00ff03000000090500"], 0x0) 09:43:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 09:43:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, 0x0) 09:43:44 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0) 09:43:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 09:43:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x19, 0x0, 0x33) 09:43:45 executing program 0: socketpair(0xa, 0x0, 0x0, &(0x7f0000000300)) 09:43:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x0, 0x400000, 0xf676, 0x0, 0x1}, 0x48) 09:43:45 executing program 1: setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@dev}, 0x14) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 09:43:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x22, 0x0, 0x0) 09:43:45 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000d40), &(0x7f0000000d80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)={[{@huge_never}], [{@measure}]}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xee01, 0x0) [ 248.454228][ T3559] usb 6-1: new high-speed USB device number 38 using dummy_hcd 09:43:45 executing program 1: request_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, 0x0, 0xfffffffffffffffa) [ 248.702297][ T3559] usb 6-1: Using ep0 maxpacket: 8 [ 248.823738][ T3559] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 248.823952][ T3559] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 248.858769][ T4439] tmpfs: Unknown parameter 'measure' [ 249.012424][ T3559] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 249.012561][ T3559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.012666][ T3559] usb 6-1: Product: syz [ 249.012745][ T3559] usb 6-1: Manufacturer: syz [ 249.012833][ T3559] usb 6-1: SerialNumber: syz [ 249.270831][ T3559] usb 6-1: USB disconnect, device number 38 09:43:46 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00ff0300000009050000000000"], 0x0) 09:43:46 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000d80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) 09:43:46 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/hidraw', 0x200800, 0x0) 09:43:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1e, 0x0, 0x0) 09:43:46 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x0, 0x18}, 0xc) 09:43:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x3c, 0x0, 0x0) 09:43:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x6, 0x0, 0x1000000) 09:43:47 executing program 2: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 09:43:47 executing program 4: syz_mount_image$iso9660(&(0x7f0000002080), &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000003440), 0x0, &(0x7f0000003500)={[{@check_relaxed}, {@unhide}, {@uid}]}) 09:43:47 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000d40), &(0x7f0000000d80)='./file0\x00', 0x8000000001000001, 0x1, &(0x7f0000001dc0)=[{&(0x7f0000000dc0)="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", 0x1000, 0x8}], 0x100000, &(0x7f0000001e00)={[{@huge_never}, {@mode={'mode', 0x3d, 0x5}}], [{@measure}, {@hash}, {@smackfsroot={'smackfsroot', 0x3d, '&)[\x9e'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) faccessat(r0, &(0x7f0000001ec0)='./file0\x00', 0x191) r1 = add_key$fscrypt_v1(&(0x7f00000018c0), &(0x7f0000001900)={'fscrypt:', @desc4}, &(0x7f0000001940)={0x0, "738974cdaaec9ddd975858b61db1a61e3f5b0cf953c3651b99961fdccc79cb448358c57050917a913c0019750718689e5da065d50abd8890353f053b36e0c475"}, 0x48, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='!)&/\x00', r1) 09:43:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000080)={@remote}, 0x14) 09:43:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x401, 0x4) [ 250.368617][ T4460] loop0: detected capacity change from 0 to 32768 [ 250.453427][ T3559] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 250.701984][ T3559] usb 6-1: Using ep0 maxpacket: 8 [ 250.823041][ T3559] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 250.823148][ T3559] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 250.983096][ T3559] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 250.983239][ T3559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.983351][ T3559] usb 6-1: Product: syz [ 250.983432][ T3559] usb 6-1: Manufacturer: syz [ 250.983514][ T3559] usb 6-1: SerialNumber: syz [ 251.272547][ T3559] usb 6-1: USB disconnect, device number 39 09:43:48 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00ff0300000009050000000000"], 0x0) 09:43:48 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}) 09:43:48 executing program 3: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0xf000) shmat(0x0, &(0x7f0000ff4000/0x4000)=nil, 0x4000) 09:43:48 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000004f80)='./file0\x00', &(0x7f00000051c0), 0x0, &(0x7f0000005200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}, {@version_9p2000}, {@noextend}]}}) 09:43:48 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@nr_inodes={'nr_inodes', 0x3d, [0x0]}}], [{@obj_role={'obj_role', 0x3d, 'msdos\x00'}}]}) syz_mount_image$tmpfs(&(0x7f0000000d40), &(0x7f0000000d80)='./file0\x00', 0x8000000000000001, 0x0, &(0x7f0000001dc0), 0x100000, &(0x7f0000001e00)={[{@mode={'mode', 0x3d, 0x5}}], [{@measure}, {@obj_type={'obj_type', 0x3d, '\\]%*)'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) 09:43:48 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) [ 251.858897][ T4471] tmpfs: Bad value for 'nr_inodes' [ 251.896368][ T4473] 9pnet_fd: Insufficient options for proto=fd 09:43:49 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)={[{@huge_always}]}) 09:43:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x1, &(0x7f0000000080)=@raw=[@generic={0x5}], &(0x7f0000000100)='GPL\x00', 0x1, 0x8f, &(0x7f0000000140)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$netlink(r0, &(0x7f0000000280), &(0x7f00000002c0)=0xc) 09:43:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0xfffffffb, 0x0, 0x1}, 0x48) 09:43:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x30, 0x0, 0x0) 09:43:49 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000d80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x10) [ 252.432260][ T3564] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 252.692190][ T3564] usb 6-1: Using ep0 maxpacket: 8 [ 252.814955][ T3564] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 252.815062][ T3564] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 252.997921][ T3564] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 252.998056][ T3564] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.998159][ T3564] usb 6-1: Product: syz [ 252.998239][ T3564] usb 6-1: Manufacturer: syz [ 252.998321][ T3564] usb 6-1: SerialNumber: syz [ 253.249497][ T3564] usb 6-1: USB disconnect, device number 40 09:43:50 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00ff0300000009050000000000"], 0x0) 09:43:50 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89a0, 0x0) 09:43:50 executing program 0: syz_clone(0xa0228500, &(0x7f0000000000)="83747169af26372d0fceeb68e2ad0e", 0xf, &(0x7f0000000040), 0x0, &(0x7f00000000c0)="2250a01d8b92f42065cef3e632dddd986e7be0f25cb28ee973f13b86e81b817276a790f2c6c234a66fcb56a1979fb0ceea08a6cc4e1f38b609c6c3eb15e7c13fdec6cb51d6ebadefd191b2ad61cdf5c2567563520b8ea1a260b5e64c01e1caf7a6eb019048e89a6c8ec6250902341577bf3f4feccc29973d5b6a73ff4bd6630dbfe610232c07118015ab593f43ad392ae85cf4445b7fcf00764e7f62376f076d91df98c00ceabdfdf4833a") syz_open_procfs$userns(0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000600)) 09:43:50 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) getpid() getpgrp(0x0) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) tkill(r0, 0x12) 09:43:50 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000c40), 0x23c400, 0x0) 09:43:50 executing program 3: syz_clone(0xa0228500, &(0x7f0000000000)="83", 0x1, 0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) 09:43:51 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fsetxattr$security_evm(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 09:43:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$sock(r0, &(0x7f0000005000)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0xc}, 0x4}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="d77888e1a3d4b822948fdf327fde3ef6b0e80929ad0d1cec9ef4b33c6eb59548f6c00f123e4ad861eb72be9f555096a3677630391468277eceef494e710ae30d42f4057b046a502f04f47594b7a51444d84829642e284fa3f2bf74eb72a2cf18b31a16fe74b6c1375459ba92619c96c6a14e0c3693a01b515beaff59bf862d3b7959a0", 0x83}, {&(0x7f0000000140)="2c82b3de791c2af29830e67a78b17c50fe0f656eb9ab8690532d02e4752ab5f430ee3747cc3296815c60d688cd7903ffb5a79e01cb297af7ca4405790b", 0x3d}, {&(0x7f0000000400)="e00af683a8c46a78aea90f7ddba412b569148a6784575966bc99f0ea5da81296af60f3ffae2a7032deea70bbded43e796b6d33feb4febe5cdf44658ab03080c5af7a01111d6178c466aaebb7630b7b343a49984fc046032ac9d383c87d23e169167b01344f35d2d52afce66f49e85984d615ff8c8b986cf5e3b8e5679a71174c35aea7ffecf5d3a8f6baa9d4a6ab3842fec45be7ec382c61b9ce101ed07fceb67948a9de66753ba7f7d07c8dbaf6f25eb5ae3d6a96f89043850459391fe52bdb4dab6c4a40daf11a6f9d2a677cd1c652f2264fd6fcff7f464be4d50e0576edf34505db22e9be33d4befa60bf64bea87be569bd5319a9f074232cd979b42287d8608884ebdb93c0a6af4570ad83e205ae4a7b39c91fcac53309967524397796fd995d4d31cd5ccde60918138ea270be12099f4da9cba70bbc7d5ef0b3d181fc2ba1965e0b340d2ac99542f20fd89cda10632ab0241c6337b4a81ecbef142a36faf049b6b6fde08ce9a00fd1f1f136ea48717648d9c724391705594b82ae7ceb475e4d8e0a6aa193c1ae4e1447ac33738caccd4c696d81aada2ccd3231b54980f16493543a196c166b5869b719487e8deaa2183c5d1bd52ad1f0ed908b9ff840cbc0a121fb0aeb4827e6ec7a8972334e535a1b9bb599b1e5d427b19130e3803c1781f71bc46ab3a4948b242dfe72349e3d9637c4500d5b6003ec711577bdd8756ab339c378e57a45863ac47be5af48c2a32abc7283459a1aede2289f11d8b7203231fe5ab2e549bc5e63f010eed5b5c8940dffcc06dc53ec20130cfd89b85764ee0141e61adb6128681d54e7be2cd580b1d340982935af04f40e9bbbfefd5b9bbb1b5aad58e886dbe65eb79ba79427dfa00f7bb03a0e5746498291fa2e9a03cd99a96475f7043856180276152a56ecf557b4924c420928fd720614d8c4782cf92306addf69cbe54610851785963c317ebb3afde214811d96e03edb32343d29e8a366a34c8b93eeab55ced65dd974f97c17e0bf2dad9376e12cdfcc5315fb8a808302011b87ab6d5adb8ed08638dc1cc23adbddde07fd96145e629b43fd7d41ea188640162bc5490358d369fecf6eb0372a19f0a4597076bdca8b94fe9acadb23104f9607b25e36b4898b0d8f1be39e09135981d457b26590084238ff1664c3a80e9ae921b5c41027aa1a74cb614861d34958bf94ffc3ccd54b94f6cd9be1b4aee139572c73bdf556b33a7e483ee0030ae6365423cd22aebae57cd3dcd41f2a2479fe5cad7e96db3e5061961f9c9f5816d638f70e409e10f4d476f229e7ab531796ed129d815034f293b4f823b160523d5d4eb6d1fbcc029aef2f51079ac0732c6e04f1b4dff50e0636ef0fcd236b28725a19af7d14b0cd05b0ae1a580b556040db656eca984f2638907a", 0x3e9}, {&(0x7f0000001400)}], 0x4, &(0x7f00000001c0)}}], 0x1, 0x4) 09:43:51 executing program 0: syz_clone(0xa0228500, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) 09:43:51 executing program 3: syz_clone(0xa0228500, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)='\"') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 09:43:51 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) [ 254.348850][ T3564] usb 6-1: new high-speed USB device number 41 using dummy_hcd 09:43:51 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r2, &(0x7f00000003c0), 0x109, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}], 0x2, 0x0, &(0x7f0000000280)={[0x4]}, 0x8) [ 254.601992][ T3564] usb 6-1: Using ep0 maxpacket: 8 [ 254.723170][ T3564] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 254.723284][ T3564] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 254.883294][ T3564] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 254.883428][ T3564] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.883532][ T3564] usb 6-1: Product: syz [ 254.883612][ T3564] usb 6-1: Manufacturer: syz [ 254.883694][ T3564] usb 6-1: SerialNumber: syz [ 255.134202][ T3559] usb 6-1: USB disconnect, device number 41 [ 255.186499][ T4511] syz-executor.1 (4511) used greatest stack depth: 4560 bytes left [ 255.559600][ T4524] not chained 70000 origins [ 255.559625][ T4524] CPU: 1 PID: 4524 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 255.559671][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.559693][ T4524] Call Trace: [ 255.559706][ T4524] [ 255.559719][ T4524] dump_stack_lvl+0x1c8/0x256 [ 255.559833][ T4524] dump_stack+0x1a/0x1c [ 255.559886][ T4524] kmsan_internal_chain_origin+0x78/0x120 [ 255.559986][ T4524] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 255.560039][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 255.560088][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 255.560142][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 255.560191][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 255.560249][ T4524] ? __get_compat_msghdr+0x5b/0x750 [ 255.560350][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 255.560399][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 255.560456][ T4524] ? should_fail+0x3f/0x810 [ 255.560547][ T4524] ? __stack_depot_save+0x21/0x4b0 [ 255.560595][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 255.560644][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 255.560697][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 255.560747][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 255.560806][ T4524] __msan_chain_origin+0xbd/0x140 [ 255.560856][ T4524] __get_compat_msghdr+0x514/0x750 [ 255.560928][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 255.560988][ T4524] ? ___sys_recvmsg+0xa9/0x870 09:43:52 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00ff03000000090500000000000600"], 0x0) 09:43:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="f8ff8000"/16]) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000000c0)={0x2, 0x0, {0xffffffffffffffff}, {0xee01}, 0x2, 0x1}) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x682000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 09:43:52 executing program 4: syslog(0x4, &(0x7f0000000080)=""/107, 0x6b) [ 255.561047][ T4524] ? do_recvmmsg+0x63a/0x10a0 [ 255.561089][ T4524] ___sys_recvmsg+0x19d/0x870 [ 255.561135][ T4524] ? __schedule+0x1609/0x21d0 [ 255.561202][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 255.561250][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 255.561305][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 255.561354][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 255.561410][ T4524] do_recvmmsg+0x63a/0x10a0 [ 255.561462][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 255.561519][ T4524] ? __sys_recvmmsg+0x52/0x450 09:43:52 executing program 3: syz_clone(0xa0228500, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)='\"') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 09:43:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 255.561559][ T4524] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 255.561612][ T4524] __sys_recvmmsg+0x113/0x450 [ 255.561656][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 255.561712][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 255.561773][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 255.561816][ T4524] ? exit_to_user_mode_prepare+0x119/0x220 [ 255.561888][ T4524] do_fast_syscall_32+0x33/0x70 [ 255.561931][ T4524] do_SYSENTER_32+0x1b/0x20 [ 255.561971][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 255.562056][ T4524] RIP: 0023:0xf7fec549 [ 255.562084][ T4524] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 255.562124][ T4524] RSP: 002b:00000000f7fc65cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 255.562165][ T4524] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 255.562195][ T4524] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 255.562219][ T4524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.562247][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.562272][ T4524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.562309][ T4524] [ 255.562938][ T4524] Uninit was stored to memory at: [ 255.563003][ T4524] __get_compat_msghdr+0x514/0x750 [ 255.563062][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 255.563117][ T4524] ___sys_recvmsg+0x19d/0x870 [ 255.563155][ T4524] do_recvmmsg+0x63a/0x10a0 [ 255.563193][ T4524] __sys_recvmmsg+0x113/0x450 [ 255.563230][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 255.563275][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 255.563314][ T4524] do_fast_syscall_32+0x33/0x70 [ 255.563351][ T4524] do_SYSENTER_32+0x1b/0x20 [ 255.563387][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 255.563451][ T4524] [ 255.563457][ T4524] Uninit was stored to memory at: [ 255.563518][ T4524] __get_compat_msghdr+0x514/0x750 [ 255.563575][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 255.563631][ T4524] ___sys_recvmsg+0x19d/0x870 [ 255.563668][ T4524] do_recvmmsg+0x63a/0x10a0 [ 255.563705][ T4524] __sys_recvmmsg+0x113/0x450 [ 255.563743][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 255.563794][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 255.563832][ T4524] do_fast_syscall_32+0x33/0x70 [ 255.563870][ T4524] do_SYSENTER_32+0x1b/0x20 [ 255.563906][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 255.563969][ T4524] [ 255.563974][ T4524] Uninit was stored to memory at: [ 255.564035][ T4524] __get_compat_msghdr+0x514/0x750 [ 255.564091][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 255.564148][ T4524] ___sys_recvmsg+0x19d/0x870 [ 255.564185][ T4524] do_recvmmsg+0x63a/0x10a0 [ 255.564222][ T4524] __sys_recvmmsg+0x113/0x450 [ 255.564260][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 255.564306][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 255.564345][ T4524] do_fast_syscall_32+0x33/0x70 [ 255.564384][ T4524] do_SYSENTER_32+0x1b/0x20 [ 255.564421][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 255.564487][ T4524] [ 255.564493][ T4524] Uninit was stored to memory at: [ 255.564555][ T4524] __get_compat_msghdr+0x514/0x750 [ 255.564614][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 255.564671][ T4524] ___sys_recvmsg+0x19d/0x870 [ 255.564710][ T4524] do_recvmmsg+0x63a/0x10a0 [ 255.564748][ T4524] __sys_recvmmsg+0x113/0x450 [ 255.564792][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 255.564839][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 255.564879][ T4524] do_fast_syscall_32+0x33/0x70 [ 255.564917][ T4524] do_SYSENTER_32+0x1b/0x20 [ 255.564954][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 255.565019][ T4524] [ 255.565025][ T4524] Uninit was stored to memory at: [ 255.565088][ T4524] __get_compat_msghdr+0x514/0x750 [ 255.565142][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 255.565196][ T4524] ___sys_recvmsg+0x19d/0x870 [ 255.565233][ T4524] do_recvmmsg+0x63a/0x10a0 [ 255.565270][ T4524] __sys_recvmmsg+0x113/0x450 [ 255.565309][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 255.565353][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 255.565391][ T4524] do_fast_syscall_32+0x33/0x70 [ 255.565426][ T4524] do_SYSENTER_32+0x1b/0x20 [ 255.565461][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 255.565524][ T4524] [ 255.565530][ T4524] Uninit was stored to memory at: [ 255.565591][ T4524] __get_compat_msghdr+0x514/0x750 [ 255.565650][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 255.565706][ T4524] ___sys_recvmsg+0x19d/0x870 [ 255.565744][ T4524] do_recvmmsg+0x63a/0x10a0 [ 255.565787][ T4524] __sys_recvmmsg+0x113/0x450 [ 255.565826][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 255.565871][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 255.565910][ T4524] do_fast_syscall_32+0x33/0x70 [ 255.565948][ T4524] do_SYSENTER_32+0x1b/0x20 [ 255.565985][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 255.566049][ T4524] [ 255.566055][ T4524] Uninit was stored to memory at: [ 255.566117][ T4524] __get_compat_msghdr+0x514/0x750 [ 255.566175][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 255.566229][ T4524] ___sys_recvmsg+0x19d/0x870 [ 255.566268][ T4524] do_recvmmsg+0x63a/0x10a0 [ 255.566305][ T4524] __sys_recvmmsg+0x113/0x450 [ 255.566344][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 255.566389][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 255.566428][ T4524] do_fast_syscall_32+0x33/0x70 [ 255.566466][ T4524] do_SYSENTER_32+0x1b/0x20 [ 255.566503][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 255.566565][ T4524] [ 255.566572][ T4524] Local variable msg_sys created at: [ 255.566585][ T4524] do_recvmmsg+0x5f/0x10a0 [ 255.566620][ T4524] __sys_recvmmsg+0x113/0x450 09:43:53 executing program 4: r0 = epoll_create1(0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) [ 256.642467][ T21] usb 6-1: new high-speed USB device number 42 using dummy_hcd 09:43:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x561, 0x0, 0x2}]}) [ 256.972795][ T21] usb 6-1: Using ep0 maxpacket: 8 09:43:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000105}]}) [ 257.112512][ T21] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 257.112620][ T21] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 257.302920][ T21] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 257.303014][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.303083][ T21] usb 6-1: Product: syz [ 257.303137][ T21] usb 6-1: Manufacturer: syz [ 257.303191][ T21] usb 6-1: SerialNumber: syz 09:43:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:43:54 executing program 3: r0 = socket(0x29, 0x2, 0x0) setsockopt$inet_tcp_buf(r0, 0x10f, 0x0, 0x0, 0x10) [ 257.638444][ T3561] usb 6-1: USB disconnect, device number 42 [ 257.782825][ T4524] not chained 80000 origins [ 257.782843][ T4524] CPU: 1 PID: 4524 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 257.782880][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.782898][ T4524] Call Trace: [ 257.782908][ T4524] [ 257.782917][ T4524] dump_stack_lvl+0x1c8/0x256 [ 257.782972][ T4524] dump_stack+0x1a/0x1c [ 257.783015][ T4524] kmsan_internal_chain_origin+0x78/0x120 [ 257.783058][ T4524] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 257.783100][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 257.783140][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 257.783184][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 257.783223][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 257.783269][ T4524] ? __get_compat_msghdr+0x5b/0x750 [ 257.783325][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 257.783371][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 257.783429][ T4524] ? should_fail+0x3f/0x810 [ 257.783482][ T4524] ? __stack_depot_save+0x21/0x4b0 [ 257.783532][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 257.783586][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 257.783643][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 257.783693][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 257.783749][ T4524] __msan_chain_origin+0xbd/0x140 [ 257.783799][ T4524] __get_compat_msghdr+0x514/0x750 [ 257.783872][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 257.783932][ T4524] ? ___sys_recvmsg+0xa9/0x870 [ 257.783973][ T4524] ? do_recvmmsg+0x63a/0x10a0 [ 257.784016][ T4524] ___sys_recvmsg+0x19d/0x870 [ 257.784061][ T4524] ? __schedule+0x1609/0x21d0 [ 257.784107][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 257.784156][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 257.784208][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 257.784255][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 257.784317][ T4524] do_recvmmsg+0x63a/0x10a0 [ 257.784370][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 257.784428][ T4524] ? __sys_recvmmsg+0x52/0x450 [ 257.784468][ T4524] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 257.784520][ T4524] __sys_recvmmsg+0x113/0x450 [ 257.784561][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 257.784617][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 257.784673][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 257.784717][ T4524] ? exit_to_user_mode_prepare+0x119/0x220 [ 257.784768][ T4524] do_fast_syscall_32+0x33/0x70 [ 257.784812][ T4524] do_SYSENTER_32+0x1b/0x20 [ 257.784853][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 257.784922][ T4524] RIP: 0023:0xf7fec549 [ 257.784950][ T4524] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 257.784991][ T4524] RSP: 002b:00000000f7fc65cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 257.785031][ T4524] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 257.785060][ T4524] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 257.785085][ T4524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.785108][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.785132][ T4524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.785168][ T4524] [ 257.785327][ T4524] Uninit was stored to memory at: [ 257.785391][ T4524] __get_compat_msghdr+0x514/0x750 [ 257.785451][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 257.785508][ T4524] ___sys_recvmsg+0x19d/0x870 [ 257.785546][ T4524] do_recvmmsg+0x63a/0x10a0 [ 257.785585][ T4524] __sys_recvmmsg+0x113/0x450 [ 257.785624][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 257.785669][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 257.785707][ T4524] do_fast_syscall_32+0x33/0x70 [ 257.785744][ T4524] do_SYSENTER_32+0x1b/0x20 [ 257.785781][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 257.785845][ T4524] [ 257.785851][ T4524] Uninit was stored to memory at: [ 257.785913][ T4524] __get_compat_msghdr+0x514/0x750 [ 257.785969][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 257.786026][ T4524] ___sys_recvmsg+0x19d/0x870 [ 257.786064][ T4524] do_recvmmsg+0x63a/0x10a0 [ 257.786101][ T4524] __sys_recvmmsg+0x113/0x450 [ 257.786139][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 257.786185][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 257.786224][ T4524] do_fast_syscall_32+0x33/0x70 [ 257.786261][ T4524] do_SYSENTER_32+0x1b/0x20 [ 257.786304][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 257.786370][ T4524] [ 257.786376][ T4524] Uninit was stored to memory at: [ 257.786438][ T4524] __get_compat_msghdr+0x514/0x750 [ 257.786495][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 257.786552][ T4524] ___sys_recvmsg+0x19d/0x870 [ 257.786591][ T4524] do_recvmmsg+0x63a/0x10a0 [ 257.786628][ T4524] __sys_recvmmsg+0x113/0x450 [ 257.786667][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 257.786713][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 257.786752][ T4524] do_fast_syscall_32+0x33/0x70 [ 257.786789][ T4524] do_SYSENTER_32+0x1b/0x20 [ 257.786827][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 257.786891][ T4524] [ 257.786897][ T4524] Uninit was stored to memory at: [ 257.786958][ T4524] __get_compat_msghdr+0x514/0x750 [ 257.787017][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 257.787074][ T4524] ___sys_recvmsg+0x19d/0x870 [ 257.787112][ T4524] do_recvmmsg+0x63a/0x10a0 [ 257.787148][ T4524] __sys_recvmmsg+0x113/0x450 [ 257.787185][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 257.787231][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 257.787271][ T4524] do_fast_syscall_32+0x33/0x70 [ 257.787314][ T4524] do_SYSENTER_32+0x1b/0x20 [ 257.787352][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 257.787416][ T4524] [ 257.787423][ T4524] Uninit was stored to memory at: [ 257.787485][ T4524] __get_compat_msghdr+0x514/0x750 [ 257.787543][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 257.787600][ T4524] ___sys_recvmsg+0x19d/0x870 [ 257.787638][ T4524] do_recvmmsg+0x63a/0x10a0 [ 257.787676][ T4524] __sys_recvmmsg+0x113/0x450 [ 257.787715][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 257.787762][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 257.787801][ T4524] do_fast_syscall_32+0x33/0x70 [ 257.787839][ T4524] do_SYSENTER_32+0x1b/0x20 [ 257.787876][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 257.787941][ T4524] [ 257.787947][ T4524] Uninit was stored to memory at: [ 257.788008][ T4524] __get_compat_msghdr+0x514/0x750 [ 257.788067][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 257.788125][ T4524] ___sys_recvmsg+0x19d/0x870 [ 257.788164][ T4524] do_recvmmsg+0x63a/0x10a0 [ 257.788201][ T4524] __sys_recvmmsg+0x113/0x450 [ 257.788240][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 257.788292][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 257.788331][ T4524] do_fast_syscall_32+0x33/0x70 [ 257.788391][ T4524] do_SYSENTER_32+0x1b/0x20 [ 257.788429][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 257.788493][ T4524] [ 257.788499][ T4524] Uninit was stored to memory at: [ 257.788561][ T4524] __get_compat_msghdr+0x514/0x750 [ 257.788619][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 257.788673][ T4524] ___sys_recvmsg+0x19d/0x870 [ 257.788710][ T4524] do_recvmmsg+0x63a/0x10a0 [ 257.788747][ T4524] __sys_recvmmsg+0x113/0x450 [ 257.788786][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 257.788832][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 257.788869][ T4524] do_fast_syscall_32+0x33/0x70 [ 257.788906][ T4524] do_SYSENTER_32+0x1b/0x20 [ 257.788942][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 257.789005][ T4524] [ 257.789013][ T4524] Local variable msg_sys created at: [ 257.789025][ T4524] do_recvmmsg+0x5f/0x10a0 [ 257.789059][ T4524] __sys_recvmmsg+0x113/0x450 09:43:55 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00ff03000000090500000000000600"], 0x0) [ 259.514307][ T21] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 259.766880][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 259.876666][ T4524] not chained 90000 origins [ 259.876691][ T4524] CPU: 0 PID: 4524 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 259.876738][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.876760][ T4524] Call Trace: [ 259.876772][ T4524] [ 259.876785][ T4524] dump_stack_lvl+0x1c8/0x256 [ 259.876854][ T4524] dump_stack+0x1a/0x1c [ 259.876912][ T4524] kmsan_internal_chain_origin+0x78/0x120 [ 259.876964][ T4524] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 259.877018][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 259.877068][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 259.877124][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 259.877174][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 259.877233][ T4524] ? __get_compat_msghdr+0x5b/0x750 [ 259.877300][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 259.877350][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 259.877408][ T4524] ? should_fail+0x3f/0x810 [ 259.877459][ T4524] ? __stack_depot_save+0x21/0x4b0 [ 259.877507][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 259.877557][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 259.877612][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 259.877662][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 259.877717][ T4524] __msan_chain_origin+0xbd/0x140 [ 259.877768][ T4524] __get_compat_msghdr+0x514/0x750 [ 259.877842][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 259.877903][ T4524] ? ___sys_recvmsg+0xa9/0x870 [ 259.877944][ T4524] ? do_recvmmsg+0x63a/0x10a0 [ 259.877988][ T4524] ___sys_recvmsg+0x19d/0x870 [ 259.878034][ T4524] ? __schedule+0x1609/0x21d0 [ 259.878081][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 259.878131][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 259.878186][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 259.878236][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 259.878299][ T4524] do_recvmmsg+0x63a/0x10a0 [ 259.878352][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 259.878410][ T4524] ? __sys_recvmmsg+0x52/0x450 [ 259.878451][ T4524] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 259.878504][ T4524] __sys_recvmmsg+0x113/0x450 [ 259.878545][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 259.878601][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 259.878658][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 259.878700][ T4524] ? exit_to_user_mode_prepare+0x119/0x220 [ 259.878750][ T4524] do_fast_syscall_32+0x33/0x70 [ 259.878793][ T4524] do_SYSENTER_32+0x1b/0x20 [ 259.878833][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 259.878902][ T4524] RIP: 0023:0xf7fec549 [ 259.878930][ T4524] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 259.878971][ T4524] RSP: 002b:00000000f7fc65cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 259.879012][ T4524] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 259.879041][ T4524] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 259.879067][ T4524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.879092][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.879117][ T4524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.879153][ T4524] [ 259.879257][ T4524] Uninit was stored to memory at: [ 259.879321][ T4524] __get_compat_msghdr+0x514/0x750 [ 259.879380][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 259.879437][ T4524] ___sys_recvmsg+0x19d/0x870 [ 259.879476][ T4524] do_recvmmsg+0x63a/0x10a0 [ 259.879514][ T4524] __sys_recvmmsg+0x113/0x450 [ 259.879552][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 259.879599][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 259.879638][ T4524] do_fast_syscall_32+0x33/0x70 [ 259.879677][ T4524] do_SYSENTER_32+0x1b/0x20 [ 259.879714][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 259.879778][ T4524] [ 259.879784][ T4524] Uninit was stored to memory at: [ 259.879846][ T4524] __get_compat_msghdr+0x514/0x750 [ 259.879904][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 259.879962][ T4524] ___sys_recvmsg+0x19d/0x870 [ 259.880000][ T4524] do_recvmmsg+0x63a/0x10a0 [ 259.880038][ T4524] __sys_recvmmsg+0x113/0x450 [ 259.880076][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 259.880123][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 259.880162][ T4524] do_fast_syscall_32+0x33/0x70 [ 259.880200][ T4524] do_SYSENTER_32+0x1b/0x20 [ 259.880238][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 259.880307][ T4524] [ 259.880313][ T4524] Uninit was stored to memory at: [ 259.880375][ T4524] __get_compat_msghdr+0x514/0x750 [ 259.880434][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 259.880491][ T4524] ___sys_recvmsg+0x19d/0x870 [ 259.880529][ T4524] do_recvmmsg+0x63a/0x10a0 [ 259.880567][ T4524] __sys_recvmmsg+0x113/0x450 [ 259.880605][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 259.880652][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 259.880692][ T4524] do_fast_syscall_32+0x33/0x70 [ 259.880729][ T4524] do_SYSENTER_32+0x1b/0x20 [ 259.880767][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 259.880832][ T4524] [ 259.880837][ T4524] Uninit was stored to memory at: [ 259.880899][ T4524] __get_compat_msghdr+0x514/0x750 [ 259.880957][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 259.881014][ T4524] ___sys_recvmsg+0x19d/0x870 [ 259.881053][ T4524] do_recvmmsg+0x63a/0x10a0 [ 259.881090][ T4524] __sys_recvmmsg+0x113/0x450 [ 259.881129][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 259.881176][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 259.881215][ T4524] do_fast_syscall_32+0x33/0x70 [ 259.881258][ T4524] do_SYSENTER_32+0x1b/0x20 [ 259.881296][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 259.881361][ T4524] [ 259.881367][ T4524] Uninit was stored to memory at: [ 259.881429][ T4524] __get_compat_msghdr+0x514/0x750 [ 259.881487][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 259.881544][ T4524] ___sys_recvmsg+0x19d/0x870 [ 259.881582][ T4524] do_recvmmsg+0x63a/0x10a0 [ 259.883260][ T4524] __sys_recvmmsg+0x113/0x450 [ 259.883304][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 259.883351][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 259.883389][ T4524] do_fast_syscall_32+0x33/0x70 [ 259.883426][ T4524] do_SYSENTER_32+0x1b/0x20 [ 259.883463][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 259.883527][ T4524] [ 259.883533][ T4524] Uninit was stored to memory at: [ 259.883595][ T4524] __get_compat_msghdr+0x514/0x750 [ 259.883652][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 259.883708][ T4524] ___sys_recvmsg+0x19d/0x870 [ 259.883746][ T4524] do_recvmmsg+0x63a/0x10a0 [ 259.883783][ T4524] __sys_recvmmsg+0x113/0x450 [ 259.883820][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 259.883866][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 259.883905][ T4524] do_fast_syscall_32+0x33/0x70 [ 259.883941][ T4524] do_SYSENTER_32+0x1b/0x20 [ 259.883977][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 259.884042][ T4524] [ 259.884047][ T4524] Uninit was stored to memory at: [ 259.884107][ T4524] __get_compat_msghdr+0x514/0x750 [ 259.884164][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 259.884219][ T4524] ___sys_recvmsg+0x19d/0x870 [ 259.884262][ T4524] do_recvmmsg+0x63a/0x10a0 [ 259.884299][ T4524] __sys_recvmmsg+0x113/0x450 [ 259.884337][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 259.884381][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 259.884421][ T4524] do_fast_syscall_32+0x33/0x70 [ 259.884458][ T4524] do_SYSENTER_32+0x1b/0x20 [ 259.884494][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 259.884557][ T4524] [ 259.884564][ T4524] Local variable msg_sys created at: [ 259.884576][ T4524] do_recvmmsg+0x5f/0x10a0 [ 259.884610][ T4524] __sys_recvmmsg+0x113/0x450 [ 259.903597][ T21] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 259.903701][ T21] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 260.062747][ T21] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 260.062885][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.062984][ T21] usb 6-1: Product: syz [ 260.063065][ T21] usb 6-1: Manufacturer: syz [ 260.063146][ T21] usb 6-1: SerialNumber: syz [ 260.317021][ T21] usb 6-1: USB disconnect, device number 43 [ 261.053448][ T4524] not chained 100000 origins [ 261.053469][ T4524] CPU: 1 PID: 4524 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 261.053506][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.053524][ T4524] Call Trace: [ 261.053534][ T4524] [ 261.053544][ T4524] dump_stack_lvl+0x1c8/0x256 [ 261.053600][ T4524] dump_stack+0x1a/0x1c [ 261.053642][ T4524] kmsan_internal_chain_origin+0x78/0x120 [ 261.053685][ T4524] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 261.053727][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 261.053767][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 261.053816][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 261.053855][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 261.053902][ T4524] ? __get_compat_msghdr+0x5b/0x750 [ 261.053953][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 261.053992][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 261.054038][ T4524] ? should_fail+0x3f/0x810 [ 261.054079][ T4524] ? __stack_depot_save+0x21/0x4b0 [ 261.054117][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 261.054157][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 261.054201][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 261.054240][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 261.054284][ T4524] __msan_chain_origin+0xbd/0x140 [ 261.054323][ T4524] __get_compat_msghdr+0x514/0x750 [ 261.054381][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 261.054430][ T4524] ? ___sys_recvmsg+0xa9/0x870 [ 261.054462][ T4524] ? do_recvmmsg+0x63a/0x10a0 [ 261.054497][ T4524] ___sys_recvmsg+0x19d/0x870 [ 261.054533][ T4524] ? __schedule+0x1609/0x21d0 [ 261.054569][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 261.054609][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 261.054652][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 261.054691][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 261.054737][ T4524] do_recvmmsg+0x63a/0x10a0 [ 261.054781][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 261.054827][ T4524] ? __sys_recvmmsg+0x52/0x450 [ 261.054859][ T4524] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.054901][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.054933][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 261.054977][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.055022][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 261.055055][ T4524] ? exit_to_user_mode_prepare+0x119/0x220 [ 261.055095][ T4524] do_fast_syscall_32+0x33/0x70 [ 261.055128][ T4524] do_SYSENTER_32+0x1b/0x20 [ 261.055160][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 261.055214][ T4524] RIP: 0023:0xf7fec549 [ 261.055236][ T4524] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 261.055268][ T4524] RSP: 002b:00000000f7fc65cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 261.055298][ T4524] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 261.055321][ T4524] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 261.055341][ T4524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.055360][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.055379][ T4524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.055407][ T4524] [ 261.055417][ T4524] Uninit was stored to memory at: [ 261.055468][ T4524] __get_compat_msghdr+0x514/0x750 [ 261.055516][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 261.055562][ T4524] ___sys_recvmsg+0x19d/0x870 [ 261.055592][ T4524] do_recvmmsg+0x63a/0x10a0 [ 261.055621][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.055651][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.055688][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 261.055719][ T4524] do_fast_syscall_32+0x33/0x70 [ 261.055762][ T4524] do_SYSENTER_32+0x1b/0x20 [ 261.055795][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 261.055847][ T4524] [ 261.055852][ T4524] Uninit was stored to memory at: [ 261.055902][ T4524] __get_compat_msghdr+0x514/0x750 [ 261.055949][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 261.055994][ T4524] ___sys_recvmsg+0x19d/0x870 [ 261.056025][ T4524] do_recvmmsg+0x63a/0x10a0 [ 261.056054][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.056084][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.056121][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 261.056152][ T4524] do_fast_syscall_32+0x33/0x70 [ 261.056182][ T4524] do_SYSENTER_32+0x1b/0x20 [ 261.056211][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 261.056263][ T4524] [ 261.056267][ T4524] Uninit was stored to memory at: [ 261.056317][ T4524] __get_compat_msghdr+0x514/0x750 [ 261.056364][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 261.056409][ T4524] ___sys_recvmsg+0x19d/0x870 [ 261.056440][ T4524] do_recvmmsg+0x63a/0x10a0 [ 261.056469][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.056499][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.056536][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 261.056567][ T4524] do_fast_syscall_32+0x33/0x70 09:44:00 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r2, &(0x7f00000003c0), 0x109, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}], 0x2, 0x0, &(0x7f0000000280)={[0x4]}, 0x8) 09:44:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000105}]}) 09:44:00 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) 09:44:00 executing program 1: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x140) 09:44:00 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00ff03000000090500000000000600"], 0x0) 09:44:00 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x641) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x68, 0x12, 0x401, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x8, 