vmsg+0x52e/0x840 [ 587.532815][T12649] do_recvmmsg+0x55a/0x1180 [ 587.537433][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 587.542687][T12649] do_syscall_64+0x3d/0xb0 [ 587.547214][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 587.553381][T12649] [ 587.555755][T12649] Local variable msg_sys created at: [ 587.561081][T12649] do_recvmmsg+0x5c/0x1180 [ 587.565690][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 587.744408][T12649] not chained 260000 origins [ 587.749102][T12649] CPU: 0 PID: 12649 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 587.759651][T12649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 587.769806][T12649] Call Trace: [ 587.773180][T12649] [ 587.776180][T12649] dump_stack_lvl+0x1c8/0x256 [ 587.781010][T12649] dump_stack+0x1a/0x1c [ 587.785322][T12649] kmsan_internal_chain_origin+0x78/0x120 [ 587.791200][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 587.797165][T12649] ? kfree+0x44/0x980 [ 587.801260][T12649] ? filter_irq_stacks+0x5c/0x1a0 [ 587.806417][T12649] ? do_recvmmsg+0x55a/0x1180 [ 587.811207][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 587.817173][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 587.823135][T12649] ? should_fail+0x3f/0x810 [ 587.827782][T12649] ? __stack_depot_save+0x21/0x4b0 [ 587.833034][T12649] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 587.839433][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 587.845386][T12649] __msan_chain_origin+0xbd/0x140 [ 587.850550][T12649] ___sys_recvmsg+0x52e/0x840 [ 587.855374][T12649] ? kmsan_internal_check_memory+0x94/0x530 [ 587.861422][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 587.867379][T12649] do_recvmmsg+0x55a/0x1180 [ 587.872031][T12649] ? do_syscall_64+0x3d/0xb0 [ 587.876739][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 587.881895][T12649] do_syscall_64+0x3d/0xb0 [ 587.886419][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 587.892470][T12649] RIP: 0033:0x7f7deda89279 [ 587.896977][T12649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 587.916820][T12649] RSP: 002b:00007f7deebb0168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 587.925362][T12649] RAX: ffffffffffffffda RBX: 00007f7dedb9c050 RCX: 00007f7deda89279 [ 587.933441][T12649] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 587.941537][T12649] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 587.949616][T12649] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 587.957681][T12649] R13: 00007f7dee0cfb1f R14: 00007f7deebb0300 R15: 0000000000022000 [ 587.965778][T12649] [ 587.969344][T12649] Uninit was stored to memory at: [ 587.974619][T12649] ___sys_recvmsg+0x52e/0x840 [ 587.979405][T12649] do_recvmmsg+0x55a/0x1180 [ 587.984093][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 587.989235][T12649] do_syscall_64+0x3d/0xb0 [ 587.993991][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.000034][T12649] [ 588.003764][T12649] Uninit was stored to memory at: [ 588.008950][T12649] ___sys_recvmsg+0x52e/0x840 [ 588.013797][T12649] do_recvmmsg+0x55a/0x1180 [ 588.018403][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 588.023610][T12649] do_syscall_64+0x3d/0xb0 [ 588.028152][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.034268][T12649] [ 588.036649][T12649] Uninit was stored to memory at: [ 588.041898][T12649] ___sys_recvmsg+0x52e/0x840 [ 588.046682][T12649] do_recvmmsg+0x55a/0x1180 [ 588.051299][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 588.056570][T12649] do_syscall_64+0x3d/0xb0 [ 588.061094][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.067256][T12649] [ 588.069638][T12649] Uninit was stored to memory at: [ 588.074946][T12649] ___sys_recvmsg+0x52e/0x840 [ 588.079728][T12649] do_recvmmsg+0x55a/0x1180 [ 588.084452][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 588.089597][T12649] do_syscall_64+0x3d/0xb0 [ 588.094241][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.100287][T12649] [ 588.102788][T12649] Uninit was stored to memory at: [ 588.107972][T12649] ___sys_recvmsg+0x52e/0x840 [ 588.112896][T12649] do_recvmmsg+0x55a/0x1180 [ 588.117513][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 588.122734][T12649] do_syscall_64+0x3d/0xb0 [ 588.127260][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.133468][T12649] [ 588.135860][T12649] Uninit was stored to memory at: [ 588.141047][T12649] ___sys_recvmsg+0x52e/0x840 [ 588.145964][T12649] do_recvmmsg+0x55a/0x1180 [ 588.150580][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 588.155843][T12649] do_syscall_64+0x3d/0xb0 [ 588.160366][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.166552][T12649] [ 588.168930][T12649] Uninit was stored to memory at: [ 588.174259][T12649] ___sys_recvmsg+0x52e/0x840 [ 588.179051][T12649] do_recvmmsg+0x55a/0x1180 [ 588.183777][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 588.188915][T12649] do_syscall_64+0x3d/0xb0 [ 588.193561][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.199602][T12649] [ 588.202087][T12649] Local variable msg_sys created at: [ 588.207440][T12649] do_recvmmsg+0x5c/0x1180 [ 588.212067][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 588.440220][T12649] not chained 270000 origins [ 588.445050][T12649] CPU: 0 PID: 12649 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 588.455595][T12649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 588.465743][T12649] Call Trace: [ 588.469082][T12649] [ 588.472078][T12649] dump_stack_lvl+0x1c8/0x256 [ 588.476911][T12649] dump_stack+0x1a/0x1c [ 588.481195][T12649] kmsan_internal_chain_origin+0x78/0x120 [ 588.487056][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 588.493006][T12649] ? kfree+0x44/0x980 [ 588.497092][T12649] ? filter_irq_stacks+0x5c/0x1a0 [ 588.502240][T12649] ? do_recvmmsg+0x55a/0x1180 [ 588.507025][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 588.513008][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 588.518965][T12649] ? should_fail+0x3f/0x810 [ 588.523608][T12649] ? __stack_depot_save+0x21/0x4b0 [ 588.528857][T12649] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 588.535253][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 588.542159][T12649] __msan_chain_origin+0xbd/0x140 [ 588.547326][T12649] ___sys_recvmsg+0x52e/0x840 [ 588.552139][T12649] ? kmsan_internal_check_memory+0x94/0x530 [ 588.558175][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 588.564130][T12649] do_recvmmsg+0x55a/0x1180 [ 588.568778][T12649] ? do_syscall_64+0x3d/0xb0 [ 588.573483][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 588.578637][T12649] do_syscall_64+0x3d/0xb0 [ 588.583164][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.589209][T12649] RIP: 0033:0x7f7deda89279 [ 588.593727][T12649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 588.613505][T12649] RSP: 002b:00007f7deebb0168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 588.622043][T12649] RAX: ffffffffffffffda RBX: 00007f7dedb9c050 RCX: 00007f7deda89279 [ 588.630118][T12649] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 588.638184][T12649] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 588.646254][T12649] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 588.654323][T12649] R13: 00007f7dee0cfb1f R14: 00007f7deebb0300 R15: 0000000000022000 [ 588.662417][T12649] [ 588.666104][T12649] Uninit was stored to memory at: [ 588.671289][T12649] ___sys_recvmsg+0x52e/0x840 [ 588.676243][T12649] do_recvmmsg+0x55a/0x1180 [ 588.680855][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 588.686082][T12649] do_syscall_64+0x3d/0xb0 [ 588.690614][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.696777][T12649] [ 588.699156][T12649] Uninit was stored to memory at: [ 588.704493][T12649] ___sys_recvmsg+0x52e/0x840 [ 588.709299][T12649] do_recvmmsg+0x55a/0x1180 [ 588.714031][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 588.719170][T12649] do_syscall_64+0x3d/0xb0 [ 588.723901][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.729943][T12649] [ 588.732387][T12649] Uninit was stored to memory at: [ 588.737570][T12649] ___sys_recvmsg+0x52e/0x840 [ 588.742477][T12649] do_recvmmsg+0x55a/0x1180 [ 588.747094][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 588.752335][T12649] do_syscall_64+0x3d/0xb0 [ 588.756864][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.763030][T12649] [ 588.765407][T12649] Uninit was stored to memory at: [ 588.770588][T12649] ___sys_recvmsg+0x52e/0x840 [ 588.775517][T12649] do_recvmmsg+0x55a/0x1180 [ 588.780123][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 588.785443][T12649] do_syscall_64+0x3d/0xb0 [ 588.789973][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.796136][T12649] [ 588.798516][T12649] Uninit was stored to memory at: [ 588.803823][T12649] ___sys_recvmsg+0x52e/0x840 [ 588.808606][T12649] do_recvmmsg+0x55a/0x1180 [ 588.813365][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 588.818512][T12649] do_syscall_64+0x3d/0xb0 [ 588.823256][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.829319][T12649] [ 588.831692][T12649] Uninit was stored to memory at: [ 588.836990][T12649] ___sys_recvmsg+0x52e/0x840 [ 588.841882][T12649] do_recvmmsg+0x55a/0x1180 [ 588.846493][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 588.851625][T12649] do_syscall_64+0x3d/0xb0 [ 588.856287][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.862404][T12649] [ 588.864786][T12649] Uninit was stored to memory at: [ 588.869955][T12649] ___sys_recvmsg+0x52e/0x840 [ 588.874944][T12649] do_recvmmsg+0x55a/0x1180 [ 588.879549][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 588.884810][T12649] do_syscall_64+0x3d/0xb0 [ 588.889358][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.895531][T12649] [ 588.897927][T12649] Local variable msg_sys created at: [ 588.903447][T12649] do_recvmmsg+0x5c/0x1180 [ 588.907975][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 589.130800][T12649] not chained 280000 origins [ 589.135651][T12649] CPU: 0 PID: 12649 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 589.146176][T12649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 589.156301][T12649] Call Trace: [ 589.159632][T12649] [ 589.162596][T12649] dump_stack_lvl+0x1c8/0x256 [ 589.167389][T12649] dump_stack+0x1a/0x1c [ 589.171634][T12649] kmsan_internal_chain_origin+0x78/0x120 [ 589.177455][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 589.183411][T12649] ? kfree+0x44/0x980 [ 589.187486][T12649] ? filter_irq_stacks+0x5c/0x1a0 [ 589.192601][T12649] ? do_recvmmsg+0x55a/0x1180 [ 589.197389][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 589.203330][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 589.209225][T12649] ? should_fail+0x3f/0x810 [ 589.213841][T12649] ? __stack_depot_save+0x21/0x4b0 [ 589.219093][T12649] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 589.225466][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 589.231388][T12649] __msan_chain_origin+0xbd/0x140 [ 589.236504][T12649] ___sys_recvmsg+0x52e/0x840 [ 589.241290][T12649] ? kmsan_internal_check_memory+0x94/0x530 [ 589.247268][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 589.253181][T12649] do_recvmmsg+0x55a/0x1180 [ 589.257804][T12649] ? do_syscall_64+0x3d/0xb0 [ 589.262456][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 589.267555][T12649] do_syscall_64+0x3d/0xb0 [ 589.272044][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 589.278069][T12649] RIP: 0033:0x7f7deda89279 [ 589.282544][T12649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 589.302294][T12649] RSP: 002b:00007f7deebb0168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 589.310817][T12649] RAX: ffffffffffffffda RBX: 00007f7dedb9c050 RCX: 00007f7deda89279 [ 589.318872][T12649] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 589.326893][T12649] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 589.334928][T12649] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 589.342974][T12649] R13: 00007f7dee0cfb1f R14: 00007f7deebb0300 R15: 0000000000022000 [ 589.351014][T12649] [ 589.354442][T12649] Uninit was stored to memory at: [ 589.359632][T12649] ___sys_recvmsg+0x52e/0x840 [ 589.365816][T12649] do_recvmmsg+0x55a/0x1180 [ 589.370437][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 589.375698][T12649] do_syscall_64+0x3d/0xb0 [ 589.380229][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 589.386390][T12649] [ 589.388765][T12649] Uninit was stored to memory at: [ 589.394019][T12649] ___sys_recvmsg+0x52e/0x840 [ 589.398807][T12649] do_recvmmsg+0x55a/0x1180 [ 589.403489][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 589.408627][T12649] do_syscall_64+0x3d/0xb0 [ 589.413232][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 589.419281][T12649] [ 589.421653][T12649] Uninit was stored to memory at: [ 589.426956][T12649] ___sys_recvmsg+0x52e/0x840 [ 589.431737][T12649] do_recvmmsg+0x55a/0x1180 [ 589.436419][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 589.441555][T12649] do_syscall_64+0x3d/0xb0 [ 589.446211][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 589.452339][T12649] [ 589.454717][T12649] Uninit was stored to memory at: [ 589.459891][T12649] ___sys_recvmsg+0x52e/0x840 [ 589.464804][T12649] do_recvmmsg+0x55a/0x1180 [ 589.469422][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 589.474689][T12649] do_syscall_64+0x3d/0xb0 [ 589.479223][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 589.485397][T12649] [ 589.487766][T12649] Uninit was stored to memory at: [ 589.493049][T12649] ___sys_recvmsg+0x52e/0x840 [ 589.497822][T12649] do_recvmmsg+0x55a/0x1180 [ 589.502513][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 589.507633][T12649] do_syscall_64+0x3d/0xb0 [ 589.512239][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 589.518295][T12649] [ 589.520644][T12649] Uninit was stored to memory at: [ 589.525940][T12649] ___sys_recvmsg+0x52e/0x840 [ 589.530715][T12649] do_recvmmsg+0x55a/0x1180 [ 589.535415][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 589.540542][T12649] do_syscall_64+0x3d/0xb0 [ 589.545150][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 589.551179][T12649] [ 589.553658][T12649] Uninit was stored to memory at: [ 589.558802][T12649] ___sys_recvmsg+0x52e/0x840 [ 589.563670][T12649] do_recvmmsg+0x55a/0x1180 [ 589.568270][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 589.573488][T12649] do_syscall_64+0x3d/0xb0 [ 589.578023][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 589.584144][T12649] [ 589.586524][T12649] Local variable msg_sys created at: [ 589.591961][T12649] do_recvmmsg+0x5c/0x1180 [ 589.596476][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 589.759659][T12649] not chained 290000 origins [ 589.764439][T12649] CPU: 0 PID: 12649 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 589.774991][T12649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 589.785162][T12649] Call Trace: [ 589.788476][T12649] [ 589.791444][T12649] dump_stack_lvl+0x1c8/0x256 [ 589.796237][T12649] dump_stack+0x1a/0x1c [ 589.800522][T12649] kmsan_internal_chain_origin+0x78/0x120 [ 589.806339][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 589.812245][T12649] ? kfree+0x44/0x980 [ 589.816354][T12649] ? filter_irq_stacks+0x5c/0x1a0 [ 589.821488][T12649] ? do_recvmmsg+0x55a/0x1180 [ 589.826227][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 589.832153][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 589.838181][T12649] ? should_fail+0x3f/0x810 [ 589.842786][T12649] ? __stack_depot_save+0x21/0x4b0 [ 589.848049][T12649] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 589.854449][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 589.860409][T12649] __msan_chain_origin+0xbd/0x140 [ 589.865567][T12649] ___sys_recvmsg+0x52e/0x840 [ 589.870359][T12649] ? kmsan_internal_check_memory+0x94/0x530 [ 589.876363][T12649] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 589.882321][T12649] do_recvmmsg+0x55a/0x1180 [ 589.886971][T12649] ? do_syscall_64+0x3d/0xb0 [ 589.891659][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 589.896765][T12649] do_syscall_64+0x3d/0xb0 [ 589.901249][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 589.907241][T12649] RIP: 0033:0x7f7deda89279 [ 589.911705][T12649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 589.931477][T12649] RSP: 002b:00007f7deebb0168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 589.940012][T12649] RAX: ffffffffffffffda RBX: 00007f7dedb9c050 RCX: 00007f7deda89279 [ 589.948046][T12649] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 589.956077][T12649] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 589.964119][T12649] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 589.972193][T12649] R13: 00007f7dee0cfb1f R14: 00007f7deebb0300 R15: 0000000000022000 [ 589.980273][T12649] [ 589.984062][T12649] Uninit was stored to memory at: [ 589.989356][T12649] ___sys_recvmsg+0x52e/0x840 [ 589.994235][T12649] do_recvmmsg+0x55a/0x1180 [ 589.998856][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 590.004078][T12649] do_syscall_64+0x3d/0xb0 [ 590.008609][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 590.014826][T12649] [ 590.017198][T12649] Uninit was stored to memory at: [ 590.022472][T12649] ___sys_recvmsg+0x52e/0x840 [ 590.027349][T12649] do_recvmmsg+0x55a/0x1180 [ 590.032065][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 590.037195][T12649] do_syscall_64+0x3d/0xb0 [ 590.041672][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 590.047770][T12649] [ 590.050118][T12649] Uninit was stored to memory at: [ 590.055363][T12649] ___sys_recvmsg+0x52e/0x840 [ 590.060138][T12649] do_recvmmsg+0x55a/0x1180 [ 590.064930][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 590.070056][T12649] do_syscall_64+0x3d/0xb0 [ 590.074665][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 590.080705][T12649] [ 590.083189][T12649] Uninit was stored to memory at: [ 590.088367][T12649] ___sys_recvmsg+0x52e/0x840 [ 590.093277][T12649] do_recvmmsg+0x55a/0x1180 [ 590.097885][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 590.103106][T12649] do_syscall_64+0x3d/0xb0 [ 590.107634][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 590.113762][T12649] [ 590.116131][T12649] Uninit was stored to memory at: [ 590.121249][T12649] ___sys_recvmsg+0x52e/0x840 [ 590.126121][T12649] do_recvmmsg+0x55a/0x1180 [ 590.130719][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 590.135910][T12649] do_syscall_64+0x3d/0xb0 [ 590.140430][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 590.146564][T12649] [ 590.148930][T12649] Uninit was stored to memory at: [ 590.154169][T12649] ___sys_recvmsg+0x52e/0x840 [ 590.158942][T12649] do_recvmmsg+0x55a/0x1180 [ 590.163647][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 590.168799][T12649] do_syscall_64+0x3d/0xb0 [ 590.173376][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 590.179417][T12649] [ 590.181870][T12649] Uninit was stored to memory at: [ 590.187048][T12649] ___sys_recvmsg+0x52e/0x840 [ 590.191925][T12649] do_recvmmsg+0x55a/0x1180 [ 590.196555][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 590.201885][T12649] do_syscall_64+0x3d/0xb0 [ 590.206422][T12649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 590.212592][T12649] [ 590.214972][T12649] Local variable msg_sys created at: [ 590.220338][T12649] do_recvmmsg+0x5c/0x1180 [ 590.224955][T12649] __x64_sys_recvmmsg+0x3a7/0x4b0 18:28:11 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000100)) timer_gettime(0x0, &(0x7f00000029c0)) 18:28:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @window, @sack_perm, @sack_perm], 0x4) 18:28:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, 0x0, &(0x7f00000000c0)) 18:28:11 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x5, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) epoll_create1(0x0) socket(0x18, 0x0, 0x0) dup(r0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f000000d040), 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8cfe7}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x18}}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x64}}, 0x0) 18:28:11 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000180)=0x18) 18:28:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0xc7f, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0, 0x0, 0x6}]) 18:28:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) 18:28:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x5, 0x3, 'netpci0\x00'}]}, 0x38}}, 0x0) 18:28:11 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x5, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) epoll_create1(0x0) socket(0x18, 0x0, 0x0) dup(r0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f000000d040), 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8cfe7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x18, 0x19}}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x5c}}, 0x0) 18:28:11 executing program 4: r0 = socket(0x2, 0x2, 0x1) sendmsg$xdp(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x0) 18:28:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f00000000c0)) 18:28:11 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d401000013002fe225bd70000400df25288080034e244e2103400000010400003e0600080080000003000000d2db000000400100ffffff7f", @ANYRES32, @ANYBLOB="09000000090000001f00000009000000c200010010"], 0x1d4}}, 0x0) 18:28:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x500}, 0x48) [ 590.743019][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 18:28:11 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="021403061a000007"], 0xd0}}, 0x0) 18:28:11 executing program 2: io_setup(0x905, &(0x7f0000000240)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) 18:28:12 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x5, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) epoll_create1(0x0) socket(0x18, 0x0, 0x0) dup(r0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f000000d040), 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8cfe7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x18, 0x19}}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x5c}}, 0x0) 18:28:12 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000180)) 18:28:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 18:28:12 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000002840)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x2, 0xf1, &(0x7f00000004c0)=""/241, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:28:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$char_usb(r0, 0x0, 0x0) 18:28:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x10, &(0x7f0000000000)=0xf11aa6250453444c, 0x4) 18:28:12 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x5, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) epoll_create1(0x0) socket(0x18, 0x0, 0x0) dup(r0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f000000d040), 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8cfe7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x18, 0x19}}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x5c}}, 0x0) 18:28:12 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000540)={0x2c, 0x18}, 0x10) 18:28:12 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d401000013002fe225bd70000400df25288080034e244e2103400000010400003e0600080080000003000000d2db000000400100ffffff7f", @ANYRES32, @ANYBLOB="09000000090000001f00000009000000c200010003"], 0x1d4}}, 0x0) 18:28:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x0, 0x4}, 0x48) 18:28:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1080}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x34}}, 0x0) 18:28:12 executing program 1: timer_create(0x3, 0x0, &(0x7f0000001300)) 18:28:12 executing program 2: bpf$BPF_PROG_ATTACH(0x14, &(0x7f0000001440)={@map=0x1}, 0x14) 18:28:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0xc7f, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x6}]) 18:28:12 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x11, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2}]}, 0x20}}, 0x0) 18:28:12 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x13}, 0x10) 18:28:12 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x240c2, 0x0) open(&(0x7f0000002280)='./file1\x00', 0x0, 0x0) 18:28:12 executing program 4: clock_gettime(0xec6741a387d28d0c, 0x0) 18:28:13 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d401000013002fe225bd70000400df25288080034e244e2103400000010400003e0600080080000003000000d2db000000400100ffffff7f", @ANYRES32, @ANYBLOB="09000000090000001f00000009000000c20002"], 0x1d4}}, 0x0) 18:28:13 executing program 5: r0 = epoll_create(0x1f) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x3f) 18:28:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000280)='E', 0x1, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 18:28:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000001840)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) 18:28:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x40000}, 0x0) 18:28:13 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x23b32}, 0x80) 18:28:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000002400)=@base={0x0, 0x0, 0x0, 0x0, 0x2cd, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 18:28:13 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x200001d0}}, 0x0) 18:28:13 executing program 2: io_setup(0xc7f, &(0x7f0000000000)=0x0) io_submit(r0, 0x2, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xeffdffffffffffff}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 18:28:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000061) 18:28:13 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x5, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, r0}, 0x48) 18:28:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000001840)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) 18:28:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1080}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x4c}}, 0x0) 18:28:13 executing program 0: bpf$BPF_PROG_DETACH(0x12, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x13}, 0x10) 18:28:13 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000000c0)={0x4c, 0x15, 0xc11}, 0x4c}}, 0x0) 18:28:13 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000000c0)={0x54, 0x12, 0xc11, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x1}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}}, 0x0) 18:28:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) 18:28:13 executing program 4: r0 = open(&(0x7f0000004840)='.