0x1080}, [@IFLA_MAP={0x24, 0xe, {0x101000000000, 0x100000001, 0x58, 0x0, 0x5}}, @IFLA_PHYS_SWITCH_ID={0x4}, @IFLA_WEIGHT={0x8, 0xf, 0x9c}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x8a7e}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x6}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1ff}]}, 0x68}}, 0x4000) write$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000e00)) read$hidraw(r1, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io(r4, 0x0, 0x0) write$char_usb(r3, 0x0, 0x0) write$char_usb(r3, 0x0, 0x0) [ 261.056597][ T4524] do_SYSENTER_32+0x1b/0x20 [ 261.056626][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 261.056678][ T4524] [ 261.056682][ T4524] Uninit was stored to memory at: [ 261.056732][ T4524] __get_compat_msghdr+0x514/0x750 [ 261.056784][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 261.056830][ T4524] ___sys_recvmsg+0x19d/0x870 [ 261.056860][ T4524] do_recvmmsg+0x63a/0x10a0 [ 261.056889][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.056920][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.056956][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 261.056987][ T4524] do_fast_syscall_32+0x33/0x70 [ 261.057017][ T4524] do_SYSENTER_32+0x1b/0x20 [ 261.057046][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 261.057098][ T4524] [ 261.057103][ T4524] Uninit was stored to memory at: [ 261.057153][ T4524] __get_compat_msghdr+0x514/0x750 [ 261.057199][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 261.057245][ T4524] ___sys_recvmsg+0x19d/0x870 [ 261.057275][ T4524] do_recvmmsg+0x63a/0x10a0 [ 261.057304][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.057335][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.057372][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 261.057402][ T4524] do_fast_syscall_32+0x33/0x70 [ 261.057432][ T4524] do_SYSENTER_32+0x1b/0x20 [ 261.057461][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 261.057513][ T4524] [ 261.057518][ T4524] Uninit was stored to memory at: [ 261.057568][ T4524] __get_compat_msghdr+0x514/0x750 [ 261.057614][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 261.057659][ T4524] ___sys_recvmsg+0x19d/0x870 [ 261.057691][ T4524] do_recvmmsg+0x63a/0x10a0 [ 261.057721][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.057751][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.057792][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 261.057823][ T4524] do_fast_syscall_32+0x33/0x70 [ 261.057853][ T4524] do_SYSENTER_32+0x1b/0x20 [ 261.057882][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 261.057933][ T4524] [ 261.057938][ T4524] Uninit was stored to memory at: [ 261.057988][ T4524] __get_compat_msghdr+0x514/0x750 [ 261.058034][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 261.058080][ T4524] ___sys_recvmsg+0x19d/0x870 [ 261.058110][ T4524] do_recvmmsg+0x63a/0x10a0 [ 261.058140][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.058170][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.058207][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 261.058238][ T4524] do_fast_syscall_32+0x33/0x70 [ 261.058268][ T4524] do_SYSENTER_32+0x1b/0x20 [ 261.058297][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 261.058348][ T4524] [ 261.058354][ T4524] Local variable msg_sys created at: [ 261.058364][ T4524] do_recvmmsg+0x5f/0x10a0 [ 261.058391][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.600120][ T4524] not chained 110000 origins [ 261.600143][ T4524] CPU: 0 PID: 4524 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 261.600189][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.600211][ T4524] Call Trace: [ 261.600223][ T4524] [ 261.600234][ T4524] dump_stack_lvl+0x1c8/0x256 [ 261.600310][ T4524] dump_stack+0x1a/0x1c [ 261.600361][ T4524] kmsan_internal_chain_origin+0x78/0x120 [ 261.600414][ T4524] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 261.600466][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 261.600514][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 261.600570][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 261.600618][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 261.600676][ T4524] ? __get_compat_msghdr+0x5b/0x750 [ 261.600737][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 261.600784][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 261.600842][ T4524] ? should_fail+0x3f/0x810 [ 261.600892][ T4524] ? __stack_depot_save+0x21/0x4b0 [ 261.600939][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 261.600989][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 261.601042][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 261.601091][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 261.601145][ T4524] __msan_chain_origin+0xbd/0x140 [ 261.601193][ T4524] __get_compat_msghdr+0x514/0x750 [ 261.601267][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 261.601331][ T4524] ? ___sys_recvmsg+0xa9/0x870 [ 261.601372][ T4524] ? do_recvmmsg+0x63a/0x10a0 [ 261.601416][ T4524] ___sys_recvmsg+0x19d/0x870 [ 261.601462][ T4524] ? __schedule+0x1609/0x21d0 [ 261.601508][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 261.601558][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 261.601613][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 261.601666][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 261.601724][ T4524] do_recvmmsg+0x63a/0x10a0 [ 261.601777][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 261.601836][ T4524] ? __sys_recvmmsg+0x52/0x450 [ 261.601878][ T4524] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.601930][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.601972][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 261.602027][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.602085][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 261.602128][ T4524] ? exit_to_user_mode_prepare+0x119/0x220 [ 261.602179][ T4524] do_fast_syscall_32+0x33/0x70 [ 261.602222][ T4524] do_SYSENTER_32+0x1b/0x20 [ 261.602264][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 261.602338][ T4524] RIP: 0023:0xf7fec549 [ 261.602367][ T4524] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 261.602409][ T4524] RSP: 002b:00000000f7fc65cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 261.602450][ T4524] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 261.602481][ T4524] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 261.602508][ T4524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.602533][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.602559][ T4524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.602596][ T4524] [ 261.603006][ T4524] Uninit was stored to memory at: [ 261.603073][ T4524] __get_compat_msghdr+0x514/0x750 [ 261.603133][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 261.603192][ T4524] ___sys_recvmsg+0x19d/0x870 [ 261.603230][ T4524] do_recvmmsg+0x63a/0x10a0 [ 261.603269][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.603313][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.603361][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 261.603401][ T4524] do_fast_syscall_32+0x33/0x70 [ 261.603440][ T4524] do_SYSENTER_32+0x1b/0x20 [ 261.603478][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 261.603543][ T4524] [ 261.603550][ T4524] Uninit was stored to memory at: [ 261.603612][ T4524] __get_compat_msghdr+0x514/0x750 [ 261.603670][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 261.603724][ T4524] ___sys_recvmsg+0x19d/0x870 [ 261.603761][ T4524] do_recvmmsg+0x63a/0x10a0 [ 261.603798][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.603836][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.603883][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 261.603922][ T4524] do_fast_syscall_32+0x33/0x70 [ 261.603959][ T4524] do_SYSENTER_32+0x1b/0x20 [ 261.603997][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 261.604060][ T4524] [ 261.604067][ T4524] Uninit was stored to memory at: [ 261.604128][ T4524] __get_compat_msghdr+0x514/0x750 [ 261.604186][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 261.604242][ T4524] ___sys_recvmsg+0x19d/0x870 [ 261.604285][ T4524] do_recvmmsg+0x63a/0x10a0 [ 261.604322][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.604360][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.604406][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 261.604445][ T4524] do_fast_syscall_32+0x33/0x70 [ 261.604483][ T4524] do_SYSENTER_32+0x1b/0x20 [ 261.604519][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 261.604584][ T4524] [ 261.604590][ T4524] Uninit was stored to memory at: [ 261.604654][ T4524] __get_compat_msghdr+0x514/0x750 [ 261.604712][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 261.604770][ T4524] ___sys_recvmsg+0x19d/0x870 [ 261.604809][ T4524] do_recvmmsg+0x63a/0x10a0 [ 261.604847][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.604886][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.604933][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 261.604973][ T4524] do_fast_syscall_32+0x33/0x70 [ 261.605012][ T4524] do_SYSENTER_32+0x1b/0x20 [ 261.605050][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 261.605115][ T4524] [ 261.605121][ T4524] Uninit was stored to memory at: [ 261.605184][ T4524] __get_compat_msghdr+0x514/0x750 [ 261.605243][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 261.605306][ T4524] ___sys_recvmsg+0x19d/0x870 [ 261.605345][ T4524] do_recvmmsg+0x63a/0x10a0 [ 261.605383][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.605422][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.605469][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 261.605509][ T4524] do_fast_syscall_32+0x33/0x70 [ 261.605548][ T4524] do_SYSENTER_32+0x1b/0x20 [ 261.605585][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 261.605651][ T4524] [ 261.605657][ T4524] Uninit was stored to memory at: [ 261.605720][ T4524] __get_compat_msghdr+0x514/0x750 [ 261.605779][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 261.605836][ T4524] ___sys_recvmsg+0x19d/0x870 [ 261.605875][ T4524] do_recvmmsg+0x63a/0x10a0 [ 261.605913][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.605952][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.605999][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 261.606039][ T4524] do_fast_syscall_32+0x33/0x70 [ 261.606077][ T4524] do_SYSENTER_32+0x1b/0x20 [ 261.606114][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 261.606180][ T4524] [ 261.606186][ T4524] Uninit was stored to memory at: [ 261.606249][ T4524] __get_compat_msghdr+0x514/0x750 [ 261.606313][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 261.606370][ T4524] ___sys_recvmsg+0x19d/0x870 [ 261.606409][ T4524] do_recvmmsg+0x63a/0x10a0 [ 261.606446][ T4524] __sys_recvmmsg+0x113/0x450 [ 261.606486][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 261.606533][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 261.606573][ T4524] do_fast_syscall_32+0x33/0x70 [ 261.606611][ T4524] do_SYSENTER_32+0x1b/0x20 [ 261.606649][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 261.606715][ T4524] [ 261.606722][ T4524] Local variable msg_sys created at: [ 261.606734][ T4524] do_recvmmsg+0x5f/0x10a0 [ 261.606770][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.246619][ T4524] not chained 120000 origins [ 262.246644][ T4524] CPU: 1 PID: 4524 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 262.246692][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.246716][ T4524] Call Trace: [ 262.246730][ T4524] [ 262.246744][ T4524] dump_stack_lvl+0x1c8/0x256 [ 262.246836][ T4524] dump_stack+0x1a/0x1c [ 262.246893][ T4524] kmsan_internal_chain_origin+0x78/0x120 [ 262.246948][ T4524] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 262.247009][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 262.247060][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 262.247119][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 262.247170][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 262.247230][ T4524] ? __get_compat_msghdr+0x5b/0x750 [ 262.247296][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 262.247349][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 262.247409][ T4524] ? should_fail+0x3f/0x810 [ 262.247462][ T4524] ? __stack_depot_save+0x21/0x4b0 [ 262.247512][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 262.247564][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 262.247622][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 262.247674][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 262.247732][ T4524] __msan_chain_origin+0xbd/0x140 [ 262.247784][ T4524] __get_compat_msghdr+0x514/0x750 [ 262.247867][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 262.247932][ T4524] ? ___sys_recvmsg+0xa9/0x870 [ 262.247974][ T4524] ? do_recvmmsg+0x63a/0x10a0 [ 262.248020][ T4524] ___sys_recvmsg+0x19d/0x870 [ 262.248068][ T4524] ? __schedule+0x1609/0x21d0 [ 262.248121][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 262.248174][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 262.248230][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 262.248282][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 262.248342][ T4524] do_recvmmsg+0x63a/0x10a0 [ 262.248397][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 262.248457][ T4524] ? __sys_recvmmsg+0x52/0x450 [ 262.248499][ T4524] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.248562][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.248606][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 262.248664][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.248723][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 262.248767][ T4524] ? exit_to_user_mode_prepare+0x119/0x220 [ 262.248826][ T4524] do_fast_syscall_32+0x33/0x70 [ 262.248871][ T4524] do_SYSENTER_32+0x1b/0x20 [ 262.248913][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 262.248984][ T4524] RIP: 0023:0xf7fec549 [ 262.249019][ T4524] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 262.249062][ T4524] RSP: 002b:00000000f7fc65cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 262.249104][ T4524] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 262.249136][ T4524] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 262.249163][ T4524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.249188][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.249215][ T4524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.249253][ T4524] [ 262.249266][ T4524] Uninit was stored to memory at: [ 262.249332][ T4524] __get_compat_msghdr+0x514/0x750 [ 262.249394][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 262.249454][ T4524] ___sys_recvmsg+0x19d/0x870 [ 262.249494][ T4524] do_recvmmsg+0x63a/0x10a0 [ 262.249533][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.249573][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.249622][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 262.249662][ T4524] do_fast_syscall_32+0x33/0x70 [ 262.249700][ T4524] do_SYSENTER_32+0x1b/0x20 [ 262.249739][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 262.249812][ T4524] [ 262.249819][ T4524] Uninit was stored to memory at: [ 262.249885][ T4524] __get_compat_msghdr+0x514/0x750 [ 262.249946][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 262.250006][ T4524] ___sys_recvmsg+0x19d/0x870 [ 262.250046][ T4524] do_recvmmsg+0x63a/0x10a0 [ 262.250085][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.250126][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.250175][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 262.250215][ T4524] do_fast_syscall_32+0x33/0x70 [ 262.250255][ T4524] do_SYSENTER_32+0x1b/0x20 [ 262.250293][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 262.250360][ T4524] [ 262.250366][ T4524] Uninit was stored to memory at: [ 262.250431][ T4524] __get_compat_msghdr+0x514/0x750 [ 262.250491][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 262.250550][ T4524] ___sys_recvmsg+0x19d/0x870 [ 262.250590][ T4524] do_recvmmsg+0x63a/0x10a0 [ 262.250629][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.250669][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.250716][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 262.250757][ T4524] do_fast_syscall_32+0x33/0x70 [ 262.250802][ T4524] do_SYSENTER_32+0x1b/0x20 [ 262.250840][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 262.250907][ T4524] [ 262.250914][ T4524] Uninit was stored to memory at: [ 262.250978][ T4524] __get_compat_msghdr+0x514/0x750 [ 262.251038][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 262.251098][ T4524] ___sys_recvmsg+0x19d/0x870 [ 262.251137][ T4524] do_recvmmsg+0x63a/0x10a0 [ 262.251177][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.251222][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.251270][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 262.251311][ T4524] do_fast_syscall_32+0x33/0x70 [ 262.251351][ T4524] do_SYSENTER_32+0x1b/0x20 [ 262.251390][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 262.251458][ T4524] [ 262.251464][ T4524] Uninit was stored to memory at: [ 262.251529][ T4524] __get_compat_msghdr+0x514/0x750 [ 262.251590][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 262.251989][ T4524] ___sys_recvmsg+0x19d/0x870 [ 262.252030][ T4524] do_recvmmsg+0x63a/0x10a0 [ 262.252070][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.252110][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.252159][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 262.252201][ T4524] do_fast_syscall_32+0x33/0x70 [ 262.252246][ T4524] do_SYSENTER_32+0x1b/0x20 [ 262.252285][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 262.252353][ T4524] [ 262.252359][ T4524] Uninit was stored to memory at: [ 262.252428][ T4524] __get_compat_msghdr+0x514/0x750 [ 262.252489][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 262.252549][ T4524] ___sys_recvmsg+0x19d/0x870 [ 262.252590][ T4524] do_recvmmsg+0x63a/0x10a0 [ 262.252629][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.252670][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.252718][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 262.252760][ T4524] do_fast_syscall_32+0x33/0x70 [ 262.252806][ T4524] do_SYSENTER_32+0x1b/0x20 [ 262.252845][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 262.252912][ T4524] [ 262.252919][ T4524] Uninit was stored to memory at: [ 262.252985][ T4524] __get_compat_msghdr+0x514/0x750 [ 262.253046][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 262.253106][ T4524] ___sys_recvmsg+0x19d/0x870 [ 262.253145][ T4524] do_recvmmsg+0x63a/0x10a0 [ 262.253185][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.253225][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.253280][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 262.253321][ T4524] do_fast_syscall_32+0x33/0x70 [ 262.253361][ T4524] do_SYSENTER_32+0x1b/0x20 [ 262.253399][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 262.253467][ T4524] [ 262.253474][ T4524] Local variable msg_sys created at: [ 262.253488][ T4524] do_recvmmsg+0x5f/0x10a0 [ 262.253524][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.680912][ T4524] not chained 130000 origins [ 262.680936][ T4524] CPU: 1 PID: 4524 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 262.680984][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.681009][ T4524] Call Trace: [ 262.681024][ T4524] [ 262.681038][ T4524] dump_stack_lvl+0x1c8/0x256 [ 262.681109][ T4524] dump_stack+0x1a/0x1c [ 262.681166][ T4524] kmsan_internal_chain_origin+0x78/0x120 [ 262.681221][ T4524] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 262.681276][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 262.681329][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 262.681387][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 262.681439][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 262.681500][ T4524] ? __get_compat_msghdr+0x5b/0x750 [ 262.681564][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 262.681625][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 262.681686][ T4524] ? should_fail+0x3f/0x810 [ 262.681740][ T4524] ? __stack_depot_save+0x21/0x4b0 [ 262.681829][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 262.681881][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 262.681940][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 262.681993][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 262.682052][ T4524] __msan_chain_origin+0xbd/0x140 [ 262.682105][ T4524] __get_compat_msghdr+0x514/0x750 [ 262.682183][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 262.682248][ T4524] ? ___sys_recvmsg+0xa9/0x870 [ 262.682291][ T4524] ? do_recvmmsg+0x63a/0x10a0 [ 262.682337][ T4524] ___sys_recvmsg+0x19d/0x870 [ 262.682392][ T4524] ? __schedule+0x1609/0x21d0 [ 262.682442][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 262.682494][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 262.682551][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 262.682604][ T4524] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 262.682665][ T4524] do_recvmmsg+0x63a/0x10a0 [ 262.682726][ T4524] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 262.682793][ T4524] ? __sys_recvmmsg+0x52/0x450 [ 262.682836][ T4524] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.682892][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.682936][ T4524] ? kmsan_get_metadata+0x33/0x220 [ 262.682995][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.683056][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 262.683099][ T4524] ? exit_to_user_mode_prepare+0x119/0x220 [ 262.683153][ T4524] do_fast_syscall_32+0x33/0x70 [ 262.683198][ T4524] do_SYSENTER_32+0x1b/0x20 [ 262.683241][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 262.683313][ T4524] RIP: 0023:0xf7fec549 [ 262.683343][ T4524] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 262.683388][ T4524] RSP: 002b:00000000f7fc65cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 262.683431][ T4524] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 262.683463][ T4524] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 262.683490][ T4524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.683515][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.683543][ T4524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.683581][ T4524] [ 262.683903][ T4524] Uninit was stored to memory at: [ 262.683971][ T4524] __get_compat_msghdr+0x514/0x750 [ 262.684033][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 262.684093][ T4524] ___sys_recvmsg+0x19d/0x870 [ 262.684132][ T4524] do_recvmmsg+0x63a/0x10a0 [ 262.684172][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.684213][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.684261][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 262.684302][ T4524] do_fast_syscall_32+0x33/0x70 [ 262.684342][ T4524] do_SYSENTER_32+0x1b/0x20 [ 262.684380][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 262.684448][ T4524] [ 262.684454][ T4524] Uninit was stored to memory at: [ 262.684519][ T4524] __get_compat_msghdr+0x514/0x750 [ 262.684580][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 262.684640][ T4524] ___sys_recvmsg+0x19d/0x870 [ 262.684679][ T4524] do_recvmmsg+0x63a/0x10a0 [ 262.684718][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.684769][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.684818][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 262.684859][ T4524] do_fast_syscall_32+0x33/0x70 [ 262.684898][ T4524] do_SYSENTER_32+0x1b/0x20 [ 262.684936][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 262.685004][ T4524] [ 262.685010][ T4524] Uninit was stored to memory at: [ 262.685075][ T4524] __get_compat_msghdr+0x514/0x750 [ 262.685135][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 262.685195][ T4524] ___sys_recvmsg+0x19d/0x870 [ 262.685234][ T4524] do_recvmmsg+0x63a/0x10a0 [ 262.685273][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.685312][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.685359][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 262.685400][ T4524] do_fast_syscall_32+0x33/0x70 [ 262.685439][ T4524] do_SYSENTER_32+0x1b/0x20 [ 262.685478][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 262.685546][ T4524] [ 262.685552][ T4524] Uninit was stored to memory at: [ 262.685617][ T4524] __get_compat_msghdr+0x514/0x750 [ 262.688499][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 262.688560][ T4524] ___sys_recvmsg+0x19d/0x870 [ 262.688601][ T4524] do_recvmmsg+0x63a/0x10a0 [ 262.688640][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.688680][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.688729][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 262.688776][ T4524] do_fast_syscall_32+0x33/0x70 [ 262.688815][ T4524] do_SYSENTER_32+0x1b/0x20 [ 262.688854][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 262.688922][ T4524] [ 262.688928][ T4524] Uninit was stored to memory at: [ 262.688993][ T4524] __get_compat_msghdr+0x514/0x750 [ 262.689053][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 262.689113][ T4524] ___sys_recvmsg+0x19d/0x870 [ 262.689152][ T4524] do_recvmmsg+0x63a/0x10a0 [ 262.689192][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.689232][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.689281][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 262.689321][ T4524] do_fast_syscall_32+0x33/0x70 [ 262.689361][ T4524] do_SYSENTER_32+0x1b/0x20 [ 262.689399][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 262.689466][ T4524] [ 262.689473][ T4524] Uninit was stored to memory at: [ 262.689537][ T4524] __get_compat_msghdr+0x514/0x750 [ 262.689597][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 262.689657][ T4524] ___sys_recvmsg+0x19d/0x870 [ 262.689697][ T4524] do_recvmmsg+0x63a/0x10a0 [ 262.689735][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.689783][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.689831][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 262.689873][ T4524] do_fast_syscall_32+0x33/0x70 [ 262.689912][ T4524] do_SYSENTER_32+0x1b/0x20 [ 262.689950][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 262.690017][ T4524] [ 262.690023][ T4524] Uninit was stored to memory at: [ 262.690088][ T4524] __get_compat_msghdr+0x514/0x750 [ 262.690148][ T4524] get_compat_msghdr+0x8c/0x1c0 [ 262.690207][ T4524] ___sys_recvmsg+0x19d/0x870 [ 262.690247][ T4524] do_recvmmsg+0x63a/0x10a0 [ 262.690286][ T4524] __sys_recvmmsg+0x113/0x450 [ 262.690326][ T4524] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 262.690375][ T4524] __do_fast_syscall_32+0x95/0xf0 [ 262.690415][ T4524] do_fast_syscall_32+0x33/0x70 [ 262.690455][ T4524] do_SYSENTER_32+0x1b/0x20 [ 262.690493][ T4524] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 262.690559][ T4524] [ 262.690567][ T4524] Local variable msg_sys created at: [ 262.690580][ T4524] do_recvmmsg+0x5f/0x10a0 [ 262.690617][ T4524] __sys_recvmmsg+0x113/0x450 [ 263.482341][ T115] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 263.752451][ T115] usb 6-1: Using ep0 maxpacket: 8 [ 263.892665][ T115] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 263.892779][ T115] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 264.063073][ T115] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 264.063213][ T115] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.063318][ T115] usb 6-1: Product: syz [ 264.063402][ T115] usb 6-1: Manufacturer: syz [ 264.063485][ T115] usb 6-1: SerialNumber: syz [ 264.338756][ T115] usb 6-1: USB disconnect, device number 44 09:44:02 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r2, &(0x7f00000003c0), 0x109, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}], 0x2, 0x0, &(0x7f0000000280)={[0x4]}, 0x8) 09:44:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000105}]}) 09:44:02 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00ff0300000009050000000000060009"], 0x0) 09:44:02 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8) 09:44:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',access=any,version=9p2000.u,loose,debug=0xffffffffffffff01,version=9p2000.L,cache=loose,fsname']) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000400000001400128009000100766574680000000004000280080013", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, &(0x7f0000001500), 0x41100, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001580)={0x2, 0x8, 0x0, 0x40}, 0x10}, 0x80) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001640), 0x4100, 0x0) process_vm_readv(0x0, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/172, 0xac}], 0x1, &(0x7f0000001f00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 09:44:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x277, 0x0, 0x2}]}) 09:44:09 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') setns(r0, 0x40000000) 09:44:09 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r0, 0x5450, 0x0) 09:44:09 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00ff0300000009050000000000060009"], 0x0) 09:44:09 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') setns(r0, 0x80) 09:44:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',access=any,version=9p2000.u,loose,debug=0xffffffffffffff01,version=9p2000.L,cache=loose,fsname']) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000400000001400128009000100766574680000000004000280080013", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, &(0x7f0000001500), 0x41100, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001580)={0x2, 0x8, 0x0, 0x40}, 0x10}, 0x80) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001640), 0x4100, 0x0) process_vm_readv(0x0, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/172, 0xac}], 0x1, &(0x7f0000001f00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 09:44:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) [ 265.902162][ T3559] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 266.142967][ T3559] usb 3-1: Using ep0 maxpacket: 8 [ 266.175585][ T4591] Error: Driver 'raw-gadget' is already registered, aborting... [ 266.175646][ T4591] UDC core: USB Raw Gadget: driver registration failed: -16 [ 266.175725][ T4591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.242317][ T3559] usb 3-1: device descriptor read/all, error -71 [ 267.107243][ T4582] not chained 140000 origins [ 267.107274][ T4582] CPU: 1 PID: 4582 Comm: syz-executor.1 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 267.107324][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.107350][ T4582] Call Trace: [ 267.107363][ T4582] [ 267.107376][ T4582] dump_stack_lvl+0x1c8/0x256 [ 267.107447][ T4582] dump_stack+0x1a/0x1c [ 267.107503][ T4582] kmsan_internal_chain_origin+0x78/0x120 [ 267.107561][ T4582] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 267.107617][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 267.107669][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 267.107727][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 267.107779][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 267.107839][ T4582] ? __get_compat_msghdr+0x5b/0x750 [ 267.107902][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 267.107954][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 267.108014][ T4582] ? should_fail+0x3f/0x810 [ 267.108066][ T4582] ? __stack_depot_save+0x21/0x4b0 [ 267.108115][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 267.108166][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 267.108223][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 267.108279][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 267.108336][ T4582] __msan_chain_origin+0xbd/0x140 [ 267.108388][ T4582] __get_compat_msghdr+0x514/0x750 [ 267.108463][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 267.108526][ T4582] ? ___sys_recvmsg+0xa9/0x870 [ 267.108569][ T4582] ? do_recvmmsg+0x63a/0x10a0 [ 267.108614][ T4582] ___sys_recvmsg+0x19d/0x870 09:44:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3d, &(0x7f0000000380)={0x0, 0x0}, 0x10) 09:44:10 executing program 3: select(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x4}, 0x0, 0x0) 09:44:10 executing program 0: socketpair(0x11, 0xa, 0xffff7ffc, &(0x7f0000000040)) 09:44:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000380)={0x0, 0x0}, 0x10) [ 267.108662][ T4582] ? __schedule+0x1609/0x21d0 [ 267.108709][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 267.108760][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 267.108816][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 267.108868][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 267.108927][ T4582] do_recvmmsg+0x63a/0x10a0 [ 267.108981][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 267.109041][ T4582] ? __sys_recvmmsg+0x52/0x450 [ 267.109083][ T4582] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.109138][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.109180][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 267.109237][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.109300][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 267.109344][ T4582] ? exit_to_user_mode_prepare+0x119/0x220 [ 267.109395][ T4582] do_fast_syscall_32+0x33/0x70 [ 267.109439][ T4582] do_SYSENTER_32+0x1b/0x20 [ 267.109481][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.109551][ T4582] RIP: 0023:0xf7f09549 [ 267.109580][ T4582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 267.109624][ T4582] RSP: 002b:00000000f7ee35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 267.109666][ T4582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 267.109697][ T4582] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 267.109723][ T4582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.109749][ T4582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.109774][ T4582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.109812][ T4582] [ 267.110027][ T4582] Uninit was stored to memory at: [ 267.110092][ T4582] __get_compat_msghdr+0x514/0x750 [ 267.110154][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 267.110213][ T4582] ___sys_recvmsg+0x19d/0x870 [ 267.110253][ T4582] do_recvmmsg+0x63a/0x10a0 [ 267.110296][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.110337][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.110387][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 267.110427][ T4582] do_fast_syscall_32+0x33/0x70 [ 267.110466][ T4582] do_SYSENTER_32+0x1b/0x20 [ 267.110504][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.110571][ T4582] [ 267.110577][ T4582] Uninit was stored to memory at: [ 267.110640][ T4582] __get_compat_msghdr+0x514/0x750 [ 267.110700][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 267.110758][ T4582] ___sys_recvmsg+0x19d/0x870 [ 267.110798][ T4582] do_recvmmsg+0x63a/0x10a0 [ 267.110837][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.110877][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.110925][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 267.110965][ T4582] do_fast_syscall_32+0x33/0x70 [ 267.111003][ T4582] do_SYSENTER_32+0x1b/0x20 [ 267.111041][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.111106][ T4582] [ 267.111113][ T4582] Uninit was stored to memory at: [ 267.111175][ T4582] __get_compat_msghdr+0x514/0x750 [ 267.111234][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 267.111298][ T4582] ___sys_recvmsg+0x19d/0x870 [ 267.111337][ T4582] do_recvmmsg+0x63a/0x10a0 [ 267.111375][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.111414][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.111461][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 267.111501][ T4582] do_fast_syscall_32+0x33/0x70 [ 267.111540][ T4582] do_SYSENTER_32+0x1b/0x20 [ 267.111577][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.112570][ T4582] [ 267.112577][ T4582] Uninit was stored to memory at: [ 267.112642][ T4582] __get_compat_msghdr+0x514/0x750 [ 267.112703][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 267.112760][ T4582] ___sys_recvmsg+0x19d/0x870 [ 267.112799][ T4582] do_recvmmsg+0x63a/0x10a0 [ 267.112837][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.112875][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.112921][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 267.112962][ T4582] do_fast_syscall_32+0x33/0x70 [ 267.113000][ T4582] do_SYSENTER_32+0x1b/0x20 [ 267.113038][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.113111][ T4582] [ 267.113117][ T4582] Uninit was stored to memory at: [ 267.113180][ T4582] __get_compat_msghdr+0x514/0x750 [ 267.113238][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 267.113301][ T4582] ___sys_recvmsg+0x19d/0x870 [ 267.113340][ T4582] do_recvmmsg+0x63a/0x10a0 [ 267.113377][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.113416][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.113463][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 267.113503][ T4582] do_fast_syscall_32+0x33/0x70 [ 267.113541][ T4582] do_SYSENTER_32+0x1b/0x20 [ 267.113579][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.113644][ T4582] [ 267.113650][ T4582] Uninit was stored to memory at: [ 267.113713][ T4582] __get_compat_msghdr+0x514/0x750 [ 267.113771][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 267.113829][ T4582] ___sys_recvmsg+0x19d/0x870 [ 267.113867][ T4582] do_recvmmsg+0x63a/0x10a0 [ 267.113905][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.113945][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.113992][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 267.114031][ T4582] do_fast_syscall_32+0x33/0x70 [ 267.114070][ T4582] do_SYSENTER_32+0x1b/0x20 [ 267.114106][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.114172][ T4582] [ 267.114178][ T4582] Uninit was stored to memory at: [ 267.114240][ T4582] __get_compat_msghdr+0x514/0x750 [ 267.114306][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 267.114367][ T4582] ___sys_recvmsg+0x19d/0x870 [ 267.114405][ T4582] do_recvmmsg+0x63a/0x10a0 [ 267.114443][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.114482][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.114529][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 267.114569][ T4582] do_fast_syscall_32+0x33/0x70 [ 267.114607][ T4582] do_SYSENTER_32+0x1b/0x20 [ 267.114645][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.114711][ T4582] [ 267.114718][ T4582] Local variable msg_sys created at: [ 267.114731][ T4582] do_recvmmsg+0x5f/0x10a0 [ 267.114767][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.653689][ T4582] not chained 150000 origins [ 267.653714][ T4582] CPU: 1 PID: 4582 Comm: syz-executor.1 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 267.653761][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.653783][ T4582] Call Trace: [ 267.653795][ T4582] [ 267.653808][ T4582] dump_stack_lvl+0x1c8/0x256 [ 267.653876][ T4582] dump_stack+0x1a/0x1c [ 267.653931][ T4582] kmsan_internal_chain_origin+0x78/0x120 [ 267.653984][ T4582] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 267.654037][ T4582] ? kmsan_get_metadata+0x33/0x220 09:44:11 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008839af08aa14260288770102030109023600020500000009da9da7af7e95f51b09050000000062000009050b00ff0300000009050000000000060009"], 0x0) [ 267.654088][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 267.654144][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 267.654193][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 267.654251][ T4582] ? __get_compat_msghdr+0x5b/0x750 [ 267.654322][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 267.654373][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 267.654434][ T4582] ? should_fail+0x3f/0x810 [ 267.654486][ T4582] ? __stack_depot_save+0x21/0x4b0 [ 267.654536][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 267.654586][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 267.654643][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 267.654693][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 267.654749][ T4582] __msan_chain_origin+0xbd/0x140 [ 267.654800][ T4582] __get_compat_msghdr+0x514/0x750 [ 267.654874][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 267.654935][ T4582] ? ___sys_recvmsg+0xa9/0x870 [ 267.654977][ T4582] ? do_recvmmsg+0x63a/0x10a0 [ 267.655022][ T4582] ___sys_recvmsg+0x19d/0x870 [ 267.655068][ T4582] ? __schedule+0x1609/0x21d0 [ 267.655115][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 267.655165][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 267.655219][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 267.655270][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 267.655337][ T4582] do_recvmmsg+0x63a/0x10a0 [ 267.655392][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 267.655450][ T4582] ? __sys_recvmmsg+0x52/0x450 [ 267.655491][ T4582] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.655545][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.655586][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 267.655643][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.655702][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 267.655744][ T4582] ? exit_to_user_mode_prepare+0x119/0x220 [ 267.655814][ T4582] do_fast_syscall_32+0x33/0x70 [ 267.655857][ T4582] do_SYSENTER_32+0x1b/0x20 [ 267.655898][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.655968][ T4582] RIP: 0023:0xf7f09549 [ 267.655997][ T4582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 267.656040][ T4582] RSP: 002b:00000000f7ee35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 267.656082][ T4582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 267.656113][ T4582] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 267.656139][ T4582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.656165][ T4582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.656191][ T4582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.656229][ T4582] [ 267.656339][ T4582] Uninit was stored to memory at: [ 267.656403][ T4582] __get_compat_msghdr+0x514/0x750 [ 267.656464][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 267.656523][ T4582] ___sys_recvmsg+0x19d/0x870 [ 267.656563][ T4582] do_recvmmsg+0x63a/0x10a0 [ 267.656601][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.656640][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.656687][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 267.656727][ T4582] do_fast_syscall_32+0x33/0x70 [ 267.656764][ T4582] do_SYSENTER_32+0x1b/0x20 [ 267.656801][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.656865][ T4582] [ 267.656870][ T4582] Uninit was stored to memory at: [ 267.656931][ T4582] __get_compat_msghdr+0x514/0x750 [ 267.656990][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 267.657046][ T4582] ___sys_recvmsg+0x19d/0x870 [ 267.657084][ T4582] do_recvmmsg+0x63a/0x10a0 [ 267.657122][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.657161][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.657207][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 267.657247][ T4582] do_fast_syscall_32+0x33/0x70 [ 267.657291][ T4582] do_SYSENTER_32+0x1b/0x20 [ 267.657329][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.657395][ T4582] [ 267.657401][ T4582] Uninit was stored to memory at: [ 267.657463][ T4582] __get_compat_msghdr+0x514/0x750 [ 267.657523][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 267.657580][ T4582] ___sys_recvmsg+0x19d/0x870 [ 267.657620][ T4582] do_recvmmsg+0x63a/0x10a0 [ 267.657659][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.657698][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.657745][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 267.657786][ T4582] do_fast_syscall_32+0x33/0x70 [ 267.657826][ T4582] do_SYSENTER_32+0x1b/0x20 [ 267.657863][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.657929][ T4582] [ 267.657935][ T4582] Uninit was stored to memory at: [ 267.657998][ T4582] __get_compat_msghdr+0x514/0x750 [ 267.658057][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 267.658115][ T4582] ___sys_recvmsg+0x19d/0x870 [ 267.658154][ T4582] do_recvmmsg+0x63a/0x10a0 [ 267.658192][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.658231][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.658283][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 267.658323][ T4582] do_fast_syscall_32+0x33/0x70 [ 267.658362][ T4582] do_SYSENTER_32+0x1b/0x20 [ 267.658399][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.658465][ T4582] [ 267.658471][ T4582] Uninit was stored to memory at: [ 267.658533][ T4582] __get_compat_msghdr+0x514/0x750 [ 267.658592][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 267.658650][ T4582] ___sys_recvmsg+0x19d/0x870 [ 267.658689][ T4582] do_recvmmsg+0x63a/0x10a0 [ 267.658727][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.658767][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.658814][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 267.658854][ T4582] do_fast_syscall_32+0x33/0x70 [ 267.658893][ T4582] do_SYSENTER_32+0x1b/0x20 [ 267.658931][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.658998][ T4582] [ 267.659004][ T4582] Uninit was stored to memory at: [ 267.659067][ T4582] __get_compat_msghdr+0x514/0x750 [ 267.659127][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 267.659185][ T4582] ___sys_recvmsg+0x19d/0x870 [ 267.659222][ T4582] do_recvmmsg+0x63a/0x10a0 [ 267.659260][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.659307][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.659353][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 267.659393][ T4582] do_fast_syscall_32+0x33/0x70 [ 267.659431][ T4582] do_SYSENTER_32+0x1b/0x20 [ 267.659468][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.659532][ T4582] [ 267.659538][ T4582] Uninit was stored to memory at: [ 267.659599][ T4582] __get_compat_msghdr+0x514/0x750 [ 267.659658][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 267.659713][ T4582] ___sys_recvmsg+0x19d/0x870 [ 267.659751][ T4582] do_recvmmsg+0x63a/0x10a0 [ 267.659789][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.659827][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.659873][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 267.659913][ T4582] do_fast_syscall_32+0x33/0x70 [ 267.659952][ T4582] do_SYSENTER_32+0x1b/0x20 [ 267.659988][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.660054][ T4582] [ 267.660061][ T4582] Local variable msg_sys created at: [ 267.660074][ T4582] do_recvmmsg+0x5f/0x10a0 [ 267.660111][ T4582] __sys_recvmmsg+0x113/0x450 [ 267.968488][ T4599] not chained 160000 origins [ 267.968512][ T4599] CPU: 1 PID: 4599 Comm: syz-executor.2 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 267.968559][ T4599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.968583][ T4599] Call Trace: [ 267.968596][ T4599] [ 267.968608][ T4599] dump_stack_lvl+0x1c8/0x256 [ 267.968678][ T4599] dump_stack+0x1a/0x1c [ 267.968731][ T4599] kmsan_internal_chain_origin+0x78/0x120 [ 267.968784][ T4599] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 267.968838][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 267.968889][ T4599] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 267.968945][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 267.968996][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 267.969055][ T4599] ? __get_compat_msghdr+0x5b/0x750 [ 267.969119][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 267.969170][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 267.969228][ T4599] ? should_fail+0x3f/0x810 [ 267.969287][ T4599] ? __stack_depot_save+0x21/0x4b0 [ 267.969336][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 267.969388][ T4599] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 267.969444][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 267.969495][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 267.969551][ T4599] __msan_chain_origin+0xbd/0x140 [ 267.969601][ T4599] __get_compat_msghdr+0x514/0x750 [ 267.969675][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 267.969738][ T4599] ? ___sys_recvmsg+0xa9/0x870 [ 267.969779][ T4599] ? do_recvmmsg+0x63a/0x10a0 [ 267.969824][ T4599] ___sys_recvmsg+0x19d/0x870 [ 267.969871][ T4599] ? __schedule+0x1609/0x21d0 [ 267.969918][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 267.969968][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 267.970023][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 267.970075][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 267.970133][ T4599] do_recvmmsg+0x63a/0x10a0 [ 267.970186][ T4599] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 267.970245][ T4599] ? __sys_recvmmsg+0x52/0x450 [ 267.970291][ T4599] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.970344][ T4599] __sys_recvmmsg+0x113/0x450 [ 267.970387][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 267.970444][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.970502][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 267.970545][ T4599] ? exit_to_user_mode_prepare+0x119/0x220 [ 267.970596][ T4599] do_fast_syscall_32+0x33/0x70 [ 267.970640][ T4599] do_SYSENTER_32+0x1b/0x20 [ 267.970680][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.970749][ T4599] RIP: 0023:0xf7fc7549 [ 267.970778][ T4599] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 267.970821][ T4599] RSP: 002b:00000000f7fa15cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 267.970863][ T4599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 267.970893][ T4599] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 267.970921][ T4599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.970946][ T4599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.970972][ T4599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.971010][ T4599] [ 267.971022][ T4599] Uninit was stored to memory at: [ 267.971087][ T4599] __get_compat_msghdr+0x514/0x750 [ 267.971147][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 267.971204][ T4599] ___sys_recvmsg+0x19d/0x870 [ 267.971242][ T4599] do_recvmmsg+0x63a/0x10a0 [ 267.971286][ T4599] __sys_recvmmsg+0x113/0x450 [ 267.971325][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.971372][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 267.971412][ T4599] do_fast_syscall_32+0x33/0x70 [ 267.971450][ T4599] do_SYSENTER_32+0x1b/0x20 [ 267.971488][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.971553][ T4599] [ 267.971559][ T4599] Uninit was stored to memory at: [ 267.971925][ T4599] __get_compat_msghdr+0x514/0x750 [ 267.971987][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 267.972045][ T4599] ___sys_recvmsg+0x19d/0x870 [ 267.972083][ T4599] do_recvmmsg+0x63a/0x10a0 [ 267.972121][ T4599] __sys_recvmmsg+0x113/0x450 [ 267.972160][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.972207][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 267.972247][ T4599] do_fast_syscall_32+0x33/0x70 [ 267.972292][ T4599] do_SYSENTER_32+0x1b/0x20 [ 267.972330][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.972396][ T4599] [ 267.972402][ T4599] Uninit was stored to memory at: [ 267.972465][ T4599] __get_compat_msghdr+0x514/0x750 [ 267.972524][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 267.972581][ T4599] ___sys_recvmsg+0x19d/0x870 [ 267.972620][ T4599] do_recvmmsg+0x63a/0x10a0 [ 267.972658][ T4599] __sys_recvmmsg+0x113/0x450 [ 267.972697][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.972744][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 267.972784][ T4599] do_fast_syscall_32+0x33/0x70 [ 267.972822][ T4599] do_SYSENTER_32+0x1b/0x20 [ 267.972860][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.972926][ T4599] [ 267.972931][ T4599] Uninit was stored to memory at: [ 267.972994][ T4599] __get_compat_msghdr+0x514/0x750 [ 267.973054][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 267.973115][ T4599] ___sys_recvmsg+0x19d/0x870 [ 267.973154][ T4599] do_recvmmsg+0x63a/0x10a0 [ 267.973192][ T4599] __sys_recvmmsg+0x113/0x450 [ 267.973231][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.973282][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 267.973322][ T4599] do_fast_syscall_32+0x33/0x70 [ 267.973361][ T4599] do_SYSENTER_32+0x1b/0x20 [ 267.973399][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.973465][ T4599] [ 267.973472][ T4599] Uninit was stored to memory at: [ 267.973534][ T4599] __get_compat_msghdr+0x514/0x750 [ 267.973593][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 267.973652][ T4599] ___sys_recvmsg+0x19d/0x870 [ 267.973690][ T4599] do_recvmmsg+0x63a/0x10a0 [ 267.973729][ T4599] __sys_recvmmsg+0x113/0x450 [ 267.973768][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.973814][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 267.973853][ T4599] do_fast_syscall_32+0x33/0x70 [ 267.973892][ T4599] do_SYSENTER_32+0x1b/0x20 [ 267.973929][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.973991][ T4599] [ 267.973998][ T4599] Uninit was stored to memory at: [ 267.974058][ T4599] __get_compat_msghdr+0x514/0x750 [ 267.974116][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 267.974172][ T4599] ___sys_recvmsg+0x19d/0x870 [ 267.974210][ T4599] do_recvmmsg+0x63a/0x10a0 [ 267.974248][ T4599] __sys_recvmmsg+0x113/0x450 [ 267.974292][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.974336][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 267.974374][ T4599] do_fast_syscall_32+0x33/0x70 [ 267.974410][ T4599] do_SYSENTER_32+0x1b/0x20 [ 267.974447][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.974509][ T4599] [ 267.974515][ T4599] Uninit was stored to memory at: [ 267.974575][ T4599] __get_compat_msghdr+0x514/0x750 [ 267.974632][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 267.974688][ T4599] ___sys_recvmsg+0x19d/0x870 [ 267.974726][ T4599] do_recvmmsg+0x63a/0x10a0 [ 267.974765][ T4599] __sys_recvmmsg+0x113/0x450 [ 267.974804][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 267.974851][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 267.974890][ T4599] do_fast_syscall_32+0x33/0x70 [ 267.974926][ T4599] do_SYSENTER_32+0x1b/0x20 [ 267.974962][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 267.975024][ T4599] [ 267.975031][ T4599] Local variable msg_sys created at: [ 267.975044][ T4599] do_recvmmsg+0x5f/0x10a0 [ 267.975078][ T4599] __sys_recvmmsg+0x113/0x450 [ 268.357917][ T4582] not chained 170000 origins [ 268.357941][ T4582] CPU: 1 PID: 4582 Comm: syz-executor.1 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 268.357987][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.358011][ T4582] Call Trace: [ 268.358024][ T4582] [ 268.358037][ T4582] dump_stack_lvl+0x1c8/0x256 [ 268.358108][ T4582] dump_stack+0x1a/0x1c [ 268.358162][ T4582] kmsan_internal_chain_origin+0x78/0x120 [ 268.358215][ T4582] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 268.358270][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 268.358321][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 268.358378][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 268.358429][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 268.358489][ T4582] ? __get_compat_msghdr+0x5b/0x750 [ 268.358553][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 268.358604][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 268.358664][ T4582] ? should_fail+0x3f/0x810 [ 268.358715][ T4582] ? __stack_depot_save+0x21/0x4b0 [ 268.358764][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 268.358820][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 268.358876][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 268.358927][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 268.358983][ T4582] __msan_chain_origin+0xbd/0x140 [ 268.359033][ T4582] __get_compat_msghdr+0x514/0x750 [ 268.359108][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 268.359169][ T4582] ? ___sys_recvmsg+0xa9/0x870 [ 268.359211][ T4582] ? do_recvmmsg+0x63a/0x10a0 [ 268.359256][ T4582] ___sys_recvmsg+0x19d/0x870 [ 268.359302][ T4582] ? __schedule+0x1609/0x21d0 [ 268.359349][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 268.359400][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 268.359455][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 268.359506][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 268.359564][ T4582] do_recvmmsg+0x63a/0x10a0 [ 268.359617][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 268.359677][ T4582] ? __sys_recvmmsg+0x52/0x450 [ 268.359719][ T4582] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.359772][ T4582] __sys_recvmmsg+0x113/0x450 [ 268.359820][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 268.359877][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.359935][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 268.359978][ T4582] ? exit_to_user_mode_prepare+0x119/0x220 [ 268.360029][ T4582] do_fast_syscall_32+0x33/0x70 [ 268.360071][ T4582] do_SYSENTER_32+0x1b/0x20 [ 268.360112][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 268.360178][ T4582] RIP: 0023:0xf7f09549 [ 268.360208][ T4582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 268.360250][ T4582] RSP: 002b:00000000f7ee35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 268.360292][ T4582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 268.360321][ T4582] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 268.360346][ T4582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.360371][ T4582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.360396][ T4582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.360432][ T4582] [ 268.360445][ T4582] Uninit was stored to memory at: [ 268.360509][ T4582] __get_compat_msghdr+0x514/0x750 [ 268.360568][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 268.360627][ T4582] ___sys_recvmsg+0x19d/0x870 [ 268.360665][ T4582] do_recvmmsg+0x63a/0x10a0 [ 268.360703][ T4582] __sys_recvmmsg+0x113/0x450 [ 268.360742][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.360789][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 268.360835][ T4582] do_fast_syscall_32+0x33/0x70 [ 268.360873][ T4582] do_SYSENTER_32+0x1b/0x20 [ 268.360911][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 268.360977][ T4582] [ 268.360984][ T4582] Uninit was stored to memory at: [ 268.361047][ T4582] __get_compat_msghdr+0x514/0x750 [ 268.361107][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 268.361165][ T4582] ___sys_recvmsg+0x19d/0x870 [ 268.361204][ T4582] do_recvmmsg+0x63a/0x10a0 [ 268.361243][ T4582] __sys_recvmmsg+0x113/0x450 [ 268.361282][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.361329][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 268.361370][ T4582] do_fast_syscall_32+0x33/0x70 [ 268.361409][ T4582] do_SYSENTER_32+0x1b/0x20 [ 268.361446][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 268.361511][ T4582] [ 268.361518][ T4582] Uninit was stored to memory at: [ 268.361580][ T4582] __get_compat_msghdr+0x514/0x750 [ 268.361956][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 268.362014][ T4582] ___sys_recvmsg+0x19d/0x870 [ 268.362052][ T4582] do_recvmmsg+0x63a/0x10a0 [ 268.362089][ T4582] __sys_recvmmsg+0x113/0x450 [ 268.362128][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.362174][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 268.362214][ T4582] do_fast_syscall_32+0x33/0x70 [ 268.362252][ T4582] do_SYSENTER_32+0x1b/0x20 [ 268.362291][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 268.362356][ T4582] [ 268.362363][ T4582] Uninit was stored to memory at: [ 268.362427][ T4582] __get_compat_msghdr+0x514/0x750 [ 268.362485][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 268.362542][ T4582] ___sys_recvmsg+0x19d/0x870 [ 268.362579][ T4582] do_recvmmsg+0x63a/0x10a0 [ 268.362617][ T4582] __sys_recvmmsg+0x113/0x450 [ 268.362655][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.362701][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 268.362740][ T4582] do_fast_syscall_32+0x33/0x70 [ 268.362778][ T4582] do_SYSENTER_32+0x1b/0x20 [ 268.362821][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 268.362885][ T4582] [ 268.362891][ T4582] Uninit was stored to memory at: [ 268.362953][ T4582] __get_compat_msghdr+0x514/0x750 [ 268.363010][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 268.363075][ T4582] ___sys_recvmsg+0x19d/0x870 [ 268.363112][ T4582] do_recvmmsg+0x63a/0x10a0 [ 268.363150][ T4582] __sys_recvmmsg+0x113/0x450 [ 268.363189][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.363234][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 268.363272][ T4582] do_fast_syscall_32+0x33/0x70 [ 268.363311][ T4582] do_SYSENTER_32+0x1b/0x20 [ 268.363348][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 268.363411][ T4582] [ 268.363417][ T4582] Uninit was stored to memory at: [ 268.363480][ T4582] __get_compat_msghdr+0x514/0x750 [ 268.363537][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 268.363594][ T4582] ___sys_recvmsg+0x19d/0x870 [ 268.363632][ T4582] do_recvmmsg+0x63a/0x10a0 [ 268.363669][ T4582] __sys_recvmmsg+0x113/0x450 [ 268.363708][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.363754][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 268.363797][ T4582] do_fast_syscall_32+0x33/0x70 [ 268.363835][ T4582] do_SYSENTER_32+0x1b/0x20 [ 268.363872][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 268.363936][ T4582] [ 268.363942][ T4582] Uninit was stored to memory at: [ 268.364003][ T4582] __get_compat_msghdr+0x514/0x750 [ 268.364060][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 268.364117][ T4582] ___sys_recvmsg+0x19d/0x870 [ 268.364155][ T4582] do_recvmmsg+0x63a/0x10a0 [ 268.364192][ T4582] __sys_recvmmsg+0x113/0x450 [ 268.364230][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.364277][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 268.364316][ T4582] do_fast_syscall_32+0x33/0x70 [ 268.364354][ T4582] do_SYSENTER_32+0x1b/0x20 [ 268.364390][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 268.364455][ T4582] [ 268.364462][ T4582] Local variable msg_sys created at: [ 268.364474][ T4582] do_recvmmsg+0x5f/0x10a0 [ 268.364508][ T4582] __sys_recvmmsg+0x113/0x450 [ 268.699893][ T4599] not chained 180000 origins [ 268.699917][ T4599] CPU: 1 PID: 4599 Comm: syz-executor.2 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 268.699964][ T4599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.699987][ T4599] Call Trace: [ 268.699999][ T4599] [ 268.700012][ T4599] dump_stack_lvl+0x1c8/0x256 [ 268.700080][ T4599] dump_stack+0x1a/0x1c [ 268.700135][ T4599] kmsan_internal_chain_origin+0x78/0x120 [ 268.700188][ T4599] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 268.700240][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 268.700292][ T4599] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 268.700348][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 268.700397][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 268.700454][ T4599] ? __get_compat_msghdr+0x5b/0x750 [ 268.700515][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 268.700564][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 268.700624][ T4599] ? should_fail+0x3f/0x810 [ 268.700674][ T4599] ? __stack_depot_save+0x21/0x4b0 [ 268.700723][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 268.700774][ T4599] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 268.700834][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 268.700883][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 268.700938][ T4599] __msan_chain_origin+0xbd/0x140 [ 268.700988][ T4599] __get_compat_msghdr+0x514/0x750 [ 268.701060][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 268.701122][ T4599] ? ___sys_recvmsg+0xa9/0x870 [ 268.701163][ T4599] ? do_recvmmsg+0x63a/0x10a0 [ 268.701208][ T4599] ___sys_recvmsg+0x19d/0x870 [ 268.701254][ T4599] ? __schedule+0x1609/0x21d0 [ 268.701301][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 268.701352][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 268.701406][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 268.701458][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 268.701515][ T4599] do_recvmmsg+0x63a/0x10a0 [ 268.701569][ T4599] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 268.701628][ T4599] ? __sys_recvmmsg+0x52/0x450 [ 268.701669][ T4599] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.701722][ T4599] __sys_recvmmsg+0x113/0x450 [ 268.701764][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 268.701825][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.701882][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 268.701924][ T4599] ? exit_to_user_mode_prepare+0x119/0x220 [ 268.701976][ T4599] do_fast_syscall_32+0x33/0x70 [ 268.702019][ T4599] do_SYSENTER_32+0x1b/0x20 [ 268.702059][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 268.702128][ T4599] RIP: 0023:0xf7fc7549 [ 268.702158][ T4599] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 268.702200][ T4599] RSP: 002b:00000000f7fa15cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 268.702242][ T4599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 268.702272][ T4599] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 268.702299][ T4599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.702325][ T4599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.702351][ T4599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.702388][ T4599] [ 268.702862][ T4599] Uninit was stored to memory at: [ 268.702928][ T4599] __get_compat_msghdr+0x514/0x750 [ 268.702989][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 268.703047][ T4599] ___sys_recvmsg+0x19d/0x870 [ 268.703086][ T4599] do_recvmmsg+0x63a/0x10a0 [ 268.703124][ T4599] __sys_recvmmsg+0x113/0x450 [ 268.703163][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.703210][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 268.703249][ T4599] do_fast_syscall_32+0x33/0x70 [ 268.703288][ T4599] do_SYSENTER_32+0x1b/0x20 [ 268.703325][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 268.703390][ T4599] [ 268.703396][ T4599] Uninit was stored to memory at: [ 268.703458][ T4599] __get_compat_msghdr+0x514/0x750 [ 268.703516][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 268.703574][ T4599] ___sys_recvmsg+0x19d/0x870 [ 268.703612][ T4599] do_recvmmsg+0x63a/0x10a0 [ 268.703649][ T4599] __sys_recvmmsg+0x113/0x450 [ 268.703689][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.703735][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 268.703774][ T4599] do_fast_syscall_32+0x33/0x70 [ 268.703817][ T4599] do_SYSENTER_32+0x1b/0x20 [ 268.703853][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 268.703917][ T4599] [ 268.703923][ T4599] Uninit was stored to memory at: [ 268.703985][ T4599] __get_compat_msghdr+0x514/0x750 [ 268.704042][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 268.704098][ T4599] ___sys_recvmsg+0x19d/0x870 [ 268.704136][ T4599] do_recvmmsg+0x63a/0x10a0 [ 268.704173][ T4599] __sys_recvmmsg+0x113/0x450 [ 268.704212][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.704258][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 268.704297][ T4599] do_fast_syscall_32+0x33/0x70 [ 268.704335][ T4599] do_SYSENTER_32+0x1b/0x20 [ 268.704372][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 268.704437][ T4599] [ 268.704444][ T4599] Uninit was stored to memory at: [ 268.704506][ T4599] __get_compat_msghdr+0x514/0x750 [ 268.704564][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 268.704623][ T4599] ___sys_recvmsg+0x19d/0x870 [ 268.704661][ T4599] do_recvmmsg+0x63a/0x10a0 [ 268.704699][ T4599] __sys_recvmmsg+0x113/0x450 [ 268.704738][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.704783][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 268.704827][ T4599] do_fast_syscall_32+0x33/0x70 [ 268.704864][ T4599] do_SYSENTER_32+0x1b/0x20 [ 268.704902][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 268.704965][ T4599] [ 268.704972][ T4599] Uninit was stored to memory at: [ 268.705034][ T4599] __get_compat_msghdr+0x514/0x750 [ 268.705092][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 268.705148][ T4599] ___sys_recvmsg+0x19d/0x870 [ 268.705186][ T4599] do_recvmmsg+0x63a/0x10a0 [ 268.705223][ T4599] __sys_recvmmsg+0x113/0x450 [ 268.705261][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.705308][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 268.705347][ T4599] do_fast_syscall_32+0x33/0x70 [ 268.705385][ T4599] do_SYSENTER_32+0x1b/0x20 [ 268.705421][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 268.705486][ T4599] [ 268.705492][ T4599] Uninit was stored to memory at: [ 268.705555][ T4599] __get_compat_msghdr+0x514/0x750 [ 268.705612][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 268.705669][ T4599] ___sys_recvmsg+0x19d/0x870 [ 268.705707][ T4599] do_recvmmsg+0x63a/0x10a0 [ 268.705745][ T4599] __sys_recvmmsg+0x113/0x450 [ 268.705784][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.705836][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 268.705876][ T4599] do_fast_syscall_32+0x33/0x70 [ 268.705914][ T4599] do_SYSENTER_32+0x1b/0x20 [ 268.705951][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 09:44:14 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/pid\x00') [ 268.706016][ T4599] [ 268.706022][ T4599] Uninit was stored to memory at: [ 268.706084][ T4599] __get_compat_msghdr+0x514/0x750 [ 268.706142][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 268.706200][ T4599] ___sys_recvmsg+0x19d/0x870 [ 268.706238][ T4599] do_recvmmsg+0x63a/0x10a0 [ 268.706276][ T4599] __sys_recvmmsg+0x113/0x450 [ 268.706315][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 268.706362][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 268.706401][ T4599] do_fast_syscall_32+0x33/0x70 [ 268.706440][ T4599] do_SYSENTER_32+0x1b/0x20 [ 268.706477][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 268.706542][ T4599] [ 268.706549][ T4599] Local variable msg_sys created at: [ 268.706562][ T4599] do_recvmmsg+0x5f/0x10a0 [ 268.706596][ T4599] __sys_recvmmsg+0x113/0x450 [ 269.018895][ T4582] not chained 190000 origins [ 269.018921][ T4582] CPU: 1 PID: 4582 Comm: syz-executor.1 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 269.018969][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.018993][ T4582] Call Trace: [ 269.019005][ T4582] [ 269.019018][ T4582] dump_stack_lvl+0x1c8/0x256 [ 269.019088][ T4582] dump_stack+0x1a/0x1c [ 269.019142][ T4582] kmsan_internal_chain_origin+0x78/0x120 [ 269.019196][ T4582] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 269.019250][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 269.019304][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 269.019361][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 269.019411][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.019471][ T4582] ? __get_compat_msghdr+0x5b/0x750 [ 269.019535][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 269.019585][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.019644][ T4582] ? should_fail+0x3f/0x810 [ 269.019695][ T4582] ? __stack_depot_save+0x21/0x4b0 [ 269.019744][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 269.019799][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 269.019855][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 269.019906][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.019962][ T4582] __msan_chain_origin+0xbd/0x140 [ 269.020013][ T4582] __get_compat_msghdr+0x514/0x750 [ 269.020090][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 269.020153][ T4582] ? ___sys_recvmsg+0xa9/0x870 [ 269.020194][ T4582] ? do_recvmmsg+0x63a/0x10a0 [ 269.020238][ T4582] ___sys_recvmsg+0x19d/0x870 [ 269.020285][ T4582] ? __schedule+0x1609/0x21d0 [ 269.020332][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 269.020382][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.020437][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 269.020487][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.020547][ T4582] do_recvmmsg+0x63a/0x10a0 [ 269.020600][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 269.020658][ T4582] ? __sys_recvmmsg+0x52/0x450 [ 269.020700][ T4582] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.020754][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.020799][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 269.020856][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.020914][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 269.020956][ T4582] ? exit_to_user_mode_prepare+0x119/0x220 [ 269.021008][ T4582] do_fast_syscall_32+0x33/0x70 [ 269.021050][ T4582] do_SYSENTER_32+0x1b/0x20 [ 269.021091][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.021160][ T4582] RIP: 0023:0xf7f09549 [ 269.021188][ T4582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 09:44:14 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r0, 0x40305839, 0x0) 09:44:14 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000000140)="0f", 0x1}], 0x3}, 0x0) [ 269.021231][ T4582] RSP: 002b:00000000f7ee35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 269.021273][ T4582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 269.021302][ T4582] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 269.021329][ T4582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 269.021355][ T4582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.021380][ T4582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.021417][ T4582] 09:44:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvlan0\x00'}) [ 269.021515][ T4582] Uninit was stored to memory at: [ 269.021579][ T4582] __get_compat_msghdr+0x514/0x750 [ 269.021902][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 269.021959][ T4582] ___sys_recvmsg+0x19d/0x870 [ 269.021996][ T4582] do_recvmmsg+0x63a/0x10a0 [ 269.022032][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.022069][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.022114][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 269.022154][ T4582] do_fast_syscall_32+0x33/0x70 [ 269.022191][ T4582] do_SYSENTER_32+0x1b/0x20 [ 269.022227][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.022292][ T4582] [ 269.022298][ T4582] Uninit was stored to memory at: [ 269.022359][ T4582] __get_compat_msghdr+0x514/0x750 [ 269.022418][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 269.022475][ T4582] ___sys_recvmsg+0x19d/0x870 [ 269.022513][ T4582] do_recvmmsg+0x63a/0x10a0 [ 269.022551][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.022589][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.022635][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 269.022674][ T4582] do_fast_syscall_32+0x33/0x70 [ 269.022711][ T4582] do_SYSENTER_32+0x1b/0x20 [ 269.022748][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.022817][ T4582] [ 269.022823][ T4582] Uninit was stored to memory at: [ 269.022885][ T4582] __get_compat_msghdr+0x514/0x750 [ 269.022941][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 269.022999][ T4582] ___sys_recvmsg+0x19d/0x870 [ 269.023037][ T4582] do_recvmmsg+0x63a/0x10a0 [ 269.023073][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.023113][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.023160][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 269.023198][ T4582] do_fast_syscall_32+0x33/0x70 [ 269.023236][ T4582] do_SYSENTER_32+0x1b/0x20 [ 269.023272][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.023337][ T4582] [ 269.023342][ T4582] Uninit was stored to memory at: [ 269.023404][ T4582] __get_compat_msghdr+0x514/0x750 [ 269.023461][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 269.023517][ T4582] ___sys_recvmsg+0x19d/0x870 [ 269.023555][ T4582] do_recvmmsg+0x63a/0x10a0 [ 269.023593][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.023630][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.023676][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 269.023716][ T4582] do_fast_syscall_32+0x33/0x70 [ 269.023752][ T4582] do_SYSENTER_32+0x1b/0x20 [ 269.023789][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.023859][ T4582] [ 269.023865][ T4582] Uninit was stored to memory at: [ 269.023926][ T4582] __get_compat_msghdr+0x514/0x750 [ 269.023984][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 269.024040][ T4582] ___sys_recvmsg+0x19d/0x870 [ 269.024078][ T4582] do_recvmmsg+0x63a/0x10a0 [ 269.024115][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.024153][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.024199][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 269.024238][ T4582] do_fast_syscall_32+0x33/0x70 [ 269.024276][ T4582] do_SYSENTER_32+0x1b/0x20 [ 269.024312][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.024377][ T4582] [ 269.024384][ T4582] Uninit was stored to memory at: [ 269.024444][ T4582] __get_compat_msghdr+0x514/0x750 [ 269.024502][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 269.024559][ T4582] ___sys_recvmsg+0x19d/0x870 [ 269.024597][ T4582] do_recvmmsg+0x63a/0x10a0 [ 269.024633][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.024673][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.024719][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 269.024757][ T4582] do_fast_syscall_32+0x33/0x70 [ 269.024799][ T4582] do_SYSENTER_32+0x1b/0x20 [ 269.024837][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.024900][ T4582] [ 269.024906][ T4582] Uninit was stored to memory at: [ 269.024968][ T4582] __get_compat_msghdr+0x514/0x750 [ 269.025025][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 269.025082][ T4582] ___sys_recvmsg+0x19d/0x870 [ 269.025120][ T4582] do_recvmmsg+0x63a/0x10a0 [ 269.025157][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.025195][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.025242][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 269.025281][ T4582] do_fast_syscall_32+0x33/0x70 [ 269.025318][ T4582] do_SYSENTER_32+0x1b/0x20 [ 269.025356][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.025420][ T4582] [ 269.025427][ T4582] Local variable msg_sys created at: [ 269.025439][ T4582] do_recvmmsg+0x5f/0x10a0 [ 269.025473][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.340762][ T4580] not chained 200000 origins [ 269.340790][ T4580] CPU: 0 PID: 4580 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 269.340838][ T4580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.340862][ T4580] Call Trace: [ 269.340874][ T4580] [ 269.340888][ T4580] dump_stack_lvl+0x1c8/0x256 [ 269.340957][ T4580] dump_stack+0x1a/0x1c [ 269.341011][ T4580] kmsan_internal_chain_origin+0x78/0x120 [ 269.341064][ T4580] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 269.341118][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 269.341168][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 269.341225][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 269.341275][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.341334][ T4580] ? __get_compat_msghdr+0x5b/0x750 [ 269.341397][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 269.341447][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.341506][ T4580] ? should_fail+0x3f/0x810 [ 269.341556][ T4580] ? __stack_depot_save+0x21/0x4b0 [ 269.341606][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 269.341658][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 269.341714][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 269.341762][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.341827][ T4580] __msan_chain_origin+0xbd/0x140 [ 269.341875][ T4580] __get_compat_msghdr+0x514/0x750 [ 269.341945][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 269.342004][ T4580] ? ___sys_recvmsg+0xa9/0x870 [ 269.342044][ T4580] ? do_recvmmsg+0x63a/0x10a0 [ 269.342086][ T4580] ___sys_recvmsg+0x19d/0x870 [ 269.342131][ T4580] ? __schedule+0x1609/0x21d0 [ 269.342176][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 269.342224][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.342278][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 269.342325][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.342382][ T4580] do_recvmmsg+0x63a/0x10a0 [ 269.342433][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 269.342488][ T4580] ? __sys_recvmmsg+0x52/0x450 [ 269.342528][ T4580] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.342578][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.342619][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 269.342672][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.342728][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 269.342769][ T4580] ? exit_to_user_mode_prepare+0x119/0x220 [ 269.342824][ T4580] do_fast_syscall_32+0x33/0x70 [ 269.342865][ T4580] do_SYSENTER_32+0x1b/0x20 [ 269.342904][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.342970][ T4580] RIP: 0023:0xf7fec549 [ 269.342999][ T4580] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 269.343040][ T4580] RSP: 002b:00000000f7fc65cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 269.343080][ T4580] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 269.343109][ T4580] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 269.343134][ T4580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 269.343162][ T4580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.343187][ T4580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.343222][ T4580] [ 269.345566][ T4580] Uninit was stored to memory at: [ 269.345632][ T4580] __get_compat_msghdr+0x514/0x750 [ 269.345691][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 269.345748][ T4580] ___sys_recvmsg+0x19d/0x870 [ 269.345792][ T4580] do_recvmmsg+0x63a/0x10a0 [ 269.345828][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.345867][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.345913][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 269.345952][ T4580] do_fast_syscall_32+0x33/0x70 [ 269.345990][ T4580] do_SYSENTER_32+0x1b/0x20 [ 269.346027][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.346091][ T4580] [ 269.346098][ T4580] Uninit was stored to memory at: [ 269.346159][ T4580] __get_compat_msghdr+0x514/0x750 [ 269.346218][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 269.346276][ T4580] ___sys_recvmsg+0x19d/0x870 [ 269.346314][ T4580] do_recvmmsg+0x63a/0x10a0 [ 269.346353][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.346392][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.346439][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 269.346479][ T4580] do_fast_syscall_32+0x33/0x70 [ 269.346517][ T4580] do_SYSENTER_32+0x1b/0x20 [ 269.346555][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.346620][ T4580] [ 269.346626][ T4580] Uninit was stored to memory at: [ 269.346689][ T4580] __get_compat_msghdr+0x514/0x750 [ 269.346749][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 269.346813][ T4580] ___sys_recvmsg+0x19d/0x870 [ 269.346852][ T4580] do_recvmmsg+0x63a/0x10a0 [ 269.346890][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.346929][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.346976][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 269.347016][ T4580] do_fast_syscall_32+0x33/0x70 [ 269.347054][ T4580] do_SYSENTER_32+0x1b/0x20 [ 269.347092][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.347157][ T4580] [ 269.347163][ T4580] Uninit was stored to memory at: [ 269.347226][ T4580] __get_compat_msghdr+0x514/0x750 [ 269.347285][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 269.347342][ T4580] ___sys_recvmsg+0x19d/0x870 [ 269.347381][ T4580] do_recvmmsg+0x63a/0x10a0 [ 269.347419][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.347459][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.347506][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 269.347546][ T4580] do_fast_syscall_32+0x33/0x70 [ 269.347585][ T4580] do_SYSENTER_32+0x1b/0x20 [ 269.347622][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.347688][ T4580] [ 269.347693][ T4580] Uninit was stored to memory at: [ 269.347756][ T4580] __get_compat_msghdr+0x514/0x750 [ 269.347819][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 269.347877][ T4580] ___sys_recvmsg+0x19d/0x870 [ 269.347916][ T4580] do_recvmmsg+0x63a/0x10a0 [ 269.347954][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.347993][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.348040][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 269.348080][ T4580] do_fast_syscall_32+0x33/0x70 [ 269.348119][ T4580] do_SYSENTER_32+0x1b/0x20 [ 269.348157][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.348222][ T4580] [ 269.348228][ T4580] Uninit was stored to memory at: [ 269.348291][ T4580] __get_compat_msghdr+0x514/0x750 [ 269.348350][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 269.348408][ T4580] ___sys_recvmsg+0x19d/0x870 [ 269.348446][ T4580] do_recvmmsg+0x63a/0x10a0 [ 269.348484][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.348523][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.348570][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 269.348609][ T4580] do_fast_syscall_32+0x33/0x70 [ 269.348648][ T4580] do_SYSENTER_32+0x1b/0x20 [ 269.348685][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.348751][ T4580] [ 269.348756][ T4580] Uninit was stored to memory at: [ 269.348824][ T4580] __get_compat_msghdr+0x514/0x750 [ 269.348883][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 269.348941][ T4580] ___sys_recvmsg+0x19d/0x870 [ 269.348979][ T4580] do_recvmmsg+0x63a/0x10a0 [ 269.349017][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.349056][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.349103][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 269.349143][ T4580] do_fast_syscall_32+0x33/0x70 [ 269.349181][ T4580] do_SYSENTER_32+0x1b/0x20 [ 269.349219][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.349285][ T4580] [ 269.349292][ T4580] Local variable msg_sys created at: [ 269.349304][ T4580] do_recvmmsg+0x5f/0x10a0 [ 269.349340][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.666740][ T4582] not chained 210000 origins [ 269.666763][ T4582] CPU: 1 PID: 4582 Comm: syz-executor.1 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 269.666810][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.666833][ T4582] Call Trace: [ 269.666846][ T4582] [ 269.666859][ T4582] dump_stack_lvl+0x1c8/0x256 [ 269.666928][ T4582] dump_stack+0x1a/0x1c [ 269.666982][ T4582] kmsan_internal_chain_origin+0x78/0x120 [ 269.667035][ T4582] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 269.667089][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 269.667140][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 269.667196][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 269.667247][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.667312][ T4582] ? __get_compat_msghdr+0x5b/0x750 [ 