\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 18:28:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, &(0x7f00000000c0)=0x4) 18:28:14 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmmsg(r0, &(0x7f0000001880)=[{{&(0x7f00000003c0)=@tipc=@nameseq={0x1e, 0x2, 0x0, {0x0, 0x0, 0x4}}, 0x80, 0x0}}], 0x1, 0x0) 18:28:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0xfffffffffffffffe}}, 0x0) 18:28:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000001840)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) 18:28:14 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x620042, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 18:28:14 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20044049) 18:28:14 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x25c0c1, 0x0) 18:28:14 executing program 5: bpf$MAP_CREATE(0xa, &(0x7f00000000c0), 0x48) 18:28:14 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x400, 0x4) 18:28:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, 0x0, &(0x7f0000000080)=0x4000000) 18:28:14 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x1ffff000, 0x2, 0x0}, 0x0) 18:28:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000001840)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) 18:28:14 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x321000, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) 18:28:14 executing program 0: syz_clone3(&(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4a) syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58) 18:28:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001000010000000000000000d8e9ab4340162c"], 0x20}}, 0x0) 18:28:14 executing program 5: mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x30, 0xffffffffffffffff, 0x0) 18:28:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="021403061a"], 0xd0}}, 0x0) 18:28:14 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="021403061a0000002bbd7000fbdbdf2507001900000000000a004e2200000001fc0000000f00000000000000000000018000000002004e22e0000002000000000000000000000000040003"], 0xd0}}, 0x0) 18:28:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32], 0x28}}, 0x0) 18:28:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newlink={0x10, 0x10, 0x1}, 0x20}}, 0x0) 18:28:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=ANY=[@ANYBLOB="020e01020700000026bd7000fcdbdf2505001b"], 0x38}}, 0x0) 18:28:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x2}}, 0x20}}, 0x0) 18:28:14 executing program 5: bpf$BPF_PROG_DETACH(0x21, &(0x7f00000002c0), 0x10) 18:28:15 executing program 4: r0 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 18:28:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0xa, &(0x7f0000000000)=0xf11aa6250453444c, 0x4) 18:28:15 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x20000160, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:28:15 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000000c0)={0x4c, 0x12, 0xc11, 0x0, 0x0, {0xa}}, 0x4c}}, 0x0) 18:28:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0xc7f, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 18:28:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) 18:28:15 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0xc7f, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_pgetevents(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 18:28:15 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000000c0)={0x4c, 0x12, 0xc11, 0x0, 0x0, {0x2}}, 0x4c}}, 0x0) 18:28:15 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000000c0)={0x4c, 0x12, 0xc11}, 0x4c}}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/192, 0xc0}, 0x0) 18:28:15 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d401000013002fe225bd70000400df25288080034e244e2103400000010400003e0600080080000003000000d2db000000400100ffffff7f", @ANYRES32, @ANYBLOB="09000000090000001f00000009000000c20003"], 0x1d4}}, 0x0) 18:28:15 executing program 3: bpf$MAP_CREATE(0x15, &(0x7f00000000c0), 0x48) 18:28:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x6, &(0x7f0000000000), 0x4) 18:28:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd3, &(0x7f00000000c0)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:28:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x1) 18:28:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) read(r1, &(0x7f0000019440)=""/102391, 0x18ff7) dup2(0xffffffffffffffff, 0xffffffffffffffff) 18:28:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 18:28:16 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="941300000901008000e6000000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680), 0x10}, 0xdd) 18:28:16 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)={0x2, 0xe, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_x_sec_ctx={0x1}, @sadb_key={0x1, 0x8}]}, 0x68}}, 0x0) 18:28:16 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000180)=0x18) 18:28:16 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/86, 0x56}], 0x3}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="d401000013002f"], 0x1d4}}, 0x0) 18:28:16 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000180)=0xffffffffffffff7f) 18:28:16 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x7, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1}}]}, 0x50}}, 0x4) 18:28:16 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_clone3(&(0x7f0000001580)={0x204010280, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001540)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) 18:28:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, 0xa4f0f1a134e51ae7) 18:28:16 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_gettime(0x0, &(0x7f0000000140)) 18:28:16 executing program 1: io_setup(0x2, &(0x7f0000001480)) syz_clone3(&(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4a) syz_clone3(&(0x7f00000001c0)={0x2c040400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:28:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0xffffffffff600000, 0x2, 0x0}, 0x0) 18:28:16 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x8}, 0x10) 18:28:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x24, &(0x7f0000000000), 0x4) 18:28:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_PHYS_SWITCH_ID={0x4}, @IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ip_vti0\x00'}]}, 0x48}}, 0x0) 18:28:16 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) inotify_rm_watch(r0, 0x0) 18:28:17 executing program 3: syz_open_dev$MSR(&(0x7f0000000100), 0x5, 0x0) 18:28:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0xc7f, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 18:28:17 executing program 0: bpf$MAP_CREATE(0x8, &(0x7f00000000c0), 0x48) 18:28:17 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x7, 0x5, 0x9, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4, 0x0, 0x0, 0x7}]}, 0x30}}, 0x0) 18:28:17 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) 18:28:17 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000000c0)={0x4c, 0x13, 0xc11}, 0x4c}}, 0x0) 18:28:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0x905, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000c00)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 18:28:17 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xd0}, 0x8}, 0x0) 18:28:17 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "b89dd1b80296e43766e6d6ff7fed7cc2df7b624d8481346267d8478ff016ce6791fd0f589495ef6b52f9113a844c0fe406f443b24a6b2e4faf2bdb25f6761dca"}, 0x48, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, r0) 18:28:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000000)) 18:28:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x8}, 0x48) 18:28:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000040)=[{r1}, {0xffffffffffffffff, 0x9480}, {r0}, {r1}, {r1, 0x208}], 0x5, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000180)={[0x7f]}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 18:28:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0xc, &(0x7f0000000000)=0xf11aa6250453444c, 0x4) 18:28:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7}]}, 0x28}}, 0x0) 18:28:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x22, &(0x7f0000000000), 0x4) 18:28:19 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) stat(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@private2, 0x31}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r3}, 0xfffffffffffffc6a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmmsg$unix(r1, 0x0, 0x0, 0x8817) creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000011, 0xff970005, 0x2811fdff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRESDEC=r2]) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) ftruncate(0xffffffffffffffff, 0x8) 18:28:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd0}}, 0x24008815) 18:28:19 executing program 3: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_gettime(0x0, &(0x7f0000000140)) 18:28:20 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2141, 0x0) 18:28:20 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f0000000580)={&(0x7f0000000000), 0x10, &(0x7f0000000500)=[{&(0x7f0000000680)="7df616da405c3c076017b4c509aebd272edc49b71f2d3f0deb18939f8319f7ef9771fe2ac86a8600232fa96a49cc12d0bdf43d633be7bc134ac1314c60a0f7bfa013e967ceefe50dbb9cddb769cacf95b2736fdbac39be20f8734bc79c0d5d0861f5ec8dac7c3164289849f4a365e3c2e8d2fd4aeba842b9fd3fc2eae6a0d4923da623a77b3807605d4fafa79339b7b0db43c51f1c39fa00f59173df3ac8ee878e7819a9190c4d098017bb55c30177a0219df82e88bf60bd3790d1be9f4ad11313f8", 0xc2}, {&(0x7f00000005c0)="d0bfd88762ff90275f76351fd062f1f15e558ac6f1581f9181d41e317706be2f44e18e6f9d3a9563419cdee91a485d7e1a528ea6862b8a626da654d25259f746b5971a757b4af78b06efbbebaca8cfad37024b3d8d04a42dd9d2944c4cc340c3a00a595f051f6b7fd4d05d985b3fc19a05f9b4c4ab23ec47587c9572be1334a525814fd33c58756b55b993ec479c91c862c363737b96251a21222950a4536bb13e4da049747abf784ece411f6033e8abd612fe7849e52d2d0000", 0xba}, {&(0x7f0000000280)="c4fc7e0abe401d211fe29e7e062717e8c61b629a4e958d9477aff4ebb2ca470d202919574be606ff997568cb1ce6e6d4b545e41792c9a87c26754ba06c533e07862a35bfaa526b438f8edf7c0351672aa7cb8bc243a0ef98198c3294195d922c37709a6767b92ff5c45a5415e9549ad831d7274f873364ab7853545b3513c99d3a9d00eeadec2ae2028f06", 0x8b}, {&(0x7f0000000340)="10b6127c057087367c57d6486ae367426836654824b7b1e5206ac47c4fc68d3f379ea9ab6076fadd6562cc41074d83f297178f75cbf90c19fb58fe26f2d7dbfabe2410ed889d53f4da21ac134a7028f1663222a5ce65ca89bfd244b8d6ecfe1c13732f021cf092d650785c2786d62cee663e2a18378a0221dcee046a247b2841183149ec2a5a54755f4a612dceb711a5aa31dfb5b3d399785df71b77d223951d14131ff1e60e94af22eebcacc02afd684786cc74e6f800f99798623331e87d23bc08d71cdda82e86fea502b08652c7caee7488b02c81afd04d6bc97db5cbde0d01f80ff9586d64b1a4d7387d5893d8", 0xef}, {&(0x7f0000000140)="adc414ce732eaf9cb2d8b0a40bdda70255ea7843b3cc0963dc02849773ec29d8a49a0b7e8a304f88a5dfc8819fbd056aad0569c1afdf6ddfca81", 0x3a}, {&(0x7f0000000440)="4cdf8170bcbf5860c1723622a5c96a4d131af68ec4959c5bfd0a5aad89ece430fa8b40f82f1effa312241f023a83e8aa9d55a8ce018fe9ae2708d924d35f5d18897f811984d46e4a8a1c0510779c012124716c2de503e332d2cf14f150a7b280cc6ff204de38771d9438ff55bb8cd3d77d247f013d4d0f135a1363f1d03c7e4682646d8fb463a522c954476f0b80fc8272d49c405f612d", 0x97}], 0x59, 0x0, 0x0, 0x4044000}, 0xc0) 18:28:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000080)) 18:28:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0xffff, &(0x7f0000000000)=0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) [ 599.638517][T13157] fuse: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ18446744073709551615' [ 599.675691][T13097] not chained 300000 origins [ 599.680472][T13097] CPU: 0 PID: 13097 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 599.691046][T13097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 599.701221][T13097] Call Trace: [ 599.704579][T13097] [ 599.707583][T13097] dump_stack_lvl+0x1c8/0x256 [ 599.712444][T13097] dump_stack+0x1a/0x1c [ 599.716746][T13097] kmsan_internal_chain_origin+0x78/0x120 [ 599.722619][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 599.728596][T13097] ? kfree+0x44/0x980 [ 599.732701][T13097] ? filter_irq_stacks+0x5c/0x1a0 [ 599.737870][T13097] ? do_recvmmsg+0x55a/0x1180 [ 599.742679][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 599.748654][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 599.754622][T13097] ? should_fail+0x3f/0x810 [ 599.759285][T13097] ? __stack_depot_save+0x21/0x4b0 [ 599.764565][T13097] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 599.770968][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 599.776937][T13097] __msan_chain_origin+0xbd/0x140 [ 599.782119][T13097] ___sys_recvmsg+0x52e/0x840 [ 599.786944][T13097] ? kmsan_internal_check_memory+0x94/0x530 [ 599.792999][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 599.798967][T13097] do_recvmmsg+0x55a/0x1180 [ 599.803620][T13097] ? do_syscall_64+0x3d/0xb0 [ 599.808325][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 599.813485][T13097] do_syscall_64+0x3d/0xb0 [ 599.818004][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 599.824040][T13097] RIP: 0033:0x7f7deda89279 [ 599.828541][T13097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 599.848371][T13097] RSP: 002b:00007f7deeb8f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 599.856901][T13097] RAX: ffffffffffffffda RBX: 00007f7dedb9c120 RCX: 00007f7deda89279 [ 599.864969][T13097] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 599.873029][T13097] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 599.881094][T13097] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 599.889151][T13097] R13: 00007f7dee0cfb1f R14: 00007f7deeb8f300 R15: 0000000000022000 [ 599.897235][T13097] [ 599.902332][T13097] Uninit was stored to memory at: [ 599.907551][T13097] ___sys_recvmsg+0x52e/0x840 [ 599.912440][T13097] do_recvmmsg+0x55a/0x1180 [ 599.917066][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 599.922292][T13097] do_syscall_64+0x3d/0xb0 [ 599.926827][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 599.932955][T13097] 18:28:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x7, 0x0, 0x9, 0xa, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x7, 0x3, 0x0, 0x9, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1}}]}, 0x50}}, 0x0) [ 599.935337][T13097] Uninit was stored to memory at: [ 599.940558][T13097] ___sys_recvmsg+0x52e/0x840 [ 599.945437][T13097] do_recvmmsg+0x55a/0x1180 [ 599.950059][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 599.955292][T13097] do_syscall_64+0x3d/0xb0 [ 599.959824][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 599.965947][T13097] [ 599.968420][T13097] Uninit was stored to memory at: [ 599.973700][T13097] ___sys_recvmsg+0x52e/0x840 [ 599.978490][T13097] do_recvmmsg+0x55a/0x1180 [ 599.983178][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 599.988335][T13097] do_syscall_64+0x3d/0xb0 [ 599.992949][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 599.999013][T13097] [ 600.001406][T13097] Uninit was stored to memory at: [ 600.006659][T13097] ___sys_recvmsg+0x52e/0x840 [ 600.011451][T13097] do_recvmmsg+0x55a/0x1180 [ 600.016144][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 600.021293][T13097] do_syscall_64+0x3d/0xb0 [ 600.025886][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 600.032002][T13097] [ 600.034388][T13097] Uninit was stored to memory at: [ 600.039575][T13097] ___sys_recvmsg+0x52e/0x840 [ 600.044492][T13097] do_recvmmsg+0x55a/0x1180 [ 600.049118][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 600.054392][T13097] do_syscall_64+0x3d/0xb0 [ 600.058927][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 600.065096][T13097] [ 600.067501][T13097] Uninit was stored to memory at: [ 600.072803][T13097] ___sys_recvmsg+0x52e/0x840 [ 600.077597][T13097] do_recvmmsg+0x55a/0x1180 [ 600.082372][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 600.087526][T13097] do_syscall_64+0x3d/0xb0 [ 600.092187][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 600.098253][T13097] [ 600.100653][T13097] Uninit was stored to memory at: [ 600.105974][T13097] ___sys_recvmsg+0x52e/0x840 [ 600.110840][T13097] do_recvmmsg+0x55a/0x1180 [ 600.115541][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 600.120688][T13097] do_syscall_64+0x3d/0xb0 [ 600.125307][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 600.131363][T13097] [ 600.133850][T13097] Local variable msg_sys created at: [ 600.139206][T13097] do_recvmmsg+0x5c/0x1180 [ 600.143859][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 600.595822][T13097] not chained 310000 origins [ 600.600546][T13097] CPU: 0 PID: 13097 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 600.611100][T13097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 600.621267][T13097] Call Trace: [ 600.624621][T13097] [ 600.627629][T13097] dump_stack_lvl+0x1c8/0x256 [ 600.632489][T13097] dump_stack+0x1a/0x1c [ 600.636797][T13097] kmsan_internal_chain_origin+0x78/0x120 [ 600.642672][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 600.648641][T13097] ? kfree+0x44/0x980 [ 600.652744][T13097] ? filter_irq_stacks+0x5c/0x1a0 [ 600.657909][T13097] ? do_recvmmsg+0x55a/0x1180 [ 600.662716][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 600.668699][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 600.674675][T13097] ? should_fail+0x3f/0x810 [ 600.679333][T13097] ? __stack_depot_save+0x21/0x4b0 [ 600.684601][T13097] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 600.691010][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 600.696980][T13097] __msan_chain_origin+0xbd/0x140 [ 600.702154][T13097] ___sys_recvmsg+0x52e/0x840 [ 600.706977][T13097] ? kmsan_internal_check_memory+0x94/0x530 [ 600.713041][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 600.719014][T13097] do_recvmmsg+0x55a/0x1180 [ 600.723684][T13097] ? do_syscall_64+0x3d/0xb0 [ 600.728409][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 600.733574][T13097] do_syscall_64+0x3d/0xb0 [ 600.738109][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 600.744160][T13097] RIP: 0033:0x7f7deda89279 [ 600.748674][T13097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 600.768447][T13097] RSP: 002b:00007f7deeb8f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 600.777005][T13097] RAX: ffffffffffffffda RBX: 00007f7dedb9c120 RCX: 00007f7deda89279 [ 600.785098][T13097] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 600.793187][T13097] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 600.801268][T13097] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 600.809353][T13097] R13: 00007f7dee0cfb1f R14: 00007f7deeb8f300 R15: 0000000000022000 [ 600.817463][T13097] [ 600.821061][T13097] Uninit was stored to memory at: [ 600.826365][T13097] ___sys_recvmsg+0x52e/0x840 [ 600.831163][T13097] do_recvmmsg+0x55a/0x1180 [ 600.835863][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 600.841011][T13097] do_syscall_64+0x3d/0xb0 [ 600.845738][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 600.851872][T13097] [ 600.854276][T13097] Uninit was stored to memory at: [ 600.859470][T13097] ___sys_recvmsg+0x52e/0x840 [ 600.864341][T13097] do_recvmmsg+0x55a/0x1180 [ 600.868952][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 600.874195][T13097] do_syscall_64+0x3d/0xb0 [ 600.878729][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 600.884902][T13097] [ 600.887289][T13097] Uninit was stored to memory at: [ 600.892587][T13097] ___sys_recvmsg+0x52e/0x840 [ 600.897379][T13097] do_recvmmsg+0x55a/0x1180 [ 600.902199][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 600.909083][T13097] do_syscall_64+0x3d/0xb0 [ 600.913754][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 600.919830][T13097] [ 600.922328][T13097] Uninit was stored to memory at: [ 600.927516][T13097] ___sys_recvmsg+0x52e/0x840 [ 600.932412][T13097] do_recvmmsg+0x55a/0x1180 [ 600.941035][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 600.946334][T13097] do_syscall_64+0x3d/0xb0 [ 600.950874][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 600.957059][T13097] [ 600.959453][T13097] Uninit was stored to memory at: [ 600.964755][T13097] ___sys_recvmsg+0x52e/0x840 [ 600.969559][T13097] do_recvmmsg+0x55a/0x1180 [ 600.974307][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 600.979464][T13097] do_syscall_64+0x3d/0xb0 [ 600.984174][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 600.990233][T13097] [ 600.992740][T13097] Uninit was stored to memory at: [ 600.997929][T13097] ___sys_recvmsg+0x52e/0x840 [ 601.002792][T13097] do_recvmmsg+0x55a/0x1180 [ 601.007419][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 601.012705][T13097] do_syscall_64+0x3d/0xb0 [ 601.017245][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 601.023413][T13097] [ 601.025807][T13097] Uninit was stored to memory at: [ 601.030989][T13097] ___sys_recvmsg+0x52e/0x840 [ 601.035916][T13097] do_recvmmsg+0x55a/0x1180 [ 601.040536][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 601.045810][T13097] do_syscall_64+0x3d/0xb0 [ 601.050353][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 601.056538][T13097] [ 601.058925][T13097] Local variable msg_sys created at: [ 601.064412][T13097] do_recvmmsg+0x5c/0x1180 [ 601.068959][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 601.257593][T13155] not chained 320000 origins [ 601.262583][T13155] CPU: 1 PID: 13155 Comm: syz-executor.4 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 601.273143][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 601.283317][T13155] Call Trace: [ 601.286684][T13155] [ 601.289708][T13155] dump_stack_lvl+0x1c8/0x256 [ 601.294645][T13155] dump_stack+0x1a/0x1c [ 601.298957][T13155] kmsan_internal_chain_origin+0x78/0x120 [ 601.304837][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 601.310807][T13155] ? kfree+0x44/0x980 [ 601.314913][T13155] ? filter_irq_stacks+0x5c/0x1a0 [ 601.320075][T13155] ? do_recvmmsg+0x55a/0x1180 [ 601.324879][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 601.330855][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 601.336827][T13155] ? should_fail+0x3f/0x810 [ 601.341488][T13155] ? __stack_depot_save+0x21/0x4b0 [ 601.346762][T13155] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 601.353179][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 601.359152][T13155] __msan_chain_origin+0xbd/0x140 [ 601.364339][T13155] ___sys_recvmsg+0x52e/0x840 [ 601.369175][T13155] ? kmsan_internal_check_memory+0x94/0x530 [ 601.375262][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 601.381244][T13155] do_recvmmsg+0x55a/0x1180 [ 601.385912][T13155] ? do_syscall_64+0x3d/0xb0 [ 601.390635][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 601.395817][T13155] do_syscall_64+0x3d/0xb0 [ 601.400365][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 601.406436][T13155] RIP: 0033:0x7f732f089279 [ 601.410958][T13155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 601.430728][T13155] RSP: 002b:00007f7330246168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 601.439298][T13155] RAX: ffffffffffffffda RBX: 00007f732f19c050 RCX: 