269.667377][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 269.667428][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.667486][ T4582] ? should_fail+0x3f/0x810 [ 269.667536][ T4582] ? __stack_depot_save+0x21/0x4b0 [ 269.667585][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 269.667635][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 269.667691][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 269.667743][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.667799][ T4582] __msan_chain_origin+0xbd/0x140 [ 269.667851][ T4582] __get_compat_msghdr+0x514/0x750 [ 269.667926][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 269.667990][ T4582] ? ___sys_recvmsg+0xa9/0x870 [ 269.668033][ T4582] ? do_recvmmsg+0x63a/0x10a0 [ 269.668079][ T4582] ___sys_recvmsg+0x19d/0x870 [ 269.668127][ T4582] ? __schedule+0x1609/0x21d0 [ 269.668176][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 269.668228][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.668283][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 269.668342][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.668402][ T4582] do_recvmmsg+0x63a/0x10a0 [ 269.668456][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 269.668516][ T4582] ? __sys_recvmmsg+0x52/0x450 [ 269.668558][ T4582] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.668612][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.668654][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 269.668711][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.668769][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 269.668812][ T4582] ? exit_to_user_mode_prepare+0x119/0x220 [ 269.668864][ T4582] do_fast_syscall_32+0x33/0x70 [ 269.668907][ T4582] do_SYSENTER_32+0x1b/0x20 [ 269.668947][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.669017][ T4582] RIP: 0023:0xf7f09549 [ 269.669046][ T4582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 269.669089][ T4582] RSP: 002b:00000000f7ee35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 269.669131][ T4582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 269.669162][ T4582] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 269.669188][ T4582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 269.669213][ T4582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.669239][ T4582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.669276][ T4582] [ 269.669294][ T4582] Uninit was stored to memory at: [ 269.669358][ T4582] __get_compat_msghdr+0x514/0x750 [ 269.669418][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 269.669476][ T4582] ___sys_recvmsg+0x19d/0x870 [ 269.669515][ T4582] do_recvmmsg+0x63a/0x10a0 [ 269.669553][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.669592][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.669640][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 269.669680][ T4582] do_fast_syscall_32+0x33/0x70 [ 269.669720][ T4582] do_SYSENTER_32+0x1b/0x20 [ 269.669758][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.669824][ T4582] 09:44:16 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x200001, 0x0) [ 269.669830][ T4582] Uninit was stored to memory at: [ 269.669893][ T4582] __get_compat_msghdr+0x514/0x750 [ 269.669952][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 269.670010][ T4582] ___sys_recvmsg+0x19d/0x870 [ 269.670048][ T4582] do_recvmmsg+0x63a/0x10a0 [ 269.670086][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.670126][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.670172][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 269.670212][ T4582] do_fast_syscall_32+0x33/0x70 [ 269.670251][ T4582] do_SYSENTER_32+0x1b/0x20 [ 269.670293][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.670359][ T4582] [ 269.670365][ T4582] Uninit was stored to memory at: [ 269.670428][ T4582] __get_compat_msghdr+0x514/0x750 [ 269.670486][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 269.670544][ T4582] ___sys_recvmsg+0x19d/0x870 [ 269.670582][ T4582] do_recvmmsg+0x63a/0x10a0 [ 269.670620][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.670659][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.670706][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 269.670746][ T4582] do_fast_syscall_32+0x33/0x70 [ 269.670784][ T4582] do_SYSENTER_32+0x1b/0x20 [ 269.670822][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.670887][ T4582] [ 269.670894][ T4582] Uninit was stored to memory at: [ 269.670957][ T4582] __get_compat_msghdr+0x514/0x750 [ 269.671017][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 269.671077][ T4582] ___sys_recvmsg+0x19d/0x870 [ 269.671120][ T4582] do_recvmmsg+0x63a/0x10a0 [ 269.671158][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.671196][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.671241][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 269.671280][ T4582] do_fast_syscall_32+0x33/0x70 [ 269.671324][ T4582] do_SYSENTER_32+0x1b/0x20 [ 269.671360][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.671424][ T4582] [ 269.671430][ T4582] Uninit was stored to memory at: [ 269.671493][ T4582] __get_compat_msghdr+0x514/0x750 [ 269.671550][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 269.671606][ T4582] ___sys_recvmsg+0x19d/0x870 [ 269.672116][ T4582] do_recvmmsg+0x63a/0x10a0 [ 269.672158][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.672197][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.672244][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 269.672290][ T4582] do_fast_syscall_32+0x33/0x70 [ 269.672329][ T4582] do_SYSENTER_32+0x1b/0x20 [ 269.672366][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.672433][ T4582] [ 269.672439][ T4582] Uninit was stored to memory at: [ 269.672502][ T4582] __get_compat_msghdr+0x514/0x750 [ 269.672562][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 269.672620][ T4582] ___sys_recvmsg+0x19d/0x870 [ 269.672658][ T4582] do_recvmmsg+0x63a/0x10a0 [ 269.672696][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.672735][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.672783][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 269.672823][ T4582] do_fast_syscall_32+0x33/0x70 [ 269.672861][ T4582] do_SYSENTER_32+0x1b/0x20 [ 269.672899][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.672965][ T4582] [ 269.672971][ T4582] Uninit was stored to memory at: [ 269.673033][ T4582] __get_compat_msghdr+0x514/0x750 [ 269.673093][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 269.673150][ T4582] ___sys_recvmsg+0x19d/0x870 [ 269.673189][ T4582] do_recvmmsg+0x63a/0x10a0 [ 269.673227][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.673266][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.673319][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 269.673359][ T4582] do_fast_syscall_32+0x33/0x70 [ 269.673398][ T4582] do_SYSENTER_32+0x1b/0x20 [ 269.673436][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.673502][ T4582] [ 269.673509][ T4582] Local variable msg_sys created at: [ 269.673522][ T4582] do_recvmmsg+0x5f/0x10a0 [ 269.673558][ T4582] __sys_recvmmsg+0x113/0x450 [ 269.918201][ T4580] not chained 220000 origins [ 269.918225][ T4580] CPU: 0 PID: 4580 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 269.918272][ T4580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.918296][ T4580] Call Trace: [ 269.918308][ T4580] [ 269.918322][ T4580] dump_stack_lvl+0x1c8/0x256 [ 269.918391][ T4580] dump_stack+0x1a/0x1c [ 269.918446][ T4580] kmsan_internal_chain_origin+0x78/0x120 [ 269.918498][ T4580] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 269.918552][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 269.918603][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 269.918659][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 269.918709][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.918768][ T4580] ? __get_compat_msghdr+0x5b/0x750 [ 269.918837][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 269.918887][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.918945][ T4580] ? should_fail+0x3f/0x810 [ 269.918995][ T4580] ? __stack_depot_save+0x21/0x4b0 [ 269.919043][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 269.919093][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 269.919148][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 269.919199][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.919254][ T4580] __msan_chain_origin+0xbd/0x140 [ 269.919305][ T4580] __get_compat_msghdr+0x514/0x750 [ 269.919379][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 269.919441][ T4580] ? ___sys_recvmsg+0xa9/0x870 [ 269.919483][ T4580] ? do_recvmmsg+0x63a/0x10a0 [ 269.919528][ T4580] ___sys_recvmsg+0x19d/0x870 [ 269.919574][ T4580] ? __schedule+0x1609/0x21d0 [ 269.919621][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 269.919671][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.919726][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 269.919776][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 269.919840][ T4580] do_recvmmsg+0x63a/0x10a0 [ 269.919893][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 269.919952][ T4580] ? __sys_recvmmsg+0x52/0x450 [ 269.919993][ T4580] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.920047][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.920088][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 269.920144][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.920202][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 269.920245][ T4580] ? exit_to_user_mode_prepare+0x119/0x220 [ 269.920296][ T4580] do_fast_syscall_32+0x33/0x70 [ 269.920339][ T4580] do_SYSENTER_32+0x1b/0x20 [ 269.920379][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.920448][ T4580] RIP: 0023:0xf7fec549 [ 269.920477][ T4580] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 269.920520][ T4580] RSP: 002b:00000000f7fc65cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 269.920561][ T4580] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 269.920591][ T4580] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 269.920618][ T4580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 269.920642][ T4580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.920668][ T4580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.920706][ T4580] [ 269.920718][ T4580] Uninit was stored to memory at: [ 269.920781][ T4580] __get_compat_msghdr+0x514/0x750 [ 269.920846][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 269.920904][ T4580] ___sys_recvmsg+0x19d/0x870 [ 269.920943][ T4580] do_recvmmsg+0x63a/0x10a0 [ 269.920981][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.921020][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.921067][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 269.921106][ T4580] do_fast_syscall_32+0x33/0x70 [ 269.921144][ T4580] do_SYSENTER_32+0x1b/0x20 [ 269.921181][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.921247][ T4580] [ 269.921253][ T4580] Uninit was stored to memory at: [ 269.921316][ T4580] __get_compat_msghdr+0x514/0x750 [ 269.921375][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 269.921433][ T4580] ___sys_recvmsg+0x19d/0x870 [ 269.921471][ T4580] do_recvmmsg+0x63a/0x10a0 [ 269.921509][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.921548][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.921595][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 269.921943][ T4580] do_fast_syscall_32+0x33/0x70 [ 269.921984][ T4580] do_SYSENTER_32+0x1b/0x20 [ 269.922022][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.922089][ T4580] [ 269.922095][ T4580] Uninit was stored to memory at: [ 269.922158][ T4580] __get_compat_msghdr+0x514/0x750 [ 269.922217][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 269.922276][ T4580] ___sys_recvmsg+0x19d/0x870 [ 269.922314][ T4580] do_recvmmsg+0x63a/0x10a0 [ 269.922353][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.922391][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.922439][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 269.922479][ T4580] do_fast_syscall_32+0x33/0x70 [ 269.922517][ T4580] do_SYSENTER_32+0x1b/0x20 [ 269.922555][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.922621][ T4580] [ 269.922627][ T4580] Uninit was stored to memory at: [ 269.922690][ T4580] __get_compat_msghdr+0x514/0x750 [ 269.922745][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 269.922804][ T4580] ___sys_recvmsg+0x19d/0x870 [ 269.922842][ T4580] do_recvmmsg+0x63a/0x10a0 [ 269.922879][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.922918][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.922964][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 269.923003][ T4580] do_fast_syscall_32+0x33/0x70 [ 269.923041][ T4580] do_SYSENTER_32+0x1b/0x20 [ 269.923077][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.923141][ T4580] [ 269.923147][ T4580] Uninit was stored to memory at: [ 269.923213][ T4580] __get_compat_msghdr+0x514/0x750 [ 269.923270][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 269.923328][ T4580] ___sys_recvmsg+0x19d/0x870 [ 269.923365][ T4580] do_recvmmsg+0x63a/0x10a0 [ 269.923402][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.923441][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.923487][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 269.923525][ T4580] do_fast_syscall_32+0x33/0x70 [ 269.923563][ T4580] do_SYSENTER_32+0x1b/0x20 [ 269.923600][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.923665][ T4580] [ 269.923671][ T4580] Uninit was stored to memory at: [ 269.923733][ T4580] __get_compat_msghdr+0x514/0x750 [ 269.923797][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 269.923856][ T4580] ___sys_recvmsg+0x19d/0x870 [ 269.923895][ T4580] do_recvmmsg+0x63a/0x10a0 [ 269.923932][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.923972][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.924019][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 269.924058][ T4580] do_fast_syscall_32+0x33/0x70 [ 269.924097][ T4580] do_SYSENTER_32+0x1b/0x20 [ 269.924135][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.924200][ T4580] [ 269.924206][ T4580] Uninit was stored to memory at: [ 269.924269][ T4580] __get_compat_msghdr+0x514/0x750 [ 269.924328][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 269.924385][ T4580] ___sys_recvmsg+0x19d/0x870 [ 269.924424][ T4580] do_recvmmsg+0x63a/0x10a0 [ 269.924462][ T4580] __sys_recvmmsg+0x113/0x450 [ 269.924501][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 269.924548][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 269.924588][ T4580] do_fast_syscall_32+0x33/0x70 [ 269.924626][ T4580] do_SYSENTER_32+0x1b/0x20 [ 269.924663][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 269.924729][ T4580] [ 269.924736][ T4580] Local variable msg_sys created at: [ 269.924749][ T4580] do_recvmmsg+0x5f/0x10a0 [ 269.924790][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.188004][ T4580] not chained 230000 origins [ 270.188028][ T4580] CPU: 0 PID: 4580 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 270.188075][ T4580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.188099][ T4580] Call Trace: [ 270.188111][ T4580] [ 270.188123][ T4580] dump_stack_lvl+0x1c8/0x256 [ 270.188193][ T4580] dump_stack+0x1a/0x1c [ 270.188247][ T4580] kmsan_internal_chain_origin+0x78/0x120 [ 270.188300][ T4580] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 270.188359][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 270.188410][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 270.188467][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 270.188517][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.188576][ T4580] ? __get_compat_msghdr+0x5b/0x750 [ 270.188639][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 270.188689][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.188747][ T4580] ? should_fail+0x3f/0x810 [ 270.188799][ T4580] ? __stack_depot_save+0x21/0x4b0 [ 270.188848][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 270.188898][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 270.188954][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 270.189004][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.189059][ T4580] __msan_chain_origin+0xbd/0x140 [ 270.189110][ T4580] __get_compat_msghdr+0x514/0x750 [ 270.189184][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 270.189246][ T4580] ? ___sys_recvmsg+0xa9/0x870 [ 270.189288][ T4580] ? do_recvmmsg+0x63a/0x10a0 [ 270.189337][ T4580] ___sys_recvmsg+0x19d/0x870 [ 270.189384][ T4580] ? __schedule+0x1609/0x21d0 [ 270.189430][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 270.189481][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.189536][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 270.189586][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.189645][ T4580] do_recvmmsg+0x63a/0x10a0 [ 270.189699][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 270.189758][ T4580] ? __sys_recvmmsg+0x52/0x450 [ 270.189798][ T4580] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.189852][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.189894][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 270.189951][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.190008][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 270.190051][ T4580] ? exit_to_user_mode_prepare+0x119/0x220 [ 270.190102][ T4580] do_fast_syscall_32+0x33/0x70 [ 270.190146][ T4580] do_SYSENTER_32+0x1b/0x20 [ 270.190186][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.190254][ T4580] RIP: 0023:0xf7fec549 [ 270.190283][ T4580] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 270.190331][ T4580] RSP: 002b:00000000f7fc65cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 270.190372][ T4580] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 270.190403][ T4580] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 270.190429][ T4580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.190454][ T4580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.190480][ T4580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.190518][ T4580] [ 270.190530][ T4580] Uninit was stored to memory at: [ 270.190594][ T4580] __get_compat_msghdr+0x514/0x750 [ 270.190653][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 270.190711][ T4580] ___sys_recvmsg+0x19d/0x870 [ 270.190750][ T4580] do_recvmmsg+0x63a/0x10a0 [ 270.190788][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.190833][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.190880][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 270.190920][ T4580] do_fast_syscall_32+0x33/0x70 [ 270.190959][ T4580] do_SYSENTER_32+0x1b/0x20 [ 270.190996][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.191062][ T4580] [ 270.191068][ T4580] Uninit was stored to memory at: [ 270.191131][ T4580] __get_compat_msghdr+0x514/0x750 [ 270.191189][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 270.191247][ T4580] ___sys_recvmsg+0x19d/0x870 [ 270.191286][ T4580] do_recvmmsg+0x63a/0x10a0 [ 270.191328][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.191367][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.191414][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 270.191454][ T4580] do_fast_syscall_32+0x33/0x70 [ 270.191493][ T4580] do_SYSENTER_32+0x1b/0x20 [ 270.191530][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.191595][ T4580] [ 270.191602][ T4580] Uninit was stored to memory at: [ 270.192367][ T4580] __get_compat_msghdr+0x514/0x750 [ 270.192429][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 270.192487][ T4580] ___sys_recvmsg+0x19d/0x870 [ 270.192526][ T4580] do_recvmmsg+0x63a/0x10a0 [ 270.192565][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.192604][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.192651][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 270.192691][ T4580] do_fast_syscall_32+0x33/0x70 [ 270.192730][ T4580] do_SYSENTER_32+0x1b/0x20 [ 270.192768][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.192833][ T4580] [ 270.192840][ T4580] Uninit was stored to memory at: [ 270.192899][ T4580] __get_compat_msghdr+0x514/0x750 [ 270.192954][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 270.193011][ T4580] ___sys_recvmsg+0x19d/0x870 [ 270.193049][ T4580] do_recvmmsg+0x63a/0x10a0 [ 270.193086][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.193125][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.193171][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 270.193214][ T4580] do_fast_syscall_32+0x33/0x70 [ 270.193253][ T4580] do_SYSENTER_32+0x1b/0x20 [ 270.193289][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.193358][ T4580] [ 270.193365][ T4580] Uninit was stored to memory at: [ 270.193425][ T4580] __get_compat_msghdr+0x514/0x750 [ 270.193483][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 270.193539][ T4580] ___sys_recvmsg+0x19d/0x870 [ 270.193577][ T4580] do_recvmmsg+0x63a/0x10a0 [ 270.193614][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.193652][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.193698][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 270.193736][ T4580] do_fast_syscall_32+0x33/0x70 [ 270.193775][ T4580] do_SYSENTER_32+0x1b/0x20 [ 270.193812][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.193876][ T4580] [ 270.193882][ T4580] Uninit was stored to memory at: [ 270.193945][ T4580] __get_compat_msghdr+0x514/0x750 [ 270.194004][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 270.194062][ T4580] ___sys_recvmsg+0x19d/0x870 [ 270.194101][ T4580] do_recvmmsg+0x63a/0x10a0 [ 270.194140][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.194180][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.194227][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 270.194267][ T4580] do_fast_syscall_32+0x33/0x70 [ 270.194305][ T4580] do_SYSENTER_32+0x1b/0x20 [ 270.194348][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.194414][ T4580] [ 270.194420][ T4580] Uninit was stored to memory at: [ 270.194483][ T4580] __get_compat_msghdr+0x514/0x750 [ 270.194541][ T4580] get_compat_msghdr+0x8c/0x1c0 09:44:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000efdd79b7c3654313ac0cec53e79dcbaf010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7465ce0800e3b36c6d792ca9e80f042b7a4556a669aa373bbe390900"]) 09:44:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01814d36942b8bd7dd7302"], 0x38}}, 0x0) 09:44:17 executing program 4: r0 = socket(0x18, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x700}, 0x0) 09:44:17 executing program 0: pipe2(&(0x7f0000000080), 0x80) 09:44:17 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={0x0, 0x1950}, 0x1, 0x7fffffffd6b0, 0x700}, 0x0) [ 270.194599][ T4580] ___sys_recvmsg+0x19d/0x870 [ 270.194638][ T4580] do_recvmmsg+0x63a/0x10a0 [ 270.194676][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.194716][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.194770][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 270.194809][ T4580] do_fast_syscall_32+0x33/0x70 [ 270.194848][ T4580] do_SYSENTER_32+0x1b/0x20 [ 270.194886][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.194951][ T4580] [ 270.194958][ T4580] Local variable msg_sys created at: [ 270.194971][ T4580] do_recvmmsg+0x5f/0x10a0 [ 270.195007][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.426249][ T4599] not chained 240000 origins [ 270.426278][ T4599] CPU: 1 PID: 4599 Comm: syz-executor.2 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 270.426326][ T4599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.426363][ T4599] Call Trace: [ 270.426376][ T4599] [ 270.426388][ T4599] dump_stack_lvl+0x1c8/0x256 [ 270.426459][ T4599] dump_stack+0x1a/0x1c [ 270.426513][ T4599] kmsan_internal_chain_origin+0x78/0x120 [ 270.426566][ T4599] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 270.426629][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 270.426680][ T4599] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 270.426736][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 270.426786][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.426844][ T4599] ? __get_compat_msghdr+0x5b/0x750 [ 270.426908][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 270.426958][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.427016][ T4599] ? should_fail+0x3f/0x810 [ 270.427067][ T4599] ? __stack_depot_save+0x21/0x4b0 [ 270.427116][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 270.427166][ T4599] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 270.427221][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 270.427276][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.427332][ T4599] __msan_chain_origin+0xbd/0x140 [ 270.427382][ T4599] __get_compat_msghdr+0x514/0x750 [ 270.427456][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 270.427517][ T4599] ? ___sys_recvmsg+0xa9/0x870 [ 270.427559][ T4599] ? do_recvmmsg+0x63a/0x10a0 [ 270.427604][ T4599] ___sys_recvmsg+0x19d/0x870 [ 270.427650][ T4599] ? __schedule+0x1609/0x21d0 [ 270.427697][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 270.427747][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.427802][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 270.427852][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.427910][ T4599] do_recvmmsg+0x63a/0x10a0 [ 270.427963][ T4599] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 270.428022][ T4599] ? __sys_recvmmsg+0x52/0x450 [ 270.428062][ T4599] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.428115][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.428157][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 270.428213][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.428275][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 270.428317][ T4599] ? exit_to_user_mode_prepare+0x119/0x220 [ 270.428369][ T4599] do_fast_syscall_32+0x33/0x70 [ 270.428412][ T4599] do_SYSENTER_32+0x1b/0x20 [ 270.428452][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.428521][ T4599] RIP: 0023:0xf7fc7549 [ 270.428549][ T4599] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 270.428592][ T4599] RSP: 002b:00000000f7fa15cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 270.428633][ T4599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 270.428663][ T4599] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 270.428689][ T4599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.428714][ T4599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.428740][ T4599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.428777][ T4599] [ 270.428789][ T4599] Uninit was stored to memory at: [ 270.428853][ T4599] __get_compat_msghdr+0x514/0x750 [ 270.428913][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 270.428970][ T4599] ___sys_recvmsg+0x19d/0x870 [ 270.429008][ T4599] do_recvmmsg+0x63a/0x10a0 [ 270.429046][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.429085][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.429132][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 270.429172][ T4599] do_fast_syscall_32+0x33/0x70 [ 270.429211][ T4599] do_SYSENTER_32+0x1b/0x20 [ 270.429248][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.429319][ T4599] [ 270.429325][ T4599] Uninit was stored to memory at: [ 270.429388][ T4599] __get_compat_msghdr+0x514/0x750 [ 270.429446][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 270.429503][ T4599] ___sys_recvmsg+0x19d/0x870 [ 270.429542][ T4599] do_recvmmsg+0x63a/0x10a0 [ 270.429580][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.429619][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.429666][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 270.429710][ T4599] do_fast_syscall_32+0x33/0x70 [ 270.429748][ T4599] do_SYSENTER_32+0x1b/0x20 [ 270.429786][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.429851][ T4599] [ 270.429858][ T4599] Uninit was stored to memory at: [ 270.429920][ T4599] __get_compat_msghdr+0x514/0x750 [ 270.429979][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 270.430036][ T4599] ___sys_recvmsg+0x19d/0x870 [ 270.430074][ T4599] do_recvmmsg+0x63a/0x10a0 [ 270.430113][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.430152][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.430199][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 270.430239][ T4599] do_fast_syscall_32+0x33/0x70 [ 270.430281][ T4599] do_SYSENTER_32+0x1b/0x20 [ 270.430319][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.430384][ T4599] [ 270.430390][ T4599] Uninit was stored to memory at: [ 270.430453][ T4599] __get_compat_msghdr+0x514/0x750 [ 270.430511][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 270.430568][ T4599] ___sys_recvmsg+0x19d/0x870 [ 270.430607][ T4599] do_recvmmsg+0x63a/0x10a0 [ 270.430644][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.430684][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.430730][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 270.430770][ T4599] do_fast_syscall_32+0x33/0x70 [ 270.430809][ T4599] do_SYSENTER_32+0x1b/0x20 [ 270.430847][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.430911][ T4599] [ 270.430917][ T4599] Uninit was stored to memory at: [ 270.430979][ T4599] __get_compat_msghdr+0x514/0x750 [ 270.431037][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 270.431092][ T4599] ___sys_recvmsg+0x19d/0x870 [ 270.431129][ T4599] do_recvmmsg+0x63a/0x10a0 [ 270.431166][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.431203][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.431250][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 270.431295][ T4599] do_fast_syscall_32+0x33/0x70 [ 270.431333][ T4599] do_SYSENTER_32+0x1b/0x20 [ 270.431370][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.431434][ T4599] [ 270.431441][ T4599] Uninit was stored to memory at: [ 270.431501][ T4599] __get_compat_msghdr+0x514/0x750 [ 270.431556][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 270.431611][ T4599] ___sys_recvmsg+0x19d/0x870 [ 270.432274][ T4599] do_recvmmsg+0x63a/0x10a0 [ 270.432314][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.432354][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.432402][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 270.432442][ T4599] do_fast_syscall_32+0x33/0x70 [ 270.432481][ T4599] do_SYSENTER_32+0x1b/0x20 [ 270.432518][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.432584][ T4599] [ 270.432590][ T4599] Uninit was stored to memory at: [ 270.432654][ T4599] __get_compat_msghdr+0x514/0x750 [ 270.432713][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 270.432770][ T4599] ___sys_recvmsg+0x19d/0x870 [ 270.432809][ T4599] do_recvmmsg+0x63a/0x10a0 [ 270.432847][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.432884][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.432928][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 270.432966][ T4599] do_fast_syscall_32+0x33/0x70 [ 270.433003][ T4599] do_SYSENTER_32+0x1b/0x20 [ 270.433041][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.433104][ T4599] [ 270.433111][ T4599] Local variable msg_sys created at: [ 270.433124][ T4599] do_recvmmsg+0x5f/0x10a0 09:44:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) fchmodat(0xffffffffffffffff, 0x0, 0x0) [ 270.433158][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.740753][ T4599] not chained 250000 origins [ 270.740776][ T4599] CPU: 1 PID: 4599 Comm: syz-executor.2 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 270.740824][ T4599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.740846][ T4599] Call Trace: [ 270.740859][ T4599] [ 270.740871][ T4599] dump_stack_lvl+0x1c8/0x256 [ 270.740940][ T4599] dump_stack+0x1a/0x1c [ 270.740993][ T4599] kmsan_internal_chain_origin+0x78/0x120 [ 270.741046][ T4599] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 270.741098][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 270.741147][ T4599] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 270.741202][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 270.741251][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.741314][ T4599] ? __get_compat_msghdr+0x5b/0x750 [ 270.741375][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 270.741423][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.741480][ T4599] ? should_fail+0x3f/0x810 09:44:18 executing program 3: fstatfs(0xffffffffffffffff, &(0x7f0000000140)=""/177) syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="68f567653d616c77617973"]) chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x15113d, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x240002) setsockopt$inet6_int(r3, 0x29, 0xc8, &(0x7f0000000080), 0x4) sendto$inet6(r2, 0x0, 0x0, 0x2400880c, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x10e) sendfile(r2, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000000)='./bus\x00', 0x0) [ 270.741531][ T4599] ? __stack_depot_save+0x21/0x4b0 [ 270.741578][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 270.741631][ T4599] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 270.741687][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 270.741737][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.741793][ T4599] __msan_chain_origin+0xbd/0x140 [ 270.741843][ T4599] __get_compat_msghdr+0x514/0x750 [ 270.741915][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 270.741974][ T4599] ? ___sys_recvmsg+0xa9/0x870 [ 270.742015][ T4599] ? do_recvmmsg+0x63a/0x10a0 [ 270.742058][ T4599] ___sys_recvmsg+0x19d/0x870 [ 270.742103][ T4599] ? __schedule+0x1609/0x21d0 [ 270.742147][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 270.742197][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.742250][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 270.742304][ T4599] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.742362][ T4599] do_recvmmsg+0x63a/0x10a0 [ 270.742415][ T4599] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 270.742473][ T4599] ? __sys_recvmmsg+0x52/0x450 [ 270.742512][ T4599] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.742565][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.742606][ T4599] ? kmsan_get_metadata+0x33/0x220 [ 270.742663][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.742719][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 270.742759][ T4599] ? exit_to_user_mode_prepare+0x119/0x220 [ 270.742809][ T4599] do_fast_syscall_32+0x33/0x70 [ 270.742850][ T4599] do_SYSENTER_32+0x1b/0x20 [ 270.742889][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 09:44:18 executing program 4: openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000600)=""/16, 0x10}], 0x1}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'wlan1\x00', &(0x7f00000006c0)=@ethtool_rxnfc={0x2d, 0x0, 0x0, {0x0, @esp_ip4_spec={@broadcast, @multicast2}, {}, @usr_ip4_spec={@dev, @multicast1}, {0x0, @link_local}}}}) [ 270.742955][ T4599] RIP: 0023:0xf7fc7549 [ 270.742983][ T4599] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 270.743024][ T4599] RSP: 002b:00000000f7fa15cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 270.743065][ T4599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 270.743095][ T4599] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 270.743122][ T4599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.743146][ T4599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.743172][ T4599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.743207][ T4599] [ 270.743484][ T4599] Uninit was stored to memory at: [ 270.743548][ T4599] __get_compat_msghdr+0x514/0x750 [ 270.743608][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 270.743665][ T4599] ___sys_recvmsg+0x19d/0x870 [ 270.743703][ T4599] do_recvmmsg+0x63a/0x10a0 [ 270.743742][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.743781][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.743829][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 270.743869][ T4599] do_fast_syscall_32+0x33/0x70 [ 270.743908][ T4599] do_SYSENTER_32+0x1b/0x20 [ 270.743945][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.744012][ T4599] [ 270.744018][ T4599] Uninit was stored to memory at: [ 270.744081][ T4599] __get_compat_msghdr+0x514/0x750 [ 270.744141][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 270.744198][ T4599] ___sys_recvmsg+0x19d/0x870 [ 270.744237][ T4599] do_recvmmsg+0x63a/0x10a0 [ 270.744280][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.744320][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.744367][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 270.744407][ T4599] do_fast_syscall_32+0x33/0x70 [ 270.744445][ T4599] do_SYSENTER_32+0x1b/0x20 [ 270.744483][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.744545][ T4599] [ 270.744550][ T4599] Uninit was stored to memory at: [ 270.744610][ T4599] __get_compat_msghdr+0x514/0x750 [ 270.744670][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 270.744726][ T4599] ___sys_recvmsg+0x19d/0x870 [ 270.744763][ T4599] do_recvmmsg+0x63a/0x10a0 [ 270.744801][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.744839][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.744885][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 270.744925][ T4599] do_fast_syscall_32+0x33/0x70 [ 270.744961][ T4599] do_SYSENTER_32+0x1b/0x20 [ 270.744999][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.745063][ T4599] [ 270.745068][ T4599] Uninit was stored to memory at: [ 270.745130][ T4599] __get_compat_msghdr+0x514/0x750 [ 270.745187][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 270.745244][ T4599] ___sys_recvmsg+0x19d/0x870 [ 270.745286][ T4599] do_recvmmsg+0x63a/0x10a0 [ 270.745323][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.745361][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.745408][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 270.745447][ T4599] do_fast_syscall_32+0x33/0x70 [ 270.745485][ T4599] do_SYSENTER_32+0x1b/0x20 [ 270.745520][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.745581][ T4599] [ 270.745587][ T4599] Uninit was stored to memory at: [ 270.745648][ T4599] __get_compat_msghdr+0x514/0x750 [ 270.745704][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 270.745761][ T4599] ___sys_recvmsg+0x19d/0x870 [ 270.745799][ T4599] do_recvmmsg+0x63a/0x10a0 [ 270.745835][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.745874][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.745921][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 270.745960][ T4599] do_fast_syscall_32+0x33/0x70 [ 270.745997][ T4599] do_SYSENTER_32+0x1b/0x20 [ 270.746035][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.746098][ T4599] [ 270.746103][ T4599] Uninit was stored to memory at: [ 270.746165][ T4599] __get_compat_msghdr+0x514/0x750 [ 270.746222][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 270.746284][ T4599] ___sys_recvmsg+0x19d/0x870 [ 270.746322][ T4599] do_recvmmsg+0x63a/0x10a0 [ 270.746358][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.746397][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.746443][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 270.746481][ T4599] do_fast_syscall_32+0x33/0x70 [ 270.746519][ T4599] do_SYSENTER_32+0x1b/0x20 [ 270.746556][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.746619][ T4599] [ 270.746630][ T4599] Uninit was stored to memory at: [ 270.746692][ T4599] __get_compat_msghdr+0x514/0x750 [ 270.746749][ T4599] get_compat_msghdr+0x8c/0x1c0 [ 270.746806][ T4599] ___sys_recvmsg+0x19d/0x870 [ 270.746844][ T4599] do_recvmmsg+0x63a/0x10a0 [ 270.746879][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.746918][ T4599] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.746964][ T4599] __do_fast_syscall_32+0x95/0xf0 [ 270.747004][ T4599] do_fast_syscall_32+0x33/0x70 [ 270.747042][ T4599] do_SYSENTER_32+0x1b/0x20 [ 270.747146][ T4599] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.747210][ T4599] [ 270.747217][ T4599] Local variable msg_sys created at: [ 270.747229][ T4599] do_recvmmsg+0x5f/0x10a0 [ 270.747265][ T4599] __sys_recvmmsg+0x113/0x450 [ 270.960841][ T4580] not chained 260000 origins [ 270.960865][ T4580] CPU: 1 PID: 4580 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 270.960913][ T4580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.960936][ T4580] Call Trace: [ 270.960949][ T4580] [ 270.960961][ T4580] dump_stack_lvl+0x1c8/0x256 [ 270.961030][ T4580] dump_stack+0x1a/0x1c [ 270.961084][ T4580] kmsan_internal_chain_origin+0x78/0x120 [ 270.961138][ T4580] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 270.961191][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 270.961241][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 270.961304][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 270.961354][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.961412][ T4580] ? __get_compat_msghdr+0x5b/0x750 [ 270.961475][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 270.961525][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.961583][ T4580] ? should_fail+0x3f/0x810 [ 270.961638][ T4580] ? __stack_depot_save+0x21/0x4b0 [ 270.961686][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 270.961736][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 270.961790][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 270.961838][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.961891][ T4580] __msan_chain_origin+0xbd/0x140 [ 270.961940][ T4580] __get_compat_msghdr+0x514/0x750 [ 270.962010][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 270.962070][ T4580] ? ___sys_recvmsg+0xa9/0x870 [ 270.962111][ T4580] ? do_recvmmsg+0x63a/0x10a0 [ 270.962155][ T4580] ___sys_recvmsg+0x19d/0x870 [ 270.962203][ T4580] ? __schedule+0x1609/0x21d0 [ 270.962250][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 270.962307][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.962362][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 270.962412][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 270.962469][ T4580] do_recvmmsg+0x63a/0x10a0 [ 270.962521][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 270.962579][ T4580] ? __sys_recvmmsg+0x52/0x450 [ 270.962618][ T4580] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.962673][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.962713][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 270.962768][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.962825][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 270.962869][ T4580] ? exit_to_user_mode_prepare+0x119/0x220 [ 270.962920][ T4580] do_fast_syscall_32+0x33/0x70 [ 270.962961][ T4580] do_SYSENTER_32+0x1b/0x20 [ 270.963001][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.963071][ T4580] RIP: 0023:0xf7fec549 [ 270.963101][ T4580] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 270.963142][ T4580] RSP: 002b:00000000f7fc65cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 270.963184][ T4580] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 270.963215][ T4580] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 09:44:19 executing program 1: syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000020800000000000000f8000000000000000000000000000080008000ff0f0000000000000400000000000000ff00000000000000f600000001", 0x45}, {&(0x7f0000010300)="46494c453000030000000000000000000100010038000100dc7b609e101137190000000000000000040000000000000008", 0x31, 0x4000}], 0x0, &(0x7f000007dc00)) [ 270.963240][ T4580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.963265][ T4580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.963296][ T4580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.963332][ T4580] [ 270.963674][ T4580] Uninit was stored to memory at: [ 270.963742][ T4580] __get_compat_msghdr+0x514/0x750 [ 270.963803][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 270.963861][ T4580] ___sys_recvmsg+0x19d/0x870 [ 270.963900][ T4580] do_recvmmsg+0x63a/0x10a0 [ 270.963939][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.963978][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.964025][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 270.964066][ T4580] do_fast_syscall_32+0x33/0x70 [ 270.964104][ T4580] do_SYSENTER_32+0x1b/0x20 [ 270.964142][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.964208][ T4580] [ 270.964214][ T4580] Uninit was stored to memory at: [ 270.964283][ T4580] __get_compat_msghdr+0x514/0x750 [ 270.964342][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 270.964396][ T4580] ___sys_recvmsg+0x19d/0x870 [ 270.964432][ T4580] do_recvmmsg+0x63a/0x10a0 [ 270.964469][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.964507][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.964554][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 270.964592][ T4580] do_fast_syscall_32+0x33/0x70 [ 270.964630][ T4580] do_SYSENTER_32+0x1b/0x20 [ 270.964667][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.964731][ T4580] [ 270.964737][ T4580] Uninit was stored to memory at: [ 270.964798][ T4580] __get_compat_msghdr+0x514/0x750 [ 270.964856][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 270.964912][ T4580] ___sys_recvmsg+0x19d/0x870 [ 270.964950][ T4580] do_recvmmsg+0x63a/0x10a0 [ 270.964987][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.965025][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.965072][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 270.965110][ T4580] do_fast_syscall_32+0x33/0x70 [ 270.965148][ T4580] do_SYSENTER_32+0x1b/0x20 [ 270.965185][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.965248][ T4580] [ 270.965254][ T4580] Uninit was stored to memory at: [ 270.965322][ T4580] __get_compat_msghdr+0x514/0x750 [ 270.965380][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 270.965437][ T4580] ___sys_recvmsg+0x19d/0x870 [ 270.965476][ T4580] do_recvmmsg+0x63a/0x10a0 [ 270.965514][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.965552][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.965599][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 270.965639][ T4580] do_fast_syscall_32+0x33/0x70 [ 270.965678][ T4580] do_SYSENTER_32+0x1b/0x20 [ 270.965715][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.965781][ T4580] [ 270.965787][ T4580] Uninit was stored to memory at: [ 270.965848][ T4580] __get_compat_msghdr+0x514/0x750 [ 270.965906][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 270.965964][ T4580] ___sys_recvmsg+0x19d/0x870 [ 270.966002][ T4580] do_recvmmsg+0x63a/0x10a0 [ 270.966040][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.966079][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.966126][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 270.966166][ T4580] do_fast_syscall_32+0x33/0x70 [ 270.966205][ T4580] do_SYSENTER_32+0x1b/0x20 [ 270.966242][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.966312][ T4580] [ 270.966319][ T4580] Uninit was stored to memory at: [ 270.966382][ T4580] __get_compat_msghdr+0x514/0x750 [ 270.966441][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 270.966498][ T4580] ___sys_recvmsg+0x19d/0x870 [ 270.966537][ T4580] do_recvmmsg+0x63a/0x10a0 [ 270.966575][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.966614][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.966661][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 270.966701][ T4580] do_fast_syscall_32+0x33/0x70 [ 270.966739][ T4580] do_SYSENTER_32+0x1b/0x20 [ 270.966776][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.966842][ T4580] [ 270.966848][ T4580] Uninit was stored to memory at: [ 270.966910][ T4580] __get_compat_msghdr+0x514/0x750 [ 270.966969][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 270.967027][ T4580] ___sys_recvmsg+0x19d/0x870 [ 270.967066][ T4580] do_recvmmsg+0x63a/0x10a0 [ 270.967103][ T4580] __sys_recvmmsg+0x113/0x450 [ 270.967142][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 270.967189][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 270.967229][ T4580] do_fast_syscall_32+0x33/0x70 [ 270.967272][ T4580] do_SYSENTER_32+0x1b/0x20 [ 270.967310][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 270.967376][ T4580] [ 270.967383][ T4580] Local variable msg_sys created at: [ 270.967396][ T4580] do_recvmmsg+0x5f/0x10a0 [ 270.967431][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.344270][ T4582] not chained 270000 origins [ 271.344293][ T4582] CPU: 0 PID: 4582 Comm: syz-executor.1 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 271.344346][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.344369][ T4582] Call Trace: [ 271.344382][ T4582] [ 271.344396][ T4582] dump_stack_lvl+0x1c8/0x256 [ 271.344465][ T4582] dump_stack+0x1a/0x1c [ 271.344519][ T4582] kmsan_internal_chain_origin+0x78/0x120 [ 271.344573][ T4582] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 271.344626][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 271.344677][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 271.344734][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 271.344785][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 271.344845][ T4582] ? __get_compat_msghdr+0x5b/0x750 [ 271.344909][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 271.344959][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 271.345018][ T4582] ? should_fail+0x3f/0x810 [ 271.345071][ T4582] ? __stack_depot_save+0x21/0x4b0 [ 271.345119][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 271.345170][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 271.345226][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 271.345276][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 271.345337][ T4582] __msan_chain_origin+0xbd/0x140 [ 271.345388][ T4582] __get_compat_msghdr+0x514/0x750 [ 271.345462][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 271.345525][ T4582] ? ___sys_recvmsg+0xa9/0x870 [ 271.345567][ T4582] ? do_recvmmsg+0x63a/0x10a0 [ 271.345611][ T4582] ___sys_recvmsg+0x19d/0x870 [ 271.345658][ T4582] ? __schedule+0x1609/0x21d0 [ 271.345704][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 271.345755][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 271.345810][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 271.345861][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 271.345919][ T4582] do_recvmmsg+0x63a/0x10a0 [ 271.345972][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 271.346031][ T4582] ? __sys_recvmmsg+0x52/0x450 [ 271.346073][ T4582] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.346127][ T4582] __sys_recvmmsg+0x113/0x450 [ 271.346169][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 271.346226][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.346285][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 271.346333][ T4582] ? exit_to_user_mode_prepare+0x119/0x220 [ 271.346384][ T4582] do_fast_syscall_32+0x33/0x70 [ 271.346427][ T4582] do_SYSENTER_32+0x1b/0x20 [ 271.346468][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.346536][ T4582] RIP: 0023:0xf7f09549 [ 271.346566][ T4582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 271.346609][ T4582] RSP: 002b:00000000f7ee35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 271.346650][ T4582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 271.346681][ T4582] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 271.346708][ T4582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 09:44:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) fchmodat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) (async) fchmodat(0xffffffffffffffff, 0x0, 0x0) (async) [ 271.346734][ T4582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.346760][ T4582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.346797][ T4582] [ 271.346809][ T4582] Uninit was stored to memory at: [ 271.346873][ T4582] __get_compat_msghdr+0x514/0x750 [ 271.346934][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 271.346992][ T4582] ___sys_recvmsg+0x19d/0x870 [ 271.347030][ T4582] do_recvmmsg+0x63a/0x10a0 [ 271.347069][ T4582] __sys_recvmmsg+0x113/0x450 [ 271.347108][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.347155][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 271.347196][ T4582] do_fast_syscall_32+0x33/0x70 [ 271.347234][ T4582] do_SYSENTER_32+0x1b/0x20 [ 271.347272][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.347343][ T4582] [ 271.347349][ T4582] Uninit was stored to memory at: [ 271.347412][ T4582] __get_compat_msghdr+0x514/0x750 [ 271.347472][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 271.347530][ T4582] ___sys_recvmsg+0x19d/0x870 [ 271.347569][ T4582] do_recvmmsg+0x63a/0x10a0 [ 271.347607][ T4582] __sys_recvmmsg+0x113/0x450 [ 271.347646][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.347694][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 271.347734][ T4582] do_fast_syscall_32+0x33/0x70 [ 271.347773][ T4582] do_SYSENTER_32+0x1b/0x20 [ 271.347810][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.347876][ T4582] [ 271.347883][ T4582] Uninit was stored to memory at: [ 271.347945][ T4582] __get_compat_msghdr+0x514/0x750 [ 271.348005][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 271.348062][ T4582] ___sys_recvmsg+0x19d/0x870 [ 271.348101][ T4582] do_recvmmsg+0x63a/0x10a0 [ 271.348139][ T4582] __sys_recvmmsg+0x113/0x450 [ 271.348179][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.348226][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 271.348266][ T4582] do_fast_syscall_32+0x33/0x70 [ 271.348305][ T4582] do_SYSENTER_32+0x1b/0x20 [ 271.348350][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.348415][ T4582] [ 271.348421][ T4582] Uninit was stored to memory at: [ 271.348485][ T4582] __get_compat_msghdr+0x514/0x750 [ 271.348544][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 271.348601][ T4582] ___sys_recvmsg+0x19d/0x870 [ 271.348640][ T4582] do_recvmmsg+0x63a/0x10a0 [ 271.348678][ T4582] __sys_recvmmsg+0x113/0x450 [ 271.348718][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.348765][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 271.348805][ T4582] do_fast_syscall_32+0x33/0x70 [ 271.348844][ T4582] do_SYSENTER_32+0x1b/0x20 [ 271.348882][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.348948][ T4582] [ 271.348954][ T4582] Uninit was stored to memory at: [ 271.349016][ T4582] __get_compat_msghdr+0x514/0x750 [ 271.349075][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 271.349133][ T4582] ___sys_recvmsg+0x19d/0x870 [ 271.349172][ T4582] do_recvmmsg+0x63a/0x10a0 [ 271.349210][ T4582] __sys_recvmmsg+0x113/0x450 [ 271.349249][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.349297][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 271.349343][ T4582] do_fast_syscall_32+0x33/0x70 [ 271.349381][ T4582] do_SYSENTER_32+0x1b/0x20 [ 271.349419][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.349485][ T4582] [ 271.349491][ T4582] Uninit was stored to memory at: [ 271.349554][ T4582] __get_compat_msghdr+0x514/0x750 [ 271.349613][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 271.349670][ T4582] ___sys_recvmsg+0x19d/0x870 [ 271.349709][ T4582] do_recvmmsg+0x63a/0x10a0 [ 271.349747][ T4582] __sys_recvmmsg+0x113/0x450 [ 271.349786][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.349834][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 271.349874][ T4582] do_fast_syscall_32+0x33/0x70 [ 271.349913][ T4582] do_SYSENTER_32+0x1b/0x20 [ 271.349950][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.350016][ T4582] [ 271.350022][ T4582] Uninit was stored to memory at: [ 271.350085][ T4582] __get_compat_msghdr+0x514/0x750 [ 271.350144][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 271.350202][ T4582] ___sys_recvmsg+0x19d/0x870 [ 271.350241][ T4582] do_recvmmsg+0x63a/0x10a0 [ 271.350279][ T4582] __sys_recvmmsg+0x113/0x450 [ 271.350323][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.350370][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 271.350410][ T4582] do_fast_syscall_32+0x33/0x70 [ 271.350449][ T4582] do_SYSENTER_32+0x1b/0x20 [ 271.350487][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.350552][ T4582] [ 271.350560][ T4582] Local variable msg_sys created at: [ 271.350573][ T4582] do_recvmmsg+0x5f/0x10a0 [ 271.350608][ T4582] __sys_recvmmsg+0x113/0x450 [ 271.649954][ T4580] not chained 280000 origins 09:44:20 executing program 4: openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128-generic\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000600)=""/16, 0x10}], 0x1}}], 0x1, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'wlan1\x00', &(0x7f00000006c0)=@ethtool_rxnfc={0x2d, 0x0, 0x0, {0x0, @esp_ip4_spec={@broadcast, @multicast2}, {}, @usr_ip4_spec={@dev, @multicast1}, {0x0, @link_local}}}}) [ 271.649977][ T4580] CPU: 1 PID: 4580 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 271.650024][ T4580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.650048][ T4580] Call Trace: [ 271.650060][ T4580] [ 271.650073][ T4580] dump_stack_lvl+0x1c8/0x256 [ 271.650141][ T4580] dump_stack+0x1a/0x1c [ 271.650195][ T4580] kmsan_internal_chain_origin+0x78/0x120 [ 271.650249][ T4580] ? kmsan_internal_unpoison_memory+0x10/0x20 09:44:21 executing program 3: fstatfs(0xffffffffffffffff, &(0x7f0000000140)=""/177) syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="68f567653d616c77617973"]) chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000400)='./bus\x00', 0x0) (async, rerun: 32) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x15113d, 0x0) (rerun: 32) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x240002) setsockopt$inet6_int(r3, 0x29, 0xc8, &(0x7f0000000080), 0x4) sendto$inet6(r2, 0x0, 0x0, 0x2400880c, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r4 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x10e) sendfile(r2, r4, 0x0, 0x8000fffffffe) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) [ 271.650303][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 271.650354][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 271.650410][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 271.650460][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 271.650519][ T4580] ? __get_compat_msghdr+0x5b/0x750 [ 271.650582][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 271.650632][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 271.650691][ T4580] ? should_fail+0x3f/0x810 [ 271.650741][ T4580] ? __stack_depot_save+0x21/0x4b0 [ 271.650789][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 271.650845][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 271.650901][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 271.650951][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 271.651007][ T4580] __msan_chain_origin+0xbd/0x140 [ 271.651057][ T4580] __get_compat_msghdr+0x514/0x750 [ 271.651131][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 271.651192][ T4580] ? ___sys_recvmsg+0xa9/0x870 [ 271.651234][ T4580] ? do_recvmmsg+0x63a/0x10a0 [ 271.651278][ T4580] ___sys_recvmsg+0x19d/0x870 [ 271.651324][ T4580] ? __schedule+0x1609/0x21d0 [ 271.651371][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 271.651422][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 271.651477][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 271.651527][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 271.651585][ T4580] do_recvmmsg+0x63a/0x10a0 [ 271.651642][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 271.651700][ T4580] ? __sys_recvmmsg+0x52/0x450 [ 271.651742][ T4580] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.651796][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.651843][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 271.651899][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.651957][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 271.651998][ T4580] ? exit_to_user_mode_prepare+0x119/0x220 [ 271.652049][ T4580] do_fast_syscall_32+0x33/0x70 [ 271.652091][ T4580] do_SYSENTER_32+0x1b/0x20 [ 271.652130][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.652197][ T4580] RIP: 0023:0xf7fec549 [ 271.652226][ T4580] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 271.652270][ T4580] RSP: 002b:00000000f7fc65cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 271.652310][ T4580] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 271.652340][ T4580] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 271.652366][ T4580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 271.652392][ T4580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.652417][ T4580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.652454][ T4580] [ 271.652699][ T4580] Uninit was stored to memory at: [ 271.652763][ T4580] __get_compat_msghdr+0x514/0x750 [ 271.652829][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 271.652887][ T4580] ___sys_recvmsg+0x19d/0x870 [ 271.652927][ T4580] do_recvmmsg+0x63a/0x10a0 [ 271.652964][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.653004][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.653051][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 271.653091][ T4580] do_fast_syscall_32+0x33/0x70 [ 271.653130][ T4580] do_SYSENTER_32+0x1b/0x20 [ 271.653167][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.653232][ T4580] [ 271.653238][ T4580] Uninit was stored to memory at: [ 271.653301][ T4580] __get_compat_msghdr+0x514/0x750 [ 271.653360][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 271.653418][ T4580] ___sys_recvmsg+0x19d/0x870 [ 271.653457][ T4580] do_recvmmsg+0x63a/0x10a0 [ 271.653496][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.653536][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.653583][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 271.653624][ T4580] do_fast_syscall_32+0x33/0x70 [ 271.653662][ T4580] do_SYSENTER_32+0x1b/0x20 [ 271.653700][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.653766][ T4580] [ 271.653772][ T4580] Uninit was stored to memory at: [ 271.653840][ T4580] __get_compat_msghdr+0x514/0x750 [ 271.653898][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 271.653956][ T4580] ___sys_recvmsg+0x19d/0x870 [ 271.653995][ T4580] do_recvmmsg+0x63a/0x10a0 [ 271.654033][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.654072][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.654120][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 271.654160][ T4580] do_fast_syscall_32+0x33/0x70 [ 271.654198][ T4580] do_SYSENTER_32+0x1b/0x20 [ 271.654236][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.654302][ T4580] [ 271.654307][ T4580] Uninit was stored to memory at: [ 271.654370][ T4580] __get_compat_msghdr+0x514/0x750 [ 271.654429][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 271.654487][ T4580] ___sys_recvmsg+0x19d/0x870 [ 271.654526][ T4580] do_recvmmsg+0x63a/0x10a0 [ 271.654564][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.654603][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.654650][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 271.654690][ T4580] do_fast_syscall_32+0x33/0x70 [ 271.654728][ T4580] do_SYSENTER_32+0x1b/0x20 [ 271.654766][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.654837][ T4580] [ 271.654842][ T4580] Uninit was stored to memory at: [ 271.654905][ T4580] __get_compat_msghdr+0x514/0x750 [ 271.654964][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 271.655022][ T4580] ___sys_recvmsg+0x19d/0x870 [ 271.655060][ T4580] do_recvmmsg+0x63a/0x10a0 [ 271.655098][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.655138][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.655185][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 271.655225][ T4580] do_fast_syscall_32+0x33/0x70 [ 271.655263][ T4580] do_SYSENTER_32+0x1b/0x20 [ 271.655301][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.655367][ T4580] [ 271.655373][ T4580] Uninit was stored to memory at: [ 271.655435][ T4580] __get_compat_msghdr+0x514/0x750 [ 271.655494][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 271.655552][ T4580] ___sys_recvmsg+0x19d/0x870 [ 271.655591][ T4580] do_recvmmsg+0x63a/0x10a0 [ 271.655629][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.655668][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.655715][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 271.655771][ T4580] do_fast_syscall_32+0x33/0x70 [ 271.655810][ T4580] do_SYSENTER_32+0x1b/0x20 [ 271.655852][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.655917][ T4580] [ 271.655923][ T4580] Uninit was stored to memory at: [ 271.655986][ T4580] __get_compat_msghdr+0x514/0x750 [ 271.656045][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 271.656103][ T4580] ___sys_recvmsg+0x19d/0x870 [ 271.656142][ T4580] do_recvmmsg+0x63a/0x10a0 [ 271.656180][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.656219][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.656266][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 271.656306][ T4580] do_fast_syscall_32+0x33/0x70 [ 271.656345][ T4580] do_SYSENTER_32+0x1b/0x20 [ 271.656382][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.656448][ T4580] [ 271.656455][ T4580] Local variable msg_sys created at: [ 271.656468][ T4580] do_recvmmsg+0x5f/0x10a0 [ 271.656504][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.952598][ T4580] not chained 290000 origins [ 271.952623][ T4580] CPU: 1 PID: 4580 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 271.952670][ T4580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.952694][ T4580] Call Trace: [ 271.952707][ T4580] [ 271.952719][ T4580] dump_stack_lvl+0x1c8/0x256 [ 271.952788][ T4580] dump_stack+0x1a/0x1c [ 271.952848][ T4580] kmsan_internal_chain_origin+0x78/0x120 [ 271.952900][ T4580] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 271.952954][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 271.953004][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 271.953061][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 271.953111][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 271.953170][ T4580] ? __get_compat_msghdr+0x5b/0x750 [ 271.953234][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 271.953284][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 271.953343][ T4580] ? should_fail+0x3f/0x810 [ 271.953394][ T4580] ? __stack_depot_save+0x21/0x4b0 [ 271.953442][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 271.953493][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 271.953549][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 271.953598][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 271.953654][ T4580] __msan_chain_origin+0xbd/0x140 [ 271.953704][ T4580] __get_compat_msghdr+0x514/0x750 [ 271.953778][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 271.953845][ T4580] ? ___sys_recvmsg+0xa9/0x870 [ 271.953886][ T4580] ? do_recvmmsg+0x63a/0x10a0 [ 271.953931][ T4580] ___sys_recvmsg+0x19d/0x870 [ 271.953977][ T4580] ? __schedule+0x1609/0x21d0 [ 271.954023][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 271.954074][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 271.954128][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 271.954179][ T4580] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 271.954237][ T4580] do_recvmmsg+0x63a/0x10a0 [ 271.954290][ T4580] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 271.954348][ T4580] ? __sys_recvmmsg+0x52/0x450 [ 271.954389][ T4580] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.954441][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.954483][ T4580] ? kmsan_get_metadata+0x33/0x220 [ 271.954539][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.954597][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 271.954639][ T4580] ? exit_to_user_mode_prepare+0x119/0x220 [ 271.954690][ T4580] do_fast_syscall_32+0x33/0x70 [ 271.954733][ T4580] do_SYSENTER_32+0x1b/0x20 [ 271.954773][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.954846][ T4580] RIP: 0023:0xf7fec549 [ 271.954876][ T4580] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 271.954917][ T4580] RSP: 002b:00000000f7fc65cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 271.954958][ T4580] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 271.954988][ T4580] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 271.955015][ T4580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 271.955040][ T4580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.955067][ T4580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.955103][ T4580] [ 271.955116][ T4580] Uninit was stored to memory at: [ 271.955179][ T4580] __get_compat_msghdr+0x514/0x750 [ 271.955238][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 271.955296][ T4580] ___sys_recvmsg+0x19d/0x870 [ 271.955334][ T4580] do_recvmmsg+0x63a/0x10a0 [ 271.955372][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.955411][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.955458][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 271.955498][ T4580] do_fast_syscall_32+0x33/0x70 [ 271.955536][ T4580] do_SYSENTER_32+0x1b/0x20 [ 271.955573][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.955639][ T4580] [ 271.955645][ T4580] Uninit was stored to memory at: [ 271.955707][ T4580] __get_compat_msghdr+0x514/0x750 [ 271.955782][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 271.955847][ T4580] ___sys_recvmsg+0x19d/0x870 [ 271.955885][ T4580] do_recvmmsg+0x63a/0x10a0 [ 271.955923][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.955962][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.956009][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 271.956049][ T4580] do_fast_syscall_32+0x33/0x70 [ 271.956087][ T4580] do_SYSENTER_32+0x1b/0x20 [ 271.956124][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.956189][ T4580] [ 271.956195][ T4580] Uninit was stored to memory at: [ 271.956257][ T4580] __get_compat_msghdr+0x514/0x750 [ 271.956314][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 271.956372][ T4580] ___sys_recvmsg+0x19d/0x870 [ 271.956410][ T4580] do_recvmmsg+0x63a/0x10a0 [ 271.956449][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.956487][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.956534][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 271.956574][ T4580] do_fast_syscall_32+0x33/0x70 [ 271.956612][ T4580] do_SYSENTER_32+0x1b/0x20 [ 271.956650][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.956715][ T4580] [ 271.956721][ T4580] Uninit was stored to memory at: [ 271.956783][ T4580] __get_compat_msghdr+0x514/0x750 [ 271.956847][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 271.956904][ T4580] ___sys_recvmsg+0x19d/0x870 [ 271.956942][ T4580] do_recvmmsg+0x63a/0x10a0 [ 271.956980][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.957019][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.957066][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 271.957106][ T4580] do_fast_syscall_32+0x33/0x70 [ 271.957144][ T4580] do_SYSENTER_32+0x1b/0x20 [ 271.957181][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.957245][ T4580] [ 271.957251][ T4580] Uninit was stored to memory at: [ 271.957313][ T4580] __get_compat_msghdr+0x514/0x750 [ 271.957371][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 271.957427][ T4580] ___sys_recvmsg+0x19d/0x870 [ 271.957466][ T4580] do_recvmmsg+0x63a/0x10a0 [ 271.957504][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.957542][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.957589][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 271.957629][ T4580] do_fast_syscall_32+0x33/0x70 [ 271.957667][ T4580] do_SYSENTER_32+0x1b/0x20 [ 271.957704][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.957769][ T4580] [ 271.957775][ T4580] Uninit was stored to memory at: [ 271.957844][ T4580] __get_compat_msghdr+0x514/0x750 [ 271.957902][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 271.957959][ T4580] ___sys_recvmsg+0x19d/0x870 [ 271.957997][ T4580] do_recvmmsg+0x63a/0x10a0 [ 271.958035][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.958073][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.958120][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 271.958160][ T4580] do_fast_syscall_32+0x33/0x70 [ 271.958198][ T4580] do_SYSENTER_32+0x1b/0x20 [ 271.958235][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.958300][ T4580] [ 271.958306][ T4580] Uninit was stored to memory at: [ 271.958369][ T4580] __get_compat_msghdr+0x514/0x750 [ 271.958428][ T4580] get_compat_msghdr+0x8c/0x1c0 [ 271.958484][ T4580] ___sys_recvmsg+0x19d/0x870 [ 271.958523][ T4580] do_recvmmsg+0x63a/0x10a0 [ 271.958560][ T4580] __sys_recvmmsg+0x113/0x450 [ 271.958599][ T4580] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 271.958646][ T4580] __do_fast_syscall_32+0x95/0xf0 [ 271.958686][ T4580] do_fast_syscall_32+0x33/0x70 [ 271.958723][ T4580] do_SYSENTER_32+0x1b/0x20 [ 271.958758][ T4580] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 271.958825][ T4580] [ 271.958832][ T4580] Local variable msg_sys created at: [ 271.958845][ T4580] do_recvmmsg+0x5f/0x10a0 [ 271.958881][ T4580] __sys_recvmmsg+0x113/0x450 [ 272.572148][ T3564] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 272.842283][ T3564] usb 6-1: Using ep0 maxpacket: 8 [ 272.962920][ T3564] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 273.048105][ T4582] not chained 300000 origins [ 273.048129][ T4582] CPU: 1 PID: 4582 Comm: syz-executor.1 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 273.048177][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.048200][ T4582] Call Trace: [ 273.048213][ T4582] [ 273.048226][ T4582] dump_stack_lvl+0x1c8/0x256 [ 273.048303][ T4582] dump_stack+0x1a/0x1c [ 273.048358][ T4582] kmsan_internal_chain_origin+0x78/0x120 [ 273.048412][ T4582] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 273.048465][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 273.048516][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 273.048573][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 273.048623][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 273.048682][ T4582] ? __get_compat_msghdr+0x5b/0x750 [ 273.048746][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 273.048801][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 273.048860][ T4582] ? should_fail+0x3f/0x810 [ 273.048912][ T4582] ? __stack_depot_save+0x21/0x4b0 [ 273.048961][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 273.049012][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 273.049067][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 273.049119][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 273.049175][ T4582] __msan_chain_origin+0xbd/0x140 [ 273.049225][ T4582] __get_compat_msghdr+0x514/0x750 [ 273.049306][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 273.049368][ T4582] ? ___sys_recvmsg+0xa9/0x870 [ 273.049410][ T4582] ? do_recvmmsg+0x63a/0x10a0 [ 273.049455][ T4582] ___sys_recvmsg+0x19d/0x870 [ 273.049503][ T4582] ? __schedule+0x1609/0x21d0 [ 273.049549][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 273.049600][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 273.049656][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 273.049706][ T4582] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 273.049767][ T4582] do_recvmmsg+0x63a/0x10a0 [ 273.049819][ T4582] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 273.049876][ T4582] ? __sys_recvmmsg+0x52/0x450 [ 273.049916][ T4582] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 273.049972][ T4582] __sys_recvmmsg+0x113/0x450 [ 273.050015][ T4582] ? kmsan_get_metadata+0x33/0x220 [ 273.050073][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 273.050133][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 273.050177][ T4582] ? exit_to_user_mode_prepare+0x119/0x220 [ 273.050230][ T4582] do_fast_syscall_32+0x33/0x70 [ 273.050280][ T4582] do_SYSENTER_32+0x1b/0x20 [ 273.050324][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 273.050393][ T4582] RIP: 0023:0xf7f09549 [ 273.050423][ T4582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 273.050467][ T4582] RSP: 002b:00000000f7ee35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 273.050509][ T4582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 273.050539][ T4582] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 273.050565][ T4582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.050590][ T4582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.050616][ T4582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.050654][ T4582] [ 273.050666][ T4582] Uninit was stored to memory at: [ 273.050732][ T4582] __get_compat_msghdr+0x514/0x750 [ 273.050792][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 273.050851][ T4582] ___sys_recvmsg+0x19d/0x870 [ 273.050890][ T4582] do_recvmmsg+0x63a/0x10a0 [ 273.050929][ T4582] __sys_recvmmsg+0x113/0x450 [ 273.050968][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 273.051014][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 273.051054][ T4582] do_fast_syscall_32+0x33/0x70 [ 273.051093][ T4582] do_SYSENTER_32+0x1b/0x20 [ 273.051130][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 273.051195][ T4582] [ 273.051201][ T4582] Uninit was stored to memory at: [ 273.051264][ T4582] __get_compat_msghdr+0x514/0x750 [ 273.051328][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 273.051385][ T4582] ___sys_recvmsg+0x19d/0x870 [ 273.051424][ T4582] do_recvmmsg+0x63a/0x10a0 [ 273.051460][ T4582] __sys_recvmmsg+0x113/0x450 [ 273.051498][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 273.051545][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 273.051586][ T4582] do_fast_syscall_32+0x33/0x70 [ 273.051982][ T4582] do_SYSENTER_32+0x1b/0x20 [ 273.052022][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 273.052088][ T4582] [ 273.052095][ T4582] Uninit was stored to memory at: [ 273.052158][ T4582] __get_compat_msghdr+0x514/0x750 [ 273.052217][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 273.052280][ T4582] ___sys_recvmsg+0x19d/0x870 [ 273.052319][ T4582] do_recvmmsg+0x63a/0x10a0 [ 273.052358][ T4582] __sys_recvmmsg+0x113/0x450 [ 273.052397][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 273.052444][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 273.052484][ T4582] do_fast_syscall_32+0x33/0x70 [ 273.052522][ T4582] do_SYSENTER_32+0x1b/0x20 [ 273.052560][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 273.052626][ T4582] [ 273.052632][ T4582] Uninit was stored to memory at: [ 273.052695][ T4582] __get_compat_msghdr+0x514/0x750 [ 273.052754][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 273.052812][ T4582] ___sys_recvmsg+0x19d/0x870 [ 273.052851][ T4582] do_recvmmsg+0x63a/0x10a0 [ 273.052889][ T4582] __sys_recvmmsg+0x113/0x450 [ 273.052928][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 273.052976][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 273.053016][ T4582] do_fast_syscall_32+0x33/0x70 [ 273.053051][ T4582] do_SYSENTER_32+0x1b/0x20 [ 273.053087][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 273.053150][ T4582] [ 273.053156][ T4582] Uninit was stored to memory at: [ 273.053219][ T4582] __get_compat_msghdr+0x514/0x750 [ 273.053284][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 273.053340][ T4582] ___sys_recvmsg+0x19d/0x870 [ 273.053378][ T4582] do_recvmmsg+0x63a/0x10a0 [ 273.053416][ T4582] __sys_recvmmsg+0x113/0x450 [ 273.053454][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 273.053501][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 273.053540][ T4582] do_fast_syscall_32+0x33/0x70 [ 273.053577][ T4582] do_SYSENTER_32+0x1b/0x20 [ 273.053614][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 273.053678][ T4582] [ 273.053684][ T4582] Uninit was stored to memory at: [ 273.053745][ T4582] __get_compat_msghdr+0x514/0x750 [ 273.053803][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 273.053859][ T4582] ___sys_recvmsg+0x19d/0x870 [ 273.053898][ T4582] do_recvmmsg+0x63a/0x10a0 [ 273.053935][ T4582] __sys_recvmmsg+0x113/0x450 [ 273.053972][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 273.054019][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 273.054058][ T4582] do_fast_syscall_32+0x33/0x70 [ 273.054097][ T4582] do_SYSENTER_32+0x1b/0x20 [ 273.054133][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 273.054206][ T4582] [ 273.054212][ T4582] Uninit was stored to memory at: [ 273.054277][ T4582] __get_compat_msghdr+0x514/0x750 [ 273.054335][ T4582] get_compat_msghdr+0x8c/0x1c0 [ 273.054392][ T4582] ___sys_recvmsg+0x19d/0x870 [ 273.054430][ T4582] do_recvmmsg+0x63a/0x10a0 [ 273.054467][ T4582] __sys_recvmmsg+0x113/0x450 [ 273.054506][ T4582] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 273.054552][ T4582] __do_fast_syscall_32+0x95/0xf0 [ 273.054591][ T4582] do_fast_syscall_32+0x33/0x70 [ 273.054629][ T4582] do_SYSENTER_32+0x1b/0x20 [ 273.054666][ T4582] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 273.054730][ T4582] [ 273.054736][ T4582] Local variable msg_sys created at: [ 273.054749][ T4582] do_recvmmsg+0x5f/0x10a0 [ 273.054785][ T4582] __sys_recvmmsg+0x113/0x450 [ 273.122457][ T3564] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 273.122596][ T3564] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.122791][ T3564] usb 6-1: Product: syz [ 273.122874][ T3564] usb 6-1: Manufacturer: syz [ 273.122958][ T3564] usb 6-1: SerialNumber: syz [ 273.596013][ T3561] usb 6-1: USB disconnect, device number 45 [ 274.640445][ T4658] not chained 310000 origins [ 274.640466][ T4658] CPU: 1 PID: 4658 Comm: syz-executor.2 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 274.640518][ T4658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.640542][ T4658] Call Trace: [ 274.640556][ T4658] [ 274.640569][ T4658] dump_stack_lvl+0x1c8/0x256 [ 274.640641][ T4658] dump_stack+0x1a/0x1c [ 274.640697][ T4658] kmsan_internal_chain_origin+0x78/0x120 [ 274.640752][ T4658] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 274.640808][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 274.640860][ T4658] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 274.640919][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 274.640971][ T4658] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 274.641033][ T4658] ? __get_compat_msghdr+0x5b/0x750 [ 274.641097][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 274.641149][ T4658] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 274.641210][ T4658] ? should_fail+0x3f/0x810 [ 274.641262][ T4658] ? __stack_depot_save+0x21/0x4b0 [ 274.641312][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 274.641369][ T4658] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 274.641427][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 274.641479][ T4658] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 274.641536][ T4658] __msan_chain_origin+0xbd/0x140 [ 274.641589][ T4658] __get_compat_msghdr+0x514/0x750 [ 274.641666][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 274.641731][ T4658] ? ___sys_recvmsg+0xa9/0x870 [ 274.641774][ T4658] ? do_recvmmsg+0x63a/0x10a0 [ 274.641820][ T4658] ___sys_recvmsg+0x19d/0x870 [ 274.641869][ T4658] ? __schedule+0x1609/0x21d0 [ 274.641918][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 274.641971][ T4658] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 274.642029][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 274.642081][ T4658] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 274.642142][ T4658] do_recvmmsg+0x63a/0x10a0 [ 274.642198][ T4658] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 274.642259][ T4658] ? __sys_recvmmsg+0x52/0x450 [ 274.642302][ T4658] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 274.642362][ T4658] __sys_recvmmsg+0x113/0x450 [ 274.642406][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 274.642464][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 274.642525][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 274.642570][ T4658] ? exit_to_user_mode_prepare+0x119/0x220 [ 274.642623][ T4658] do_fast_syscall_32+0x33/0x70 [ 274.642668][ T4658] do_SYSENTER_32+0x1b/0x20 [ 274.642711][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 274.642783][ T4658] RIP: 0023:0xf7fc7549 [ 274.642812][ T4658] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 274.642855][ T4658] RSP: 002b:00000000f7fa15cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 274.642896][ T4658] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 274.642927][ T4658] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 274.642954][ T4658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 274.642981][ T4658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.643008][ T4658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.643046][ T4658] [ 274.643992][ T4658] Uninit was stored to memory at: [ 274.644061][ T4658] __get_compat_msghdr+0x514/0x750 [ 274.644123][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 274.644182][ T4658] ___sys_recvmsg+0x19d/0x870 [ 274.644223][ T4658] do_recvmmsg+0x63a/0x10a0 [ 274.644262][ T4658] __sys_recvmmsg+0x113/0x450 [ 274.644302][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 274.644357][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 274.644398][ T4658] do_fast_syscall_32+0x33/0x70 [ 274.644438][ T4658] do_SYSENTER_32+0x1b/0x20 [ 274.644477][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 274.644545][ T4658] [ 274.644552][ T4658] Uninit was stored to memory at: [ 274.644616][ T4658] __get_compat_msghdr+0x514/0x750 [ 274.644677][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 274.644737][ T4658] ___sys_recvmsg+0x19d/0x870 [ 274.644776][ T4658] do_recvmmsg+0x63a/0x10a0 [ 274.644816][ T4658] __sys_recvmmsg+0x113/0x450 [ 274.644856][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 274.644905][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 274.644946][ T4658] do_fast_syscall_32+0x33/0x70 [ 274.644985][ T4658] do_SYSENTER_32+0x1b/0x20 [ 274.645024][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 274.645091][ T4658] [ 274.645097][ T4658] Uninit was stored to memory at: [ 274.645162][ T4658] __get_compat_msghdr+0x514/0x750 [ 274.645222][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 274.645281][ T4658] ___sys_recvmsg+0x19d/0x870 [ 274.645326][ T4658] do_recvmmsg+0x63a/0x10a0 [ 274.645365][ T4658] __sys_recvmmsg+0x113/0x450 [ 274.645405][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 274.645453][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 274.645494][ T4658] do_fast_syscall_32+0x33/0x70 [ 274.645533][ T4658] do_SYSENTER_32+0x1b/0x20 [ 274.645572][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 274.645639][ T4658] [ 274.645645][ T4658] Uninit was stored to memory at: [ 274.645710][ T4658] __get_compat_msghdr+0x514/0x750 [ 274.645770][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 274.645830][ T4658] ___sys_recvmsg+0x19d/0x870 [ 274.645870][ T4658] do_recvmmsg+0x63a/0x10a0 [ 274.645909][ T4658] __sys_recvmmsg+0x113/0x450 [ 274.645949][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 274.645998][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 274.646039][ T4658] do_fast_syscall_32+0x33/0x70 [ 274.646079][ T4658] do_SYSENTER_32+0x1b/0x20 [ 274.646117][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 274.646185][ T4658] [ 274.646191][ T4658] Uninit was stored to memory at: [ 274.646256][ T4658] __get_compat_msghdr+0x514/0x750 [ 274.646322][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 274.646382][ T4658] ___sys_recvmsg+0x19d/0x870 [ 274.646422][ T4658] do_recvmmsg+0x63a/0x10a0 [ 274.646461][ T4658] __sys_recvmmsg+0x113/0x450 [ 274.646502][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 274.646550][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 274.646592][ T4658] do_fast_syscall_32+0x33/0x70 [ 274.646631][ T4658] do_SYSENTER_32+0x1b/0x20 [ 274.646670][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 274.646738][ T4658] [ 274.646744][ T4658] Uninit was stored to memory at: [ 274.646808][ T4658] __get_compat_msghdr+0x514/0x750 [ 274.646873][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 274.646933][ T4658] ___sys_recvmsg+0x19d/0x870 [ 274.646972][ T4658] do_recvmmsg+0x63a/0x10a0 [ 274.647011][ T4658] __sys_recvmmsg+0x113/0x450 [ 274.647051][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 274.647100][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 274.647141][ T4658] do_fast_syscall_32+0x33/0x70 [ 274.647180][ T4658] do_SYSENTER_32+0x1b/0x20 [ 274.647219][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 274.647287][ T4658] [ 274.647293][ T4658] Uninit was stored to memory at: [ 274.647364][ T4658] __get_compat_msghdr+0x514/0x750 [ 274.647425][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 274.647484][ T4658] ___sys_recvmsg+0x19d/0x870 [ 274.647524][ T4658] do_recvmmsg+0x63a/0x10a0 [ 274.647563][ T4658] __sys_recvmmsg+0x113/0x450 [ 274.647603][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 274.647651][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 274.647693][ T4658] do_fast_syscall_32+0x33/0x70 [ 274.647732][ T4658] do_SYSENTER_32+0x1b/0x20 [ 274.647770][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 274.647838][ T4658] [ 274.647845][ T4658] Local variable msg_sys created at: [ 274.647858][ T4658] do_recvmmsg+0x5f/0x10a0 [ 274.647895][ T4658] __sys_recvmmsg+0x113/0x450 [ 275.762625][ T3561] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 276.012396][ T3561] usb 6-1: Using ep0 maxpacket: 8 [ 276.153407][ T3561] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 276.343287][ T3561] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=77.88 [ 276.343427][ T3561] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.343533][ T3561] usb 6-1: Product: syz [ 276.343617][ T3561] usb 6-1: Manufacturer: syz [ 276.343702][ T3561] usb 6-1: SerialNumber: syz [ 276.619095][ T3561] usb 6-1: USB disconnect, device number 46 [ 276.895928][ T4658] not chained 320000 origins [ 276.895951][ T4658] CPU: 1 PID: 4658 Comm: syz-executor.2 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 276.895999][ T4658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.896023][ T4658] Call Trace: [ 276.896038][ T4658] [ 276.896052][ T4658] dump_stack_lvl+0x1c8/0x256 [ 276.896124][ T4658] dump_stack+0x1a/0x1c [ 276.896183][ T4658] kmsan_internal_chain_origin+0x78/0x120 [ 276.896239][ T4658] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 276.896295][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 276.896348][ T4658] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 276.896408][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 276.896460][ T4658] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 276.896522][ T4658] ? __get_compat_msghdr+0x5b/0x750 [ 276.896589][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 276.896641][ T4658] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 276.896703][ T4658] ? should_fail+0x3f/0x810 [ 276.896756][ T4658] ? __stack_depot_save+0x21/0x4b0 [ 276.896806][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 276.896864][ T4658] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 276.896922][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 276.896974][ T4658] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 276.897033][ T4658] __msan_chain_origin+0xbd/0x140 [ 276.897086][ T4658] __get_compat_msghdr+0x514/0x750 [ 276.897164][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 276.897228][ T4658] ? ___sys_recvmsg+0xa9/0x870 [ 276.897269][ T4658] ? do_recvmmsg+0x63a/0x10a0 [ 276.897313][ T4658] ___sys_recvmsg+0x19d/0x870 [ 276.897360][ T4658] ? __schedule+0x1609/0x21d0 [ 276.897408][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 276.897462][ T4658] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 276.897519][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 276.897570][ T4658] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 276.897631][ T4658] do_recvmmsg+0x63a/0x10a0 [ 276.897686][ T4658] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 276.897747][ T4658] ? __sys_recvmmsg+0x52/0x450 [ 276.897789][ T4658] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 276.897844][ T4658] __sys_recvmmsg+0x113/0x450 [ 276.897893][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 276.897951][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 276.898011][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 276.898055][ T4658] ? exit_to_user_mode_prepare+0x119/0x220 [ 276.898108][ T4658] do_fast_syscall_32+0x33/0x70 [ 276.898153][ T4658] do_SYSENTER_32+0x1b/0x20 [ 276.898195][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 276.898266][ T4658] RIP: 0023:0xf7fc7549 [ 276.898295][ T4658] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 276.898338][ T4658] RSP: 002b:00000000f7fa15cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 276.898380][ T4658] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 276.898411][ T4658] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 276.898439][ T4658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.898465][ T4658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.898492][ T4658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.898530][ T4658] [ 276.898679][ T4658] Uninit was stored to memory at: [ 276.898746][ T4658] __get_compat_msghdr+0x514/0x750 [ 276.898807][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 276.898873][ T4658] ___sys_recvmsg+0x19d/0x870 [ 276.898912][ T4658] do_recvmmsg+0x63a/0x10a0 [ 276.898952][ T4658] __sys_recvmmsg+0x113/0x450 [ 276.898992][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 276.899040][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 276.899082][ T4658] do_fast_syscall_32+0x33/0x70 [ 276.899121][ T4658] do_SYSENTER_32+0x1b/0x20 [ 276.899160][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 276.899227][ T4658] [ 276.899234][ T4658] Uninit was stored to memory at: [ 276.899298][ T4658] __get_compat_msghdr+0x514/0x750 [ 276.899359][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 276.899418][ T4658] ___sys_recvmsg+0x19d/0x870 [ 276.899459][ T4658] do_recvmmsg+0x63a/0x10a0 [ 276.899498][ T4658] __sys_recvmmsg+0x113/0x450 [ 276.899538][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 276.899587][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 276.899628][ T4658] do_fast_syscall_32+0x33/0x70 [ 276.899668][ T4658] do_SYSENTER_32+0x1b/0x20 [ 276.899706][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 276.899774][ T4658] [ 276.899781][ T4658] Uninit was stored to memory at: [ 276.899845][ T4658] __get_compat_msghdr+0x514/0x750 [ 276.899911][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 276.899971][ T4658] ___sys_recvmsg+0x19d/0x870 [ 276.900010][ T4658] do_recvmmsg+0x63a/0x10a0 [ 276.900050][ T4658] __sys_recvmmsg+0x113/0x450 [ 276.900090][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 276.900139][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 276.900180][ T4658] do_fast_syscall_32+0x33/0x70 [ 276.900220][ T4658] do_SYSENTER_32+0x1b/0x20 [ 276.900260][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 276.900328][ T4658] [ 276.900334][ T4658] Uninit was stored to memory at: [ 276.900398][ T4658] __get_compat_msghdr+0x514/0x750 [ 276.900458][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 276.900518][ T4658] ___sys_recvmsg+0x19d/0x870 [ 276.900558][ T4658] do_recvmmsg+0x63a/0x10a0 [ 276.900597][ T4658] __sys_recvmmsg+0x113/0x450 [ 276.900636][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 276.900685][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 276.900726][ T4658] do_fast_syscall_32+0x33/0x70 [ 276.900766][ T4658] do_SYSENTER_32+0x1b/0x20 [ 276.900805][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 276.900877][ T4658] [ 276.900883][ T4658] Uninit was stored to memory at: [ 276.900947][ T4658] __get_compat_msghdr+0x514/0x750 [ 276.901008][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 276.901067][ T4658] ___sys_recvmsg+0x19d/0x870 [ 276.901107][ T4658] do_recvmmsg+0x63a/0x10a0 [ 276.901146][ T4658] __sys_recvmmsg+0x113/0x450 [ 276.901186][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 276.901235][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 276.901276][ T4658] do_fast_syscall_32+0x33/0x70 [ 276.901315][ T4658] do_SYSENTER_32+0x1b/0x20 [ 276.901354][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 276.901422][ T4658] [ 276.901428][ T4658] Uninit was stored to memory at: [ 276.901493][ T4658] __get_compat_msghdr+0x514/0x750 [ 276.901553][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 276.901614][ T4658] ___sys_recvmsg+0x19d/0x870 [ 276.902175][ T4658] do_recvmmsg+0x63a/0x10a0 [ 276.902216][ T4658] __sys_recvmmsg+0x113/0x450 [ 276.902256][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 276.902305][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 276.902346][ T4658] do_fast_syscall_32+0x33/0x70 [ 276.902384][ T4658] do_SYSENTER_32+0x1b/0x20 [ 276.902422][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 276.902488][ T4658] [ 276.902494][ T4658] Uninit was stored to memory at: [ 276.902559][ T4658] __get_compat_msghdr+0x514/0x750 [ 276.902621][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 276.902680][ T4658] ___sys_recvmsg+0x19d/0x870 [ 276.902720][ T4658] do_recvmmsg+0x63a/0x10a0 [ 276.902759][ T4658] __sys_recvmmsg+0x113/0x450 [ 276.902800][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 276.902848][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 276.902894][ T4658] do_fast_syscall_32+0x33/0x70 [ 276.902934][ T4658] do_SYSENTER_32+0x1b/0x20 [ 276.902972][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 276.903040][ T4658] [ 276.903047][ T4658] Local variable msg_sys created at: [ 276.903060][ T4658] do_recvmmsg+0x5f/0x10a0 [ 276.903097][ T4658] __sys_recvmmsg+0x113/0x450 [ 278.847034][ T4658] not chained 330000 origins [ 278.847057][ T4658] CPU: 1 PID: 4658 Comm: syz-executor.2 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 278.847105][ T4658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.847129][ T4658] Call Trace: [ 278.847143][ T4658] [ 278.847156][ T4658] dump_stack_lvl+0x1c8/0x256 [ 278.847227][ T4658] dump_stack+0x1a/0x1c [ 278.847284][ T4658] kmsan_internal_chain_origin+0x78/0x120 [ 278.847344][ T4658] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 278.847400][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 278.847452][ T4658] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 278.847509][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 278.847562][ T4658] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 278.847624][ T4658] ? __get_compat_msghdr+0x5b/0x750 [ 278.847688][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 278.847740][ T4658] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 278.847801][ T4658] ? should_fail+0x3f/0x810 [ 278.847854][ T4658] ? __stack_depot_save+0x21/0x4b0 [ 278.847904][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 278.847956][ T4658] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 278.848014][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 278.848066][ T4658] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 278.848123][ T4658] __msan_chain_origin+0xbd/0x140 [ 278.848175][ T4658] __get_compat_msghdr+0x514/0x750 [ 278.848252][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 278.848319][ T4658] ? ___sys_recvmsg+0xa9/0x870 [ 278.848363][ T4658] ? do_recvmmsg+0x63a/0x10a0 [ 278.848408][ T4658] ___sys_recvmsg+0x19d/0x870 [ 278.848456][ T4658] ? __schedule+0x1609/0x21d0 [ 278.848504][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 278.848556][ T4658] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 278.848613][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 278.848665][ T4658] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 278.848725][ T4658] do_recvmmsg+0x63a/0x10a0 [ 278.848780][ T4658] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 278.848840][ T4658] ? __sys_recvmmsg+0x52/0x450 [ 278.848883][ T4658] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 278.848938][ T4658] __sys_recvmmsg+0x113/0x450 [ 278.848982][ T4658] ? kmsan_get_metadata+0x33/0x220 [ 278.849040][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 278.849100][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 278.849144][ T4658] ? exit_to_user_mode_prepare+0x119/0x220 [ 278.849197][ T4658] do_fast_syscall_32+0x33/0x70 [ 278.849241][ T4658] do_SYSENTER_32+0x1b/0x20 [ 278.849283][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 278.849358][ T4658] RIP: 0023:0xf7fc7549 [ 278.849388][ T4658] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 278.849431][ T4658] RSP: 002b:00000000f7fa15cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 278.849472][ T4658] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 278.849504][ T4658] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 278.849531][ T4658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.849557][ T4658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.849584][ T4658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.849622][ T4658] [ 278.849635][ T4658] Uninit was stored to memory at: [ 278.849701][ T4658] __get_compat_msghdr+0x514/0x750 [ 278.849762][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 278.849822][ T4658] ___sys_recvmsg+0x19d/0x870 [ 278.849861][ T4658] do_recvmmsg+0x63a/0x10a0 [ 278.849901][ T4658] __sys_recvmmsg+0x113/0x450 [ 278.849941][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 278.849990][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 278.850031][ T4658] do_fast_syscall_32+0x33/0x70 [ 278.850071][ T4658] do_SYSENTER_32+0x1b/0x20 [ 278.850110][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 278.850177][ T4658] [ 278.850183][ T4658] Uninit was stored to memory at: [ 278.850248][ T4658] __get_compat_msghdr+0x514/0x750 [ 278.850313][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 278.850372][ T4658] ___sys_recvmsg+0x19d/0x870 [ 278.850413][ T4658] do_recvmmsg+0x63a/0x10a0 [ 278.850452][ T4658] __sys_recvmmsg+0x113/0x450 [ 278.850492][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 278.850540][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 278.850581][ T4658] do_fast_syscall_32+0x33/0x70 [ 278.850621][ T4658] do_SYSENTER_32+0x1b/0x20 [ 278.850660][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 278.850727][ T4658] [ 278.850734][ T4658] Uninit was stored to memory at: [ 278.850798][ T4658] __get_compat_msghdr+0x514/0x750 [ 278.850859][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 278.850919][ T4658] ___sys_recvmsg+0x19d/0x870 [ 278.850959][ T4658] do_recvmmsg+0x63a/0x10a0 [ 278.850999][ T4658] __sys_recvmmsg+0x113/0x450 [ 278.851039][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 278.851088][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 278.851129][ T4658] do_fast_syscall_32+0x33/0x70 [ 278.851168][ T4658] do_SYSENTER_32+0x1b/0x20 [ 278.851207][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 278.851275][ T4658] [ 278.851281][ T4658] Uninit was stored to memory at: [ 278.851351][ T4658] __get_compat_msghdr+0x514/0x750 [ 278.851413][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 278.851472][ T4658] ___sys_recvmsg+0x19d/0x870 [ 278.851512][ T4658] do_recvmmsg+0x63a/0x10a0 [ 278.851551][ T4658] __sys_recvmmsg+0x113/0x450 [ 278.851592][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 278.852176][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 278.852219][ T4658] do_fast_syscall_32+0x33/0x70 [ 278.852259][ T4658] do_SYSENTER_32+0x1b/0x20 [ 278.852302][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 278.852370][ T4658] [ 278.852376][ T4658] Uninit was stored to memory at: [ 278.852442][ T4658] __get_compat_msghdr+0x514/0x750 [ 278.852502][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 278.852562][ T4658] ___sys_recvmsg+0x19d/0x870 [ 278.852601][ T4658] do_recvmmsg+0x63a/0x10a0 [ 278.852640][ T4658] __sys_recvmmsg+0x113/0x450 [ 278.852680][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 278.852728][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 278.852769][ T4658] do_fast_syscall_32+0x33/0x70 [ 278.852809][ T4658] do_SYSENTER_32+0x1b/0x20 [ 278.852848][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 278.852915][ T4658] [ 278.852922][ T4658] Uninit was stored to memory at: [ 278.852986][ T4658] __get_compat_msghdr+0x514/0x750 [ 278.853047][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 278.853106][ T4658] ___sys_recvmsg+0x19d/0x870 [ 278.853146][ T4658] do_recvmmsg+0x63a/0x10a0 [ 278.853185][ T4658] __sys_recvmmsg+0x113/0x450 [ 278.853225][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 278.853274][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 278.853319][ T4658] do_fast_syscall_32+0x33/0x70 [ 278.853359][ T4658] do_SYSENTER_32+0x1b/0x20 [ 278.853398][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 278.853465][ T4658] [ 278.853471][ T4658] Uninit was stored to memory at: [ 278.853536][ T4658] __get_compat_msghdr+0x514/0x750 [ 278.853598][ T4658] get_compat_msghdr+0x8c/0x1c0 [ 278.853657][ T4658] ___sys_recvmsg+0x19d/0x870 [ 278.853697][ T4658] do_recvmmsg+0x63a/0x10a0 [ 278.853736][ T4658] __sys_recvmmsg+0x113/0x450 [ 278.853776][ T4658] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 278.853825][ T4658] __do_fast_syscall_32+0x95/0xf0 [ 278.853866][ T4658] do_fast_syscall_32+0x33/0x70 [ 278.853906][ T4658] do_SYSENTER_32+0x1b/0x20 [ 278.853944][ T4658] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 278.854011][ T4658] [ 278.854018][ T4658] Local variable msg_sys created at: [ 278.854032][ T4658] do_recvmmsg+0x5f/0x10a0 [ 278.854069][ T4658] __sys_recvmmsg+0x113/0x450 [ 279.482307][ T1198] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.482499][ T1198] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.498932][ T4692] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 282.645019][ T4699] loop2: detected capacity change from 0 to 1024 [ 282.660201][ T4699] ext4: Unknown parameter 'teÎ' [ 283.593097][ T4703] tmpfs: Unknown parameter 'hõge' [ 283.615320][ T4703] mmap: syz-executor.3 (4703) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 283.647853][ T4703] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 283.675955][ T25] audit: type=1804 audit(1656150260.729:7): pid=4703 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2244859588/syzkaller.mZ3DLB/77/bus/bus" dev="sda1" ino=1167 res=1 errno=0 [ 283.676133][ T25] audit: type=1800 audit(1656150260.729:8): pid=4703 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1167 res=0 errno=0 [ 283.747819][ T25] audit: type=1804 audit(1656150260.799:9): pid=4706 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2244859588/syzkaller.mZ3DLB/77/bus/bus" dev="sda1" ino=1167 res=1 errno=0 [ 283.920375][ T4708] loop1: detected capacity change from 0 to 64 [ 284.049448][ T4708] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid end of sector marker. [ 284.117759][ T4708] ntfs: (device loop1): ntfs_read_inode_mount(): Incorrect mft record size 423039248 in superblock, should be 1024. [ 284.118033][ T4708] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 284.118152][ T4708] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata. [ 285.582780][ T4717] tmpfs: Unknown parameter 'hõge' 09:44:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000efdd79b7c3654313ac0cec53e79dcbaf010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7465ce0800e3b36c6d792ca9e80f042b7a4556a669aa373bbe390900"]) 09:44:25 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) fchmodat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) (async) fchmodat(0xffffffffffffffff, 0x0, 0x0) (async) 09:44:25 executing program 4: openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000600)=""/16, 0x10}], 0x1}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'wlan1\x00', &(0x7f00000006c0)=@ethtool_rxnfc={0x2d, 0x0, 0x0, {0x0, @esp_ip4_spec={@broadcast, @multicast2}, {}, @usr_ip4_spec={@dev, @multicast1}, {0x0, @link_local}}}}) 09:44:25 executing program 3: fstatfs(0xffffffffffffffff, &(0x7f0000000140)=""/177) (async, rerun: 64) syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="68f567653d616c77617973"]) (rerun: 64) chdir(&(0x7f0000000380)='./bus\x00') (async) creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x15113d, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x240002) setsockopt$inet6_int(r3, 0x29, 0xc8, &(0x7f0000000080), 0x4) sendto$inet6(r2, 0x0, 0x0, 0x2400880c, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) (async, rerun: 32) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) (async) r4 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x10e) sendfile(r2, r4, 0x0, 0x8000fffffffe) (async, rerun: 64) creat(&(0x7f0000000000)='./bus\x00', 0x0) (rerun: 64) 09:44:25 executing program 5: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000100)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda8c) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) accept4(r2, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x0, 0x80c00) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xc02, 0x4) 09:44:25 executing program 1: syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000020800000000000000f8000000000000000000000000000080008000ff0f0000000000000400000000000000ff00000000000000f600000001", 0x45}, {&(0x7f0000010300)="46494c453000030000000000000000000100010038000100dc7b609e101137190000000000000000040000000000000008", 0x31, 0x4000}], 0x0, &(0x7f000007dc00)) syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000020800000000000000f8000000000000000000000000000080008000ff0f0000000000000400000000000000ff00000000000000f600000001", 0x45}, {&(0x7f0000010300)="46494c453000030000000000000000000100010038000100dc7b609e101137190000000000000000040000000000000008", 0x31, 0x4000}], 0x0, &(0x7f000007dc00)) (async) 09:44:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x3, 0x4) 09:44:26 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "8bd2a545d3b84ba6ecaa33f2fc76837458eae7f79a6a22b0f85930d229de57f1", 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x5450, 0x0) 09:44:26 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xffffff7f00000000}}, 0x0) 09:44:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000efdd79b7c3654313ac0cec53e79dcbaf010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7465ce0800e3b36c6d792ca9e80f042b7a4556a669aa373bbe390900"]) 09:44:26 executing program 1: syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000020800000000000000f8000000000000000000000000000080008000ff0f0000000000000400000000000000ff00000000000000f600000001", 0x45}, {&(0x7f0000010300)="46494c453000030000000000000000000100010038000100dc7b609e101137190000000000000000040000000000000008", 0x31, 0x4000}], 0x0, &(0x7f000007dc00)) 09:44:26 executing program 4: syz_usb_connect$uac1(0x0, 0xc5, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "65b4ba63aad849b5bb"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 'm', "5010"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "1a6edb5f620c04ed"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "150e396e5435a28401"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 09:44:26 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "8bd2a545d3b84ba6ecaa33f2fc76837458eae7f79a6a22b0f85930d229de57f1", 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x2, 0x0) 09:44:26 executing program 5: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000100)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) listen(r0, 0xda8c) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) accept4(r2, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x0, 0x80c00) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xc02, 0x4) 09:44:26 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000580)={0xffffff01}) 09:44:27 executing program 3: request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) 09:44:27 executing program 1: keyctl$search(0xc, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x0}, 0xfffffffffffffffb) 09:44:27 executing program 0: clock_gettime(0x4, &(0x7f00000004c0)) 09:44:27 executing program 3: r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x11) 09:44:27 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) 09:44:27 executing program 1: r0 = socket(0x11, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) 09:44:27 executing program 3: request_key(&(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0) 09:44:27 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4, 0x0, 0x300) 09:44:28 executing program 4: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0xf0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 09:44:28 executing program 5: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000100)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) listen(r0, 0xda8c) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) accept4(r2, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x0, 0x80c00) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xc02, 0x4) 09:44:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5421, &(0x7f0000000740)) 09:44:28 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 09:44:28 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x2}, &(0x7f0000000040)={0x8}, 0x0, 0x0) 09:44:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x13c}, 0x1, 0x0, 0x5000}, 0x0) 09:44:29 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xb, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x0}, 0xfffffffffffffffb) 09:44:29 executing program 1: add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 09:44:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x42, 0x0, 0x7000000) 09:44:29 executing program 3: syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0xc241) 09:44:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000000)) 09:44:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 09:44:30 executing program 4: r0 = socket(0x11, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x40010101, 0x0, 0x0) 09:44:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2a, 0x0, 0x7000000) 09:44:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x89a0, 0x0) 09:44:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8903, 0x0) 09:44:30 executing program 0: process_madvise(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) 09:44:30 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 09:44:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x35, 0x0, 0x7000000) 09:44:31 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r1 = syz_clone(0x60002000, &(0x7f0000000040), 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x0) sched_rr_get_interval(r2, 0x0) 09:44:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0x11, r0, 0x0, 0x0, 0xfffffffffffffffb) 09:44:31 executing program 0: syz_clone(0x8040d80, 0x0, 0x0, 0x0, 0x0, 0x0) 09:44:31 executing program 5: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000940), 0xffffffffffffffff) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={0x0, 0x0, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 09:44:31 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x47, &(0x7f00000005c0)=""/71, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:44:31 executing program 3: r0 = getpgid(0x0) ptrace$setregset(0x4205, r0, 0x0, 0x0) syz_clone(0x60002000, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="517ede40272fe077c800") kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000440)) 09:44:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@delqdisc={0x24, 0x25, 0x1}, 0x24}}, 0x0) 09:44:31 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xe, r0, 0x0, 0x0, 0xfffffffffffffffb) 09:44:31 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x2000004c, &(0x7f00000000c0)={0x0}}, 0x0) 09:44:31 executing program 5: getresgid(&(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000140)) 09:44:32 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x30, 0x0, 0x300) 09:44:32 executing program 0: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000480)='cubic\x00', 0x6) write$tcp_congestion(r0, &(0x7f0000000000)='scalable\x00', 0x9) [ 288.967248][ T4731] tmpfs: Unknown parameter 'hõge' [ 288.967929][ T4731] tmpfs: Unknown parameter 'hõge' [ 288.968586][ T4731] tmpfs: Unknown parameter 'hõge' [ 288.969245][ T4731] tmpfs: Unknown parameter 'hõge' [ 288.969902][ T4731] tmpfs: Unknown parameter 'hõge' [ 288.970554][ T4731] tmpfs: Unknown parameter 'hõge' [ 288.971221][ T4731] tmpfs: Unknown parameter 'hõge' [ 288.972621][ T4731] tmpfs: Unknown parameter 'hõge' [ 289.033237][ T4731] tmpfs: Unknown parameter 'hõge' [ 289.033968][ T4731] tmpfs: Unknown parameter 'hõge' [ 289.034665][ T4731] tmpfs: Unknown parameter 'hõge' [ 289.035371][ T4731] tmpfs: Unknown parameter 'hõge' [ 289.036084][ T4731] tmpfs: Unknown parameter 'hõge' [ 289.036769][ T4731] tmpfs: Unknown parameter 'hõge' [ 289.037464][ T4731] tmpfs: Unknown parameter 'hõge' [ 289.038151][ T4731] tmpfs: Unknown parameter 'hõge' [ 289.038849][ T4731] tmpfs: Unknown parameter 'hõge' [ 289.039535][ T4731] tmpfs: Unknown parameter 'hõge' [ 289.260810][ T4743] loop2: detected capacity change from 0 to 1024 [ 289.298790][ T4743] ext4: Unknown parameter 'teÎ' [ 289.308234][ T4744] loop1: detected capacity change from 0 to 64 [ 289.392548][ T4744] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid end of sector marker. [ 289.394311][ T4744] ntfs: (device loop1): ntfs_read_inode_mount(): Incorrect mft record size 423039248 in superblock, should be 1024. [ 289.394422][ T4744] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 289.394710][ T4744] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata. [ 289.766261][ T4756] loop2: detected capacity change from 0 to 1024 [ 289.795829][ T4756] ext4: Unknown parameter 'teÎ' [ 289.850481][ T4758] loop1: detected capacity change from 0 to 64 [ 289.877526][ T4758] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid end of sector marker. [ 289.883522][ T4758] ntfs: (device loop1): ntfs_read_inode_mount(): Incorrect mft record size 423039248 in superblock, should be 1024. [ 289.883632][ T4758] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad. 09:44:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='h'], 0x13c}}, 0x0) 09:44:32 executing program 4: request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='{(\xa9]/[\\^\x00', 0xffffffffffffffff) 09:44:32 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/psched\x00') ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 09:44:32 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}}}}) 09:44:32 executing program 3: r0 = getpgid(0x0) ptrace$setregset(0x4205, r0, 0x0, 0x0) syz_clone(0x60002000, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="517ede40272fe077c800") kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000440)) [ 289.883740][ T4758] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata. [ 290.262401][ T3559] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 290.501882][ T3559] usb 5-1: Using ep0 maxpacket: 8 [ 290.624062][ T3559] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.624199][ T3559] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 290.792764][ T3559] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.792902][ T3559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.793005][ T3559] usb 5-1: Product: syz [ 290.793086][ T3559] usb 5-1: Manufacturer: syz [ 290.793171][ T3559] usb 5-1: SerialNumber: syz [ 291.112431][ T3559] usb 5-1: 0:2 : does not exist [ 291.171984][ T3559] usb 5-1: USB disconnect, device number 2 [ 292.202270][ T3561] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 292.602706][ T3561] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 292.783267][ T3561] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.783406][ T3561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.783516][ T3561] usb 5-1: Product: syz [ 292.783601][ T3561] usb 5-1: Manufacturer: syz [ 292.783683][ T3561] usb 5-1: SerialNumber: syz [ 292.835963][ T3561] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 293.041023][ T3561] usb 5-1: USB disconnect, device number 3 [ 293.382746][ T4643] udevd[4643]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 09:44:33 executing program 0: openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0xb8fe39185eefce4f, 0x0) 09:44:33 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, 0x0, 0x7000000) 09:44:33 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@part={'part', 0x3d, 0x80000000}}]}) 09:44:33 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) 09:44:33 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 09:44:33 executing program 0: keyctl$search(0x18, 0x0, 0x0, &(0x7f00000001c0)={'syz', 0x0}, 0xfffffffffffffffb) 09:44:33 executing program 4: request_key(&(0x7f0000000040)='cifs.spnego\x00', 0x0, 0x0, 0xfffffffffffffffc) 09:44:33 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x7, 0xfe, &(0x7f00000004c0)=""/254, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600), 0x10}, 0x80) 09:44:33 executing program 5: clock_adjtime(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100, 0x8}) 09:44:33 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002340)={0x1, &(0x7f0000002300)=[{0x6}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) 09:44:33 executing program 0: pipe2$watch_queue(0x0, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000400), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8001}]}) 09:44:34 executing program 4: clock_gettime(0x0, &(0x7f0000000300)) 09:44:34 executing program 3: r0 = getpgid(0x0) ptrace$setregset(0x4205, r0, 0x0, 0x0) syz_clone(0x60002000, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="517ede40272fe077c800") kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000440)) 09:44:34 executing program 5: clock_adjtime(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100, 0x8}) 09:44:34 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x2, r0, 0x0) 09:44:34 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') 09:44:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8983, 0x0) 09:44:34 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x13, 0x0, 0x7000000) 09:44:34 executing program 5: clock_adjtime(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100, 0x8}) 09:44:34 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) [ 296.469004][ T4878] hfsplus: part requires an argument [ 296.469040][ T4878] hfsplus: unable to parse mount options [ 296.913422][ T3559] Bluetooth: hci0: command 0x0406 tx timeout [ 296.916762][ T3559] Bluetooth: hci5: command 0x0406 tx timeout [ 296.916980][ T3559] Bluetooth: hci2: command 0x0406 tx timeout [ 296.917184][ T3559] Bluetooth: hci1: command 0x0406 tx timeout [ 296.917380][ T3559] Bluetooth: hci3: command 0x0406 tx timeout [ 296.917572][ T3559] Bluetooth: hci4: command 0x0406 tx timeout [ 297.116529][ T25] audit: type=1326 audit(1656150274.169:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4893 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc7549 code=0x0 09:44:35 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "8bd2a545d3b84ba6ecaa33f2fc76837458eae7f79a6a22b0f85930d229de57f1", 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0xc0303e03, 0x0) 09:44:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter, 0xfffffc5b) 09:44:35 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x209001, &(0x7f0000002340)) 09:44:35 executing program 5: clock_adjtime(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100, 0x8}) 09:44:35 executing program 3: r0 = getpgid(0x0) ptrace$setregset(0x4205, r0, 0x0, 0x0) syz_clone(0x60002000, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="517ede40272fe077c800") kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000440)) 09:44:35 executing program 0: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:44:35 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000480)='cubic\x00', 0x20000486) 09:44:35 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x4800, 0x0) 09:44:35 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x550, 0x148, 0x148, 0x480, 0x0, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [], [], 'macvlan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private}, @empty, [], [], 'macsec0\x00', 'macvlan0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@ipv6={@private2, @dev, [], [], 'vlan1\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wlan1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0xa}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 09:44:35 executing program 5: r0 = socket(0xa, 0x80001, 0x0) recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000043) 09:44:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 09:44:36 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000001640)='./file0\x00', 0x1) openat$pfkey(0xffffffffffffff9c, 0x0, 0x200, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000940)={0x7}, 0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000100)={0x90, 0x0, 0x0, {0x0, 0x1, 0x0, 0x8, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x10000, 0x1, 0x0, 0x33, 0x0, 0x0, 0x0, 0x2f7b4a4}}}, 0x90) syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x81, 0x3, 0x2, 0x6, 0x0, 0x7b, {{0x7, 0x24, 0x6, 0x0, 0x0, "d2e7"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x0, 0x7}, [@mdlm_detail={0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x24}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x2, 0x3f, 0x8, 0x8, 0xfc}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x7, [{0x0, 0x0}, {0xdd, &(0x7f00000003c0)=@string={0xdd, 0x3, "8a84138cfc2c0f5601a98b7a4fe01be62282e28c78dff5a1f8ebfb00e38232e4e678ed6c85a0686b06a6eda983b000b574050e440e06a5c4ddb7a1ffe10cfd05b9d402393fc3472afaef1b969128bb5ebcfcc014bd8409b006f190b8efcd974087ab519c691f7e089b70ef7240caf4d2e229880983c6cd9828475f5ef50cf33962ad94a8b801ffe0a5f1835e60cc7282dc8f2542dfb0ece1b67842e28d374fb9d2d18235c515e1367d290ebaf18f6b7e23041d702b74f6c84f3c6f01cd83784bd6b3a37b3169d4a4988f1c90704a00445fc609c4c0794fdd90603e"}}, {0x0, 0x0}, {0x94, &(0x7f0000000500)=ANY=[@ANYBLOB="9403f2bd8a9f8d42291d70f719ad033f0d3fa180f1adc690231d9f5c9ac2773ed682daea152e0d4e959b82a85f0000000039e937e39a0bf7fecde8bc14877f57626bdd4b966eb52474a8214844ffe5e5fc1fc3c1af52cb08c5dbda9169b5ad907eccfead1b44e9addad9632526baa7110700000000000000000000000000000000000000000000000080000000000000000000"]}, {0x0, 0x0}, {0xa3, &(0x7f0000000700)=ANY=[@ANYBLOB="a303607cf182ad4dd91f1624b8619a3f4e18bfa9087bd82c2491310a815ee5acc5d61cac9eb374a41a5ef1f84be145031a6281e707386eb8bbf4a0e525cf3f47bd7b0eaa397484d117919ad876cc"]}, {0xc, &(0x7f00000007c0)=@string={0xc, 0x3, "cf6f425af9e5edda2f52"}}]}) 09:44:36 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f0000000c40)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000140)="10e75da5b3d46bd4238f210addba0ff1a80a49518770383247a1b02eb0f88b69514045a8c61b52f8bd3ce36a2ac04854fff6d7ffaf5bdce41a5fd2ca0a1f1440964eb297ef88f69b85a2ba07d9b68417a6cc7fffb70ea44ebf52694a26dc49173454d34477a70f0c", 0x68}], 0x1}}], 0x1, 0x0) 09:44:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 09:44:36 executing program 0: syz_clone3(&(0x7f0000000380)={0x142100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000380)={0x142100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x58) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 299.795335][ T3561] usb 3-1: new high-speed USB device number 4 using dummy_hcd 09:44:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:36 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 300.031046][ T4960] Error: Driver 'raw-gadget' is already registered, aborting... [ 300.031096][ T4960] UDC core: USB Raw Gadget: driver registration failed: -16 [ 300.031174][ T4960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.052354][ T3561] usb 3-1: Using ep0 maxpacket: 8 [ 300.184593][ T3561] usb 3-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 1024 [ 300.184738][ T3561] usb 3-1: config 1 interface 0 altsetting 129 endpoint 0x3 has invalid wMaxPacketSize 0 [ 300.184865][ T3561] usb 3-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 0 [ 300.184996][ T3561] usb 3-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 09:44:37 executing program 3: ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000940)={0x7}, 0x4) syz_usb_connect$cdc_ecm(0x0, 0x58, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x0, 0x70, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0xe14}, [@mdlm_detail={0x4}, @network_terminal={0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x94, 0x24, 0x6}}}}}]}}]}}, 0x0) [ 300.185140][ T3561] usb 3-1: config 1 interface 0 has no altsetting 0 09:44:37 executing program 4: syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc29b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 300.361283][ T4967] Error: Driver 'raw-gadget' is already registered, aborting... [ 300.361342][ T4967] UDC core: USB Raw Gadget: driver registration failed: -16 [ 300.361419][ T4967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.443273][ T3561] usb 3-1: string descriptor 0 read error: -22 [ 300.443570][ T3561] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.443691][ T3561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.476885][ T4942] raw-gadget gadget.2: fail, usb_ep_enable returned -22 [ 300.495140][ T3561] usb 3-1: bad CDC descriptors 09:44:37 executing program 0: syz_clone3(&(0x7f0000000380)={0x142100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000380)={0x142100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x58) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 300.706014][ T3561] usb 3-1: USB disconnect, device number 4 09:44:37 executing program 1: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) openat$pfkey(0xffffffffffffff9c, 0x0, 0x200, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000940)={0x7}, 0x4) syz_usb_connect$cdc_ecm(0x0, 0x58, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x0, 0x70, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x7b, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0xe14, 0x7}, [@mdlm_detail={0x4}, @network_terminal={0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x94, 0x24, 0x6}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x2, 0x3f, 0x8, 0x8}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x7, [{0x2, &(0x7f00000003c0)=@string={0x2}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x94, &(0x7f0000000500)=ANY=[]}, {0x2c, &(0x7f00000005c0)=@string={0x2c, 