00007f732f089279 [ 601.447411][T13155] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 601.455514][T13155] RBP: 00007f732f0e3189 R08: 0000000000000000 R09: 0000000000000000 [ 601.463603][T13155] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 601.471691][T13155] R13: 00007f732f6cfb1f R14: 00007f7330246300 R15: 0000000000022000 [ 601.479799][T13155] [ 601.485626][T13155] Uninit was stored to memory at: [ 601.490839][T13155] ___sys_recvmsg+0x52e/0x840 [ 601.495746][T13155] do_recvmmsg+0x55a/0x1180 [ 601.500379][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 601.505643][T13155] do_syscall_64+0x3d/0xb0 [ 601.510183][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 601.516401][T13155] [ 601.518794][T13155] Uninit was stored to memory at: [ 601.524142][T13155] ___sys_recvmsg+0x52e/0x840 [ 601.528941][T13155] do_recvmmsg+0x55a/0x1180 [ 601.533731][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 601.538888][T13155] do_syscall_64+0x3d/0xb0 [ 601.543586][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 601.549642][T13155] [ 601.552159][T13155] Uninit was stored to memory at: [ 601.557356][T13155] ___sys_recvmsg+0x52e/0x840 [ 601.562322][T13155] do_recvmmsg+0x55a/0x1180 [ 601.566950][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 601.572252][T13155] do_syscall_64+0x3d/0xb0 [ 601.576792][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 601.582998][T13155] [ 601.585388][T13155] Uninit was stored to memory at: [ 601.590576][T13155] ___sys_recvmsg+0x52e/0x840 [ 601.595534][T13155] do_recvmmsg+0x55a/0x1180 [ 601.600159][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 601.605466][T13155] do_syscall_64+0x3d/0xb0 [ 601.610006][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 601.616215][T13155] [ 601.618608][T13155] Uninit was stored to memory at: [ 601.623948][T13155] ___sys_recvmsg+0x52e/0x840 [ 601.628754][T13155] do_recvmmsg+0x55a/0x1180 [ 601.633577][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 601.638732][T13155] do_syscall_64+0x3d/0xb0 [ 601.643440][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 601.649508][T13155] [ 601.651977][T13155] Uninit was stored to memory at: [ 601.657163][T13155] ___sys_recvmsg+0x52e/0x840 [ 601.662060][T13155] do_recvmmsg+0x55a/0x1180 [ 601.666681][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 601.671926][T13155] do_syscall_64+0x3d/0xb0 [ 601.676459][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 601.682621][T13155] [ 601.685000][T13155] Uninit was stored to memory at: [ 601.690181][T13155] ___sys_recvmsg+0x52e/0x840 [ 601.695087][T13155] do_recvmmsg+0x55a/0x1180 [ 601.699709][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 601.704980][T13155] do_syscall_64+0x3d/0xb0 [ 601.709520][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 601.715721][T13155] [ 601.718108][T13155] Local variable msg_sys created at: [ 601.723565][T13155] do_recvmmsg+0x5c/0x1180 [ 601.728104][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 601.792097][T13155] not chained 330000 origins [ 601.796816][T13155] CPU: 1 PID: 13155 Comm: syz-executor.4 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 601.807372][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 601.817533][T13155] Call Trace: [ 601.820891][T13155] [ 601.823901][T13155] dump_stack_lvl+0x1c8/0x256 [ 601.828755][T13155] dump_stack+0x1a/0x1c [ 601.833067][T13155] kmsan_internal_chain_origin+0x78/0x120 [ 601.838944][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 601.844916][T13155] ? kfree+0x44/0x980 [ 601.849109][T13155] ? filter_irq_stacks+0x5c/0x1a0 [ 601.854272][T13155] ? do_recvmmsg+0x55a/0x1180 [ 601.859080][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 601.865049][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 601.871021][T13155] ? should_fail+0x3f/0x810 [ 601.875681][T13155] ? __stack_depot_save+0x21/0x4b0 [ 601.880948][T13155] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 601.887375][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 601.893359][T13155] __msan_chain_origin+0xbd/0x140 [ 601.898549][T13155] ___sys_recvmsg+0x52e/0x840 [ 601.903382][T13155] ? kmsan_internal_check_memory+0x94/0x530 [ 601.909442][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 601.915417][T13155] do_recvmmsg+0x55a/0x1180 [ 601.920085][T13155] ? do_syscall_64+0x3d/0xb0 [ 601.924807][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 601.929989][T13155] do_syscall_64+0x3d/0xb0 [ 601.934533][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 601.940590][T13155] RIP: 0033:0x7f732f089279 [ 601.945108][T13155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 601.964885][T13155] RSP: 002b:00007f7330246168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 601.973448][T13155] RAX: ffffffffffffffda RBX: 00007f732f19c050 RCX: 00007f732f089279 [ 601.981551][T13155] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 601.989641][T13155] RBP: 00007f732f0e3189 R08: 0000000000000000 R09: 0000000000000000 [ 601.997730][T13155] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 602.005813][T13155] R13: 00007f732f6cfb1f R14: 00007f7330246300 R15: 0000000000022000 [ 602.013933][T13155] [ 602.017775][T13155] Uninit was stored to memory at: [ 602.023073][T13155] ___sys_recvmsg+0x52e/0x840 [ 602.027874][T13155] do_recvmmsg+0x55a/0x1180 [ 602.032649][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 602.037796][T13155] do_syscall_64+0x3d/0xb0 [ 602.042477][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 602.048537][T13155] [ 602.050923][T13155] Uninit was stored to memory at: [ 602.056258][T13155] ___sys_recvmsg+0x52e/0x840 [ 602.061060][T13155] do_recvmmsg+0x55a/0x1180 [ 602.065786][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 602.070936][T13155] do_syscall_64+0x3d/0xb0 [ 602.075594][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 602.081661][T13155] [ 602.084191][T13155] Uninit was stored to memory at: [ 602.089411][T13155] ___sys_recvmsg+0x52e/0x840 [ 602.094337][T13155] do_recvmmsg+0x55a/0x1180 [ 602.098958][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 602.104252][T13155] do_syscall_64+0x3d/0xb0 [ 602.108785][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 602.114961][T13155] [ 602.117348][T13155] Uninit was stored to memory at: [ 602.122670][T13155] ___sys_recvmsg+0x52e/0x840 [ 602.127459][T13155] do_recvmmsg+0x55a/0x1180 [ 602.132199][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 602.137348][T13155] do_syscall_64+0x3d/0xb0 [ 602.141971][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 602.148023][T13155] [ 602.150407][T13155] Uninit was stored to memory at: [ 602.155709][T13155] ___sys_recvmsg+0x52e/0x840 [ 602.160503][T13155] do_recvmmsg+0x55a/0x1180 [ 602.165308][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 602.170463][T13155] do_syscall_64+0x3d/0xb0 [ 602.175179][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 602.181242][T13155] [ 602.183813][T13155] Uninit was stored to memory at: [ 602.189016][T13155] ___sys_recvmsg+0x52e/0x840 [ 602.194016][T13155] do_recvmmsg+0x55a/0x1180 [ 602.198640][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 602.203947][T13155] do_syscall_64+0x3d/0xb0 [ 602.208488][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 602.214714][T13155] [ 602.217104][T13155] Uninit was stored to memory at: [ 602.222483][T13155] ___sys_recvmsg+0x52e/0x840 [ 602.227279][T13155] do_recvmmsg+0x55a/0x1180 [ 602.232051][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 602.237201][T13155] do_syscall_64+0x3d/0xb0 [ 602.241726][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 602.248032][T13155] [ 602.250423][T13155] Local variable msg_sys created at: [ 602.255970][T13155] do_recvmmsg+0x5c/0x1180 [ 602.260511][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 602.441558][T13097] not chained 340000 origins [ 602.446993][T13097] CPU: 0 PID: 13097 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 602.457552][T13097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 602.467809][T13097] Call Trace: [ 602.471163][T13097] [ 602.474170][T13097] dump_stack_lvl+0x1c8/0x256 [ 602.479025][T13097] dump_stack+0x1a/0x1c [ 602.483346][T13097] kmsan_internal_chain_origin+0x78/0x120 [ 602.489226][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 602.495230][T13097] ? kfree+0x44/0x980 [ 602.499338][T13097] ? filter_irq_stacks+0x5c/0x1a0 [ 602.504500][T13097] ? do_recvmmsg+0x55a/0x1180 [ 602.509310][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 602.515288][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 602.521266][T13097] ? should_fail+0x3f/0x810 [ 602.525935][T13097] ? __stack_depot_save+0x21/0x4b0 [ 602.531203][T13097] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 602.537616][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 602.543586][T13097] __msan_chain_origin+0xbd/0x140 [ 602.548765][T13097] ___sys_recvmsg+0x52e/0x840 [ 602.553589][T13097] ? kmsan_internal_check_memory+0x94/0x530 [ 602.559642][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 602.565615][T13097] do_recvmmsg+0x55a/0x1180 [ 602.570279][T13097] ? do_syscall_64+0x3d/0xb0 [ 602.575007][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 602.580187][T13097] do_syscall_64+0x3d/0xb0 [ 602.584732][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 602.590788][T13097] RIP: 0033:0x7f7deda89279 [ 602.595296][T13097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 602.615061][T13097] RSP: 002b:00007f7deeb8f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 602.623621][T13097] RAX: ffffffffffffffda RBX: 00007f7dedb9c120 RCX: 00007f7deda89279 [ 602.631720][T13097] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 602.639803][T13097] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 602.647894][T13097] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 602.655976][T13097] R13: 00007f7dee0cfb1f R14: 00007f7deeb8f300 R15: 0000000000022000 [ 602.664090][T13097] [ 602.669349][T13097] Uninit was stored to memory at: [ 602.674645][T13097] ___sys_recvmsg+0x52e/0x840 [ 602.679444][T13097] do_recvmmsg+0x55a/0x1180 [ 602.684156][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 602.689330][T13097] do_syscall_64+0x3d/0xb0 [ 602.693943][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 602.699999][T13097] [ 602.702474][T13097] Uninit was stored to memory at: [ 602.707657][T13097] ___sys_recvmsg+0x52e/0x840 [ 602.712516][T13097] do_recvmmsg+0x55a/0x1180 [ 602.717128][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 602.722331][T13097] do_syscall_64+0x3d/0xb0 [ 602.726865][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 602.732996][T13097] [ 602.735387][T13097] Uninit was stored to memory at: [ 602.740569][T13097] ___sys_recvmsg+0x52e/0x840 [ 602.745439][T13097] do_recvmmsg+0x55a/0x1180 [ 602.750052][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 602.755278][T13097] do_syscall_64+0x3d/0xb0 [ 602.759813][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 602.765950][T13097] [ 602.768336][T13097] Uninit was stored to memory at: [ 602.773606][T13097] ___sys_recvmsg+0x52e/0x840 [ 602.778406][T13097] do_recvmmsg+0x55a/0x1180 [ 602.783116][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 602.788269][T13097] do_syscall_64+0x3d/0xb0 [ 602.792893][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 602.798947][T13097] [ 602.801333][T13097] Uninit was stored to memory at: [ 602.806613][T13097] ___sys_recvmsg+0x52e/0x840 [ 602.811413][T13097] do_recvmmsg+0x55a/0x1180 [ 602.816115][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 602.821271][T13097] do_syscall_64+0x3d/0xb0 [ 602.825887][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 602.832007][T13097] [ 602.834402][T13097] Uninit was stored to memory at: [ 602.839588][T13097] ___sys_recvmsg+0x52e/0x840 [ 602.844482][T13097] do_recvmmsg+0x55a/0x1180 [ 602.849115][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 602.854478][T13097] do_syscall_64+0x3d/0xb0 [ 602.859036][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 602.865207][T13097] [ 602.867610][T13097] Uninit was stored to memory at: [ 602.872902][T13097] ___sys_recvmsg+0x52e/0x840 [ 602.877727][T13097] do_recvmmsg+0x55a/0x1180 [ 602.882535][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 602.887709][T13097] do_syscall_64+0x3d/0xb0 [ 602.892340][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 602.898401][T13097] [ 602.900799][T13097] Local variable msg_sys created at: [ 602.906348][T13097] do_recvmmsg+0x5c/0x1180 [ 602.910894][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 603.306855][T13097] not chained 350000 origins [ 603.311564][T13097] CPU: 0 PID: 13097 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 603.322114][T13097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 603.332274][T13097] Call Trace: [ 603.335624][T13097] [ 603.338622][T13097] dump_stack_lvl+0x1c8/0x256 [ 603.343465][T13097] dump_stack+0x1a/0x1c [ 603.347753][T13097] kmsan_internal_chain_origin+0x78/0x120 [ 603.353647][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 603.359650][T13097] ? kfree+0x44/0x980 [ 603.363758][T13097] ? filter_irq_stacks+0x5c/0x1a0 [ 603.368933][T13097] ? do_recvmmsg+0x55a/0x1180 [ 603.373731][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 603.379703][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 603.385668][T13097] ? should_fail+0x3f/0x810 [ 603.390317][T13097] ? __stack_depot_save+0x21/0x4b0 [ 603.395576][T13097] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 603.401969][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 603.407931][T13097] __msan_chain_origin+0xbd/0x140 [ 603.413098][T13097] ___sys_recvmsg+0x52e/0x840 [ 603.417916][T13097] ? kmsan_internal_check_memory+0x94/0x530 [ 603.423962][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 603.429919][T13097] do_recvmmsg+0x55a/0x1180 [ 603.434571][T13097] ? do_syscall_64+0x3d/0xb0 [ 603.439279][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 603.444440][T13097] do_syscall_64+0x3d/0xb0 [ 603.448967][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 603.455017][T13097] RIP: 0033:0x7f7deda89279 [ 603.459536][T13097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 603.479293][T13097] RSP: 002b:00007f7deeb8f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 603.487838][T13097] RAX: ffffffffffffffda RBX: 00007f7dedb9c120 RCX: 00007f7deda89279 [ 603.495920][T13097] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 603.503994][T13097] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 603.512100][T13097] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 603.520163][T13097] R13: 00007f7dee0cfb1f R14: 00007f7deeb8f300 R15: 0000000000022000 [ 603.528268][T13097] [ 603.532434][T13097] Uninit was stored to memory at: [ 603.537634][T13097] ___sys_recvmsg+0x52e/0x840 [ 603.542510][T13097] do_recvmmsg+0x55a/0x1180 [ 603.547137][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 603.552365][T13097] do_syscall_64+0x3d/0xb0 [ 603.556900][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 603.563033][T13097] [ 603.565415][T13097] Uninit was stored to memory at: [ 603.570591][T13097] ___sys_recvmsg+0x52e/0x840 [ 603.575454][T13097] do_recvmmsg+0x55a/0x1180 [ 603.580066][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 603.585277][T13097] do_syscall_64+0x3d/0xb0 [ 603.589808][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 603.595925][T13097] [ 603.598307][T13097] Uninit was stored to memory at: [ 603.603550][T13097] ___sys_recvmsg+0x52e/0x840 [ 603.608339][T13097] do_recvmmsg+0x55a/0x1180 [ 603.613034][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 603.618203][T13097] do_syscall_64+0x3d/0xb0 [ 603.622823][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 603.628876][T13097] [ 603.631262][T13097] Uninit was stored to memory at: [ 603.636545][T13097] ___sys_recvmsg+0x52e/0x840 [ 603.641338][T13097] do_recvmmsg+0x55a/0x1180 [ 603.646042][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 603.651194][T13097] do_syscall_64+0x3d/0xb0 [ 603.655822][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 603.661951][T13097] [ 603.664334][T13097] Uninit was stored to memory at: [ 603.669519][T13097] ___sys_recvmsg+0x52e/0x840 [ 603.674392][T13097] do_recvmmsg+0x55a/0x1180 [ 603.679014][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 603.684232][T13097] do_syscall_64+0x3d/0xb0 [ 603.688757][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 603.694894][T13097] [ 603.697279][T13097] Uninit was stored to memory at: [ 603.702545][T13097] ___sys_recvmsg+0x52e/0x840 [ 603.707344][T13097] do_recvmmsg+0x55a/0x1180 [ 603.712046][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 603.717192][T13097] do_syscall_64+0x3d/0xb0 [ 603.721722][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 603.727858][T13097] [ 603.730241][T13097] Uninit was stored to memory at: [ 603.735520][T13097] ___sys_recvmsg+0x52e/0x840 [ 603.740314][T13097] do_recvmmsg+0x55a/0x1180 [ 603.745020][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 603.750166][T13097] do_syscall_64+0x3d/0xb0 [ 603.754776][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 603.760839][T13097] [ 603.763307][T13097] Local variable msg_sys created at: [ 603.768660][T13097] do_recvmmsg+0x5c/0x1180 [ 603.773268][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 604.459695][T13155] not chained 360000 origins [ 604.465258][T13155] CPU: 1 PID: 13155 Comm: syz-executor.4 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 604.475812][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 604.485983][T13155] Call Trace: [ 604.489342][T13155] [ 604.492347][T13155] dump_stack_lvl+0x1c8/0x256 [ 604.497184][T13155] dump_stack+0x1a/0x1c [ 604.501475][T13155] kmsan_internal_chain_origin+0x78/0x120 [ 604.507344][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 604.513295][T13155] ? kfree+0x44/0x980 [ 604.517391][T13155] ? filter_irq_stacks+0x5c/0x1a0 [ 604.522540][T13155] ? do_recvmmsg+0x55a/0x1180 [ 604.527336][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 604.533388][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 604.539357][T13155] ? should_fail+0x3f/0x810 [ 604.544003][T13155] ? __stack_depot_save+0x21/0x4b0 [ 604.549254][T13155] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 604.555669][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 604.561620][T13155] __msan_chain_origin+0xbd/0x140 [ 604.566781][T13155] ___sys_recvmsg+0x52e/0x840 [ 604.571597][T13155] ? kmsan_internal_check_memory+0x94/0x530 [ 604.577645][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 604.583609][T13155] do_recvmmsg+0x55a/0x1180 [ 604.588266][T13155] ? do_syscall_64+0x3d/0xb0 [ 604.592978][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 604.598139][T13155] do_syscall_64+0x3d/0xb0 [ 604.602672][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 604.608716][T13155] RIP: 0033:0x7f732f089279 [ 604.613223][T13155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 604.632990][T13155] RSP: 002b:00007f7330246168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 604.641535][T13155] RAX: ffffffffffffffda RBX: 00007f732f19c050 RCX: 00007f732f089279 [ 604.649623][T13155] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 604.657779][T13155] RBP: 00007f732f0e3189 R08: 0000000000000000 R09: 0000000000000000 [ 604.665844][T13155] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 604.673910][T13155] R13: 00007f732f6cfb1f R14: 00007f7330246300 R15: 0000000000022000 [ 604.682012][T13155] [ 604.685279][T13155] Uninit was stored to memory at: [ 604.690477][T13155] ___sys_recvmsg+0x52e/0x840 [ 604.695381][T13155] do_recvmmsg+0x55a/0x1180 [ 604.699996][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 604.705248][T13155] do_syscall_64+0x3d/0xb0 [ 604.709827][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 604.716013][T13155] [ 604.718393][T13155] Uninit was stored to memory at: [ 604.723671][T13155] ___sys_recvmsg+0x52e/0x840 [ 604.728460][T13155] do_recvmmsg+0x55a/0x1180 [ 604.733222][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 604.738376][T13155] do_syscall_64+0x3d/0xb0 [ 604.743007][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 604.749050][T13155] [ 604.751428][T13155] Uninit was stored to memory at: [ 604.756707][T13155] ___sys_recvmsg+0x52e/0x840 [ 604.761487][T13155] do_recvmmsg+0x55a/0x1180 [ 604.766190][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 604.771332][T13155] do_syscall_64+0x3d/0xb0 [ 604.775978][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 604.782117][T13155] [ 604.784498][T13155] Uninit was stored to memory at: [ 604.789693][T13155] ___sys_recvmsg+0x52e/0x840 [ 604.794593][T13155] do_recvmmsg+0x55a/0x1180 [ 604.799212][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 604.804453][T13155] do_syscall_64+0x3d/0xb0 [ 604.808981][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 604.815137][T13155] [ 604.817517][T13155] Uninit was stored to memory at: [ 604.822799][T13155] ___sys_recvmsg+0x52e/0x840 [ 604.827592][T13155] do_recvmmsg+0x55a/0x1180 [ 604.832302][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 604.837473][T13155] do_syscall_64+0x3d/0xb0 [ 604.842126][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 604.848203][T13155] [ 604.850629][T13155] Uninit was stored to memory at: [ 604.855995][T13155] ___sys_recvmsg+0x52e/0x840 [ 604.860790][T13155] do_recvmmsg+0x55a/0x1180 [ 604.865521][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 604.870684][T13155] do_syscall_64+0x3d/0xb0 [ 604.875332][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 604.881387][T13155] [ 604.883878][T13155] Uninit was stored to memory at: [ 604.889061][T13155] ___sys_recvmsg+0x52e/0x840 [ 604.893951][T13155] do_recvmmsg+0x55a/0x1180 [ 604.898569][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 604.903820][T13155] do_syscall_64+0x3d/0xb0 [ 604.908358][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 604.914519][T13155] [ 604.916907][T13155] Local variable msg_sys created at: [ 604.922375][T13155] do_recvmmsg+0x5c/0x1180 [ 604.926916][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 605.138779][T13155] not chained 370000 origins [ 605.144208][T13155] CPU: 1 PID: 13155 Comm: syz-executor.4 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 605.154764][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 605.164928][T13155] Call Trace: [ 605.168283][T13155] [ 605.171727][T13155] dump_stack_lvl+0x1c8/0x256 [ 605.176564][T13155] dump_stack+0x1a/0x1c [ 605.180858][T13155] kmsan_internal_chain_origin+0x78/0x120 [ 605.186729][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 605.192691][T13155] ? kfree+0x44/0x980 [ 605.196787][T13155] ? filter_irq_stacks+0x5c/0x1a0 [ 605.201931][T13155] ? do_recvmmsg+0x55a/0x1180 [ 605.206715][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 605.212665][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 605.218614][T13155] ? should_fail+0x3f/0x810 [ 605.223253][T13155] ? __stack_depot_save+0x21/0x4b0 [ 605.228505][T13155] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 605.234888][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 605.240832][T13155] __msan_chain_origin+0xbd/0x140 [ 605.245981][T13155] ___sys_recvmsg+0x52e/0x840 [ 605.250784][T13155] ? kmsan_internal_check_memory+0x94/0x530 [ 605.256815][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 605.262763][T13155] do_recvmmsg+0x55a/0x1180 [ 605.267404][T13155] ? do_syscall_64+0x3d/0xb0 [ 605.272542][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 605.277703][T13155] do_syscall_64+0x3d/0xb0 [ 605.282221][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 605.288258][T13155] RIP: 0033:0x7f732f089279 [ 605.292760][T13155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 605.312499][T13155] RSP: 002b:00007f7330246168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 605.321029][T13155] RAX: ffffffffffffffda RBX: 00007f732f19c050 RCX: 00007f732f089279 [ 605.329102][T13155] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 605.337169][T13155] RBP: 00007f732f0e3189 R08: 0000000000000000 R09: 0000000000000000 [ 605.345227][T13155] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 605.353306][T13155] R13: 00007f732f6cfb1f R14: 00007f7330246300 R15: 0000000000022000 [ 605.361418][T13155] [ 605.366167][T13155] Uninit was stored to memory at: [ 605.371412][T13155] ___sys_recvmsg+0x52e/0x840 [ 605.376315][T13155] do_recvmmsg+0x55a/0x1180 [ 605.380935][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 605.386178][T13155] do_syscall_64+0x3d/0xb0 [ 605.390706][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 605.396861][T13155] [ 605.399253][T13155] Uninit was stored to memory at: [ 605.404539][T13155] ___sys_recvmsg+0x52e/0x840 [ 605.409444][T13155] do_recvmmsg+0x55a/0x1180 [ 605.414154][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 605.419296][T13155] do_syscall_64+0x3d/0xb0 [ 