0x3, "97651a08e0aa5bf57b71601eaa266fdb276abc2ed1419b9d81cae701160c8bb8457a6130e38d5d3b5214"}}, {0x0, 0x0}, {0xa3, &(0x7f0000000700)=ANY=[@ANYBLOB="a303607cf182ad4dd91f1624b8619a3f4e18bfa9087bd82c2491310a815ee5acc5d61cac9eb374a41a5ef1f84be145031a6281e707386eb8bbf4a0e525cf3f47bd7b0eaa397484d117919ad876cc5d2fe9c964e323fe2566ab552e748c09507a88ca2ed73c9442946e50f6684bd43dcffc1c5452"]}, {0x0, 0x0}]}) 09:44:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x80000000, 0x0, 0x3}]}) [ 301.033411][ T3559] usb 5-1: new low-speed USB device number 4 using dummy_hcd 09:44:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x9, 0x0, &(0x7f0000000200)) 09:44:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 301.280252][ T4976] Error: Driver 'raw-gadget' is already registered, aborting... [ 301.280314][ T4976] UDC core: USB Raw Gadget: driver registration failed: -16 [ 301.280390][ T4976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.392197][ T3559] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 09:44:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 301.753047][ T3559] usb 5-1: string descriptor 0 read error: -22 [ 301.753337][ T3559] usb 5-1: New USB device found, idVendor=046d, idProduct=c29b, bcdDevice= 0.40 [ 301.753472][ T3559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 09:44:38 executing program 3: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote}}) 09:44:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x14}, 0xfffffdef}}, 0x0) [ 301.789156][ T4970] raw-gadget gadget.4: fail, usb_ep_enable returned -22 [ 301.812628][ T3559] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 302.034074][ T3559] usb 5-1: USB disconnect, device number 4 09:44:39 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x40049409, &(0x7f0000000040)) 09:44:39 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x15, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x28, @in=@dev, @in=@multicast1}]}, 0x38}}, 0x0) 09:44:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000022) 09:44:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) 09:44:40 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x5452, &(0x7f0000000080)={'veth1_virt_wifi\x00', @remote}) 09:44:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp, @mss, @sack_perm, @sack_perm], 0x4) 09:44:40 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x15, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x28, @in=@dev, @in=@multicast1}]}, 0x38}}, 0x0) 09:44:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x14}, 0x33fe0}}, 0x0) 09:44:40 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000040)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 09:44:40 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r0, 0x0, &(0x7f0000000080)) 09:44:40 executing program 1: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}}}) 09:44:40 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0, 0x0) 09:44:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) 09:44:41 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) 09:44:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 09:44:41 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x0, 0x0, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000003140), 0x0, 0x0) pipe(&(0x7f0000000200)) 09:44:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:41 executing program 3: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x401c5820, &(0x7f0000000100)={'gre0\x00', 0x0}) 09:44:41 executing program 4: r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x80002008}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'syz_tun\x00'}, @TCA_U32_SEL={0x14}]}}]}, 0x58}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 09:44:41 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x13, r0, 0x0) 09:44:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000016bcab"], 0x14}}, 0x0) 09:44:41 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x4, &(0x7f0000000180)=@framed={{}, [@alu={0x7}]}, &(0x7f0000000200)='GPL\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:44:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0, 0x2}}}]}, 0x34}}, 0x0) 09:44:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000340)) [ 304.938342][ T5041] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 09:44:42 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x401c5820, 0x0) 09:44:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 09:44:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x7}]}, 0x1c}}, 0x0) 09:44:42 executing program 3: r0 = socket(0x22, 0x2, 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0)={0x7ff, 0x4, 0x5, 0x0, 0x5, 0xb5, 0x7f}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x40) r1 = socket(0x22, 0x2, 0x3) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, &(0x7f0000002580)) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000d00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000480)={0x804, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x3e0, 0x8, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9579cda5a469f566128f4b64e5cd46d7f35bcb78765c907dc86ef4ef74e99156"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @mcast1, 0x1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4ebf9deff5bf6bfc73749047bdf742a7a002413e67a10a7285f493b09820f736"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1200000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010101}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3a5d99e7753ede0f8c38f8ba368a44f194307f80c401d43e61181ae6c5c7546e"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x198, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfc5f}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7ff, @local, 0x8}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7722d8d881e6c3f3f7bbe5375e14d3600a3d307c3f66de920a4150fb0d5a6337"}, @WGPEER_A_ALLOWEDIPS={0xd0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010101}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1cd1296b7d2d336ea0d67eba0533e0a561df80f4af7d075ed16fd52e452c1661"}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xf59}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9c0bd73194055573cd35258a8893d4e3ffb4264e85eb71f1ae47d21f16859f6f"}]}]}, @WGDEVICE_A_PEERS={0x410, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x264, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @private0, 0x5}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, @WGPEER_A_ALLOWEDIPS={0x174, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1f}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x530a}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x114, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @remote, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4, @local, 0x5}}]}]}]}, 0x804}, 0x1, 0x0, 0x0, 0x20000}, 0x4000840) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d80), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xf95}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4040) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbb4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44850}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}}}) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82000002}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3a}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) 09:44:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:43 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xf0ff7f00000000}, 0x161}, 0x0) 09:44:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0) 09:44:43 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000a80)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 09:44:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x2, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 09:44:43 executing program 3: r0 = socket(0x2, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:44:43 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0xc0045878, 0x0) 09:44:43 executing program 0: r0 = socket(0x25, 0x5, 0x0) bind$inet6(r0, 0x0, 0x0) 09:44:43 executing program 1: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x40086602, &(0x7f0000000100)={'gre0\x00', 0x0}) 09:44:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x18}, 0x48) 09:44:43 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 09:44:43 executing program 2: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast1}}) 09:44:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:44 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x29, 0x2, 0x0, 0x0) 09:44:44 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x22, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:44:44 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x801c581f, 0x0) 09:44:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000000)=0x58) 09:44:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000000d06010200000000000000000100000105000500fd000000050005000300000005000500020000000d0003006861736896ed9c6ee7"], 0xa0}}, 0x0) 09:44:44 executing program 4: r0 = socket(0x25, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 09:44:44 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$phonet(r0, 0x0, 0x0, 0x20040400, 0x0, 0x0) 09:44:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) 09:44:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f0000000200)) 09:44:44 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x26) 09:44:45 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) 09:44:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xe7}, 0xc) 09:44:45 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0xc0189436, 0x0) 09:44:45 executing program 0: socketpair(0x2, 0x5, 0x0, &(0x7f0000000180)) 09:44:45 executing program 2: r0 = socket(0x2, 0x3, 0x6) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x3) 09:44:45 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x80086601, 0x0) 09:44:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x21, 0x0) 09:44:45 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x2, &(0x7f0000000040)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:44:45 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xf0ff7f00000000}, 0x300}, 0x0) pipe(&(0x7f00000010c0)) 09:44:45 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5421, &(0x7f0000000040)) 09:44:45 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 09:44:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x7, 0x0, &(0x7f0000000200)) 09:44:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:47 executing program 0: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @rand_addr, {[@timestamp_addr={0x44, 0x4}]}}}}}) 09:44:47 executing program 4: r0 = socket(0x21, 0x2, 0x2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}}, 0x0) 09:44:47 executing program 2: r0 = socket(0x23, 0x5, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x10}}, 0x0) 09:44:47 executing program 1: clock_gettime(0x4, &(0x7f0000000280)) 09:44:47 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x2, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 09:44:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) 09:44:47 executing program 2: ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x300}, 0x0) 09:44:47 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x9b131d9f637f4502, 0x0, &(0x7f00000000c0)) 09:44:47 executing program 1: pipe(&(0x7f00000010c0)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r0, 0x0) 09:44:47 executing program 3: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 09:44:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8}]}]}, 0x28}}, 0x0) 09:44:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x300}, 0x0) 09:44:48 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r0, &(0x7f0000000100)=ANY=[], 0x105c) 09:44:48 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 09:44:48 executing program 2: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5452, &(0x7f0000000100)={'gre0\x00', 0x0}) 09:44:48 executing program 3: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:48 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@multicast1}]}, 0x38}}, 0x0) 09:44:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005ff00"/20, @ANYRES32=r2, @ANYBLOB="00000000341c4481280012000900010076657468"], 0x48}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f3ff00000d0001"], 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 09:44:48 executing program 3: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:48 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, 0x0, 0x700) 09:44:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x400454ca, &(0x7f0000000100)={'ipvlan1\x00', @local}) 09:44:48 executing program 3: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) [ 311.698786][ T5200] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 09:44:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:49 executing program 0: r0 = socket(0x1e, 0x1, 0x0) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) 09:44:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x400454ca, &(0x7f0000000100)={'ipvlan1\x00', @local}) 09:44:49 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(r0, 0x10f, 0x85, 0x0, 0x0) 09:44:49 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000140), 0x4) 09:44:49 executing program 3: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:49 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1c, 0x0, 0x0) 09:44:49 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0x3, &(0x7f0000000100)={0x80000001}, 0x8) 09:44:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x19, 0x2, &(0x7f0000000040)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:44:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'ipvlan1\x00', @local}) 09:44:49 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:44:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xd9, 0x0, 0xe0}, 0xc) 09:44:50 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:50 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}, 0x7}, 0x0) 09:44:50 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) 09:44:50 executing program 2: socket(0x1d, 0x0, 0x4d) 09:44:51 executing program 2: r0 = socket(0x23, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 09:44:51 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@nsim={{0xe, 0x7}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 09:44:51 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x7) 09:44:51 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendto$l2tp6(r0, 0x0, 0x0, 0x7, 0x0, 0x0) 09:44:51 executing program 3: r0 = socket(0x0, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:52 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x15, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x8, @in=@dev, @in=@multicast1}]}, 0x38}}, 0x0) 09:44:52 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x15, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x18, @in=@dev={0xac, 0x14, 0x14, 0xfe}, @in=@multicast1}]}, 0x38}}, 0x0) 09:44:52 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5450, 0x0) 09:44:53 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000280)={'security\x00'}, &(0x7f0000000300)=0x54) 09:44:53 executing program 1: socketpair(0x29, 0x5, 0x0, &(0x7f0000000200)) 09:44:53 executing program 0: r0 = socket(0x25, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00100040000000080000000242150048006800000929"]}) 09:44:53 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40) 09:44:53 executing program 3: r0 = socket(0x0, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:53 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:44:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 09:44:53 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40) 09:44:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={0x0}}, 0x20000890) 09:44:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)="c2192e70b91d3d6021", 0x9) 09:44:54 executing program 3: r0 = socket(0x0, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:54 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 09:44:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002e00)=ANY=[@ANYBLOB="7800000001070306"], 0x78}}, 0x0) [ 317.712105][ T5413] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 09:44:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0x1, &(0x7f0000001480)=@raw=[@kfunc], &(0x7f0000000100)='GPL\x00', 0x7, 0x1000, &(0x7f0000000140)=""/4096, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:44:55 executing program 1: r0 = socket(0x25, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) 09:44:55 executing program 3: r0 = socket(0x22, 0x0, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:55 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5460, 0x0) 09:44:55 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:44:55 executing program 1: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x80000001}, 0x8) 09:44:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:55 executing program 3: r0 = socket(0x22, 0x0, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xc, 0x0, &(0x7f0000000200)) 09:44:55 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x0, 'lo\x00'}) 09:44:55 executing program 4: pipe(&(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0xf4240, &(0x7f0000000040)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:44:55 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x10001}, 0x1c) 09:44:56 executing program 2: r0 = socket(0x11, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 09:44:56 executing program 3: r0 = socket(0x22, 0x0, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:56 executing program 1: r0 = socket(0x11, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20040) 09:44:56 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) 09:44:56 executing program 4: pipe(&(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0xf4240, &(0x7f0000000040)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:44:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x2, 0x0, 0x0, 0x0) 09:44:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:57 executing program 3: r0 = socket(0x22, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:57 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5760, 0x0) 09:44:57 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 09:44:57 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 09:44:57 executing program 3: r0 = socket(0x22, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:57 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r0, &(0x7f0000000000)=@name, &(0x7f0000000080)=0x10) 09:44:57 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r0) 09:44:57 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, &(0x7f00000033c0)) 09:44:57 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 09:44:57 executing program 3: r0 = socket(0x22, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r1, 0xfffffffffffffffd}, 0x14}}, 0x0) 09:44:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:58 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0xc051) 09:44:58 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @null, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) 09:44:58 executing program 3: socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:58 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 09:44:58 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000140)) [ 321.582743][ T5493] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de 09:44:58 executing program 3: socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000110000000800b4"], 0x24}}, 0x0) 09:44:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x24, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x0) 09:44:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 09:44:59 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0}}) [ 321.970161][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 09:44:59 executing program 3: socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff00}}) 09:44:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:44:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000bfba15"], 0x24}}, 0x0) 09:44:59 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x2, &(0x7f00000000c0)=@raw=[@map_idx], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:44:59 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) 09:44:59 executing program 3: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, 0x0) 09:44:59 executing program 0: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800}}) 09:44:59 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)="151b309176f37fa6011354368e71b1b07f0e9b6bd15376ec134263ce56d3abec111fdbc02eae57402f889337d0ff7e8f06bbf2ff700ef2976f7b90708b9bb33f4bff1e3cd9d834683ab33477bbd2de5bc425efe9e2e5d3ae4e6fa67940c982811d9259998b7a9d4078a3d852385bb149c2f68d8f349dcdd1ce4a4e577ad5085976b9144e43df0129e64d752a94286b0f", &(0x7f00000000c0)=@buf="11006fcc3cde28ae298af42e0ff2c4d7a740e65a0fa68c8d04bf3095bdeafec812a222bb307e2b8f6c63a61d2ebf52725ddd67a81e63dd30ac5650bca53f0aee2fe630763b98d86f629cb58fd1014c15173cc3c3f67d9bea393eb9d2d6ec43fcef701621039dd914f42b0fddcc61665aca98e9f10f8aca723ec49aa0e6d2408caeffc23d22d74ceaa9daf8f2be921dc910f6188623b5000531539d0bbf0c5a29768e2112244a7e92d307a5d4cde5bceaed7d2accf1802097e9903202bcdff7b15cba4a7a15c199ec5781eb19ba9fdcb66280ff1fea3adca5ab6ef663ada30ec54139626b0676feb274", 0x4}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f0000000200)) 09:44:59 executing program 3: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, 0x0) 09:45:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x11, 0x0, 0x0, 0x3}, 0x48) 09:45:00 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:45:00 executing program 3: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, 0x0) 09:45:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x4, 0x8, 0x0, 0x0}]}, 0x2c}}, 0x0) 09:45:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:00 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x15, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@multicast1}, @sadb_x_filter={0x5, 0x1a, @in6=@private1, @in6=@mcast1}]}, 0x60}}, 0x0) 09:45:00 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x401c5820, &(0x7f0000000040)) 09:45:00 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x2, &(0x7f0000000040)) 09:45:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000800)={0x14, r1, 0x1}, 0x14}}, 0x0) 09:45:00 executing program 3: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) 09:45:00 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x18e41, 0x0) 09:45:01 executing program 2: r0 = socket(0x18, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 09:45:01 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) 09:45:01 executing program 3: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) 09:45:01 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000180)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x1, 0xe9, &(0x7f0000000300)=""/233, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:45:01 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5451, 0x0) 09:45:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:01 executing program 4: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$xdp(r0, &(0x7f00000011c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 09:45:01 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 09:45:01 executing program 3: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) 09:45:01 executing program 1: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x0, 0x4}}) 09:45:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x2}]}, 0x1c}}, 0x0) 09:45:02 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x0, 0x0, 0x559f}, 0x48) 09:45:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x10, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}}, 0x0) 09:45:02 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x10}}, 0x0) 09:45:02 executing program 3: r0 = socket(0x22, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote}}) 09:45:02 executing program 3: socketpair(0xa, 0x5, 0x0, &(0x7f0000000180)) 09:45:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 09:45:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:03 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) write$cgroup_pid(r0, 0x0, 0x0) 09:45:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xfffffffffffffe30, &(0x7f0000000100)={&(0x7f0000000240)={0x88, 0x0, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBNAME={0x0, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT]}, 0x88}}, 0x0) 09:45:03 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$isdn(r0, &(0x7f0000000080), 0x6) 09:45:04 executing program 3: socketpair(0x10, 0x3, 0x3, &(0x7f0000000080)) 09:45:04 executing program 1: r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000000c0)="b6", 0x1) 09:45:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0xa, 0x2, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 09:45:04 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r0, 0x0, &(0x7f0000000080)=0x7) 09:45:04 executing program 2: r0 = getpgid(0x0) move_pages(r0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) 09:45:04 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0xac000000}}}}}, 0x0) 09:45:04 executing program 1: syz_clone(0x48005700, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240)="e73db389a19181452468ec27b7227b8244f6ad071267b297102f9ad5bc1796d766e711215bbb43deefe0af5d4a27219a614b7dc5f4c0f97fb93b3572f8fc8c5a34bf498fe91a85f7c8145f71b683e36cfb5a17ffca5a82ab1165094b22e453de8a6121ae7b1a6ce3b24b812de140f03953cbba1ddbc569bc4493") 09:45:04 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000005540)='net/ip6_tables_targets\x00') read$FUSE(r0, &(0x7f0000001040)={0x2020}, 0x2020) 09:45:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:05 executing program 3: socketpair(0x10, 0x3, 0x3, &(0x7f0000000080)) 09:45:05 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000002200)=r1) 09:45:05 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x210001, 0x0) 09:45:05 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0x21d, 0x0) 09:45:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 09:45:05 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000140), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x3, 0x4) 09:45:05 executing program 3: syz_clone(0x60800000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:45:05 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/softnet_stat\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 09:45:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="01515c000000fedbdf2507000000280003"], 0x100}}, 0x0) 09:45:06 executing program 1: add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 09:45:06 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) [ 329.267333][ T5738] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 329.267487][ T5738] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.2'. 09:45:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:06 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, 0x0) 09:45:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) 09:45:06 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 09:45:06 executing program 0: bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) 09:45:06 executing program 1: setrlimit(0x0, &(0x7f0000000080)={0x5, 0x5}) 09:45:06 executing program 4: syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{@mpol={'mpol', 0x3d, {'default', '=static'}}}]}) 09:45:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 09:45:06 executing program 2: r0 = add_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) 09:45:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x2c}}, 0x0) 09:45:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000200)=ANY=[]}) [ 330.092675][ T5759] tmpfs: Bad value for 'mpol' 09:45:07 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000280)={0x0, [0xfffffffc]}) 09:45:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:45:07 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={0x0}) 09:45:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}}, 0x90) 09:45:07 executing program 0: syz_mount_image$pvfs2(0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="eb96", 0x2, 0x7fff}], 0x0, 0x0) 09:45:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001300010000000000000000", @ANYRES32, @ANYBLOB=' \x00\x00\x00\n'], 0x20}}, 0x0) 09:45:07 executing program 4: add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) [ 330.763606][ T5775] loop0: detected capacity change from 0 to 127 09:45:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) 09:45:07 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000f4b000/0x2000)=nil) shmat(r0, &(0x7f0000ff5000/0x3000)=nil, 0x7800) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x812f6237e2d5ca3f) r1 = shmget$private(0x0, 0xe000, 0x0, &(0x7f0000ff2000/0xe000)=nil) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x7000) 09:45:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x80000001}}, 0x10) 09:45:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) 09:45:08 executing program 1: r0 = socket(0x11, 0xa, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000000f80)=[{&(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "2cbbbf65ffe9b98a21203ed50936864b4637361978fd02d826a7b086cb47392c145522a9d466a71a855d1b0676a66e3b3c8bc1dd2a0e720a2602d41c12ba14"}, 0x60, 0x0}], 0x1, 0x0) 09:45:08 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) 09:45:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:45:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) 09:45:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) 09:45:08 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) 09:45:08 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}}, 0x0) 09:45:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netpci0\x00'}]}, 0x34}}, 0x0) 09:45:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) 09:45:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000140)='/', 0x1}, {&(0x7f0000000180)="e3", 0x1}, {&(0x7f0000000240)='&', 0x1}], 0x3}}], 0x1, 0x0) 09:45:09 executing program 0: syz_clone(0x48005700, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="e73db389a19181452468ec27b7227b8244f6ad071267b297102f9ad5bc1796d7") 09:45:09 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 09:45:09 executing program 2: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000200)) 09:45:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) 09:45:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:45:09 executing program 1: add_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 09:45:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, 'S$%'}) 09:45:09 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000080), 0x4) 09:45:09 executing program 4: msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/4096) 09:45:10 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, [@default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 09:45:10 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r0, 0x1}, 0x14}}, 0x0) 09:45:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getlink={0x20, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 09:45:10 executing program 3: socket(0x23, 0x0, 0x288) 09:45:10 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000f4b000/0x2000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x7000) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x812f6237e2d5da3f) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x7000) 09:45:10 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r0, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "3c87e14569db1c7d825196b7585a0b19e8413fa97949dfead1ccc929b52ba0d949d463b561921aadcbc0fc50c606d376f5b581902bf06d9bae5dd27a06f61c"}, 0x60) 09:45:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="f2179454ade11f684b7167134ab7", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 09:45:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:11 executing program 2: socketpair(0x2b, 0x1, 0x2, 0x0) 09:45:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x0) 09:45:11 executing program 3: r0 = socket(0x11, 0xa, 0x0) getsockname$netrom(r0, 0x0, &(0x7f0000000080)) 09:45:11 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/252) 09:45:11 executing program 1: shmget(0x2, 0x2000, 0x54000a16, &(0x7f0000ffb000/0x2000)=nil) 09:45:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) 09:45:11 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) read$alg(r0, 0x0, 0x0) 09:45:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) 09:45:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000040)) 09:45:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f00000000c0)="b7c44e6d01f0d417960b226545c41fa9730206f0a9cbd1a7b8617d7d1ffd7833b91e7b5799f194b7d801381f4d892d5f0bda2d83dcdf47385ac27fdef114fe2bae41141aa8ba3116a88d1f92ca07449641face1a7db87ff01f9ef3ec0bea647aa290e97354b06ce38732aea20f97b1d5706be2795dfd3c1d9a125dec6a257407edbb5c8a1307fa42c6cf8046519a4e63042b25f148aa7651e395d8062008b6f39ba543e6d1e033535241c7f4067bd7453876fd7db43e6b", 0xb7}, {&(0x7f0000000200)="54f2027fe0cdc8ea2efff93fc0ada05ba67e4d9cdbb409523d2e651e24daf3612631589eff623e81b26a219c33f16f2f6f70da2a6966aa2386df114e05a2f42c32adc4918ee15953f9bf4c796d5a33b09c8cdd8e24c932944afc73826ff154b22b88bf997d3bc5b3e5042954f2b6744b0bc2b907e4db23b2a59a069ad634c5b81b1d2108666816ffdaf9d0f7538a22fba98a591d6f7f8b5192c4ef74cdbd08b9b46d0fc53a6e0c02f074547f3aaf085e3577e80c0d0019325f36fb71346af1e78295"}, {&(0x7f0000000300)="c44de4e0783ce6"}], 0x10000000000000c4, 0x0, 0x0, 0x8001}, 0x40000) 09:45:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(r0, &(0x7f0000005340)=[{0x0, 0x0, &(0x7f0000002700)=[{0x0}, {0x0}, {&(0x7f0000002640)='P', 0x1}], 0x3}, {0x0, 0x0, 0x0}], 0x2, 0x0) [ 335.062804][ T3559] Bluetooth: hci0: command 0x0401 tx timeout 09:45:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, 0x0, 0x24, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="9d752cb35cc9"}, 0x14) 09:45:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:12 executing program 1: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, 0x0) 09:45:12 executing program 2: socketpair$unix(0x1, 0x47fa1e3130163191, 0x0, 0x0) 09:45:12 executing program 4: shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000280)=""/147) 09:45:12 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000100)={0x0, [0xffffff89, 0x37, 0x8]}) 09:45:12 executing program 2: add_key(&(0x7f0000000200)='keyring\x00', 0x0, &(0x7f0000000400)='7', 0x1, 0xfffffffffffffffd) 09:45:12 executing program 4: setrlimit(0x0, &(0x7f0000000080)={0x5}) 09:45:12 executing program 3: timer_create(0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 09:45:12 executing program 1: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) 09:45:12 executing program 0: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/253) 09:45:12 executing program 4: r0 = socket(0x11, 0xa, 0x0) connect$nfc_llcp(r0, 0x0, 0x0) 09:45:12 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4d8001, 0x0) 09:45:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:13 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000040)) 09:45:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, 0x0) 09:45:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "540b07d532650f4220768fd8ff882a554ed673"}) ioctl$TCXONC(r0, 0x540a, 0x2) 09:45:13 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000002600)={[{@creator={'creator', 0x3d, "cf302c05"}}]}) 09:45:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000001"], 0xd0}, 0x0) 09:45:13 executing program 3: openat$dlm_control(0xffffffffffffff9c, 0x0, 0x61ca80, 0x0) [ 336.539792][ T5921] hfsplus: creator requires a 4 character value [ 336.539834][ T5921] hfsplus: unable to parse mount options 09:45:13 executing program 0: pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 09:45:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, &(0x7f0000000180)=0x9c) 09:45:13 executing program 4: r0 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)='\x00', 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000080)=@secondary) 09:45:13 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xffffff25}, 0x20) 09:45:14 executing program 0: openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x181002, 0x0) 09:45:14 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) 09:45:14 executing program 3: accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x180c00) 09:45:14 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 09:45:14 executing program 4: r0 = syz_open_dev$vivid(&(0x7f00000007c0), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@multiplanar_fd={0x0, 0x8, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "625bfcfa"}, 0x0, 0x4, {0x0}}) 09:45:14 executing program 2: syz_mount_image$pvfs2(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="eb96", 0x2, 0x7fff}], 0x0, &(0x7f0000000280)) [ 337.613920][ T5947] loop2: detected capacity change from 0 to 127 09:45:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) 09:45:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 09:45:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:45:14 executing program 2: r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="16", 0x1, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="16", 0x1, 0xfffffffffffffffe) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r0) 09:45:14 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@null, @default, @bcast, @bcast, @null, @null, @rose, @null]}, &(0x7f0000000080)=0x48) 09:45:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, "ee58f9"}) 09:45:15 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001340), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000140)) 09:45:15 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000240)=0x7) 09:45:15 executing program 3: openat$mice(0xffffffffffffff9c, &(0x7f0000001280), 0x4002) 09:45:15 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 09:45:15 executing program 4: unshare(0x49020400) 09:45:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000080)="01", 0x1, 0x0, 0x0, 0x0) 09:45:15 executing program 2: modify_ldt$read_default(0x2, &(0x7f0000000000)=""/157, 0x9d) 09:45:15 executing program 4: timer_create(0x0, 0x0, &(0x7f0000001140)) timer_getoverrun(0x0) 09:45:15 executing program 3: r0 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)='n', 0x1, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000300)="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", 0xfc, 0xfffffffffffffffb) r2 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="16", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) keyctl$link(0x8, r1, r2) keyctl$set_timeout(0xf, 0x0, 0x100000001) r3 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="16", 0x1, 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="16", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) keyctl$read(0xb, r4, &(0x7f00000001c0)=""/3, 0x3) msgrcv(0x0, &(0x7f0000000240)={0x0, ""/72}, 0x50, 0x1, 0x2000) keyctl$revoke(0x3, r3) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$invalidate(0x15, r0) keyctl$update(0x2, r0, &(0x7f0000000200)="d6", 0x1) 09:45:15 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000240)=0x7) 09:45:16 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) 09:45:16 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000100)={0x0, [0x1, 0x40, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x1}) 09:45:16 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000480)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 09:45:16 executing program 3: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}}) 09:45:16 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000240)=0x7) 09:45:16 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 09:45:16 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 09:45:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)=';', 0x1}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) 09:45:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffff8}) 09:45:16 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$sequencer(r0, &(0x7f0000000080)=""/148, 0x94) 09:45:16 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000240)=0x7) 09:45:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 09:45:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x24}}, 0x0) 09:45:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 09:45:17 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={[{@nr_blocks={'nr_blocks', 0x3d, [0x0]}}]}) 09:45:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000280)={0x7, 0x8}, 0xfffffffffffffe5a) 09:45:17 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:45:17 executing program 2: syz_mount_image$pvfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) 09:45:17 executing program 4: syz_mount_image$pvfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x8, &(0x7f0000000280)) 09:45:17 executing program 1: io_setup(0x3eab, &(0x7f0000000000)=0x0) io_destroy(r0) [ 340.487547][ T6013] tmpfs: Bad value for 'nr_blocks' 09:45:17 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000f4b000/0x2000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x7000) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x812f6237e2d5da3f) shmdt(r1) 09:45:17 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) 09:45:17 executing program 2: r0 = socket(0x11, 0xa, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) 09:45:18 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0x7fff, @vifc_lcl_addr=@remote, @remote}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f00000027c0)={&(0x7f0000000100)=@alg, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000180)=""/113, 0x71}, {&(0x7f0000000200)=""/183, 0xb7}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000003c0)=""/40, 0x28}, {&(0x7f0000000400)=""/148, 0x94}, {&(0x7f00000004c0)=""/161, 0xa1}, {&(0x7f0000000580)=""/23, 0x17}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/222, 0xde}], 0xa, &(0x7f0000002780)=""/21, 0x15}, 0x10000) setsockopt$inet_dccp_int(r1, 0x21, 0x3, &(0x7f0000000000), 0x4) [ 340.911288][ T1198] ieee802154 phy0 wpan0: encryption failed: -22 [ 340.911482][ T1198] ieee802154 phy1 wpan1: encryption failed: -22 09:45:18 executing program 1: syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x31, 0x2f, 0x2c, 0x37, 0x38]}}}}]}) 09:45:18 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:45:18 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) 09:45:18 executing program 2: syz_mount_image$pvfs2(0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="b2", 0x1}], 0x0, 0x0) [ 341.326040][ T6034] tmpfs: Bad value for 'mpol' 09:45:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x9, 0x4) 09:45:18 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) [ 341.618390][ T6022] orangefs_mount: mount request failed with -4 09:45:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 09:45:18 executing program 2: add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc1}, &(0x7f0000000740)={0x0, "e3766512cd1a220f534b2cc2179e020eff075b379873096fc3e71c3588cf21d8b6c9402b4d3ecdf14e4fdc865c33e7ba93190b1007aea4ec305777d2420e5a80"}, 0x48, 0xfffffffffffffffc) 09:45:19 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) 09:45:19 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 09:45:19 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:45:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) 09:45:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130001"], 0x2c}}, 0x0) 09:45:19 executing program 2: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000140)=""/185) 