605.423928][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 605.429977][T13155] [ 605.432456][T13155] Uninit was stored to memory at: [ 605.437637][T13155] ___sys_recvmsg+0x52e/0x840 [ 605.442518][T13155] do_recvmmsg+0x55a/0x1180 [ 605.447133][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 605.452368][T13155] do_syscall_64+0x3d/0xb0 [ 605.456896][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 605.463023][T13155] [ 605.465409][T13155] Uninit was stored to memory at: [ 605.470587][T13155] ___sys_recvmsg+0x52e/0x840 [ 605.475474][T13155] do_recvmmsg+0x55a/0x1180 [ 605.480090][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 605.485326][T13155] do_syscall_64+0x3d/0xb0 [ 605.489854][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 605.496003][T13155] [ 605.498390][T13155] Uninit was stored to memory at: [ 605.503676][T13155] ___sys_recvmsg+0x52e/0x840 [ 605.508462][T13155] do_recvmmsg+0x55a/0x1180 [ 605.513180][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 605.518318][T13155] do_syscall_64+0x3d/0xb0 [ 605.522948][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 605.528996][T13155] [ 605.531376][T13155] Uninit was stored to memory at: [ 605.536676][T13155] ___sys_recvmsg+0x52e/0x840 [ 605.541471][T13155] do_recvmmsg+0x55a/0x1180 [ 605.546234][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 605.551376][T13155] do_syscall_64+0x3d/0xb0 [ 605.556060][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 605.562205][T13155] [ 605.564586][T13155] Uninit was stored to memory at: [ 605.569767][T13155] ___sys_recvmsg+0x52e/0x840 [ 605.574697][T13155] do_recvmmsg+0x55a/0x1180 [ 605.579310][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 605.584609][T13155] do_syscall_64+0x3d/0xb0 [ 605.589137][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 605.595426][T13155] [ 605.597812][T13155] Local variable msg_sys created at: [ 605.603296][T13155] do_recvmmsg+0x5c/0x1180 [ 605.607822][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 605.649858][T13097] not chained 380000 origins [ 605.654730][T13097] CPU: 1 PID: 13097 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 605.665276][T13097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 605.675434][T13097] Call Trace: [ 605.678784][T13097] [ 605.681785][T13097] dump_stack_lvl+0x1c8/0x256 [ 605.686625][T13097] dump_stack+0x1a/0x1c [ 605.690917][T13097] kmsan_internal_chain_origin+0x78/0x120 [ 605.696788][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 605.702742][T13097] ? kfree+0x44/0x980 [ 605.706831][T13097] ? filter_irq_stacks+0x5c/0x1a0 [ 605.711979][T13097] ? do_recvmmsg+0x55a/0x1180 [ 605.716769][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 605.722731][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 605.728694][T13097] ? should_fail+0x3f/0x810 [ 605.733343][T13097] ? __stack_depot_save+0x21/0x4b0 [ 605.738607][T13097] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 605.745001][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 605.750958][T13097] __msan_chain_origin+0xbd/0x140 [ 605.756121][T13097] ___sys_recvmsg+0x52e/0x840 [ 605.760936][T13097] ? kmsan_internal_check_memory+0x94/0x530 [ 605.766982][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 605.772946][T13097] do_recvmmsg+0x55a/0x1180 [ 605.777604][T13097] ? do_syscall_64+0x3d/0xb0 [ 605.782316][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 605.787487][T13097] do_syscall_64+0x3d/0xb0 [ 605.792018][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 605.798072][T13097] RIP: 0033:0x7f7deda89279 [ 605.802577][T13097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 605.822330][T13097] RSP: 002b:00007f7deeb8f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 605.830876][T13097] RAX: ffffffffffffffda RBX: 00007f7dedb9c120 RCX: 00007f7deda89279 [ 605.838956][T13097] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 605.847026][T13097] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 605.855096][T13097] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 605.863161][T13097] R13: 00007f7dee0cfb1f R14: 00007f7deeb8f300 R15: 0000000000022000 [ 605.871256][T13097] [ 605.874847][T13097] Uninit was stored to memory at: [ 605.880035][T13097] ___sys_recvmsg+0x52e/0x840 [ 605.882688][T13155] not chained 390000 origins [ 605.884898][T13097] do_recvmmsg+0x55a/0x1180 [ 605.889381][T13155] CPU: 0 PID: 13155 Comm: syz-executor.4 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 605.894004][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 605.904292][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 605.904335][T13155] Call Trace: [ 605.904360][T13155] [ 605.904385][T13155] dump_stack_lvl+0x1c8/0x256 [ 605.909414][T13097] do_syscall_64+0x3d/0xb0 [ 605.919489][T13155] dump_stack+0x1a/0x1c [ 605.919587][T13155] kmsan_internal_chain_origin+0x78/0x120 [ 605.922991][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 605.925832][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 605.930518][T13097] [ 605.930534][T13097] Uninit was stored to memory at: [ 605.934941][T13155] ? kfree+0x44/0x980 [ 605.935017][T13155] ? filter_irq_stacks+0x5c/0x1a0 [ 605.935104][T13155] ? do_recvmmsg+0x55a/0x1180 [ 605.935178][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 605.939405][T13097] ___sys_recvmsg+0x52e/0x840 [ 605.945043][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 605.945158][T13155] ? should_fail+0x3f/0x810 [ 605.951011][T13097] do_recvmmsg+0x55a/0x1180 [ 605.956820][T13155] ? __stack_depot_save+0x21/0x4b0 [ 605.956924][T13155] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 605.959263][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 605.964297][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 605.964405][T13155] __msan_chain_origin+0xbd/0x140 [ 605.968385][T13097] do_syscall_64+0x3d/0xb0 [ 605.973413][T13155] ___sys_recvmsg+0x52e/0x840 [ 605.973517][T13155] ? kmsan_internal_check_memory+0x94/0x530 [ 605.978194][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 605.984008][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 605.984123][T13155] do_recvmmsg+0x55a/0x1180 [ 605.988776][T13097] [ 605.988789][T13097] Uninit was stored to memory at: [ 605.994619][T13155] ? do_syscall_64+0x3d/0xb0 [ 605.994695][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 605.999324][T13097] ___sys_recvmsg+0x52e/0x840 [ 606.003755][T13155] do_syscall_64+0x3d/0xb0 [ 606.003828][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.003937][T13155] RIP: 0033:0x7f732f089279 [ 606.009063][T13097] do_recvmmsg+0x55a/0x1180 [ 606.015304][T13155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 606.015381][T13155] RSP: 002b:00007f7330246168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 606.020431][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.026241][T13155] RAX: ffffffffffffffda RBX: 00007f732f19c050 RCX: 00007f732f089279 [ 606.026301][T13155] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 606.026350][T13155] RBP: 00007f732f0e3189 R08: 0000000000000000 R09: 0000000000000000 [ 606.031375][T13097] do_syscall_64+0x3d/0xb0 [ 606.035792][T13155] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 606.035838][T13155] R13: 00007f732f6cfb1f R14: 00007f7330246300 R15: 0000000000022000 [ 606.035915][T13155] [ 606.036636][T13155] Uninit was stored to memory at: [ 606.040588][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.046640][T13155] ___sys_recvmsg+0x52e/0x840 [ 606.052781][T13097] [ 606.058382][T13155] do_recvmmsg+0x55a/0x1180 [ 606.062983][T13097] Uninit was stored to memory at: [ 606.063102][T13097] ___sys_recvmsg+0x52e/0x840 [ 606.065359][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.070380][T13097] do_recvmmsg+0x55a/0x1180 [ 606.075046][T13155] do_syscall_64+0x3d/0xb0 [ 606.075116][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.080222][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.086275][T13155] [ 606.089522][T13097] do_syscall_64+0x3d/0xb0 [ 606.095487][T13155] Uninit was stored to memory at: [ 606.095601][T13155] ___sys_recvmsg+0x52e/0x840 [ 606.099951][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.104517][T13155] do_recvmmsg+0x55a/0x1180 [ 606.104585][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.124435][T13097] [ 606.132781][T13155] do_syscall_64+0x3d/0xb0 [ 606.132858][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.137901][T13097] Uninit was stored to memory at: [ 606.138017][T13097] ___sys_recvmsg+0x52e/0x840 [ 606.145944][T13155] [ 606.145959][T13155] Uninit was stored to memory at: [ 606.146060][T13155] ___sys_recvmsg+0x52e/0x840 [ 606.154115][T13097] do_recvmmsg+0x55a/0x1180 [ 606.162076][T13155] do_recvmmsg+0x55a/0x1180 [ 606.162144][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.166591][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.174629][T13155] do_syscall_64+0x3d/0xb0 [ 606.174698][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.182757][T13097] do_syscall_64+0x3d/0xb0 [ 606.185741][T13155] [ 606.185755][T13155] Uninit was stored to memory at: [ 606.190765][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.196813][T13155] ___sys_recvmsg+0x52e/0x840 [ 606.201442][T13097] [ 606.201456][T13097] Uninit was stored to memory at: [ 606.203832][T13155] do_recvmmsg+0x55a/0x1180 [ 606.203901][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.208488][T13097] ___sys_recvmsg+0x52e/0x840 [ 606.213538][T13155] do_syscall_64+0x3d/0xb0 [ 606.213607][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.218270][T13097] do_recvmmsg+0x55a/0x1180 [ 606.223361][T13155] [ 606.223374][T13155] Uninit was stored to memory at: [ 606.223479][T13155] ___sys_recvmsg+0x52e/0x840 [ 606.227946][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.232425][T13155] do_recvmmsg+0x55a/0x1180 [ 606.238331][T13097] do_syscall_64+0x3d/0xb0 [ 606.243417][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.245780][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.250195][T13155] do_syscall_64+0x3d/0xb0 [ 606.255329][T13097] [ 606.259964][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.265961][T13097] Uninit was stored to memory at: [ 606.270419][T13155] [ 606.270431][T13155] Uninit was stored to memory at: [ 606.270542][T13155] ___sys_recvmsg+0x52e/0x840 [ 606.275654][T13097] ___sys_recvmsg+0x52e/0x840 [ 606.277833][T13155] do_recvmmsg+0x55a/0x1180 [ 606.282358][T13097] do_recvmmsg+0x55a/0x1180 [ 606.288210][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.293309][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.297989][T13155] do_syscall_64+0x3d/0xb0 [ 606.300319][T13097] do_syscall_64+0x3d/0xb0 [ 606.305403][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.310112][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.314676][T13155] [ 606.314691][T13155] Uninit was stored to memory at: [ 606.314797][T13155] ___sys_recvmsg+0x52e/0x840 [ 606.319211][T13097] [ 606.319225][T13097] Local variable msg_sys created at: [ 606.324294][T13155] do_recvmmsg+0x55a/0x1180 [ 606.324362][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.329363][T13097] do_recvmmsg+0x5c/0x1180 [ 606.333841][T13155] do_syscall_64+0x3d/0xb0 [ 606.333908][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.339801][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.344275][T13155] [ 606.344296][T13155] Local variable msg_sys created at: [ 606.344318][T13155] do_recvmmsg+0x5c/0x1180 [ 606.577050][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.671008][T13097] not chained 400000 origins [ 606.675918][T13097] CPU: 1 PID: 13097 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 606.686470][T13097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 606.696689][T13097] Call Trace: [ 606.700046][T13097] [ 606.703044][T13097] dump_stack_lvl+0x1c8/0x256 [ 606.707909][T13097] dump_stack+0x1a/0x1c [ 606.712221][T13097] kmsan_internal_chain_origin+0x78/0x120 [ 606.718096][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 606.724056][T13097] ? kfree+0x44/0x980 [ 606.728151][T13097] ? filter_irq_stacks+0x5c/0x1a0 [ 606.733310][T13097] ? do_recvmmsg+0x55a/0x1180 [ 606.738106][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 606.744073][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 606.750035][T13097] ? should_fail+0x3f/0x810 [ 606.754693][T13097] ? __stack_depot_save+0x21/0x4b0 [ 606.759963][T13097] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 606.766378][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 606.772358][T13097] __msan_chain_origin+0xbd/0x140 [ 606.777532][T13097] ___sys_recvmsg+0x52e/0x840 [ 606.782350][T13097] ? kmsan_internal_check_memory+0x94/0x530 [ 606.788417][T13097] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 606.794404][T13097] do_recvmmsg+0x55a/0x1180 [ 606.799065][T13097] ? do_syscall_64+0x3d/0xb0 [ 606.803779][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.808953][T13097] do_syscall_64+0x3d/0xb0 [ 606.813483][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.819528][T13097] RIP: 0033:0x7f7deda89279 [ 606.824040][T13097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 606.843799][T13097] RSP: 002b:00007f7deeb8f168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 606.852347][T13097] RAX: ffffffffffffffda RBX: 00007f7dedb9c120 RCX: 00007f7deda89279 [ 606.860431][T13097] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 606.868500][T13097] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 606.876572][T13097] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 606.884642][T13097] R13: 00007f7dee0cfb1f R14: 00007f7deeb8f300 R15: 0000000000022000 [ 606.892744][T13097] [ 606.896440][T13097] Uninit was stored to memory at: [ 606.901625][T13097] ___sys_recvmsg+0x52e/0x840 [ 606.906471][T13155] not chained 410000 origins [ 606.906500][T13155] CPU: 0 PID: 13155 Comm: syz-executor.4 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 606.911086][T13097] do_recvmmsg+0x55a/0x1180 [ 606.921506][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 606.921547][T13155] Call Trace: [ 606.921571][T13155] [ 606.921596][T13155] dump_stack_lvl+0x1c8/0x256 [ 606.926234][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.936228][T13155] dump_stack+0x1a/0x1c [ 606.936327][T13155] kmsan_internal_chain_origin+0x78/0x120 [ 606.939622][T13097] do_syscall_64+0x3d/0xb0 [ 606.942582][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 606.947334][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.952361][T13155] ? kfree+0x44/0x980 [ 606.952438][T13155] ? filter_irq_stacks+0x5c/0x1a0 [ 606.952525][T13155] ? do_recvmmsg+0x55a/0x1180 [ 606.956668][T13097] [ 606.956683][T13097] Uninit was stored to memory at: [ 606.962386][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 606.962500][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 606.967034][T13097] ___sys_recvmsg+0x52e/0x840 [ 606.972760][T13155] ? should_fail+0x3f/0x810 [ 606.972866][T13155] ? __stack_depot_save+0x21/0x4b0 [ 606.978743][T13097] do_recvmmsg+0x55a/0x1180 [ 606.982732][T13155] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 606.987828][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 606.992514][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 606.992624][T13155] __msan_chain_origin+0xbd/0x140 [ 606.994932][T13097] do_syscall_64+0x3d/0xb0 [ 606.999962][T13155] ___sys_recvmsg+0x52e/0x840 [ 607.005890][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.011593][T13155] ? kmsan_internal_check_memory+0x94/0x530 [ 607.016386][T13097] [ 607.020753][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 607.025939][T13097] Uninit was stored to memory at: [ 607.030369][T13155] do_recvmmsg+0x55a/0x1180 [ 607.036821][T13097] ___sys_recvmsg+0x52e/0x840 [ 607.041656][T13155] ? do_syscall_64+0x3d/0xb0 [ 607.047539][T13097] do_recvmmsg+0x55a/0x1180 [ 607.052448][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.052546][T13155] do_syscall_64+0x3d/0xb0 [ 607.056966][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.061647][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.067630][T13097] do_syscall_64+0x3d/0xb0 [ 607.073429][T13155] RIP: 0033:0x7f732f089279 [ 607.073491][T13155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 607.073567][T13155] RSP: 002b:00007f7330246168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 607.073639][T13155] RAX: ffffffffffffffda RBX: 00007f732f19c050 RCX: 00007f732f089279 [ 607.075952][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.081758][T13155] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 607.081813][T13155] RBP: 00007f732f0e3189 R08: 0000000000000000 R09: 0000000000000000 [ 607.081860][T13155] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 607.086887][T13097] [ 607.086903][T13097] Uninit was stored to memory at: [ 607.091474][T13155] R13: 00007f732f6cfb1f R14: 00007f7330246300 R15: 0000000000022000 [ 607.096394][T13097] ___sys_recvmsg+0x52e/0x840 [ 607.100765][T13155] [ 607.105353][T13097] do_recvmmsg+0x55a/0x1180 [ 607.110864][T13155] Uninit was stored to memory at: [ 607.114829][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.119882][T13155] ___sys_recvmsg+0x52e/0x840 [ 607.125761][T13097] do_syscall_64+0x3d/0xb0 [ 607.130164][T13155] do_recvmmsg+0x55a/0x1180 [ 607.134721][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.154435][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.162952][T13097] [ 607.162966][T13097] Uninit was stored to memory at: [ 607.163075][T13097] ___sys_recvmsg+0x52e/0x840 [ 607.170955][T13155] do_syscall_64+0x3d/0xb0 [ 607.176954][T13097] do_recvmmsg+0x55a/0x1180 [ 607.184943][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.193095][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.201065][T13155] [ 607.201079][T13155] Uninit was stored to memory at: [ 607.203495][T13097] do_syscall_64+0x3d/0xb0 [ 607.208576][T13155] ___sys_recvmsg+0x52e/0x840 [ 607.216553][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.221195][T13155] do_recvmmsg+0x55a/0x1180 [ 607.224332][T13097] [ 607.224346][T13097] Uninit was stored to memory at: [ 607.224451][T13097] ___sys_recvmsg+0x52e/0x840 [ 607.228878][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.234006][T13097] do_recvmmsg+0x55a/0x1180 [ 607.238981][T13155] do_syscall_64+0x3d/0xb0 [ 607.243729][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.248151][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.252810][T13097] do_syscall_64+0x3d/0xb0 [ 607.258663][T13155] [ 607.258676][T13155] Uninit was stored to memory at: [ 607.258784][T13155] ___sys_recvmsg+0x52e/0x840 [ 607.263793][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.266110][T13155] do_recvmmsg+0x55a/0x1180 [ 607.271131][T13097] [ 607.271144][T13097] Uninit was stored to memory at: [ 607.275864][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.280407][T13097] ___sys_recvmsg+0x52e/0x840 [ 607.284935][T13155] do_syscall_64+0x3d/0xb0 [ 607.290898][T13097] do_recvmmsg+0x55a/0x1180 [ 607.295999][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.298355][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.303454][T13155] [ 607.303466][T13155] Uninit was stored to memory at: [ 607.303574][T13155] ___sys_recvmsg+0x52e/0x840 [ 607.307883][T13097] do_syscall_64+0x3d/0xb0 [ 607.312704][T13155] do_recvmmsg+0x55a/0x1180 [ 607.318597][T13097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.323173][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.323245][T13155] do_syscall_64+0x3d/0xb0 [ 607.325592][T13097] [ 607.325607][T13097] Local variable msg_sys created at: [ 607.330624][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.335494][T13097] do_recvmmsg+0x5c/0x1180 [ 607.340510][T13155] [ 607.340524][T13155] Uninit was stored to memory at: [ 607.345104][T13097] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.349671][T13155] ___sys_recvmsg+0x52e/0x840 [ 607.501296][T13155] do_recvmmsg+0x55a/0x1180 [ 607.506004][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.511144][T13155] do_syscall_64+0x3d/0xb0 [ 607.515729][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.521856][T13155] [ 607.524239][T13155] Uninit was stored to memory at: [ 607.529435][T13155] ___sys_recvmsg+0x52e/0x840 [ 607.534306][T13155] do_recvmmsg+0x55a/0x1180 [ 607.538956][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.544179][T13155] do_syscall_64+0x3d/0xb0 [ 607.548704][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.554870][T13155] [ 607.557249][T13155] Uninit was stored to memory at: [ 607.562522][T13155] ___sys_recvmsg+0x52e/0x840 [ 607.567317][T13155] do_recvmmsg+0x55a/0x1180 [ 607.571998][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.577132][T13155] do_syscall_64+0x3d/0xb0 [ 607.581649][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.587822][T13155] [ 607.590201][T13155] Local variable msg_sys created at: [ 607.595621][T13155] do_recvmmsg+0x5c/0x1180 [ 607.600158][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.623985][T13155] not chained 420000 origins [ 607.628667][T13155] CPU: 0 PID: 13155 Comm: syz-executor.4 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 607.639212][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 607.649428][T13155] Call Trace: [ 607.652783][T13155] [ 607.655778][T13155] dump_stack_lvl+0x1c8/0x256 [ 607.660616][T13155] dump_stack+0x1a/0x1c [ 607.664912][T13155] kmsan_internal_chain_origin+0x78/0x120 [ 607.670777][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 607.676733][T13155] ? kfree+0x44/0x980 [ 607.680821][T13155] ? filter_irq_stacks+0x5c/0x1a0 [ 607.685967][T13155] ? do_recvmmsg+0x55a/0x1180 [ 607.690758][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 607.696721][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 607.702677][T13155] ? should_fail+0x3f/0x810 [ 607.707327][T13155] ? __stack_depot_save+0x21/0x4b0 [ 607.712582][T13155] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 607.718980][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 18:28:28 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) stat(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmmsg$unix(r1, 0x0, 0x0, 0x8817) creat(&(0x7f0000000240)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESDEC]) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:28:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/exec\x00') read$FUSE(r0, 0x0, 0x0) 18:28:28 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0xc7f, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000040)}]) 18:28:28 executing program 3: bpf$MAP_CREATE(0x10, &(0x7f00000000c0), 0x48) [ 607.724938][T13155] __msan_chain_origin+0xbd/0x140 [ 607.730100][T13155] ___sys_recvmsg+0x52e/0x840 [ 607.734914][T13155] ? kmsan_internal_check_memory+0x94/0x530 [ 607.740957][T13155] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 607.747004][T13155] do_recvmmsg+0x55a/0x1180 [ 607.751663][T13155] ? do_syscall_64+0x3d/0xb0 [ 607.756368][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.761535][T13155] do_syscall_64+0x3d/0xb0 [ 607.766068][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.772210][T13155] RIP: 0033:0x7f732f089279 [ 607.776726][T13155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 607.796482][T13155] RSP: 002b:00007f7330246168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 607.805029][T13155] RAX: ffffffffffffffda RBX: 00007f732f19c050 RCX: 00007f732f089279 [ 607.813112][T13155] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 607.821180][T13155] RBP: 00007f732f0e3189 R08: 0000000000000000 R09: 0000000000000000 [ 607.829242][T13155] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 607.837329][T13155] R13: 00007f732f6cfb1f R14: 00007f7330246300 R15: 0000000000022000 [ 607.845415][T13155] [ 607.849013][T13155] Uninit was stored to memory at: [ 607.854270][T13155] ___sys_recvmsg+0x52e/0x840 [ 607.859062][T13155] do_recvmmsg+0x55a/0x1180 [ 607.863736][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.868874][T13155] do_syscall_64+0x3d/0xb0 [ 607.873485][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.879532][T13155] [ 607.881975][T13155] Uninit was stored to memory at: [ 607.887152][T13155] ___sys_recvmsg+0x52e/0x840 [ 607.892008][T13155] do_recvmmsg+0x55a/0x1180 [ 607.896644][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.901874][T13155] do_syscall_64+0x3d/0xb0 [ 607.906403][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.912518][T13155] [ 607.914897][T13155] Uninit was stored to memory at: [ 607.920069][T13155] ___sys_recvmsg+0x52e/0x840 [ 607.924931][T13155] do_recvmmsg+0x55a/0x1180 [ 607.929548][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.934768][T13155] do_syscall_64+0x3d/0xb0 [ 607.939321][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.945451][T13155] [ 607.947832][T13155] Uninit was stored to memory at: [ 607.953086][T13155] ___sys_recvmsg+0x52e/0x840 [ 607.957897][T13155] do_recvmmsg+0x55a/0x1180 [ 607.962585][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 607.967725][T13155] do_syscall_64+0x3d/0xb0 [ 607.972321][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.978387][T13155] [ 607.980779][T13155] Uninit was stored to memory at: [ 607.986043][T13155] ___sys_recvmsg+0x52e/0x840 [ 607.990858][T13155] do_recvmmsg+0x55a/0x1180 [ 607.995552][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 608.000695][T13155] do_syscall_64+0x3d/0xb0 [ 608.005293][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 608.011355][T13155] [ 608.013810][T13155] Uninit was stored to memory at: [ 608.019005][T13155] ___sys_recvmsg+0x52e/0x840 [ 608.023868][T13155] do_recvmmsg+0x55a/0x1180 [ 608.028483][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 608.033696][T13155] do_syscall_64+0x3d/0xb0 [ 608.038226][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 608.044354][T13155] [ 608.046735][T13155] Uninit was stored to memory at: [ 608.051986][T13155] ___sys_recvmsg+0x52e/0x840 [ 608.056775][T13155] do_recvmmsg+0x55a/0x1180 [ 608.061399][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 608.066635][T13155] do_syscall_64+0x3d/0xb0 [ 608.071169][T13155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 608.077306][T13155] [ 608.079687][T13155] Local variable msg_sys created at: [ 608.085128][T13155] do_recvmmsg+0x5c/0x1180 [ 608.089658][T13155] __x64_sys_recvmmsg+0x3a7/0x4b0 18:28:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x40}}, 0x0) 18:28:29 executing program 5: bpf$BPF_PROG_DETACH(0x1d, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x13}, 0x10) 18:28:29 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x917319461859a096, 0x0) 18:28:29 executing program 3: bpf$BPF_PROG_DETACH(0x23, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x13}, 0x10) 18:28:29 executing program 1: bpf$MAP_CREATE(0x6, 0x0, 0x10) 18:28:29 executing program 1: bpf$BPF_PROG_ATTACH(0x14, &(0x7f0000001440)={@map=0x1, 0xffffffffffffffff, 0x1}, 0x14) 18:28:29 executing program 5: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="020500070a"], 0x50}}, 0x0) 18:28:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:28:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="94000000000201"], 0x94}}, 0x0) 18:28:30 executing program 2: syz_clone3(&(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4a) 18:28:30 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 18:28:30 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f8}, 0x10}}, 0x0) 18:28:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x1b, &(0x7f0000000000)=0xf11aa6250453444c, 0x4) 18:28:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) 18:28:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0xa, &(0x7f0000000000), 0x4) 18:28:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9}, 0x48) 18:28:30 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000000c0)={0x54, 0x12, 0xc11, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x8}]}, 0x54}}, 0x0) 18:28:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000040)=[{r2}, {r2, 0x208}], 0x2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 609.340345][T13218] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. 18:28:30 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d401000013002fe225bd70000400df25288080034e244e2103400000010400003e0600080080000003000000d2db000000400100ffffff7f", @ANYRES32, @ANYBLOB="09000000090000001f00000009000000c2000100079c794ccd"], 0x1d4}}, 0x0) 18:28:30 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3ea}, 0x10}}, 0x0) 18:28:30 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0xc7f, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_pgetevents(r1, 0x0, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0) 18:28:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0x7) 18:28:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1080}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @dev}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x64}}, 0x0) 18:28:30 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 18:28:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'gre0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local}}}}) [ 609.906941][T13233] not chained 430000 origins [ 609.912081][T13233] CPU: 0 PID: 13233 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 609.922633][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 609.932827][T13233] Call Trace: [ 609.936179][T13233] [ 609.939187][T13233] dump_stack_lvl+0x1c8/0x256 [ 609.944042][T13233] dump_stack+0x1a/0x1c [ 609.948341][T13233] kmsan_internal_chain_origin+0x78/0x120 [ 609.954226][T13233] ? update_misfit_status+0x2c/0xb30 [ 609.959809][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 609.965774][T13233] ? __schedule+0x12f3/0x21d0 [ 609.970567][T13233] ? do_recvmmsg+0x55a/0x1180 [ 609.975350][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 609.981317][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 609.987264][T13233] ? should_fail+0x3f/0x810 [ 609.991907][T13233] ? __stack_depot_save+0x21/0x4b0 [ 609.997234][T13233] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 610.003620][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 610.009558][T13233] __msan_chain_origin+0xbd/0x140 [ 610.014710][T13233] ___sys_recvmsg+0x52e/0x840 [ 610.019517][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 610.025453][T13233] ? __cond_resched+0x1f/0x40 [ 610.030231][T13233] ? preempt_schedule_common+0x117/0x180 [ 610.035980][T13233] do_recvmmsg+0x55a/0x1180 [ 610.040629][T13233] ? do_syscall_64+0x3d/0xb0 [ 610.045326][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 610.050477][T13233] do_syscall_64+0x3d/0xb0 [ 610.055012][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 610.061041][T13233] RIP: 0033:0x7f105f689279 [ 610.065557][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 610.085656][T13233] RSP: 002b:00007f10607c8168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 610.094203][T13233] RAX: ffffffffffffffda RBX: 00007f105f79c120 RCX: 00007f105f689279 [ 610.102279][T13233] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 610.110362][T13233] RBP: 00007f105f6e3189 R08: 0000000000000000 R09: 0000000000000000 [ 610.118434][T13233] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 610.126491][T13233] R13: 00007f105fccfb1f R14: 00007f10607c8300 R15: 0000000000022000 [ 610.134580][T13233] [ 610.138163][T13233] Uninit was stored to memory at: [ 610.143443][T13233] ___sys_recvmsg+0x52e/0x840 [ 610.148236][T13233] do_recvmmsg+0x55a/0x1180 [ 610.152927][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 18:28:31 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/39}, {&(0x7f0000000140)=""/155}], 0x1c}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d401000013002f"], 0x1d4}}, 0x0) [ 610.158065][T13233] do_syscall_64+0x3d/0xb0 [ 610.162676][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 610.169472][T13233] [ 610.172013][T13233] Uninit was stored to memory at: [ 610.177207][T13233] ___sys_recvmsg+0x52e/0x840 [ 610.182111][T13233] do_recvmmsg+0x55a/0x1180 [ 610.186734][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 610.192074][T13233] do_syscall_64+0x3d/0xb0 [ 610.196605][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 610.202780][T13233] 18:28:31 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@private2, 0x31}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f04000095d512e6f0a2afc7736032f541d8ffb0c420e8eacfc226313227f7b4bc7fd79e899de6c26846b6c4defa21beb93179cd5448453b710000eb917e66fa6064a2b2a1c0e945d7261eb18e644a40db7b6b50f48eaabd736807a6adc9834fd2329c3a2d8927bab3ee2131e0bf1dbf25dcbaaa0330789c5667434516819a08d32a3e45f5616778438bfded1370559a042178aab0e6003f131eb335257e146e376ce7093c000209944d3983b8"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r3}, 0xfffffffffffffc6a) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x8}, 0x1c) sendmmsg$unix(r1, 0x0, 0x0, 0x8817) creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000011, 0xff970005, 0x2811fdff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="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", @ANYRES64=r0, @ANYRESDEC=r2]) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) ftruncate(0xffffffffffffffff, 0x8) 18:28:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xb9, &(0x7f0000000280)={&(0x7f00000001c0)=@gettfilter={0x64, 0x2e, 0x0, 0x0, 0x0, {}, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, 0x64}}, 0x0) [ 610.205177][T13233] Uninit was stored to memory at: [ 610.210363][T13233] ___sys_recvmsg+0x52e/0x840 [ 610.215303][T13233] do_recvmmsg+0x55a/0x1180 [ 610.219918][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 610.225200][T13233] do_syscall_64+0x3d/0xb0 [ 610.229734][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 610.238281][T13233] [ 610.240671][T13233] Uninit was stored to memory at: [ 610.247205][T13233] ___sys_recvmsg+0x52e/0x840 [ 610.252105][T13233] do_recvmmsg+0x55a/0x1180 [ 610.256728][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 610.262014][T13233] do_syscall_64+0x3d/0xb0 [ 610.266545][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 610.272726][T13233] [ 610.275116][T13233] Uninit was stored to memory at: [ 610.280298][T13233] ___sys_recvmsg+0x52e/0x840 [ 610.285197][T13233] do_recvmmsg+0x55a/0x1180 [ 610.289819][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 610.295081][T13233] do_syscall_64+0x3d/0xb0 [ 610.299611][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 610.305811][T13233] [ 610.308205][T13233] Uninit was stored to memory at: [ 610.313499][T13233] ___sys_recvmsg+0x52e/0x840 [ 610.318291][T13233] do_recvmmsg+0x55a/0x1180 [ 610.323007][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 610.328150][T13233] do_syscall_64+0x3d/0xb0 [ 610.332839][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 610.338894][T13233] [ 610.341278][T13233] Uninit was stored to memory at: [ 610.346582][T13233] ___sys_recvmsg+0x52e/0x840 [ 610.351374][T13233] do_recvmmsg+0x55a/0x1180 [ 610.356103][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 610.361252][T13233] do_syscall_64+0x3d/0xb0 [ 610.365933][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 610.372056][T13233] [ 610.374455][T13233] Local variable msg_sys created at: [ 610.379815][T13233] do_recvmmsg+0x5c/0x1180 [ 610.384497][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 18:28:31 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x5000080) [ 610.739680][T13252] fuse: Unknown parameter '01777777777777777777777PbjÞ¬¼JÄ0y#|P¦HI­ñ' [ 611.025902][T13233] not chained 440000 origins [ 611.030671][T13233] CPU: 0 PID: 13233 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 611.041210][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 611.051375][T13233] Call Trace: [ 611.054733][T13233] [ 611.057729][T13233] dump_stack_lvl+0x1c8/0x256 [ 611.062567][T13233] dump_stack+0x1a/0x1c [ 611.066945][T13233] kmsan_internal_chain_origin+0x78/0x120 [ 611.072807][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 611.078769][T13233] ? kfree+0x44/0x980 [ 611.082862][T13233] ? filter_irq_stacks+0x5c/0x1a0 [ 611.088016][T13233] ? do_recvmmsg+0x55a/0x1180 [ 611.092811][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 611.098775][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 611.104738][T13233] ? should_fail+0x3f/0x810 [ 611.109505][T13233] ? __stack_depot_save+0x21/0x4b0 [ 611.114777][T13233] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 611.121188][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 611.127166][T13233] __msan_chain_origin+0xbd/0x140 [ 611.132347][T13233] ___sys_recvmsg+0x52e/0x840 [ 611.137169][T13233] ? kmsan_internal_check_memory+0x94/0x530 [ 611.143217][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 611.149176][T13233] do_recvmmsg+0x55a/0x1180 [ 611.153846][T13233] ? do_syscall_64+0x3d/0xb0 [ 611.158556][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 611.163726][T13233] do_syscall_64+0x3d/0xb0 [ 611.168258][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 611.174316][T13233] RIP: 0033:0x7f105f689279 [ 611.178828][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 611.198601][T13233] RSP: 002b:00007f10607c8168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 611.207151][T13233] RAX: ffffffffffffffda RBX: 00007f105f79c120 RCX: 00007f105f689279 [ 611.215244][T13233] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 611.223323][T13233] RBP: 00007f105f6e3189 R08: 0000000000000000 R09: 0000000000000000 [ 611.231407][T13233] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 611.239487][T13233] R13: 00007f105fccfb1f R14: 00007f10607c8300 R15: 0000000000022000 [ 611.247590][T13233] [ 611.251255][T13233] Uninit was stored to memory at: [ 611.256561][T13233] ___sys_recvmsg+0x52e/0x840 [ 611.261344][T13233] do_recvmmsg+0x55a/0x1180 [ 611.266063][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 611.271210][T13233] do_syscall_64+0x3d/0xb0 [ 611.275910][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 611.282035][T13233] [ 611.284416][T13233] Uninit was stored to memory at: [ 611.289594][T13233] ___sys_recvmsg+0x52e/0x840 [ 611.294484][T13233] do_recvmmsg+0x55a/0x1180 [ 611.299118][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 611.304422][T13233] do_syscall_64+0x3d/0xb0 [ 611.308963][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 611.315172][T13233] [ 611.317556][T13233] Uninit was stored to memory at: [ 611.322882][T13233] ___sys_recvmsg+0x52e/0x840 [ 611.327671][T13233] do_recvmmsg+0x55a/0x1180 [ 611.332487][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 611.337631][T13233] do_syscall_64+0x3d/0xb0 [ 611.342296][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 611.348345][T13233] [ 611.350725][T13233] Uninit was stored to memory at: [ 611.356144][T13233] ___sys_recvmsg+0x52e/0x840 [ 611.360963][T13233] do_recvmmsg+0x55a/0x1180 [ 611.365710][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 611.370864][T13233] do_syscall_64+0x3d/0xb0 [ 611.375546][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 611.381605][T13233] [ 611.384110][T13233] Uninit was stored to memory at: [ 611.389302][T13233] ___sys_recvmsg+0x52e/0x840 [ 611.394441][T13233] do_recvmmsg+0x55a/0x1180 [ 611.399065][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 611.404359][T13233] do_syscall_64+0x3d/0xb0 [ 611.408895][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 611.415173][T13233] [ 611.417555][T13233] Uninit was stored to memory at: [ 611.422976][T13233] ___sys_recvmsg+0x52e/0x840 [ 611.427769][T13233] do_recvmmsg+0x55a/0x1180 [ 611.432469][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 611.437625][T13233] do_syscall_64+0x3d/0xb0 [ 611.442309][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 611.448362][T13233] [ 611.450741][T13233] Uninit was stored to memory at: [ 611.456017][T13233] ___sys_recvmsg+0x52e/0x840 [ 611.460812][T13233] do_recvmmsg+0x55a/0x1180 [ 611.465587][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 611.470734][T13233] do_syscall_64+0x3d/0xb0 [ 611.475383][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 611.481431][T13233] [ 611.484042][T13233] Local variable msg_sys created at: [ 611.489405][T13233] do_recvmmsg+0x5c/0x1180 [ 611.494080][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 612.048173][T13250] not chained 450000 origins [ 612.053064][T13250] CPU: 0 PID: 13250 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 612.063616][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 612.074131][T13250] Call Trace: [ 612.077486][T13250] [ 612.080488][T13250] dump_stack_lvl+0x1c8/0x256 [ 612.085330][T13250] dump_stack+0x1a/0x1c [ 612.089630][T13250] kmsan_internal_chain_origin+0x78/0x120 [ 612.095504][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 612.101457][T13250] ? kfree+0x44/0x980 [ 612.105544][T13250] ? filter_irq_stacks+0x5c/0x1a0 [ 612.110693][T13250] ? do_recvmmsg+0x55a/0x1180 [ 612.115489][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 612.121451][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 612.127413][T13250] ? should_fail+0x3f/0x810 [ 612.132069][T13250] ? __stack_depot_save+0x21/0x4b0 [ 612.137341][T13250] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 612.143754][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 612.149714][T13250] __msan_chain_origin+0xbd/0x140 [ 612.154887][T13250] ___sys_recvmsg+0x52e/0x840 [ 612.159707][T13250] ? kmsan_internal_check_memory+0x94/0x530 [ 612.165757][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 612.171717][T13250] do_recvmmsg+0x55a/0x1180 [ 612.176371][T13250] ? do_syscall_64+0x3d/0xb0 [ 612.181080][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 612.186248][T13250] do_syscall_64+0x3d/0xb0 [ 612.190805][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 612.196853][T13250] RIP: 0033:0x7f7deda89279 [ 612.201361][T13250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 612.221120][T13250] RSP: 002b:00007f7deebb0168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 612.229664][T13250] RAX: ffffffffffffffda RBX: 00007f7dedb9c050 RCX: 00007f7deda89279 [ 612.238529][T13250] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 612.246608][T13250] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 612.254687][T13250] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 612.262759][T13250] R13: 00007f7dee0cfb1f R14: 00007f7deebb0300 R15: 0000000000022000 [ 612.270859][T13250] [ 612.274466][T13250] Uninit was stored to memory at: [ 612.279656][T13250] ___sys_recvmsg+0x52e/0x840 [ 612.284534][T13250] do_recvmmsg+0x55a/0x1180 [ 612.289145][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 612.294379][T13250] do_syscall_64+0x3d/0xb0 [ 612.298907][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 612.305144][T13250] [ 612.307529][T13250] Uninit was stored to memory at: [ 612.312852][T13250] ___sys_recvmsg+0x52e/0x840 [ 612.317643][T13250] do_recvmmsg+0x55a/0x1180 [ 612.323631][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 612.328780][T13250] do_syscall_64+0x3d/0xb0 [ 612.333424][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 612.339468][T13250] [ 612.341958][T13250] Uninit was stored to memory at: [ 612.347148][T13250] ___sys_recvmsg+0x52e/0x840 [ 612.352055][T13250] do_recvmmsg+0x55a/0x1180 [ 612.356660][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 612.361890][T13250] do_syscall_64+0x3d/0xb0 [ 612.366424][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 612.372579][T13250] [ 612.374955][T13250] Uninit was stored to memory at: [ 612.380152][T13250] ___sys_recvmsg+0x52e/0x840 [ 612.385050][T13250] do_recvmmsg+0x55a/0x1180 [ 612.389662][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 612.394920][T13250] do_syscall_64+0x3d/0xb0 [ 612.399460][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 612.405624][T13250] [ 612.408015][T13250] Uninit was stored to memory at: [ 612.413296][T13250] ___sys_recvmsg+0x52e/0x840 [ 612.418077][T13250] do_recvmmsg+0x55a/0x1180 [ 612.422767][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 612.427908][T13250] do_syscall_64+0x3d/0xb0 [ 612.432548][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 612.438594][T13250] [ 612.440971][T13250] Uninit was stored to memory at: [ 612.446263][T13250] ___sys_recvmsg+0x52e/0x840 [ 612.451050][T13250] do_recvmmsg+0x55a/0x1180 [ 612.455783][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 612.460921][T13250] do_syscall_64+0x3d/0xb0 [ 612.465571][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 612.471629][T13250] [ 612.474122][T13250] Uninit was stored to memory at: [ 612.479298][T13250] ___sys_recvmsg+0x52e/0x840 [ 612.484157][T13250] do_recvmmsg+0x55a/0x1180 [ 612.488775][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 612.494016][T13250] do_syscall_64+0x3d/0xb0 [ 612.498539][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 612.504702][T13250] [ 612.507087][T13250] Local variable msg_sys created at: [ 612.512541][T13250] do_recvmmsg+0x5c/0x1180 [ 612.517065][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 612.686386][T13233] not chained 460000 origins [ 612.691154][T13233] CPU: 0 PID: 13233 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 612.701697][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 612.711858][T13233] Call Trace: [ 612.715209][T13233] [ 612.718206][T13233] dump_stack_lvl+0x1c8/0x256 [ 612.723051][T13233] dump_stack+0x1a/0x1c [ 612.727344][T13233] kmsan_internal_chain_origin+0x78/0x120 [ 612.733210][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 612.739170][T13233] ? kfree+0x44/0x980 [ 612.743259][T13233] ? filter_irq_stacks+0x5c/0x1a0 [ 612.748411][T13233] ? do_recvmmsg+0x55a/0x1180 [ 612.753201][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 612.759166][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 612.765137][T13233] ? should_fail+0x3f/0x810 [ 612.770139][T13233] ? __stack_depot_save+0x21/0x4b0 [ 612.775411][T13233] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 612.781816][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 612.787772][T13233] __msan_chain_origin+0xbd/0x140 [ 612.792939][T13233] ___sys_recvmsg+0x52e/0x840 [ 612.797762][T13233] ? kmsan_internal_check_memory+0x94/0x530 [ 612.803815][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 612.809773][T13233] do_recvmmsg+0x55a/0x1180 [ 612.814429][T13233] ? do_syscall_64+0x3d/0xb0 [ 612.819141][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 612.824309][T13233] do_syscall_64+0x3d/0xb0 [ 612.828841][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 612.834900][T13233] RIP: 0033:0x7f105f689279 [ 612.839416][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 612.859177][T13233] RSP: 002b:00007f10607c8168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 612.867731][T13233] RAX: ffffffffffffffda RBX: 00007f105f79c120 RCX: 00007f105f689279 [ 612.875819][T13233] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 612.883895][T13233] RBP: 00007f105f6e3189 R08: 0000000000000000 R09: 0000000000000000 [ 612.891971][T13233] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 612.900050][T13233] R13: 00007f105fccfb1f R14: 00007f10607c8300 R15: 0000000000022000 [ 612.908155][T13233] [ 612.911848][T13233] Uninit was stored to memory at: [ 612.917042][T13233] ___sys_recvmsg+0x52e/0x840 [ 612.921916][T13233] do_recvmmsg+0x55a/0x1180 [ 612.926540][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 612.931676][T13233] do_syscall_64+0x3d/0xb0 [ 612.936294][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 612.942430][T13233] [ 612.944809][T13233] Uninit was stored to memory at: [ 612.949984][T13233] ___sys_recvmsg+0x52e/0x840 [ 612.954851][T13233] do_recvmmsg+0x55a/0x1180 [ 612.959469][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 612.964689][T13233] do_syscall_64+0x3d/0xb0 [ 612.969216][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 612.975359][T13233] [ 612.977740][T13233] Uninit was stored to memory at: [ 612.983042][T13233] ___sys_recvmsg+0x52e/0x840 [ 612.987829][T13233] do_recvmmsg+0x55a/0x1180 [ 612.992567][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 612.997706][T13233] do_syscall_64+0x3d/0xb0 [ 613.002344][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.008399][T13233] [ 613.010778][T13233] Uninit was stored to memory at: [ 613.016080][T13233] ___sys_recvmsg+0x52e/0x840 [ 613.020899][T13233] do_recvmmsg+0x55a/0x1180 [ 613.025679][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.030844][T13233] do_syscall_64+0x3d/0xb0 [ 613.035515][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.041567][T13233] [ 613.044063][T13233] Uninit was stored to memory at: [ 613.049248][T13233] ___sys_recvmsg+0x52e/0x840 [ 613.054185][T13233] do_recvmmsg+0x55a/0x1180 [ 613.058801][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.064063][T13233] do_syscall_64+0x3d/0xb0 [ 613.068600][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.074772][T13233] [ 613.077159][T13233] Uninit was stored to memory at: [ 613.082453][T13233] ___sys_recvmsg+0x52e/0x840 [ 613.087237][T13233] do_recvmmsg+0x55a/0x1180 [ 613.091977][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.097133][T13233] do_syscall_64+0x3d/0xb0 [ 613.101660][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.107833][T13233] [ 613.110214][T13233] Uninit was stored to memory at: [ 613.115516][T13233] ___sys_recvmsg+0x52e/0x840 [ 613.120306][T13233] do_recvmmsg+0x55a/0x1180 [ 613.125049][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.130187][T13233] do_syscall_64+0x3d/0xb0 [ 613.134847][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.140967][T13233] [ 613.143514][T13233] Local variable msg_sys created at: [ 613.148875][T13233] do_recvmmsg+0x5c/0x1180 [ 613.153515][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.226763][T13233] not chained 470000 origins [ 613.231475][T13233] CPU: 0 PID: 13233 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 