09:45:19 executing program 0: syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x31, 0x2f, 0x2c, 0x37, 0x0, 0x36]}}}}]}) [ 342.507153][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 09:45:19 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @null, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @null, 0x0, 0x0, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}) 09:45:19 executing program 1: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/17) 09:45:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 342.697455][ T6061] tmpfs: Bad value for 'mpol' 09:45:19 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f00000000c0)=0x3, 0x4) 09:45:19 executing program 2: r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="16", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) keyctl$read(0xb, r0, &(0x7f00000001c0)=""/3, 0x3) 09:45:20 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) 09:45:20 executing program 4: socket(0x1e, 0x0, 0x1970) 09:45:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}}, 0x0) 09:45:20 executing program 0: r0 = socket(0x11, 0x3, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, 0x0, 0x0) 09:45:20 executing program 2: msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000000c0)=""/78) 09:45:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000540)="b8") 09:45:20 executing program 4: io_setup(0x0, &(0x7f0000000500)) 09:45:20 executing program 2: r0 = syz_open_dev$vivid(&(0x7f00000007c0), 0x3, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9a8c9672"}, 0x0, 0x1, {0x0}}) 09:45:20 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000280)={0x0, [0xfffffffc, 0x8], [], 0x7}) 09:45:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x106}}, 0x20) 09:45:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={0xd}, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) 09:45:20 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r0, 0x0, 0x0) 09:45:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:21 executing program 2: r0 = syz_open_dev$vivid(&(0x7f00000007c0), 0x3, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9a8c9672"}, 0x0, 0x1, {0x0}}) 09:45:21 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000000)={[0x3f]}, 0x0, 0x8) 09:45:21 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, 0x0, 0xfffffffffffffdde, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) 09:45:21 executing program 3: r0 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', 0x0}) 09:45:21 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001980)=ANY=[@ANYBLOB="1400000000000000010000000100000054"], 0x78}, 0x0) 09:45:21 executing program 2: r0 = syz_open_dev$vivid(&(0x7f00000007c0), 0x3, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9a8c9672"}, 0x0, 0x1, {0x0}}) 09:45:21 executing program 0: io_setup(0x10001, &(0x7f0000000500)) 09:45:21 executing program 1: socket(0x23, 0x0, 0x7fffffff) 09:45:21 executing program 3: syz_mount_image$pvfs2(0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000080)="eb", 0x1, 0x7fff}, {&(0x7f0000000140)="b2", 0x1, 0x6}], 0x0, 0x0) 09:45:21 executing program 4: syslog(0x3, &(0x7f00000000c0)=""/160, 0xa0) 09:45:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:21 executing program 2: r0 = syz_open_dev$vivid(&(0x7f00000007c0), 0x3, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9a8c9672"}, 0x0, 0x1, {0x0}}) 09:45:21 executing program 0: r0 = socket(0x1e, 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) [ 344.886143][ T6120] loop3: detected capacity change from 0 to 127 09:45:22 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x5, @raw_data="aa979bfe679b63d6c642c3d97544f7946d5c7f26928354e8f14171fd3cb59432eba46ae85e8459ba1ffd7b7120b75e74ef81ed086dcd863d428685af37df21ba56604548c53f11c58c1b82af33601a8080bb974f60c163d92b43faada3f4117f909cd563d3eedf5685228319b57dad9e1236494313e1430129f6a9c7c5df6db79440acaadcea4e32ce609b5dc3dc05ce6f22e5295ccd9e75dc8b774d674c0221667b224583b82b213fbdb67d37e74449f5e4a3ba91e04e57aa3e100ca21f5df8cbdcbb4ba93ce1f2"}) 09:45:22 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) 09:45:22 executing program 0: clock_gettime(0x2754197ecc899208, 0x0) 09:45:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}}, 0x0) 09:45:22 executing program 3: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x2, 0xee01, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff}) 09:45:22 executing program 1: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/127) 09:45:23 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:45:23 executing program 2: syz_mount_image$pvfs2(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)) 09:45:23 executing program 4: syslog(0x3, &(0x7f00000000c0)=""/160, 0xa0) 09:45:23 executing program 0: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x7000) shmdt(0x0) 09:45:23 executing program 1: syz_mount_image$vxfs(&(0x7f0000000080), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001200)=[{&(0x7f0000000100)="536b2948fe9acbec2852e023a6410584fe590898666685f96e63c483e102900016443fdc5d8949fbff90865066e94842a9d3114d72f385ed471900c324543134f0ce003ecba35326afc4ce42b9a481c71c9cfa96a34cbfac4ce118254e0d1dbbdef44688eb38b3bd3a71a831f32507c88f2ce1a4fbc6b23033e7b34facf6222adbfd5da7913fbb5111f485096fdaa0a0a4e6cd9a7dadcdf72013fde019690d4f95d07abf0c362a3d13ddf41d55b267f9019aeda834459370f45654734c4ef938116c9d0fcf10cb0ee5d4f217e865d427bac0978c93bbcad5a0df2c2d89aeb30b9c1b066da6ff17d2d437985ae26be25918a98919beab6f475c2c5d5d002b2337a38c6ae876179a040189880996ae98221d2fa3966098194594dfd81635354b61990f11964ae4b0fb37e7920830b90c3eeac1fc94b755c62e0f1991747616469f6193b9a8bbb6d764735f3bbdaf47e0d7f65117d08a613e2861c6f12bf4c36b2d07a2dbdc30bcf2c352188b2ff43c6777e32caf839308b9274e488a005a51118c82475dd091540a9fe1c2c5eaecc4f93943b3c4785e334c1c51c36e34d6dde41675c708eb2665c4e2584b1e03c4d731de57819f8b6c9311640850211310d99dbd82c3ff7ced5f58f614edc36491e173bc38a3f87fb4506cd45e2cd9a95c87296149c98172977cde0492a309142b633d25c6cea618b7a5158f279a57da07b1", 0x1fe, 0x2}], 0x8000, &(0x7f0000001500)) 09:45:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 09:45:23 executing program 2: pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 346.356463][ T6149] loop1: detected capacity change from 0 to 1 [ 346.404970][ T6149] Dev loop1: unable to read RDB block 1 [ 346.405106][ T6149] loop1: unable to read partition table [ 346.405566][ T6149] loop1: partition table beyond EOD, truncated 09:45:23 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x131040, 0x0) 09:45:23 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000009780)=[{{&(0x7f0000007680)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}}, {{&(0x7f0000007e40)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000009100)=[{&(0x7f0000007ec0)="5a5a677f5d09beb6abd4388556a6a3b6ccc162d670d95115396b503b7ea6dcd3f9db8a667127", 0x26}, {&(0x7f0000007f00)="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", 0xfd}, {&(0x7f0000008000)="92ea7cb59ee7ef4115011172acf116b094b76ddaf95600e970359fff0cea12d761d3609188a903f5097d6f1223254f9d627dac5775e131d11ecf8b5c45dfa3f9fcf92ef64760af7ffd825fd0b68627e8d8143fd2306280e11bbf95b8ed5f33504a087a4c33f077f690b48682c11c9950b5d5e38395aaa9a664f0c39fd50bf321470eaafa3f2ab3321f4a63abd4176c4e1d94dbbff4754d3a372ca33460142c6f2a0200e183e110f4ec96c544c53cb0d3625522a64e45c176659250ceb07b20666128eb5f83083fcd6709feb5c383324483f515ea6dfa50313aa8b1281994424f5371f33e61cbea4916491adf045cb131401708590fc69e4c0bf8cbe776284f163541e28d0a03485cc26ecbb77c96e8de365a02dc71558bec4a7caf507f5dd4b40b7668805cc22ca254c196e282f82e9d1dcbb65dddae045d5c88db79d1dad024d6e8d452fb2baef234f44065ad5b190f4a3877d5d21a598b0a63f386ed918351cb9b5839694d61e9ab30f332970c91048791aabae8f0fba51c1e64bff80dde60e6fbba558e3f0368c22226d30801d27c100dc39621bbcf293894ba44ff188a9d002e2b3afb6f01bd5add8555faf45f75893add826ef240d757e6a16ea4ce75b4e9e922f071ae37238d41f5a9750a0f7991878b9b925e1036aab6a2bd3a36c02003a0ff4ed2b9ec886d46ee1c23f76562e7308bb7590575c609d35d9d736154b33c255557a1397c5f30ace3b94b097d5ae22e7e8d0259de71b067c5dd24ae8832c3dfa8aa7ade3ccabe8a14cce111ed1dab16228f39cc2e502c785683c49b2634c3192d537ae72563ded59e7d5788f826abb03dae0d505223183aca82b94d84abf9c6ed15bcc15c6f8d1bd6a077034118093976528f6937d21e4a2fff1da9e3f2d8e7223263ebe604228c3188e447ab41de92533037bf1121374e7e6cb2abfbcf763f030af7d13bcdac976571ca270162b23f005b9c7c501d7df09572b52d44aa7d04861172e6e8d18cde68628a3e1f2a89cc6db89a1b549b1451e1cab4682b57873b81cbc5459030810d6177d4a685deb4de60f3c41ff423b4107b4e3150668f65e7110f996af9615dce1723d92435b6095fcca39c62b0e1f2817a93346c6fdf83ce8e02954126457bae1c886157f30c27d9c915a4ca1077736fb32d612361408f9e55845b2416449947575ae076cd664bcc723c1a1833315ba9bc15a5a79f2e678d3d47b155ac1591e4f14618a12bbb05fca35e6b48aea7eb3c6b56fd4cb84d8e72b9d215bc0c8c93b52db1f84b4601be8f4400e16749438cfe050262b56c8129b2e54f5ce5b2451678b32cc7ccba4607ed14d625515c46319f1d52024e79cdfe0b786aa9fd65fc4d70222d7f4632cb3c28be6e026d8b05eff19d6170689e05264422fcf79d8317bd3b24e9cc87e53c644ad2a286956fc9c43c5161905e44850cdf185c62c5dd4e003966754291c5f0c943698001da425148fe3cbcf24ed91ea02c4f3d51d3863e23e82aef9d44e501660e692060a578d1fb1d6c56bf2177f6ad26279ccf91527ebd618cd724c68648711b56ae89d0eb1f18f7e4cbbb3429098ba1231376967863dd3e63081e2302825de51a40a090c75d7c57c216f5a1d4ee9aaea61d3da8136c3100094d67eb696363b102f39f440c3804e939f14d1f7f0a1aebe3bee706ca27182b", 0x4aa}], 0x3}}], 0x2, 0x0) 09:45:23 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x48002, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 09:45:23 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:45:23 executing program 2: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 09:45:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 09:45:24 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 09:45:24 executing program 3: r0 = epoll_create(0x53c8) epoll_wait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x0) 09:45:24 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:45:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002740)=[{{&(0x7f00000000c0)=@abs, 0x6e, 0x0}}], 0x1, 0x0) 09:45:24 executing program 4: syslog(0x3, &(0x7f00000000c0)=""/160, 0xa0) 09:45:24 executing program 0: socket(0xa, 0x0, 0x710) 09:45:24 executing program 1: r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="16", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000280)=""/201, 0xc9) 09:45:25 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040)) 09:45:25 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fstat(r0, &(0x7f0000000180)) 09:45:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$can_raw(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x140) 09:45:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000013000100"/20, @ANYBLOB=' '], 0x20}}, 0x0) 09:45:25 executing program 3: socket(0x22, 0x0, 0xfff) 09:45:25 executing program 0: timer_create(0x0, 0x0, &(0x7f0000001140)) 09:45:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 09:45:26 executing program 4: syslog(0x3, &(0x7f00000000c0)=""/160, 0xa0) 09:45:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3f, 0x7ff}) 09:45:26 executing program 0: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000005c0)=[{}]}) 09:45:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_bond\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "63bfc3648c11c3a033b60bc3333128f113560be55bd35aac52956c4cad9bdb53", "eaacd80c02d8f396843a4b02c501edfe56b9dc2e22595278e50102f0e37920ba", "cfcd5e4028dcc0c071f0f184776abda1779923ae9dc2f7369c4c038fce74aaa9", "4f4c1d787331e2bf408adc8fc89adaf076fdc79ca9685c331b9bf987bf051583", "abb056faae375f6ab2fbc547fe2c2a2d8ef80047fc620ec883e4993692cf051d", "e02e13f465ed592dce1c134f"}}) 09:45:26 executing program 2: msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/4) 09:45:26 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) 09:45:26 executing program 3: keyctl$reject(0x13, 0x0, 0x0, 0x0, 0xfffffffffffffff9) 09:45:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3f, 0x7ff}) 09:45:27 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @rand_addr=' \x01\x00'}}) 09:45:27 executing program 0: syz_open_dev$media(&(0x7f0000000040), 0x20, 0x200) 09:45:27 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000001c0)={0x0, 0x0, 0x0, '\x00', 0x0}) 09:45:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) 09:45:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3f, 0x7ff}) 09:45:27 executing program 4: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3, 0xffffffffffffff09) 09:45:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f00000000c0)) 09:45:27 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000000c0)={0x0, 0x0, 0x5, '\x00', &(0x7f0000000080)}) 09:45:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3f, 0x7ff}) 09:45:27 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x80000, 0x0) 09:45:27 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000500), 0x2, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000006c0)={0x7, @raw_data="bd5c8508b48b0377c4816a56d5fa264a1ae3458628cc314fccf1ff5282c1955e6830308447ab2a5c796f6a07a2bc107d0feecb757b8e9f1f8ec2e0033a81a4c7838a0366cf48b6ee325f4350fc0d54b689e8f8706a9c296730572253237a86a8eef86645f08911f813218733b9c17d79107797737d1d18b29a7bd1bd61cfe08231f777c523492c6dbf3b338d76e8e51eee8095af8a1402096dd22ae2540161a06e398d4bf31065eb93310023b2ec43121108a11c2b7aacc741578daaf02c2e2c074b46a027bfda3f"}) 09:45:28 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 09:45:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0) 09:45:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x209, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 09:45:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) 09:45:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:28 executing program 4: clock_gettime(0x3, &(0x7f0000000380)) 09:45:28 executing program 3: r0 = syz_open_dev$vivid(&(0x7f00000007c0), 0x3, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000180)) 09:45:28 executing program 0: r0 = syz_open_dev$vivid(&(0x7f00000007c0), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@multiplanar_fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0477391f"}, 0x0, 0x4, {0x0}}) 09:45:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000080)) 09:45:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000080)=0x8) 09:45:28 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000140)) 09:45:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000300)) 09:45:28 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)) 09:45:29 executing program 4: add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='^', 0x1, 0xffffffffffffffff) 09:45:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, &(0x7f0000000100)) [ 352.345998][ T6276] trusted_key: encrypted_key: insufficient parameters specified 09:45:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @private}], 0x10) 09:45:29 executing program 0: userfaultfd(0x3f55cfb7c80b1c22) 09:45:29 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)) 09:45:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x1, 0xabe}, 0xc) 09:45:29 executing program 3: r0 = syz_open_dev$vivid(&(0x7f00000007c0), 0x3, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x0, 0x0, "b0879e26a93cea77988614454abd16aa1980c27597a43f33"}) 09:45:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:29 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/pid\x00') [ 352.803798][ T6284] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability 09:45:29 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0xfffffffffffffffe) 09:45:29 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)) 09:45:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, @in={0x2, 0x0, @private}, @in6={0xa, 0x0, 0x0, @loopback}], 0x68) 09:45:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0) 09:45:30 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:45:30 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x0, 0x0, &(0x7f0000000b00), 0x4, &(0x7f0000000b80)={[{@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x0]}}]}) 09:45:30 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)) 09:45:30 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000340), 0x5c3b, 0x0) 09:45:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001d80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d40)={&(0x7f00000004c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x29, 0x4, "ee90a73dc4b7b361cd4453979f760b11ba330b73f21a177af44c91caee02c309124cce79f1"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x27c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '+-*@\'\'^!#\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0x31, 0x5, "79c3a4231cb650e44ff620f2c59bc9b66a5ac796f59fabe33d4225b88714c812149507c3a507cb1eead03b3675"}, @ETHTOOL_A_BITSET_MASK={0xad, 0x5, "4c468547a72be9d2d0a9a7afceba7a3a14ef596aecee85e24389f658b8e934e939b9cd00b671d0ce439ee4b54ebc827c6070478f197e535be31d021ce7ff4eb8ab56ccd80292988ee8c7b7df84b7b7bf9768dc181d9e4a0050220f9a2cd3e7cb2d73e6c03865a5b51290a09f73d4bd2248ad31e682f7ee4c8d3020112d8ec126ff3a3db511bf15b259f9fbb555d27edee09c4e19607e365698ed28981381321dead3dfcefd4c03f9bb"}, @ETHTOOL_A_BITSET_VALUE={0xa5, 0x4, "4bd9e474d6ce4e32a7dfb4d4583ffae5fe22412b7da944e0987ca70fb19bc0c8b6fdade9978eebcad438b968b08579ede713e38871284065484da066c77e629ca59f79e44cadc42d3c39a90fd9bf35075cff96d9b216675b63d71c00674b5fbf77909a1de71e37fa8d04b51ba2e8d2f52f60812458eeb18ef590576f4a73b6d95fbafd45b0f74236498e337f3a32cb1bb90fdb880d3de3b455abd1138519a0778d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x78, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "21d56d0e284aaedebe557a17b496591aeef4326eaeae82aca1ad26265f147bd977791085f3993f3f02aeb92e98b3974de325ec10b6f4a8be63d882584f290b475e4d7ceb5de9b996fc40f3ebeb62307f9f28a291550e1d7948bee2a68d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0xf1, 0x5, "73fb66dc594de0f97ec7010226bc88c2b96661cfe2b081b8c7a15871b92e37cde99cfafffbd9a1baaf0c9bba828abd7d79bfc505884614af77444ab44c58abfbb237e069558542f8406b697e56ff5ca2c987fdd7d2e7d8f9acc343b32b28184e65bee4c3ecbe13ebe53afeabfb2cdd6f235cabe2378471462fb545241c717ec6c7b0fbcc35c22271d5b9f32b647451c47607305a1fc6c1a6cd15ad76d111358a95aed0654c03f2fe61a713675f41c8657850f6fe9a179646b552e24e3447fcabe2c89089904c6918878eb0fc71dd1c8bd1be76b945ee25d26d591fcb2c59c2a2829cdf9f48f81f5c9e2f626083"}, @ETHTOOL_A_BITSET_MASK={0x4d, 0x5, "faf3edf3a931fdedebcf961cd1549f37574ef45b1d1cc4f5a741d6edf23e0928333254cf4d1533aa06715d1bf86046cd04f1ac3570e6390a36d6477f845dc2b6f8868b513ef7668eba"}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0x3d, 0x5, "ffe1f8110c2fa0129706969f1d67d419adc8ed113a67d52bf0c06821ccfb2a75f2a7d1fea9d24b132ea149b30bf861cb7de34810ae4e47f3f0"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9, 0x5, "f72bcad6a1"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x974, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe5, 0x4, "af856a7f056739af7ccc335ca3bb2b884813fe9a0771242f3e8cc66e5734d777a6dc71095b7a0732e4cba07892a785408c56eafea1c43fda352d228fa677ffa37c6941e1052b8f84ee7efc131e95854eec3dd53b5b7f7b95401e29749161f9e39a541f1dd4e5e687eeba678b8bb085f994f50d8dc39347b04bbc2212f9fab5ebd94b29518a6d0e290df3cbefee7dee46f05653435261d2de589eb5b58a44530434e4cd4fd02db6b0b0197cdc37073e6fbef483f67c5ab8d611b7e626477ddbe9d2b42dc5a87b24f1a3bd5a6de800d38a4b5229d2957058fb80a532ec274e0df7bf"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x879, 0x5, "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"}]}]}, 0xec4}}, 0x0) 09:45:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000180)=""/156) [ 353.764763][ T6310] tmpfs: Bad value for 'nr_inodes' 09:45:30 executing program 1: sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x4740ad60f930ed8c) 09:45:31 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000280), 0x10000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}, {@debug}], [{@fsmagic}]}}) 09:45:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 09:45:31 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x8}, 0x0, &(0x7f0000000100)={0x0, 0x2710}) 09:45:31 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xf, 0x0, &(0x7f0000000340)) 09:45:31 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000340)={0x9}, 0x0, 0x0, 0x0, 0x0) [ 354.283771][ T6326] 9pnet_fd: Insufficient options for proto=fd 09:45:31 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={[{@huge_never}]}) 09:45:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}, @in6={0xa, 0x0, 0x0, @local}], 0x2c) 09:45:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) 09:45:31 executing program 4: r0 = syz_open_dev$vivid(&(0x7f00000007c0), 0x3, 0x2) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)) 09:45:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:31 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0x8}) 09:45:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001180)={0x0, 0x9, &(0x7f0000000180)="01e8b24295405a1bd8"}) 09:45:32 executing program 4: setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) 09:45:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 09:45:32 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1}, 0x4) 09:45:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 09:45:32 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @random="80c99b6304fd"}, 0x10) 09:45:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000040)="15be9a992836f00c1c469504ab3b", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="706fb9e3e671"}, 0x14) 09:45:32 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) 09:45:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000000)) 09:45:32 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0x1c) [ 355.684555][ T6363] device batadv_slave_0 entered promiscuous mode [ 355.688711][ T6360] device batadv_slave_0 left promiscuous mode 09:45:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:33 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000000)) 09:45:33 executing program 3: r0 = syz_open_dev$vivid(&(0x7f00000007c0), 0x3, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000000c0)) 09:45:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) 09:45:33 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x2b81, 0x0) 09:45:33 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) 09:45:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0xffffffffffffffa4}, @void}}}, 0x1c}}, 0x0) 09:45:33 executing program 3: socket$packet(0x11, 0x2, 0x300) syslog(0x4, &(0x7f0000000080)=""/107, 0x6b) 09:45:33 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) bind$rose(r0, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) 09:45:33 executing program 1: syz_mount_image$ntfs(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='umask=0000000000004000,nls=']) [ 356.348108][ T6383] ieee802154 phy0 wpan0: encryption failed: -22 09:45:33 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f0000001780), 0x0, 0x0) [ 356.468888][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 09:45:33 executing program 4: syz_open_procfs(0x0, &(0x7f0000001200)='net/bnep\x00') [ 356.992555][ T6392] ntfs: (device loop1): parse_options(): The nls option requires an argument. 09:45:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:34 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/mdstat\x00', 0x0, 0x0) 09:45:34 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000002700), 0x301040) 09:45:34 executing program 4: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') syz_open_procfs(0x0, &(0x7f0000000700)='fd/4\x00') 09:45:34 executing program 1: syz_mount_image$ntfs(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='umask=0000000000004000,nls=']) 09:45:34 executing program 3: socket$packet(0x11, 0x2, 0x300) syslog(0x4, &(0x7f0000000080)=""/107, 0x6b) 09:45:34 executing program 2: socket(0x3, 0x0, 0x10001) [ 357.716727][ T6403] ntfs: (device loop1): parse_options(): The nls option requires an argument. 09:45:34 executing program 3: socket$packet(0x11, 0x2, 0x300) syslog(0x4, &(0x7f0000000080)=""/107, 0x6b) 09:45:34 executing program 0: socket$l2tp(0x2, 0x2, 0x11) 09:45:34 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 09:45:35 executing program 1: syz_mount_image$ntfs(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='umask=0000000000004000,nls=']) 09:45:35 executing program 4: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/211) [ 358.319338][ T6423] ntfs: (device loop1): parse_options(): The nls option requires an argument. 09:45:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:35 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close$fd_v4l2_buffer(r0) 09:45:35 executing program 2: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 09:45:35 executing program 3: socket$packet(0x11, 0x2, 0x300) syslog(0x4, &(0x7f0000000080)=""/107, 0x6b) 09:45:35 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 09:45:35 executing program 1: syz_mount_image$ntfs(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='umask=0000000000004000,nls=']) [ 358.733502][ T6429] ntfs: (device loop1): parse_options(): The nls option requires an argument. 09:45:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 09:45:35 executing program 4: futex(&(0x7f0000000140), 0x8, 0x0, &(0x7f0000000180), 0x0, 0x0) 09:45:35 executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') 09:45:35 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8183, 0x0) 09:45:36 executing program 1: socketpair(0x28, 0x0, 0x4007, &(0x7f0000000000)) 09:45:36 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x511802) 09:45:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:36 executing program 0: syz_clone(0x0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0xffffffffffffffff) sched_rr_get_interval(0x0, &(0x7f0000000140)) 09:45:36 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0x31}) 09:45:36 executing program 3: syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 09:45:36 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001780), 0x802, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) 09:45:36 executing program 2: semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x0, 0x14, 0x0) 09:45:37 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001680)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 09:45:37 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x20482) 09:45:37 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f00000025c0), 0x200001) 09:45:37 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) 09:45:37 executing program 0: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) 09:45:37 executing program 2: openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') 09:45:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:45:38 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fsetxattr$security_evm(r0, &(0x7f0000000080), &(0x7f0000000180)=@v2={0x0, 0x0, 0x0, 0x0, 0xff8, "de531e2c8d77180c006bad396694a36a423c9563ac751d945c98025ff82ab98e642c439dc99f9fb58ed4853a7f563ac7ace4eb3ac698a15f7d4f3b5da2f03af507733686c95c2e13c871560a3832cb62ff20e32fc5d9f08476fd7a8ec211c0ae729c5a17a640f8f48ca46bde02bc3512bc558227ca9ab4159c77b86f067c2849204dc3d4272615a598c82e8268390e71e101e2d761e1f65c8bd953e5cbbb91dc4e27b421feaf34f2225232732a50c73eaa84f364280731afafd5ed7c54257ed9e1a58557e1b6334bbc3738a18a3647fe9a5938dba85483d2c7403b74fc7dd06f90905e50402107ce55686b2f1633b1a753267227d1245820a55f8ec66c83eb18ff89957f360cd8429116deee01ad591ffb0f9d391947227c259b6d50c9e444beca93270bfc22103c950ee730e288bd07d15ddc9fa8f4d4f731c60503c4cf369bb1bc47ef763490617c7070b4b36b28681afe2f8d569423980545845ca962411e1f56f371ce01340df1ff2804438bcfc1d8d9addbac8162b35ebeb2fe6abf91171a8c33bdd7b7bbcb9a0a5755e6c04e181a4ca3199bcc30fb521657cccb1204542e45cdcea050978b878b8ecd60df5a2cb56ec4abfa87485249b9bffec0cbe6233cf065c07f5032db3f4f54a33b3a1a72c1b724fad2d1c5dac7afee81ff4f37d80ea4e020c504d3e4d8c30b22cc0d045c7bdb2a98dcdef538760f9fbd0b1d2cbac611c3819e58e00bbe6bfaf8eb9d60943b29f1978e1f64dd9d2870023649a5e96a40d293574f00a374bb0650987d83544fbb92a36305491c301759827eb5026d930ea33e6bd68d1eb3a7f13b53c727e35185ee0815378f45c6a85fa42a787b07bb382abd056ea12403b27eeaf04dcd835ab4baa0e6eb9691a6f35e212ffd1934ed1b76767b4b36f187e4f83155a4873efc05c6f9557816381ad567fa4620b5568b50d26d76c9dff96da8208fff97740474117593a791d40d89011950de208dccc910856aecf27bd5f7b498c1bbf6dea378be17305b3465ce52f8be5b1f64833bbf858b4c21e8775da3f53256ba0dc019daf17c4101bb605fbe2ba8d6de5dea52832ffd294710d0188aa983ca0ed25cd63fba76ec88d0088fe1abe74e1e6a76423ac081d34dc16a2114d5cafa397e484042a21c7be8db22c8e3b03002cd69ed13e4ae0bd2c56bd39f859c466fb5305c569306357463c3f6327e416d5ebf3fdf266ce6052415ee7a205ca4976151849777165972440427eac7c0710348cf350c971681bfb7c2f6282c9f8d2341a9ec04eb92caba1f6b4f4368b88de7bd008c4038fa43f53d2de6d993a98b8a1b656e88cf54bbde28029a62e43ef104caf140b5935b68824395dc9fc50cb2055ddbade266a576eb32ec4ea6da93a9b302804c0df92fac7beee716ff00d9aa4da51b6e7c9e87639f271852e4c973fac2fe69be61ef5ea8bf1c929947e8ea4df909b6388a9fc148daf8b090631ad249a74496f5f698c6a47bf63cbbab48de354f238839dc38f95fbb54a5139c32d10256c949705756e423c2e180bcbffa8beed2fc10d2c668ef0f46e8b1baa34aae2559528de1ea23685788d4cd43cfb49d783a59fb1fd41a505e7d93447acb1749cca6ceaaf66d02b7e9ecc99405cb5e83c6c19cc652895b53a82522bc0c135843f810a2f6ac5a98f9350826f5f86ef60fa9c83a84277091bee84c0a75bd2ca03c082fb493e17544087f78e496a3be6697bddcf517bec30f471508682f2b6d45b86bd3355af5e2d0821ced677d233f2ebe8cda09a7088a09fef6a5d167fe4f1ad641a493c5d0c408ee59d015f1f84b51729489c195ddc3d600d43b67ad66a6d0e9049dd729440553af47b2c6eb2c655ace6a0a623b75986e57ddd4d62aa289fe409d906f870c749bbd85acdc3c1c703f28035910d70a8931486065c49ce11b7e2634c5b05afa244a98ec388ef982d32ef332f06725eab82adddf4311a4d5d3b16085c759c372620edad132cb55af9bdfec13c6df4cf336b0a5d464d5a4b6cdaf0fb3c98f06b3666d095f7bea8d90ab98f58a68c5d35202ed9e2faa6beaeb2bec377d078879634edc78c30c62f8efde8844d36980392b588b9d7ac47d0b816b7ed79b05ac2a2356da9106cdcb5f58570cd3dcad7d225ee0749a3d3b59b6c08bf7bba549da96e740854df434d3b84191f8a5605c0a014e9f19c3cd82d2af54dc8a42765e7b024a701e3f8318d0434c2bb382ef6179850cababca9b799f159106f903826d8baf486ec71bd2ccbcec2aa363a88e42acdd04aafcff5cadc52e20e6e33aea01c2cf38fae8d9077df75de3c906cb1f3d7ce9e49ae69273e4e91f5c9ca5789a76875d1b827ece58d580cc4f1db1e6afa85092a0ab5b6e9525d7def2e16ce243dd1050a4491bd467b5e59164b1599ee2b0d961cc1c557c50472ca431da5abe4edcf6a7be756b45260377afb9a0c86572d603a84d7e9e3bf65751dcc4062754eba11477a72d10758a445882d7e0ee449937ccfeb47faa83b6298ad872b09b05e37fa3297cf6d9aaa363305225b69aa184e0ce020679ff6d9affa991e4e1cd01d415f0ec7792a8993bb119766ebb74471f6c763ac65ab83448eb47fcb192e41f5624bc6e67dc2dc8b802f6c254c0c485de8b15933a526dbec1a433ba3c4479a44d21087ca20d9955cf729fbd7a715878c3ac96a0930ffabc156f2a5e04b4b20b69f667c1ef384a2d453acf1685b66a1083fdb1fcf58ad95ca32e0023564d5e4f771e305c073b68e11b7262f44f3209703c54b41bdad6927b392b51c6ade3d78d64920ad48617b441b5df41af785fcd8caeb602e05fe8534a8838a74d826b004d2ccc9a760a5c59706dc1ad0078a3f33b1bcaee07ad58d2e4d960e80f4f86efa10d283d7f64218909ffa0b71a830ba5266da852f62c6a9508540f4d1c7d11ee18a90d593250e2f1c37afcf7996f6d25a16b554f1b450230225db9bd9ae2ec930f4dcb979990a0ebbe01144a9f54be65c1ccd3461b4edb776b0412b9b74e4c7c6aceb921fdd4bfa061f2945d744c34eada015823561cbbd066d8a222f39a04b4cfd63faee110b14f7dd4e6b3778ab737a16de27c746c9b03e6a7e54f611c7ebaec7e0eadfa6abda5ac29601b2bc6b9f6ec9223fc3506033ac48fe0a083da336cf471ff24ed15c2af9af93189358fb4aef7cbe07cef6e6caa28269efe9d4b1dd7680236131d63deb6ab1f0904f76a3451aff67c5e3a2166cbef9545a09fe2e58637182c1b9251c82c3a99bef14dc0a824d151e78a0a9cba9ed9512b45e8f4ddc9f4036350106b97afbc0bcbbe07bc467760eeadb5a7b0ef1ee71acbd9bca096c211427fccf6495678bb66b63b947bd0312c4719c94b193b23a1e78becbd50f0c3484070fdc31228851ace3464df6de9ed014a9dbb2776d42c3a609c2542561935bff0f1449ae9c4550c18f11990af0e4cd33b4c79743bc8e597691ce2640a6ed78dc62950e3509963bce89da8a322e103987893a2e74cd87b66515c1a576f405e430e9ba09e42a0590a372e9d1af533ab30a1089fb7fc107fc509238f8de941bf17ee33a26c27b89aef62f5b58354b52e5a66b43208a83d3b5ada202d5a45c984c9ce27d966768a47e661f83aefd1ec55c28bcc47f568e4446666eb859f30973689645cbb112151fb53b892dbbd47c26a78ab0544b0f8bfe238f4b3184172bc94a42c8923bf03095f8ba9c7cc516093d1dddc31877a4e1c3a511b4fc58a1a6b723e5585992e6da24422429ea66fc8f61631f192662a2da731d9291c51e1f15b01960ea4cf0c0a6897a736583595af7cbba0143f0d899d1ae7b3c5d58cfb7c421e999ed3e60a152787e7abb3bc37226f30a4610c449fbfc70567cea254f6ef9f4cd251999077a7ed396dfbafd1668c5a1b609b31f1bc5a120731ad5922381fa902816f4feab0684b8d53abbc9b194520e32cf96aa70e072b9f41d5b157d2010fa2ac6913ae9dc54dea64baf64bf4143bb617edca5ce06ab14fd7c6027b14223de1c7c1afb95db7187e3d97ef201453de8e026ae14b2a7ecc7921f2b63026db1f2a6caebe23a78faf6b0142f8aa8375c46c8a218bc34525cef8f5d14967af37e6cae90af7c4d9437b56d4100d9d85333f3dc426e08f35e80c7c954e87879a4d91eb199442a2d2c2dd633ca5e8230e2868bcf043c34b7ffb2850b2731014d52b718dfd20e13656df15d54d6a016907ccae6f65b2681fff4539c96f7397710d27e5b870155fd056c844e2d39c3281c2dfdca0966f0dc1074bd4279a0a21f12780c2190b52e0ccdb81af1f1f23c6e9d1466b7d3ecee8c425794ee3f6708e20a5881caea9554a4df8a86be788df7d5579b405a81b3f0bfbfb7541b43bc1d54ebb35727ec4b28d699e80c3bb8605641d7047ce6d82cf6166b66d37de8761277c0a5612f67d350c4e73e318bbdb17a83a85dc097a9020e1c7cbe4cb0946226f53ef4dfa8e3ab2faf239cf6db559ed0b39389b8ca955b651ec2cbd87e2bdc096accd1d69c8a220e1f1b186e46035282945cf5cb70a961ed9f29b91a41557f0be2996cabc0de97966824f885bb4f97a3f617469fd4f692ea85b84721a67f19d2f8c84733eedc5ea4b978ca2895c0b0e190739033d16aa037c89fdfef91e0bf0ee14721ee173af3a3e19cb70e27b5ef23fb6a0a43b622e4b5f6969f66863e5f5afc2661465041c11b5f3d94d00358eaa2cc54315b8c110b69aea0cc0add3b52a3473441800d7fab4d082a3e8afafb0eb933cda1550d31af6a44ac3b188f569df289c3c1a4a4fddd2ba11ce02fb8b8a43fd40c22b393ff0e7dd1a569e825a908c6e7a3b957eb6e3a4cf7e8d19ce30c43c6d63672b03117b050eda5cea1f447c5b68205c767d536a056fafa4453cc57aade0aa00acac6b32846c0b6f7d000653ec595020ee8724b9554280824afda658509a429f5b37472e753caca81e80508643e1ef985b34e75961f2829e00c9ef78fe3ab5bfc3b00313a57a8180991f1faa9295b455cbef56abeca64e4cda6136c4f314fc3ddbdad1b67386bd15f4c094ee6e0615e2123139830f81b5497eccb6cde65fb78f1483cab78530b438131670a8261b39ed29ce29d66f86f1b251a2816fe8acf75321b997460776d8ce770f49b9d1dcbbbd9c2f5c25fbc27fcb73d1a71830c9f9e3a797881ec696e08a1de5f1fb1864a3c9ded9e3943b34d5c2c1860a3a0ee2e82e403d9af5ef9fcaf4cecd0af1998b2998daaac7c3096ead5b20a6a549e179d9682ae4ff23cb6b251cdc23c327a12aeb0113a329a13ed2e0ee8839db1dfb26de2c2a6817459a1d0d644d5443c8c7a48a8f99e971f92967767c15d3da3d917c198b25048a9dab4e1f4026e286af0eab08d3298b5324f5962c0865f95448d4d865110dd5857584df41e0f0f0b926821caac6f9e8c44b1df6d54670a9b90e2ed07b7ee0629b682c6a062864e6bd53fc72e32bcd0148b5021cbd57c26f217fc22e553d2a40782d52f984efab6fad715efc1f15359468d285214248b0f36e3bf8887d5ff9ff5da884642b7633d7b69dc8f2300e49acb499d3b9702d8b52749c27dea8b882a0ea9a2f25419570943b356e8126002e18374ec67242b2a37e7df585d5653fe9adc4bd6754325ee3150f85717eb5f4b27ac1d1dddd3a271767ae0724e2ec163b5293107e59287e71e2ca688c756273abe04cbb1418ab27337d187f362b0bb592ab65770804c4619b594f36a6b2d99008796f8f0c5af3657ceb5c3490b8acb47f95bed7900106aa086b4d40a125f85398328e"}, 0x1001, 0x0) 09:45:38 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWRITE(r0, 0x0, 0x0) 09:45:38 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f00000003c0)={0x24, @short}, 0x14) 09:45:38 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001680)='/proc/cpuinfo\x00', 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000), 0x0, 0xf, 0x0) 09:45:38 executing program 2: socketpair(0x12, 0x0, 0x0, &(0x7f00000016c0)) 09:45:38 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 09:45:38 executing program 1: syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0) 09:45:38 executing program 3: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x3, 0xee01, 0xffffffffffffffff}}) 09:45:38 executing program 0: socketpair(0x1, 0x0, 0x6, &(0x7f0000000000)) 09:45:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup2(r1, r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='nr0\x00', 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 09:45:39 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) [ 362.495115][ T6509] ===================================================== [ 362.495294][ T6509] BUG: KMSAN: uninit-value in ax25cmp+0x38c/0x450 [ 362.495355][ T6509] ax25cmp+0x38c/0x450 [ 362.495411][ T6509] nr_dev_get+0x20a/0x440 [ 362.495456][ T6509] nr_route_frame+0x19e/0xfc0 [ 362.495503][ T6509] nr_xmit+0x56/0x1c0 [ 362.495543][ T6509] xmit_one+0x14e/0x5f0 [ 362.495591][ T6509] dev_hard_start_xmit+0xe5/0x370 [ 362.495636][ T6509] __dev_queue_xmit+0x1dec/0x31f0 [ 362.495682][ T6509] raw_sendmsg+0x644/0xc00 [ 362.495768][ T6509] ieee802154_sock_sendmsg+0x8d/0xc0 [ 362.495856][ T6509] ____sys_sendmsg+0xabc/0xe90 [ 362.495896][ T6509] ___sys_sendmsg+0x2a5/0x350 [ 362.495934][ T6509] __sys_sendmmsg+0x4f1/0x960 [ 362.495973][ T6509] __ia32_compat_sys_sendmmsg+0xc4/0x130 [ 362.496018][ T6509] __do_fast_syscall_32+0x95/0xf0 [ 362.496060][ T6509] do_fast_syscall_32+0x33/0x70 [ 362.496099][ T6509] do_SYSENTER_32+0x1b/0x20 [ 362.496137][ T6509] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 362.496205][ T6509] [ 362.496212][ T6509] Uninit was created at: [ 362.496279][ T6509] __kmalloc_node_track_caller+0x86c/0x1230 [ 362.496340][ T6509] __alloc_skb+0x34a/0xd70 [ 362.496398][ T6509] alloc_skb_with_frags+0xb9/0xb80 [ 362.496445][ T6509] sock_alloc_send_pskb+0xaa8/0xc30 [ 362.496496][ T6509] raw_sendmsg+0x343/0xc00 [ 362.496545][ T6509] ieee802154_sock_sendmsg+0x8d/0xc0 [ 362.496600][ T6509] ____sys_sendmsg+0xabc/0xe90 [ 362.496639][ T6509] ___sys_sendmsg+0x2a5/0x350 [ 362.496677][ T6509] __sys_sendmmsg+0x4f1/0x960 [ 362.496716][ T6509] __ia32_compat_sys_sendmmsg+0xc4/0x130 [ 362.496758][ T6509] __do_fast_syscall_32+0x95/0xf0 [ 362.496798][ T6509] do_fast_syscall_32+0x33/0x70 [ 362.496842][ T6509] do_SYSENTER_32+0x1b/0x20 [ 362.496880][ T6509] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 362.496946][ T6509] [ 362.496953][ T6509] CPU: 0 PID: 6509 Comm: syz-executor.4 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 362.497000][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.497024][ T6509] ===================================================== [ 362.497036][ T6509] Disabling lock debugging due to kernel taint [ 362.497049][ T6509] Kernel panic - not syncing: kmsan.panic set ... [ 362.712044][ T6509] CPU: 0 PID: 6509 Comm: syz-executor.4 Tainted: G B 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 362.723909][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.734005][ T6509] Call Trace: [ 362.737312][ T6509] [ 362.740268][ T6509] dump_stack_lvl+0x1c8/0x256 [ 362.745023][ T6509] dump_stack+0x1a/0x1c [ 362.749243][ T6509] panic+0x4d3/0xc7d [ 362.753198][ T6509] ? print_tainted+0x1d1/0x1e0 [ 362.758059][ T6509] ? add_taint+0x104/0x1a0 [ 362.762528][ T6509] ? printk_sprint+0x29b/0x4d0 [ 362.767362][ T6509] kmsan_report+0x2cc/0x2d0 [ 362.771929][ T6509] ? preempt_count_sub+0x7d/0x280 [ 362.777077][ T6509] ? _raw_spin_unlock_irqrestore+0x34/0x50 [ 362.782946][ T6509] ? __msan_warning+0x92/0x110 [ 362.787759][ T6509] ? ax25cmp+0x38c/0x450 [ 362.792067][ T6509] ? nr_dev_get+0x20a/0x440 [ 362.796622][ T6509] ? nr_route_frame+0x19e/0xfc0 [ 362.801524][ T6509] ? nr_xmit+0x56/0x1c0 [ 362.805724][ T6509] ? xmit_one+0x14e/0x5f0 [ 362.810100][ T6509] ? dev_hard_start_xmit+0xe5/0x370 [ 362.815353][ T6509] ? __dev_queue_xmit+0x1dec/0x31f0 [ 362.820604][ T6509] ? raw_sendmsg+0x644/0xc00 [ 362.825251][ T6509] ? ieee802154_sock_sendmsg+0x8d/0xc0 [ 362.830769][ T6509] ? ____sys_sendmsg+0xabc/0xe90 [ 362.835761][ T6509] ? ___sys_sendmsg+0x2a5/0x350 [ 362.840678][ T6509] ? __sys_sendmmsg+0x4f1/0x960 [ 362.845575][ T6509] ? __ia32_compat_sys_sendmmsg+0xc4/0x130 [ 362.851434][ T6509] ? __do_fast_syscall_32+0x95/0xf0 [ 362.856680][ T6509] ? do_fast_syscall_32+0x33/0x70 [ 362.861752][ T6509] ? do_SYSENTER_32+0x1b/0x20 [ 362.866473][ T6509] ? entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 362.873051][ T6509] ? kmsan_internal_poison_memory+0x45/0x90 [ 362.879003][ T6509] ? kmsan_slab_alloc+0xd9/0x150 [ 362.883993][ T6509] ? __kmalloc_node_track_caller+0x86c/0x1230 [ 362.890127][ T6509] ? __alloc_skb+0x34a/0xd70 [ 362.894775][ T6509] ? alloc_skb_with_frags+0xb9/0xb80 [ 362.900119][ T6509] ? sock_alloc_send_pskb+0xaa8/0xc30 [ 362.905553][ T6509] ? raw_sendmsg+0x343/0xc00 [ 362.910201][ T6509] ? ieee802154_sock_sendmsg+0x8d/0xc0 [ 362.915750][ T6509] ? ____sys_sendmsg+0xabc/0xe90 [ 362.920751][ T6509] ? ___sys_sendmsg+0x2a5/0x350 [ 362.925647][ T6509] ? __sys_sendmmsg+0x4f1/0x960 [ 362.930545][ T6509] ? __ia32_compat_sys_sendmmsg+0xc4/0x130 [ 362.936401][ T6509] ? __do_fast_syscall_32+0x95/0xf0 [ 362.941648][ T6509] ? do_fast_syscall_32+0x33/0x70 [ 362.946721][ T6509] ? do_SYSENTER_32+0x1b/0x20 [ 362.951578][ T6509] ? entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 362.958166][ T6509] ? do_anonymous_page+0xe3d/0x26b0 [ 362.963482][ T6509] ? kmsan_get_metadata+0x33/0x220 [ 362.968654][ T6509] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 362.974522][ T6509] ? kmsan_get_metadata+0x33/0x220 [ 362.979690][ T6509] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 362.985558][ T6509] __msan_warning+0x92/0x110 [ 362.990198][ T6509] ax25cmp+0x38c/0x450 [ 362.994331][ T6509] nr_dev_get+0x20a/0x440 [ 362.998712][ T6509] nr_route_frame+0x19e/0xfc0 [ 363.003448][ T6509] ? validate_xmit_xfrm+0x95/0x1ad0 [ 363.008752][ T6509] nr_xmit+0x56/0x1c0 [ 363.012781][ T6509] ? nr_close+0xc0/0xc0 [ 363.016986][ T6509] xmit_one+0x14e/0x5f0 [ 363.021192][ T6509] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 363.027067][ T6509] dev_hard_start_xmit+0xe5/0x370 [ 363.032158][ T6509] ? kmsan_get_metadata+0x33/0x220 [ 363.037323][ T6509] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 363.043191][ T6509] __dev_queue_xmit+0x1dec/0x31f0 [ 363.048283][ T6509] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 363.054150][ T6509] raw_sendmsg+0x644/0xc00 [ 363.058632][ T6509] ? raw_getsockopt+0x30/0x30 [ 363.063365][ T6509] ieee802154_sock_sendmsg+0x8d/0xc0 [ 363.068714][ T6509] ? ieee802154_sock_ioctl+0x690/0x690 [ 363.074234][ T6509] ____sys_sendmsg+0xabc/0xe90 [ 363.079065][ T6509] ___sys_sendmsg+0x2a5/0x350 [ 363.083795][ T6509] ? __rcu_read_unlock+0x76/0xd0 [ 363.088848][ T6509] ? __fget_files+0x4a8/0x510 [ 363.093623][ T6509] ? kmsan_get_metadata+0x33/0x220 [ 363.098801][ T6509] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 363.104683][ T6509] __sys_sendmmsg+0x4f1/0x960 [ 363.109425][ T6509] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 363.115433][ T6509] ? kmsan_get_metadata+0x33/0x220 [ 363.120625][ T6509] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 363.126531][ T6509] __ia32_compat_sys_sendmmsg+0xc4/0x130 [ 363.132232][ T6509] __do_fast_syscall_32+0x95/0xf0 [ 363.137489][ T6509] do_fast_syscall_32+0x33/0x70 [ 363.142403][ T6509] do_SYSENTER_32+0x1b/0x20 [ 363.146958][ T6509] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 363.153380][ T6509] RIP: 0023:0xf7f9d549 [ 363.157489][ T6509] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 363.177286][ T6509] RSP: 002b:00000000f7f985cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 363.185755][ T6509] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001380 [ 363.193772][ T6509] RDX: 00000000fffffeed RSI: 0000000000000000 RDI: 0000000000000000 [ 363.201784][ T6509] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.209796][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.217809][ T6509] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.225835][ T6509] [ 363.229052][ T6509] Kernel Offset: disabled [ 363.233400][ T6509] Rebooting in 86400 seconds..