613.242019][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 613.252174][T13233] Call Trace: [ 613.255525][T13233] [ 613.258523][T13233] dump_stack_lvl+0x1c8/0x256 [ 613.263368][T13233] dump_stack+0x1a/0x1c [ 613.267659][T13233] kmsan_internal_chain_origin+0x78/0x120 [ 613.273533][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 613.279489][T13233] ? kfree+0x44/0x980 [ 613.283578][T13233] ? filter_irq_stacks+0x5c/0x1a0 [ 613.288733][T13233] ? do_recvmmsg+0x55a/0x1180 [ 613.293524][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 613.299490][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 613.305452][T13233] ? should_fail+0x3f/0x810 [ 613.310100][T13233] ? __stack_depot_save+0x21/0x4b0 [ 613.315359][T13233] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 613.321757][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 613.327714][T13233] __msan_chain_origin+0xbd/0x140 [ 613.332876][T13233] ___sys_recvmsg+0x52e/0x840 [ 613.337691][T13233] ? kmsan_internal_check_memory+0x94/0x530 [ 613.343736][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 613.349694][T13233] do_recvmmsg+0x55a/0x1180 [ 613.354358][T13233] ? do_syscall_64+0x3d/0xb0 [ 613.359063][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.364223][T13233] do_syscall_64+0x3d/0xb0 [ 613.368755][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.374800][T13233] RIP: 0033:0x7f105f689279 [ 613.379314][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 613.399071][T13233] RSP: 002b:00007f10607c8168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 613.407612][T13233] RAX: ffffffffffffffda RBX: 00007f105f79c120 RCX: 00007f105f689279 [ 613.415696][T13233] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 613.423768][T13233] RBP: 00007f105f6e3189 R08: 0000000000000000 R09: 0000000000000000 [ 613.431841][T13233] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 613.439915][T13233] R13: 00007f105fccfb1f R14: 00007f10607c8300 R15: 0000000000022000 [ 613.448016][T13233] [ 613.451480][T13233] Uninit was stored to memory at: [ 613.456747][T13233] ___sys_recvmsg+0x52e/0x840 [ 613.461538][T13233] do_recvmmsg+0x55a/0x1180 [ 613.466220][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.471374][T13233] do_syscall_64+0x3d/0xb0 [ 613.475993][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.482112][T13233] [ 613.484490][T13233] Uninit was stored to memory at: [ 613.489671][T13233] ___sys_recvmsg+0x52e/0x840 [ 613.494585][T13233] do_recvmmsg+0x55a/0x1180 [ 613.499211][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.504608][T13233] do_syscall_64+0x3d/0xb0 [ 613.509143][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.515334][T13233] [ 613.517718][T13233] Uninit was stored to memory at: [ 613.523063][T13233] ___sys_recvmsg+0x52e/0x840 [ 613.527855][T13233] do_recvmmsg+0x55a/0x1180 [ 613.532684][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.537831][T13233] do_syscall_64+0x3d/0xb0 [ 613.542504][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.548556][T13233] [ 613.550937][T13233] Uninit was stored to memory at: [ 613.556236][T13233] ___sys_recvmsg+0x52e/0x840 [ 613.561059][T13233] do_recvmmsg+0x55a/0x1180 [ 613.565799][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.570949][T13233] do_syscall_64+0x3d/0xb0 [ 613.575628][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.581671][T13233] [ 613.584165][T13233] Uninit was stored to memory at: [ 613.589364][T13233] ___sys_recvmsg+0x52e/0x840 [ 613.594394][T13233] do_recvmmsg+0x55a/0x1180 [ 613.599005][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.604247][T13233] do_syscall_64+0x3d/0xb0 [ 613.608783][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.614920][T13233] [ 613.617299][T13233] Uninit was stored to memory at: [ 613.622625][T13233] ___sys_recvmsg+0x52e/0x840 [ 613.627406][T13233] do_recvmmsg+0x55a/0x1180 [ 613.632116][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.637259][T13233] do_syscall_64+0x3d/0xb0 [ 613.641589][T13250] not chained 480000 origins [ 613.641841][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.641955][T13233] [ 613.641968][T13233] Uninit was stored to memory at: [ 613.642081][T13233] ___sys_recvmsg+0x52e/0x840 [ 613.646657][T13250] CPU: 1 PID: 13250 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 613.652564][T13233] do_recvmmsg+0x55a/0x1180 [ 613.654829][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 613.659849][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.664522][T13250] Call Trace: [ 613.664548][T13250] [ 613.664572][T13250] dump_stack_lvl+0x1c8/0x256 [ 613.675069][T13233] do_syscall_64+0x3d/0xb0 [ 613.679521][T13250] dump_stack+0x1a/0x1c [ 613.689627][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.694589][T13250] kmsan_internal_chain_origin+0x78/0x120 [ 613.694692][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 613.698024][T13233] [ 613.698040][T13233] Local variable msg_sys created at: [ 613.700981][T13250] ? kfree+0x44/0x980 [ 613.705711][T13233] do_recvmmsg+0x5c/0x1180 [ 613.710072][T13250] ? filter_irq_stacks+0x5c/0x1a0 [ 613.714274][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.720114][T13250] ? do_recvmmsg+0x55a/0x1180 [ 613.763199][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 613.769175][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 613.775152][T13250] ? should_fail+0x3f/0x810 [ 613.779799][T13250] ? __stack_depot_save+0x21/0x4b0 [ 613.785075][T13250] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 613.791492][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 613.797466][T13250] __msan_chain_origin+0xbd/0x140 [ 613.802662][T13250] ___sys_recvmsg+0x52e/0x840 [ 613.807511][T13250] ? kmsan_internal_check_memory+0x94/0x530 [ 613.813576][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 613.819554][T13250] do_recvmmsg+0x55a/0x1180 [ 613.824213][T13250] ? do_syscall_64+0x3d/0xb0 [ 613.828922][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.834086][T13250] do_syscall_64+0x3d/0xb0 [ 613.838624][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.844680][T13250] RIP: 0033:0x7f7deda89279 [ 613.849194][T13250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 613.868969][T13250] RSP: 002b:00007f7deebb0168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 613.877522][T13250] RAX: ffffffffffffffda RBX: 00007f7dedb9c050 RCX: 00007f7deda89279 [ 613.885611][T13250] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 613.893681][T13250] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 613.901758][T13250] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 613.909839][T13250] R13: 00007f7dee0cfb1f R14: 00007f7deebb0300 R15: 0000000000022000 [ 613.917936][T13250] [ 613.925203][T13250] Uninit was stored to memory at: [ 613.930428][T13250] ___sys_recvmsg+0x52e/0x840 [ 613.935409][T13250] do_recvmmsg+0x55a/0x1180 [ 613.940041][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.945391][T13250] do_syscall_64+0x3d/0xb0 [ 613.949933][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.956135][T13250] [ 613.958521][T13250] Uninit was stored to memory at: [ 613.963852][T13250] ___sys_recvmsg+0x52e/0x840 [ 613.968643][T13250] do_recvmmsg+0x55a/0x1180 [ 613.973408][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 613.983703][T13250] do_syscall_64+0x3d/0xb0 [ 613.988236][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.994430][T13250] [ 613.996820][T13250] Uninit was stored to memory at: [ 614.002136][T13250] ___sys_recvmsg+0x52e/0x840 [ 614.006929][T13250] do_recvmmsg+0x55a/0x1180 [ 614.011542][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.016838][T13250] do_syscall_64+0x3d/0xb0 [ 614.021377][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.024578][T13233] not chained 490000 origins [ 614.027545][T13250] [ 614.032187][T13233] CPU: 0 PID: 13233 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 614.034390][T13250] Uninit was stored to memory at: [ 614.034511][T13250] ___sys_recvmsg+0x52e/0x840 [ 614.044799][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 614.044842][T13233] Call Trace: [ 614.044865][T13233] [ 614.044889][T13233] dump_stack_lvl+0x1c8/0x256 [ 614.049912][T13250] do_recvmmsg+0x55a/0x1180 [ 614.054599][T13233] dump_stack+0x1a/0x1c [ 614.054697][T13233] kmsan_internal_chain_origin+0x78/0x120 [ 614.064819][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.068035][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 614.070975][T13250] do_syscall_64+0x3d/0xb0 [ 614.075650][T13233] ? kfree+0x44/0x980 [ 614.075721][T13233] ? filter_irq_stacks+0x5c/0x1a0 [ 614.080231][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.084401][T13233] ? do_recvmmsg+0x55a/0x1180 [ 614.084476][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 614.090181][T13250] [ 614.090194][T13250] Uninit was stored to memory at: [ 614.095209][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 614.095323][T13233] ? should_fail+0x3f/0x810 [ 614.101176][T13250] ___sys_recvmsg+0x52e/0x840 [ 614.105496][T13233] ? __stack_depot_save+0x21/0x4b0 [ 614.105601][T13233] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 614.109571][T13250] do_recvmmsg+0x55a/0x1180 [ 614.114611][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 614.114733][T13233] __msan_chain_origin+0xbd/0x140 [ 614.120650][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.125342][T13233] ___sys_recvmsg+0x52e/0x840 [ 614.125446][T13233] ? kmsan_internal_check_memory+0x94/0x530 [ 614.131325][T13250] do_syscall_64+0x3d/0xb0 [ 614.133670][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 614.133784][T13233] do_recvmmsg+0x55a/0x1180 [ 614.138771][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.144615][T13233] ? do_syscall_64+0x3d/0xb0 [ 614.144692][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.149157][T13250] [ 614.149171][T13250] Uninit was stored to memory at: [ 614.153851][T13233] do_syscall_64+0x3d/0xb0 [ 614.153926][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.159122][T13250] ___sys_recvmsg+0x52e/0x840 [ 614.165269][T13233] RIP: 0033:0x7f105f689279 [ 614.165325][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 614.169854][T13250] do_recvmmsg+0x55a/0x1180 [ 614.175659][T13233] RSP: 002b:00007f10607c8168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 614.175735][T13233] RAX: ffffffffffffffda RBX: 00007f105f79c120 RCX: 00007f105f689279 [ 614.180765][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.185785][T13233] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 614.185836][T13233] RBP: 00007f105f6e3189 R08: 0000000000000000 R09: 0000000000000000 [ 614.185886][T13233] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 614.190555][T13250] do_syscall_64+0x3d/0xb0 [ 614.196447][T13233] R13: 00007f105fccfb1f R14: 00007f10607c8300 R15: 0000000000022000 [ 614.196526][T13233] [ 614.196930][T13233] Uninit was stored to memory at: [ 614.200942][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.206957][T13233] ___sys_recvmsg+0x52e/0x840 [ 614.211360][T13250] [ 614.211375][T13250] Uninit was stored to memory at: [ 614.217314][T13233] do_recvmmsg+0x55a/0x1180 [ 614.222068][T13250] ___sys_recvmsg+0x52e/0x840 [ 614.227096][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.229429][T13250] do_recvmmsg+0x55a/0x1180 [ 614.234533][T13233] do_syscall_64+0x3d/0xb0 [ 614.238960][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.244971][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.249602][T13250] do_syscall_64+0x3d/0xb0 [ 614.254154][T13233] [ 614.273810][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.278322][T13233] Uninit was stored to memory at: [ 614.278443][T13233] ___sys_recvmsg+0x52e/0x840 [ 614.286809][T13250] [ 614.286825][T13250] Local variable msg_sys created at: [ 614.286853][T13250] do_recvmmsg+0x5c/0x1180 [ 614.294935][T13233] do_recvmmsg+0x55a/0x1180 [ 614.299956][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.308001][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.451289][T13233] do_syscall_64+0x3d/0xb0 [ 614.455903][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.462015][T13233] [ 614.464398][T13233] Uninit was stored to memory at: [ 614.469844][T13233] ___sys_recvmsg+0x52e/0x840 [ 614.474698][T13233] do_recvmmsg+0x55a/0x1180 [ 614.479304][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.484519][T13233] do_syscall_64+0x3d/0xb0 [ 614.489041][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.495150][T13233] [ 614.497527][T13233] Uninit was stored to memory at: [ 614.502801][T13233] ___sys_recvmsg+0x52e/0x840 [ 614.507584][T13233] do_recvmmsg+0x55a/0x1180 [ 614.512257][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.517397][T13233] do_syscall_64+0x3d/0xb0 [ 614.521993][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.528036][T13233] [ 614.530415][T13233] Uninit was stored to memory at: [ 614.535844][T13233] ___sys_recvmsg+0x52e/0x840 [ 614.540632][T13233] do_recvmmsg+0x55a/0x1180 [ 614.545317][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.550463][T13233] do_syscall_64+0x3d/0xb0 [ 614.555074][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.561117][T13233] [ 614.563571][T13233] Uninit was stored to memory at: [ 614.568748][T13233] ___sys_recvmsg+0x52e/0x840 [ 614.573609][T13233] do_recvmmsg+0x55a/0x1180 [ 614.578225][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.583444][T13233] do_syscall_64+0x3d/0xb0 [ 614.587969][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.594094][T13233] [ 614.596477][T13233] Uninit was stored to memory at: [ 614.601658][T13233] ___sys_recvmsg+0x52e/0x840 [ 614.606570][T13233] do_recvmmsg+0x55a/0x1180 [ 614.611184][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.616459][T13233] do_syscall_64+0x3d/0xb0 [ 614.620987][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.627168][T13233] [ 614.629553][T13233] Local variable msg_sys created at: [ 614.635204][T13233] do_recvmmsg+0x5c/0x1180 [ 614.639727][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.697125][T13233] not chained 500000 origins [ 614.701962][T13233] CPU: 0 PID: 13233 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 614.712522][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 614.722676][T13233] Call Trace: [ 614.726021][T13233] [ 614.729018][T13233] dump_stack_lvl+0x1c8/0x256 [ 614.733865][T13233] dump_stack+0x1a/0x1c [ 614.738158][T13233] kmsan_internal_chain_origin+0x78/0x120 [ 614.744024][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 614.749978][T13233] ? kfree+0x44/0x980 [ 614.754067][T13233] ? filter_irq_stacks+0x5c/0x1a0 [ 614.759228][T13233] ? do_recvmmsg+0x55a/0x1180 [ 614.764052][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 614.770014][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 614.775976][T13233] ? should_fail+0x3f/0x810 [ 614.780621][T13233] ? __stack_depot_save+0x21/0x4b0 [ 614.785876][T13233] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 614.792275][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 614.798234][T13233] __msan_chain_origin+0xbd/0x140 [ 614.803400][T13233] ___sys_recvmsg+0x52e/0x840 [ 614.808214][T13233] ? kmsan_internal_check_memory+0x94/0x530 [ 614.814266][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 614.820237][T13233] do_recvmmsg+0x55a/0x1180 [ 614.824893][T13233] ? do_syscall_64+0x3d/0xb0 [ 614.829597][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.834760][T13233] do_syscall_64+0x3d/0xb0 [ 614.839288][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.845345][T13233] RIP: 0033:0x7f105f689279 [ 614.849861][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 614.869648][T13233] RSP: 002b:00007f10607c8168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 614.878192][T13233] RAX: ffffffffffffffda RBX: 00007f105f79c120 RCX: 00007f105f689279 [ 614.886274][T13233] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 614.894353][T13233] RBP: 00007f105f6e3189 R08: 0000000000000000 R09: 0000000000000000 [ 614.902425][T13233] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 614.910493][T13233] R13: 00007f105fccfb1f R14: 00007f10607c8300 R15: 0000000000022000 [ 614.918593][T13233] [ 614.922237][T13233] Uninit was stored to memory at: [ 614.927519][T13233] ___sys_recvmsg+0x52e/0x840 [ 614.932428][T13233] do_recvmmsg+0x55a/0x1180 [ 614.937047][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.942314][T13233] do_syscall_64+0x3d/0xb0 [ 614.946861][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.953099][T13233] [ 614.955482][T13233] Uninit was stored to memory at: [ 614.960667][T13233] ___sys_recvmsg+0x52e/0x840 [ 614.965711][T13233] do_recvmmsg+0x55a/0x1180 [ 614.970347][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 614.975715][T13233] do_syscall_64+0x3d/0xb0 [ 614.980241][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.986446][T13233] [ 614.988827][T13233] Uninit was stored to memory at: [ 614.994148][T13233] ___sys_recvmsg+0x52e/0x840 [ 614.998937][T13233] do_recvmmsg+0x55a/0x1180 [ 615.003661][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.008835][T13233] do_syscall_64+0x3d/0xb0 [ 615.013568][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.019619][T13233] [ 615.022148][T13233] Uninit was stored to memory at: [ 615.027323][T13233] ___sys_recvmsg+0x52e/0x840 [ 615.032256][T13233] do_recvmmsg+0x55a/0x1180 [ 615.036878][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.042662][T13233] do_syscall_64+0x3d/0xb0 [ 615.047188][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.053349][T13233] [ 615.055730][T13233] Uninit was stored to memory at: [ 615.060904][T13233] ___sys_recvmsg+0x52e/0x840 [ 615.065835][T13233] do_recvmmsg+0x55a/0x1180 [ 615.070449][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.071183][T13250] not chained 510000 origins [ 615.075700][T13233] do_syscall_64+0x3d/0xb0 [ 615.075778][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.080370][T13250] CPU: 1 PID: 13250 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 615.084852][T13233] [ 615.090669][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 615.101150][T13233] Uninit was stored to memory at: [ 615.103413][T13250] Call Trace: [ 615.103440][T13250] [ 615.103464][T13250] dump_stack_lvl+0x1c8/0x256 [ 615.113692][T13233] ___sys_recvmsg+0x52e/0x840 [ 615.118569][T13250] dump_stack+0x1a/0x1c [ 615.121901][T13233] do_recvmmsg+0x55a/0x1180 [ 615.124773][T13250] kmsan_internal_chain_origin+0x78/0x120 [ 615.129472][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.134150][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 615.134255][T13250] ? kfree+0x44/0x980 [ 615.134327][T13250] ? filter_irq_stacks+0x5c/0x1a0 [ 615.138496][T13233] do_syscall_64+0x3d/0xb0 [ 615.143006][T13250] ? do_recvmmsg+0x55a/0x1180 [ 615.143081][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 615.148773][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.153808][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 615.159665][T13233] [ 615.159678][T13233] Uninit was stored to memory at: [ 615.163654][T13250] ? should_fail+0x3f/0x810 [ 615.168812][T13233] ___sys_recvmsg+0x52e/0x840 [ 615.173131][T13250] ? __stack_depot_save+0x21/0x4b0 [ 615.177858][T13233] do_recvmmsg+0x55a/0x1180 [ 615.183667][T13250] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 615.183778][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 615.183883][T13250] __msan_chain_origin+0xbd/0x140 [ 615.189752][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.195561][T13250] ___sys_recvmsg+0x52e/0x840 [ 615.195660][T13250] ? kmsan_internal_check_memory+0x94/0x530 [ 615.197943][T13233] do_syscall_64+0x3d/0xb0 [ 615.202986][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 615.207538][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.212220][T13250] do_recvmmsg+0x55a/0x1180 [ 615.212339][T13250] ? do_syscall_64+0x3d/0xb0 [ 615.217389][T13233] [ 615.217406][T13233] Local variable msg_sys created at: [ 615.221896][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.221996][T13250] do_syscall_64+0x3d/0xb0 [ 615.228184][T13233] do_recvmmsg+0x5c/0x1180 [ 615.233993][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.234103][T13250] RIP: 0033:0x7f7deda89279 [ 615.234156][T13250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 615.234233][T13250] RSP: 002b:00007f7deebb0168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 615.234307][T13250] RAX: ffffffffffffffda RBX: 00007f7dedb9c050 RCX: 00007f7deda89279 [ 615.234370][T13250] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 615.234419][T13250] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 615.234471][T13250] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 615.234516][T13250] R13: 00007f7dee0cfb1f R14: 00007f7deebb0300 R15: 0000000000022000 [ 615.234592][T13250] [ 615.235263][T13250] Uninit was stored to memory at: [ 615.235378][T13250] ___sys_recvmsg+0x52e/0x840 [ 615.235447][T13250] do_recvmmsg+0x55a/0x1180 [ 615.235514][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.240519][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.245629][T13250] do_syscall_64+0x3d/0xb0 [ 615.417245][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.423454][T13250] [ 615.425830][T13250] Uninit was stored to memory at: [ 615.431010][T13250] ___sys_recvmsg+0x52e/0x840 [ 615.436011][T13250] do_recvmmsg+0x55a/0x1180 [ 615.440630][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.446059][T13250] do_syscall_64+0x3d/0xb0 [ 615.450584][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.456823][T13250] [ 615.459203][T13250] Uninit was stored to memory at: [ 615.464525][T13250] ___sys_recvmsg+0x52e/0x840 [ 615.469328][T13250] do_recvmmsg+0x55a/0x1180 [ 615.474095][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.479240][T13250] do_syscall_64+0x3d/0xb0 [ 615.483926][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.489972][T13250] [ 615.492524][T13250] Uninit was stored to memory at: [ 615.497706][T13250] ___sys_recvmsg+0x52e/0x840 [ 615.502877][T13250] do_recvmmsg+0x55a/0x1180 [ 615.507485][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.512730][T13250] do_syscall_64+0x3d/0xb0 [ 615.517251][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.523433][T13250] [ 615.525813][T13250] Uninit was stored to memory at: [ 615.530984][T13250] ___sys_recvmsg+0x52e/0x840 [ 615.536168][T13250] do_recvmmsg+0x55a/0x1180 [ 615.540780][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.546039][T13250] do_syscall_64+0x3d/0xb0 [ 615.550561][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.556713][T13250] [ 615.559090][T13250] Uninit was stored to memory at: [ 615.564485][T13250] ___sys_recvmsg+0x52e/0x840 [ 615.569297][T13250] do_recvmmsg+0x55a/0x1180 [ 615.574051][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.579194][T13250] do_syscall_64+0x3d/0xb0 [ 615.583847][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.589896][T13250] [ 615.592539][T13250] Uninit was stored to memory at: [ 615.597747][T13250] ___sys_recvmsg+0x52e/0x840 [ 615.602668][T13250] do_recvmmsg+0x55a/0x1180 [ 615.607304][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.612593][T13250] do_syscall_64+0x3d/0xb0 [ 615.617118][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.623298][T13250] [ 615.625686][T13250] Local variable msg_sys created at: [ 615.631034][T13250] do_recvmmsg+0x5c/0x1180 [ 615.635716][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.719808][T13250] not chained 520000 origins [ 615.724672][T13250] CPU: 0 PID: 13250 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 615.735222][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 615.745380][T13250] Call Trace: [ 615.748734][T13250] [ 615.751733][T13250] dump_stack_lvl+0x1c8/0x256 [ 615.756573][T13250] dump_stack+0x1a/0x1c [ 615.760872][T13250] kmsan_internal_chain_origin+0x78/0x120 [ 615.766740][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 615.772698][T13250] ? kfree+0x44/0x980 [ 615.776785][T13250] ? filter_irq_stacks+0x5c/0x1a0 [ 615.781941][T13250] ? do_recvmmsg+0x55a/0x1180 [ 615.786734][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 615.792879][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 615.798847][T13250] ? should_fail+0x3f/0x810 [ 615.803494][T13250] ? __stack_depot_save+0x21/0x4b0 [ 615.808748][T13250] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 615.815153][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 615.821105][T13250] __msan_chain_origin+0xbd/0x140 [ 615.826266][T13250] ___sys_recvmsg+0x52e/0x840 [ 615.831082][T13250] ? kmsan_internal_check_memory+0x94/0x530 [ 615.837124][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 615.843085][T13250] do_recvmmsg+0x55a/0x1180 [ 615.847744][T13250] ? do_syscall_64+0x3d/0xb0 [ 615.852459][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.857619][T13250] do_syscall_64+0x3d/0xb0 [ 615.862152][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.868197][T13250] RIP: 0033:0x7f7deda89279 [ 615.872704][T13250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 615.892462][T13250] RSP: 002b:00007f7deebb0168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 615.900999][T13250] RAX: ffffffffffffffda RBX: 00007f7dedb9c050 RCX: 00007f7deda89279 [ 615.909090][T13250] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 615.917168][T13250] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 615.925252][T13250] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 615.933335][T13250] R13: 00007f7dee0cfb1f R14: 00007f7deebb0300 R15: 0000000000022000 [ 615.941443][T13250] [ 615.945838][T13250] Uninit was stored to memory at: [ 615.951034][T13250] ___sys_recvmsg+0x52e/0x840 [ 615.955903][T13250] do_recvmmsg+0x55a/0x1180 [ 615.960514][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.965730][T13250] do_syscall_64+0x3d/0xb0 [ 615.970263][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.976381][T13250] [ 615.978759][T13250] Uninit was stored to memory at: [ 615.984024][T13250] ___sys_recvmsg+0x52e/0x840 [ 615.988813][T13250] do_recvmmsg+0x55a/0x1180 [ 615.993505][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 615.998644][T13250] do_syscall_64+0x3d/0xb0 [ 616.001257][T13233] not chained 530000 origins [ 616.003197][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.003306][T13250] [ 616.003318][T13250] Uninit was stored to memory at: [ 616.003426][T13250] ___sys_recvmsg+0x52e/0x840 [ 616.003493][T13250] do_recvmmsg+0x55a/0x1180 [ 616.003559][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.003631][T13250] do_syscall_64+0x3d/0xb0 [ 616.003695][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.003801][T13250] [ 616.003813][T13250] Uninit was stored to memory at: [ 616.003917][T13250] ___sys_recvmsg+0x52e/0x840 [ 616.003986][T13250] do_recvmmsg+0x55a/0x1180 [ 616.004051][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.004124][T13250] do_syscall_64+0x3d/0xb0 [ 616.004189][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.004292][T13250] [ 616.004304][T13250] Uninit was stored to memory at: [ 616.004405][T13250] ___sys_recvmsg+0x52e/0x840 [ 616.004473][T13250] do_recvmmsg+0x55a/0x1180 [ 616.004539][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.004611][T13250] do_syscall_64+0x3d/0xb0 [ 616.004676][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.004782][T13250] [ 616.004794][T13250] Uninit was stored to memory at: [ 616.004902][T13250] ___sys_recvmsg+0x52e/0x840 [ 616.004968][T13250] do_recvmmsg+0x55a/0x1180 [ 616.005033][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.005106][T13250] do_syscall_64+0x3d/0xb0 [ 616.005170][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.005275][T13250] [ 616.005287][T13250] Uninit was stored to memory at: [ 616.005388][T13250] ___sys_recvmsg+0x52e/0x840 [ 616.005455][T13250] do_recvmmsg+0x55a/0x1180 [ 616.005521][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.005593][T13250] do_syscall_64+0x3d/0xb0 [ 616.005658][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.005763][T13250] [ 616.005776][T13250] Local variable msg_sys created at: [ 616.005802][T13250] do_recvmmsg+0x5c/0x1180 [ 616.005868][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.196408][T13233] CPU: 1 PID: 13233 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 616.206953][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 616.217106][T13233] Call Trace: [ 616.220452][T13233] [ 616.223451][T13233] dump_stack_lvl+0x1c8/0x256 [ 616.228286][T13233] dump_stack+0x1a/0x1c [ 616.232578][T13233] kmsan_internal_chain_origin+0x78/0x120 [ 616.238442][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 616.244391][T13233] ? kfree+0x44/0x980 [ 616.248486][T13233] ? filter_irq_stacks+0x5c/0x1a0 [ 616.250155][T13250] not chained 540000 origins [ 616.253621][T13233] ? do_recvmmsg+0x55a/0x1180 [ 616.253697][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 616.253807][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 616.253921][T13233] ? should_fail+0x3f/0x810 [ 616.279455][T13233] ? __stack_depot_save+0x21/0x4b0 [ 616.284699][T13233] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 616.291079][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 616.297015][T13233] __msan_chain_origin+0xbd/0x140 [ 616.302167][T13233] ___sys_recvmsg+0x52e/0x840 [ 616.306972][T13233] ? kmsan_internal_check_memory+0x94/0x530 [ 616.312997][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 616.318945][T13233] do_recvmmsg+0x55a/0x1180 [ 616.323580][T13233] ? do_syscall_64+0x3d/0xb0 [ 616.328273][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.333416][T13233] do_syscall_64+0x3d/0xb0 [ 616.337936][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.343969][T13233] RIP: 0033:0x7f105f689279 [ 616.348463][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 616.368201][T13233] RSP: 002b:00007f10607c8168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 616.376778][T13233] RAX: ffffffffffffffda RBX: 00007f105f79c120 RCX: 00007f105f689279 [ 616.384844][T13233] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 616.392904][T13233] RBP: 00007f105f6e3189 R08: 0000000000000000 R09: 0000000000000000 [ 616.400967][T13233] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 616.409016][T13233] R13: 00007f105fccfb1f R14: 00007f10607c8300 R15: 0000000000022000 [ 616.417111][T13233] [ 616.420189][T13250] CPU: 0 PID: 13250 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 616.420333][T13233] Uninit was stored to memory at: [ 616.430689][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 616.430733][T13250] Call Trace: [ 616.430759][T13250] [ 616.430784][T13250] dump_stack_lvl+0x1c8/0x256 [ 616.435974][T13233] ___sys_recvmsg+0x52e/0x840 [ 616.445863][T13250] dump_stack+0x1a/0x1c [ 616.445963][T13250] kmsan_internal_chain_origin+0x78/0x120 [ 616.449219][T13233] do_recvmmsg+0x55a/0x1180 [ 616.452161][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 616.452268][T13250] ? kfree+0x44/0x980 [ 616.456915][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.461590][T13250] ? filter_irq_stacks+0x5c/0x1a0 [ 616.465814][T13233] do_syscall_64+0x3d/0xb0 [ 616.471460][T13250] ? do_recvmmsg+0x55a/0x1180 [ 616.476025][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.481748][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 616.485792][T13233] [ 616.485806][T13233] Uninit was stored to memory at: [ 616.490822][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 616.496012][T13233] ___sys_recvmsg+0x52e/0x840 [ 616.500250][T13250] ? should_fail+0x3f/0x810 [ 616.504994][T13233] do_recvmmsg+0x55a/0x1180 [ 616.510799][T13250] ? __stack_depot_save+0x21/0x4b0 [ 616.516682][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.518930][T13250] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 616.524025][T13233] do_syscall_64+0x3d/0xb0 [ 616.529755][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 616.534498][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.538939][T13250] __msan_chain_origin+0xbd/0x140 [ 616.543519][T13233] [ 616.548546][T13250] ___sys_recvmsg+0x52e/0x840 [ 616.553640][T13233] Uninit was stored to memory at: [ 616.559826][T13250] ? kmsan_internal_check_memory+0x94/0x530 [ 616.564383][T13233] ___sys_recvmsg+0x52e/0x840 [ 616.570059][T13250] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 616.576043][T13233] do_recvmmsg+0x55a/0x1180 [ 616.580989][T13250] do_recvmmsg+0x55a/0x1180 [ 616.583389][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.588019][T13250] ? do_syscall_64+0x3d/0xb0 [ 616.593078][T13233] do_syscall_64+0x3d/0xb0 [ 616.598894][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.603644][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.609384][T13250] do_syscall_64+0x3d/0xb0 [ 616.613947][T13233] [ 616.618363][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.623458][T13233] Uninit was stored to memory at: [ 616.627965][T13250] RIP: 0033:0x7f7deda89279 [ 616.632555][T13233] ___sys_recvmsg+0x52e/0x840 [ 616.637421][T13250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 616.643396][T13233] do_recvmmsg+0x55a/0x1180 [ 616.647720][T13250] RSP: 002b:00007f7deebb0168 EFLAGS: 00000246 [ 616.650045][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.655952][T13250] ORIG_RAX: 000000000000012b [ 616.655981][T13250] RAX: ffffffffffffffda RBX: 00007f7dedb9c050 RCX: 00007f7deda89279 [ 616.656040][T13250] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 616.661052][T13233] do_syscall_64+0x3d/0xb0 [ 616.665479][T13250] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 616.665530][T13250] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 616.665578][T13250] R13: 00007f7dee0cfb1f R14: 00007f7deebb0300 R15: 0000000000022000 [ 616.670233][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.689869][T13250] [ 616.691337][T13250] Uninit was stored to memory at: [ 616.694519][T13233] [ 616.700662][T13250] ___sys_recvmsg+0x52e/0x840 [ 616.705662][T13233] Uninit was stored to memory at: [ 616.710316][T13250] do_recvmmsg+0x55a/0x1180 [ 616.718463][T13233] ___sys_recvmsg+0x52e/0x840 [ 616.726389][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.730824][T13233] do_recvmmsg+0x55a/0x1180 [ 616.738862][T13250] do_syscall_64+0x3d/0xb0 [ 616.746936][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.754949][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.760862][T13233] do_syscall_64+0x3d/0xb0 [ 616.763942][T13250] [ 616.763956][T13250] Uninit was stored to memory at: [ 616.764067][T13250] ___sys_recvmsg+0x52e/0x840 [ 616.768980][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.771308][T13250] do_recvmmsg+0x55a/0x1180 [ 616.776058][T13233] [ 616.776071][T13233] Uninit was stored to memory at: [ 616.781067][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.785729][T13233] ___sys_recvmsg+0x52e/0x840 [ 616.790292][T13250] do_syscall_64+0x3d/0xb0 [ 616.795394][T13233] do_recvmmsg+0x55a/0x1180 [ 616.799880][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.804373][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.809375][T13250] [ 616.809389][T13250] Uninit was stored to memory at: [ 616.815343][T13233] do_syscall_64+0x3d/0xb0 [ 616.819830][T13250] ___sys_recvmsg+0x52e/0x840 [ 616.822146][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.827154][T13250] do_recvmmsg+0x55a/0x1180 [ 616.831978][T13233] [ 616.831993][T13233] Uninit was stored to memory at: [ 616.837866][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.842538][T13233] ___sys_recvmsg+0x52e/0x840 [ 616.844763][T13250] do_syscall_64+0x3d/0xb0 [ 616.849818][T13233] do_recvmmsg+0x55a/0x1180 [ 616.854868][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.859560][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.864029][T13250] [ 616.864044][T13250] Uninit was stored to memory at: [ 616.864153][T13250] ___sys_recvmsg+0x52e/0x840 [ 616.868573][T13233] do_syscall_64+0x3d/0xb0 [ 616.874563][T13250] do_recvmmsg+0x55a/0x1180 [ 616.879598][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.881990][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.887015][T13233] [ 616.887034][T13233] Local variable msg_sys created at: [ 616.891429][T13250] do_syscall_64+0x3d/0xb0 [ 616.896188][T13233] do_recvmmsg+0x5c/0x1180 [ 616.902125][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.906653][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 616.908980][T13250] [ 616.908994][T13250] Uninit was stored to memory at: [ 617.014755][T13250] ___sys_recvmsg+0x52e/0x840 [ 617.019649][T13250] do_recvmmsg+0x55a/0x1180 [ 617.024338][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 617.029479][T13250] do_syscall_64+0x3d/0xb0 [ 617.034081][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.040126][T13250] [ 617.042582][T13250] Uninit was stored to memory at: [ 617.047763][T13250] ___sys_recvmsg+0x52e/0x840 [ 617.052621][T13250] do_recvmmsg+0x55a/0x1180 [ 617.057235][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 617.062452][T13250] do_syscall_64+0x3d/0xb0 [ 617.066978][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.073098][T13250] [ 617.075484][T13250] Uninit was stored to memory at: [ 617.080666][T13250] ___sys_recvmsg+0x52e/0x840 [ 617.085537][T13250] do_recvmmsg+0x55a/0x1180 [ 617.090149][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 617.095357][T13250] do_syscall_64+0x3d/0xb0 [ 617.099893][T13250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.106039][T13250] [ 617.108427][T13250] Local variable msg_sys created at: [ 617.113862][T13250] do_recvmmsg+0x5c/0x1180 [ 617.118391][T13250] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 617.238851][T13233] not chained 550000 origins [ 617.243731][T13233] CPU: 1 PID: 13233 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 617.254275][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 617.264430][T13233] Call Trace: [ 617.267779][T13233] [ 617.270778][T13233] dump_stack_lvl+0x1c8/0x256 [ 617.275619][T13233] dump_stack+0x1a/0x1c [ 617.279910][T13233] kmsan_internal_chain_origin+0x78/0x120 [ 617.285776][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 617.291729][T13233] ? kfree+0x44/0x980 [ 617.295819][T13233] ? filter_irq_stacks+0x5c/0x1a0 [ 617.300978][T13233] ? do_recvmmsg+0x55a/0x1180 [ 617.305785][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 617.311747][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 617.317708][T13233] ? should_fail+0x3f/0x810 [ 617.322356][T13233] ? __stack_depot_save+0x21/0x4b0 [ 617.327618][T13233] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 617.334014][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 617.339972][T13233] __msan_chain_origin+0xbd/0x140 [ 617.345137][T13233] ___sys_recvmsg+0x52e/0x840 [ 617.349953][T13233] ? kmsan_internal_check_memory+0x94/0x530 [ 617.356001][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 617.361968][T13233] do_recvmmsg+0x55a/0x1180 [ 617.366622][T13233] ? do_syscall_64+0x3d/0xb0 [ 617.371328][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 617.376499][T13233] do_syscall_64+0x3d/0xb0 [ 617.381030][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.387071][T13233] RIP: 0033:0x7f105f689279 [ 617.391580][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 617.411335][T13233] RSP: 002b:00007f10607c8168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 617.419892][T13233] RAX: ffffffffffffffda RBX: 00007f105f79c120 RCX: 00007f105f689279 [ 617.427982][T13233] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 617.436047][T13233] RBP: 00007f105f6e3189 R08: 0000000000000000 R09: 0000000000000000 [ 617.444105][T13233] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 617.452157][T13233] R13: 00007f105fccfb1f R14: 00007f10607c8300 R15: 0000000000022000 [ 617.460334][T13233] [ 617.464194][T13233] Uninit was stored to memory at: [ 617.469400][T13233] ___sys_recvmsg+0x52e/0x840 [ 617.474358][T13233] do_recvmmsg+0x55a/0x1180 [ 617.478977][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 617.484248][T13233] do_syscall_64+0x3d/0xb0 [ 617.488790][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.495005][T13233] [ 617.497388][T13233] Uninit was stored to memory at: [ 617.502701][T13233] ___sys_recvmsg+0x52e/0x840 [ 617.507482][T13233] do_recvmmsg+0x55a/0x1180 [ 617.512223][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 617.517368][T13233] do_syscall_64+0x3d/0xb0 [ 617.522025][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.528082][T13233] [ 617.530480][T13233] Uninit was stored to memory at: [ 617.535807][T13233] ___sys_recvmsg+0x52e/0x840 [ 617.540609][T13233] do_recvmmsg+0x55a/0x1180 [ 617.545392][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 617.550544][T13233] do_syscall_64+0x3d/0xb0 [ 617.555357][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.561416][T13233] [ 617.563910][T13233] Uninit was stored to memory at: [ 617.569094][T13233] ___sys_recvmsg+0x52e/0x840 [ 617.574010][T13233] do_recvmmsg+0x55a/0x1180 [ 617.578626][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 617.583941][T13233] do_syscall_64+0x3d/0xb0 [ 617.588461][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.594619][T13233] [ 617.596997][T13233] Uninit was stored to memory at: [ 617.602315][T13233] ___sys_recvmsg+0x52e/0x840 [ 617.607111][T13233] do_recvmmsg+0x55a/0x1180 [ 617.611725][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 617.617012][T13233] do_syscall_64+0x3d/0xb0 [ 617.621541][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.627724][T13233] [ 617.630105][T13233] Uninit was stored to memory at: [ 617.635421][T13233] ___sys_recvmsg+0x52e/0x840 [ 617.640212][T13233] do_recvmmsg+0x55a/0x1180 [ 617.645011][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 617.650154][T13233] do_syscall_64+0x3d/0xb0 [ 617.654820][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.660852][T13233] [ 617.663364][T13233] Uninit was stored to memory at: [ 617.668526][T13233] ___sys_recvmsg+0x52e/0x840 [ 617.673515][T13233] do_recvmmsg+0x55a/0x1180 [ 617.678115][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 617.683360][T13233] do_syscall_64+0x3d/0xb0 [ 617.687881][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.693997][T13233] [ 617.696372][T13233] Local variable msg_sys created at: [ 617.701686][T13233] do_recvmmsg+0x5c/0x1180 [ 617.706350][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 617.836940][T13233] not chained 560000 origins [ 617.841614][T13233] CPU: 0 PID: 13233 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 617.852122][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 617.862230][T13233] Call Trace: [ 617.865548][T13233] [ 617.868511][T13233] dump_stack_lvl+0x1c8/0x256 [ 617.873289][T13233] dump_stack+0x1a/0x1c [ 617.877528][T13233] kmsan_internal_chain_origin+0x78/0x120 [ 617.883362][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 617.889309][T13233] ? kfree+0x44/0x980 [ 617.893348][T13233] ? filter_irq_stacks+0x5c/0x1a0 [ 617.898465][T13233] ? do_recvmmsg+0x55a/0x1180 [ 617.903224][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 617.909122][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 617.915019][T13233] ? should_fail+0x3f/0x810 [ 617.919602][T13233] ? __stack_depot_save+0x21/0x4b0 [ 617.924817][T13233] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 617.931201][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 617.937109][T13233] __msan_chain_origin+0xbd/0x140 [ 617.942272][T13233] ___sys_recvmsg+0x52e/0x840 [ 617.947065][T13233] ? kmsan_internal_check_memory+0x94/0x530 [ 617.953048][T13233] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 617.958943][T13233] do_recvmmsg+0x55a/0x1180 [ 617.963553][T13233] ? do_syscall_64+0x3d/0xb0 [ 617.968225][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 617.973327][T13233] do_syscall_64+0x3d/0xb0 [ 617.977804][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.983809][T13233] RIP: 0033:0x7f105f689279 [ 617.988280][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 618.007996][T13233] RSP: 002b:00007f10607c8168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 618.016541][T13233] RAX: ffffffffffffffda RBX: 00007f105f79c120 RCX: 00007f105f689279 [ 618.024612][T13233] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 618.032639][T13233] RBP: 00007f105f6e3189 R08: 0000000000000000 R09: 0000000000000000 [ 618.040659][T13233] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 618.048696][T13233] R13: 00007f105fccfb1f R14: 00007f10607c8300 R15: 0000000000022000 [ 618.056772][T13233] [ 618.060465][T13233] Uninit was stored to memory at: [ 618.065725][T13233] ___sys_recvmsg+0x52e/0x840 [ 618.070515][T13233] do_recvmmsg+0x55a/0x1180 [ 618.075892][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 618.081067][T13233] do_syscall_64+0x3d/0xb0 [ 618.085670][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 618.091737][T13233] [ 618.094233][T13233] Uninit was stored to memory at: [ 618.099383][T13233] ___sys_recvmsg+0x52e/0x840 [ 618.104265][T13233] do_recvmmsg+0x55a/0x1180 [ 618.108881][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 618.114151][T13233] do_syscall_64+0x3d/0xb0 [ 618.118663][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 618.124793][T13233] [ 618.127178][T13233] Uninit was stored to memory at: [ 618.132439][T13233] ___sys_recvmsg+0x52e/0x840 [ 618.137211][T13233] do_recvmmsg+0x55a/0x1180 [ 618.141878][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 618.147020][T13233] do_syscall_64+0x3d/0xb0 [ 618.151530][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 618.157689][T13233] [ 618.160158][T13233] Uninit was stored to memory at: [ 618.165569][T13233] ___sys_recvmsg+0x52e/0x840 [ 618.170356][T13233] do_recvmmsg+0x55a/0x1180 [ 618.175153][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 618.180280][T13233] do_syscall_64+0x3d/0xb0 [ 618.184874][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 618.190916][T13233] [ 618.193423][T13233] Uninit was stored to memory at: [ 618.198564][T13233] ___sys_recvmsg+0x52e/0x840 [ 618.203398][T13233] do_recvmmsg+0x55a/0x1180 [ 618.207999][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 618.213215][T13233] do_syscall_64+0x3d/0xb0 [ 618.217729][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 618.223818][T13233] [ 618.226190][T13233] Uninit was stored to memory at: [ 618.231315][T13233] ___sys_recvmsg+0x52e/0x840 [ 618.236234][T13233] do_recvmmsg+0x55a/0x1180 [ 618.240835][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 618.246385][T13233] do_syscall_64+0x3d/0xb0 [ 618.250905][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 618.257056][T13233] [ 618.259430][T13233] Uninit was stored to memory at: [ 618.264709][T13233] ___sys_recvmsg+0x52e/0x840 [ 618.269496][T13233] do_recvmmsg+0x55a/0x1180 [ 618.274226][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 618.279365][T13233] do_syscall_64+0x3d/0xb0 [ 618.284108][T13233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 618.290145][T13233] [ 618.292716][T13233] Local variable msg_sys created at: [ 618.298057][T13233] do_recvmmsg+0x5c/0x1180 [ 618.302677][T13233] __x64_sys_recvmmsg+0x3a7/0x4b0 18:28:39 executing program 5: syz_clone(0xb6200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:28:39 executing program 1: syz_clone3(&(0x7f0000001580)={0xdc002000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:28:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x7, &(0x7f0000000000), 0x4) 18:28:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x4, 0x3, 'netpci0\x00'}]}, 0x38}}, 0x0) 18:28:39 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d401000013002fe2"], 0x1d4}}, 0x0) 18:28:39 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3e9}, 0x10}}, 0x0) 18:28:39 executing program 5: bpf$MAP_CREATE(0x3, &(0x7f0000000000), 0x20000048) 18:28:39 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) bind(r0, &(0x7f00000000c0)=@ax25={{0x3, @null}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) 18:28:39 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0xe}, 0x10) 18:28:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 18:28:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x8, &(0x7f0000000000)=0xf11aa6250453444c, 0x4) 18:28:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001540)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x81}]}}}]}, 0x44}}, 0x0) 18:28:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 18:28:39 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0xc7f, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x33, 0x0, 0x0, r0, 0x0}]) 18:28:39 executing program 0: syz_clone3(&(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4a) syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:28:40 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f00000006c0), 0x4000, 0x0) 18:28:40 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3) recvfrom$inet(r0, 0x0, 0x0, 0x2100, 0x0, 0x0) 18:28:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x3, &(0x7f0000000000)=0xf11aa6250453444c, 0x4) 18:28:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5}, 0x48) 18:28:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5452, &(0x7f0000000740)={'ip_vti0\x00', 0x0}) 18:28:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 18:28:40 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5452, &(0x7f0000000740)={'ip_vti0\x00', 0x0}) 18:28:40 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000000c0)={0x4c, 0x12, 0xc11}, 0x4c}}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/192, 0xc0}, 0xa202) 18:28:40 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 18:28:40 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000000c0)={0x4c}, 0x4c}, 0x8}, 0x0) 18:28:40 executing program 2: syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000100)=""/217, &(0x7f0000000200)=[0x0], 0x1}, 0x58) 18:28:40 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000000c0)={0x54, 0x12, 0xc11, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}}, 0x0) 18:28:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newlink={0x20}, 0x20}}, 0x0) 18:28:40 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d401000015002fe225bd70000400df2528"], 0x1d4}}, 0x0) 18:28:40 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f9}, 0x10}}, 0x0) 18:28:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000040)=[{r2}, {r2, 0x208}], 0x2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 619.718528][T13316] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 18:28:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x25, &(0x7f0000000000)=0xf11aa6250453444c, 0x4) 18:28:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x5}, @IFLA_IFNAME={0x4, 0x3, 'netpci0\x00'}]}, 0x38}}, 0x0) 18:28:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000040)=[{}, {r1}, {0xffffffffffffffff, 0x9480}, {r0}, {r1}, {r1, 0x208}], 0x6, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000180)={[0x7f]}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 18:28:41 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:28:41 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000240)={0x1ffff000, 0x2, 0x0}, 0x0) 18:28:41 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) select(0x40, &(0x7f00000005c0), &(0x7f0000000600)={0x8}, 0x0, 0x0) 18:28:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 18:28:41 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d401000013002fe225bd70000400df25288080034e244e2103400000010400003e0600080080000003000000d2db000000400100ffffff7f", @ANYRES32, @ANYBLOB="09000000090000001f00000009000000c20001000d"], 0x1d4}}, 0x0) 18:28:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0xfffffffffffffffe}, 0x300}, 0x0) 18:28:41 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@local, @in=@multicast2}, @sadb_address={0x3}]}, 0x50}}, 0x0) 18:28:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0x1b8, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) [ 621.040200][T13337] not chained 570000 origins [ 621.045186][T13337] CPU: 1 PID: 13337 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 621.055740][T13337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 621.065903][T13337] Call Trace: [ 621.069264][T13337] [ 621.072286][T13337] dump_stack_lvl+0x1c8/0x256 [ 621.077169][T13337] dump_stack+0x1a/0x1c [ 621.081471][T13337] kmsan_internal_chain_origin+0x78/0x120 [ 621.087353][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 621.093328][T13337] ? kfree+0x44/0x980 [ 621.097444][T13337] ? filter_irq_stacks+0x5c/0x1a0 [ 621.102616][T13337] ? do_recvmmsg+0x55a/0x1180 [ 621.107418][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 621.113401][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 621.119377][T13337] ? should_fail+0x3f/0x810 [ 621.124037][T13337] ? __stack_depot_save+0x21/0x4b0 [ 621.129310][T13337] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 621.135726][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 621.141687][T13337] __msan_chain_origin+0xbd/0x140 [ 621.146853][T13337] ___sys_recvmsg+0x52e/0x840 [ 621.151677][T13337] ? kmsan_internal_check_memory+0x94/0x530 [ 621.157723][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 621.163686][T13337] do_recvmmsg+0x55a/0x1180 [ 621.168341][T13337] ? do_syscall_64+0x3d/0xb0 [ 621.173054][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 621.178216][T13337] do_syscall_64+0x3d/0xb0 [ 621.182746][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.188794][T13337] RIP: 0033:0x7f8d84489279 [ 621.193311][T13337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 621.213161][T13337] RSP: 002b:00007f8d833fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 621.221710][T13337] RAX: ffffffffffffffda RBX: 00007f8d8459c120 RCX: 00007f8d84489279 [ 621.229792][T13337] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 621.237866][T13337] RBP: 00007f8d844e3189 R08: 0000000000000000 R09: 0000000000000000 [ 621.246026][T13337] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 621.254095][T13337] R13: 00007f8d84acfb1f R14: 00007f8d833fe300 R15: 0000000000022000 [ 621.262195][T13337] [ 621.266630][T13337] Uninit was stored to memory at: [ 621.271948][T13337] ___sys_recvmsg+0x52e/0x840 [ 621.276733][T13337] do_recvmmsg+0x55a/0x1180 [ 621.281347][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 621.286896][T13337] do_syscall_64+0x3d/0xb0 [ 621.291429][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.297591][T13337] [ 621.299978][T13337] Uninit was stored to memory at: [ 621.305330][T13337] ___sys_recvmsg+0x52e/0x840 [ 621.310121][T13337] do_recvmmsg+0x55a/0x1180 [ 621.314904][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 621.320051][T13337] do_syscall_64+0x3d/0xb0 [ 621.324902][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.330959][T13337] [ 621.333509][T13337] Uninit was stored to memory at: [ 621.338708][T13337] ___sys_recvmsg+0x52e/0x840 [ 621.343659][T13337] do_recvmmsg+0x55a/0x1180 [ 621.348277][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 621.353643][T13337] do_syscall_64+0x3d/0xb0 [ 621.358204][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.364488][T13337] [ 621.366872][T13337] Uninit was stored to memory at: [ 621.372219][T13337] ___sys_recvmsg+0x52e/0x840 [ 621.377009][T13337] do_recvmmsg+0x55a/0x1180 [ 621.381626][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 621.386934][T13337] do_syscall_64+0x3d/0xb0 [ 621.391472][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.397669][T13337] [ 621.400053][T13337] Uninit was stored to memory at: [ 621.405403][T13337] ___sys_recvmsg+0x52e/0x840 [ 621.410257][T13337] do_recvmmsg+0x55a/0x1180 [ 621.415093][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 621.420242][T13337] do_syscall_64+0x3d/0xb0 [ 621.424976][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.431026][T13337] [ 621.433581][T13337] Uninit was stored to memory at: [ 621.438773][T13337] ___sys_recvmsg+0x52e/0x840 [ 621.443911][T13337] do_recvmmsg+0x55a/0x1180 [ 621.448532][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 621.453843][T13337] do_syscall_64+0x3d/0xb0 [ 621.458372][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.464589][T13337] [ 621.466977][T13337] Uninit was stored to memory at: [ 621.472370][T13337] ___sys_recvmsg+0x52e/0x840 [ 621.477167][T13337] do_recvmmsg+0x55a/0x1180 [ 621.481936][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 621.487078][T13337] do_syscall_64+0x3d/0xb0 [ 621.491608][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.497846][T13337] [ 621.500228][T13337] Local variable msg_sys created at: [ 621.505753][T13337] do_recvmmsg+0x5c/0x1180 [ 621.510283][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 621.706359][T13337] not chained 580000 origins [ 621.711162][T13337] CPU: 0 PID: 13337 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 621.721706][T13337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 621.731857][T13337] Call Trace: [ 621.735207][T13337] [ 621.738214][T13337] dump_stack_lvl+0x1c8/0x256 [ 621.743053][T13337] dump_stack+0x1a/0x1c [ 621.747351][T13337] kmsan_internal_chain_origin+0x78/0x120 [ 621.753215][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 621.759168][T13337] ? kfree+0x44/0x980 [ 621.763259][T13337] ? filter_irq_stacks+0x5c/0x1a0 [ 621.768412][T13337] ? do_recvmmsg+0x55a/0x1180 [ 621.773218][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 621.779188][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 621.785155][T13337] ? should_fail+0x3f/0x810 [ 621.789805][T13337] ? __stack_depot_save+0x21/0x4b0 [ 621.795154][T13337] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 621.801558][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 621.807511][T13337] __msan_chain_origin+0xbd/0x140 [ 621.812668][T13337] ___sys_recvmsg+0x52e/0x840 [ 621.817495][T13337] ? kmsan_internal_check_memory+0x94/0x530 [ 621.823548][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 621.829511][T13337] do_recvmmsg+0x55a/0x1180 [ 621.834172][T13337] ? do_syscall_64+0x3d/0xb0 [ 621.838877][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 621.844043][T13337] do_syscall_64+0x3d/0xb0 [ 621.848834][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.854893][T13337] RIP: 0033:0x7f8d84489279 [ 621.859423][T13337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 621.879191][T13337] RSP: 002b:00007f8d833fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 621.887747][T13337] RAX: ffffffffffffffda RBX: 00007f8d8459c120 RCX: 00007f8d84489279 [ 621.895843][T13337] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 621.903928][T13337] RBP: 00007f8d844e3189 R08: 0000000000000000 R09: 0000000000000000 [ 621.912356][T13337] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 621.920430][T13337] R13: 00007f8d84acfb1f R14: 00007f8d833fe300 R15: 0000000000022000 [ 621.928543][T13337] [ 621.932275][T13337] Uninit was stored to memory at: [ 621.937474][T13337] ___sys_recvmsg+0x52e/0x840 [ 621.942368][T13337] do_recvmmsg+0x55a/0x1180 [ 621.946984][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 621.952328][T13337] do_syscall_64+0x3d/0xb0 [ 621.956870][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.963755][T13337] [ 621.966139][T13337] Uninit was stored to memory at: [ 621.971317][T13337] ___sys_recvmsg+0x52e/0x840 [ 621.976185][T13337] do_recvmmsg+0x55a/0x1180 [ 621.980799][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 621.986024][T13337] do_syscall_64+0x3d/0xb0 [ 621.990552][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.996678][T13337] [ 621.999060][T13337] Uninit was stored to memory at: [ 622.004323][T13337] ___sys_recvmsg+0x52e/0x840 [ 622.009106][T13337] do_recvmmsg+0x55a/0x1180 [ 622.013789][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 622.018939][T13337] do_syscall_64+0x3d/0xb0 [ 622.023544][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.029595][T13337] [ 622.032044][T13337] Uninit was stored to memory at: [ 622.037346][T13337] ___sys_recvmsg+0x52e/0x840 [ 622.042221][T13337] do_recvmmsg+0x55a/0x1180 [ 622.046840][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 622.052058][T13337] do_syscall_64+0x3d/0xb0 [ 622.056588][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.062717][T13337] [ 622.065094][T13337] Uninit was stored to memory at: [ 622.070272][T13337] ___sys_recvmsg+0x52e/0x840 [ 622.075141][T13337] do_recvmmsg+0x55a/0x1180 [ 622.079755][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 622.085004][T13337] do_syscall_64+0x3d/0xb0 [ 622.089526][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.095647][T13337] [ 622.098026][T13337] Uninit was stored to memory at: [ 622.103270][T13337] ___sys_recvmsg+0x52e/0x840 [ 622.108059][T13337] do_recvmmsg+0x55a/0x1180 [ 622.112757][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 622.117905][T13337] do_syscall_64+0x3d/0xb0 [ 622.122522][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.128662][T13337] [ 622.131046][T13337] Uninit was stored to memory at: [ 622.136321][T13337] ___sys_recvmsg+0x52e/0x840 [ 622.141115][T13337] do_recvmmsg+0x55a/0x1180 [ 622.145804][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 622.150948][T13337] do_syscall_64+0x3d/0xb0 [ 622.155558][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.161611][T13337] [ 622.164067][T13337] Local variable msg_sys created at: [ 622.169416][T13337] do_recvmmsg+0x5c/0x1180 [ 622.174028][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 622.305385][T13329] not chained 590000 origins [ 622.310090][T13329] CPU: 0 PID: 13329 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 622.320641][T13329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 622.330803][T13329] Call Trace: [ 622.334157][T13329] [ 622.337163][T13329] dump_stack_lvl+0x1c8/0x256 [ 622.342004][T13329] dump_stack+0x1a/0x1c [ 622.346311][T13329] kmsan_internal_chain_origin+0x78/0x120 [ 622.352198][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 622.358166][T13329] ? kfree+0x44/0x980 [ 622.362267][T13329] ? filter_irq_stacks+0x5c/0x1a0 [ 622.367437][T13329] ? do_recvmmsg+0x55a/0x1180 [ 622.372238][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 622.378210][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 622.384181][T13329] ? should_fail+0x3f/0x810 [ 622.388841][T13329] ? __stack_depot_save+0x21/0x4b0 [ 622.394113][T13329] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 622.400517][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 622.406483][T13329] __msan_chain_origin+0xbd/0x140 [ 622.411657][T13329] ___sys_recvmsg+0x52e/0x840 [ 622.416483][T13329] ? kmsan_internal_check_memory+0x94/0x530 [ 622.422540][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 622.428510][T13329] do_recvmmsg+0x55a/0x1180 [ 622.433168][T13329] ? do_syscall_64+0x3d/0xb0 [ 622.437882][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 622.443051][T13329] do_syscall_64+0x3d/0xb0 [ 622.447586][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.453638][T13329] RIP: 0033:0x7f1c45489279 [ 622.458152][T13329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 622.477911][T13329] RSP: 002b:00007f1c443fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 622.486466][T13329] RAX: ffffffffffffffda RBX: 00007f1c4559c120 RCX: 00007f1c45489279 [ 622.494560][T13329] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 622.502650][T13329] RBP: 00007f1c454e3189 R08: 0000000000000000 R09: 0000000000000000 [ 622.510744][T13329] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 622.518826][T13329] R13: 00007f1c45acfb1f R14: 00007f1c443fe300 R15: 0000000000022000 [ 622.527020][T13329] [ 622.531078][T13329] Uninit was stored to memory at: [ 622.536371][T13329] ___sys_recvmsg+0x52e/0x840 [ 622.541168][T13329] do_recvmmsg+0x55a/0x1180 [ 622.545860][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 622.551007][T13329] do_syscall_64+0x3d/0xb0 [ 622.555650][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.561694][T13329] [ 622.564171][T13329] Uninit was stored to memory at: [ 622.569373][T13329] ___sys_recvmsg+0x52e/0x840 [ 622.574307][T13329] do_recvmmsg+0x55a/0x1180 [ 622.578934][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 622.584366][T13329] do_syscall_64+0x3d/0xb0 [ 622.588910][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.595080][T13329] [ 622.597476][T13329] Uninit was stored to memory at: [ 622.602789][T13329] ___sys_recvmsg+0x52e/0x840 [ 622.607583][T13329] do_recvmmsg+0x55a/0x1180 [ 622.612377][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 622.617529][T13329] do_syscall_64+0x3d/0xb0 [ 622.622169][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.628213][T13329] [ 622.630595][T13329] Uninit was stored to memory at: [ 622.635896][T13329] ___sys_recvmsg+0x52e/0x840 [ 622.640694][T13329] do_recvmmsg+0x55a/0x1180 [ 622.645426][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 622.650575][T13329] do_syscall_64+0x3d/0xb0 [ 622.655235][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.661284][T13329] [ 622.663788][T13329] Uninit was stored to memory at: [ 622.668967][T13329] ___sys_recvmsg+0x52e/0x840 [ 622.673918][T13329] do_recvmmsg+0x55a/0x1180 [ 622.678537][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 622.683824][T13329] do_syscall_64+0x3d/0xb0 [ 622.688356][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.694564][T13329] [ 622.696954][T13329] Uninit was stored to memory at: [ 622.702343][T13329] ___sys_recvmsg+0x52e/0x840 [ 622.707141][T13329] do_recvmmsg+0x55a/0x1180 [ 622.711958][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 622.717106][T13329] do_syscall_64+0x3d/0xb0 [ 622.721635][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.727865][T13329] [ 622.730249][T13329] Uninit was stored to memory at: [ 622.735604][T13329] ___sys_recvmsg+0x52e/0x840 [ 622.740397][T13329] do_recvmmsg+0x55a/0x1180 [ 622.745143][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 622.750289][T13329] do_syscall_64+0x3d/0xb0 [ 622.754997][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.761051][T13329] [ 622.763584][T13329] Local variable msg_sys created at: [ 622.768937][T13329] do_recvmmsg+0x5c/0x1180 [ 622.773681][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.123034][T13329] not chained 600000 origins [ 623.127827][T13329] CPU: 1 PID: 13329 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 623.138455][T13329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 623.148650][T13329] Call Trace: [ 623.152009][T13329] [ 623.155014][T13329] dump_stack_lvl+0x1c8/0x256 [ 623.159857][T13329] dump_stack+0x1a/0x1c [ 623.164155][T13329] kmsan_internal_chain_origin+0x78/0x120 [ 623.170028][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 623.175993][T13329] ? kfree+0x44/0x980 [ 623.180088][T13329] ? filter_irq_stacks+0x5c/0x1a0 [ 623.185244][T13329] ? do_recvmmsg+0x55a/0x1180 [ 623.190038][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 623.196005][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 623.201967][T13329] ? should_fail+0x3f/0x810 [ 623.206624][T13329] ? __stack_depot_save+0x21/0x4b0 [ 623.211885][T13329] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 623.218287][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 623.224246][T13329] __msan_chain_origin+0xbd/0x140 [ 623.229416][T13329] ___sys_recvmsg+0x52e/0x840 [ 623.234235][T13329] ? kmsan_internal_check_memory+0x94/0x530 [ 623.240319][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 623.246298][T13329] do_recvmmsg+0x55a/0x1180 [ 623.250970][T13329] ? do_syscall_64+0x3d/0xb0 [ 623.255688][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.260867][T13329] do_syscall_64+0x3d/0xb0 [ 623.265408][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.271457][T13329] RIP: 0033:0x7f1c45489279 [ 623.275972][T13329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 623.295737][T13329] RSP: 002b:00007f1c443fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 623.304285][T13329] RAX: ffffffffffffffda RBX: 00007f1c4559c120 RCX: 00007f1c45489279 [ 623.312365][T13329] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 623.320446][T13329] RBP: 00007f1c454e3189 R08: 0000000000000000 R09: 0000000000000000 [ 623.328520][T13329] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 623.336597][T13329] R13: 00007f1c45acfb1f R14: 00007f1c443fe300 R15: 0000000000022000 [ 623.344700][T13329] [ 623.348290][T13329] Uninit was stored to memory at: [ 623.353587][T13329] ___sys_recvmsg+0x52e/0x840 [ 623.358378][T13329] do_recvmmsg+0x55a/0x1180 [ 623.363187][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.368335][T13329] do_syscall_64+0x3d/0xb0 [ 623.372967][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.379017][T13329] [ 623.381392][T13329] Uninit was stored to memory at: [ 623.386702][T13329] ___sys_recvmsg+0x52e/0x840 [ 623.391489][T13329] do_recvmmsg+0x55a/0x1180 [ 623.396194][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.401332][T13329] do_syscall_64+0x3d/0xb0 [ 623.406039][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.412236][T13329] [ 623.414613][T13329] Uninit was stored to memory at: [ 623.418617][T13337] not chained 610000 origins [ 623.419747][T13329] ___sys_recvmsg+0x52e/0x840 [ 623.424396][T13337] CPU: 0 PID: 13337 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 623.429038][T13329] do_recvmmsg+0x55a/0x1180 [ 623.439446][T13337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 623.439488][T13337] Call Trace: [ 623.439513][T13337] [ 623.439540][T13337] dump_stack_lvl+0x1c8/0x256 [ 623.444135][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.455843][T13337] dump_stack+0x1a/0x1c [ 623.455942][T13337] kmsan_internal_chain_origin+0x78/0x120 [ 623.459230][T13329] do_syscall_64+0x3d/0xb0 [ 623.462174][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 623.462283][T13337] ? kfree+0x44/0x980 [ 623.462357][T13337] ? filter_irq_stacks+0x5c/0x1a0 [ 623.467005][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.472039][T13337] ? do_recvmmsg+0x55a/0x1180 [ 623.472113][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 623.476274][T13329] [ 623.476288][T13329] Uninit was stored to memory at: [ 623.482005][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 623.482121][T13337] ? should_fail+0x3f/0x810 [ 623.486596][T13329] ___sys_recvmsg+0x52e/0x840 [ 623.492315][T13337] ? __stack_depot_save+0x21/0x4b0 [ 623.492426][T13337] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 623.496476][T13329] do_recvmmsg+0x55a/0x1180 [ 623.501508][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 623.507512][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.512065][T13337] __msan_chain_origin+0xbd/0x140 [ 623.512167][T13337] ___sys_recvmsg+0x52e/0x840 [ 623.517957][T13329] do_syscall_64+0x3d/0xb0 [ 623.520309][T13337] ? kmsan_internal_check_memory+0x94/0x530 [ 623.525528][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.531119][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 623.535740][T13329] [ 623.540293][T13337] do_recvmmsg+0x55a/0x1180 [ 623.545500][T13329] Uninit was stored to memory at: [ 623.551668][T13337] ? do_syscall_64+0x3d/0xb0 [ 623.556305][T13329] ___sys_recvmsg+0x52e/0x840 [ 623.561942][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.562040][T13337] do_syscall_64+0x3d/0xb0 [ 623.567149][T13329] do_recvmmsg+0x55a/0x1180 [ 623.572180][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.572294][T13337] RIP: 0033:0x7f8d84489279 [ 623.576946][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.581364][T13337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 623.587454][T13329] do_syscall_64+0x3d/0xb0 [ 623.593133][T13337] RSP: 002b:00007f8d833fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 623.593210][T13337] RAX: ffffffffffffffda RBX: 00007f8d8459c120 RCX: 00007f8d84489279 [ 623.599017][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.601347][T13337] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 623.606011][T13329] [ 623.610865][T13337] RBP: 00007f8d844e3189 R08: 0000000000000000 R09: 0000000000000000 [ 623.615555][T13329] Uninit was stored to memory at: [ 623.620145][T13337] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 623.625365][T13329] ___sys_recvmsg+0x52e/0x840 [ 623.629577][T13337] R13: 00007f8d84acfb1f R14: 00007f8d833fe300 R15: 0000000000022000 [ 623.634177][T13329] do_recvmmsg+0x55a/0x1180 [ 623.639990][T13337] [ 623.644534][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.651206][T13337] Uninit was stored to memory at: [ 623.669142][T13329] do_syscall_64+0x3d/0xb0 [ 623.673675][T13337] ___sys_recvmsg+0x52e/0x840 [ 623.682168][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.690054][T13337] do_recvmmsg+0x55a/0x1180 [ 623.696043][T13329] [ 623.704048][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.704124][T13337] do_syscall_64+0x3d/0xb0 [ 623.704187][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.704290][T13337] [ 623.704303][T13337] Uninit was stored to memory at: [ 623.704415][T13337] ___sys_recvmsg+0x52e/0x840 [ 623.706699][T13329] Uninit was stored to memory at: [ 623.706806][T13329] ___sys_recvmsg+0x52e/0x840 [ 623.714742][T13337] do_recvmmsg+0x55a/0x1180 [ 623.719800][T13329] do_recvmmsg+0x55a/0x1180 [ 623.727836][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.732672][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.740584][T13337] do_syscall_64+0x3d/0xb0 [ 623.745184][T13329] do_syscall_64+0x3d/0xb0 [ 623.748170][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.753269][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.758278][T13337] [ 623.758294][T13337] Uninit was stored to memory at: [ 623.762833][T13329] [ 623.767542][T13337] ___sys_recvmsg+0x52e/0x840 [ 623.773417][T13329] Local variable msg_sys created at: [ 623.777905][T13337] do_recvmmsg+0x55a/0x1180 [ 623.780234][T13329] do_recvmmsg+0x5c/0x1180 [ 623.785319][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.789776][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.795739][T13337] do_syscall_64+0x3d/0xb0 [ 623.795808][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.910133][T13337] [ 623.912601][T13337] Uninit was stored to memory at: [ 623.917794][T13337] ___sys_recvmsg+0x52e/0x840 [ 623.922658][T13337] do_recvmmsg+0x55a/0x1180 [ 623.927279][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.932515][T13337] do_syscall_64+0x3d/0xb0 [ 623.937051][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.943180][T13337] [ 623.945564][T13337] Uninit was stored to memory at: [ 623.950747][T13337] ___sys_recvmsg+0x52e/0x840 [ 623.955616][T13337] do_recvmmsg+0x55a/0x1180 [ 623.960262][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.965479][T13337] do_syscall_64+0x3d/0xb0 [ 623.970008][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.976155][T13337] [ 623.978550][T13337] Uninit was stored to memory at: [ 623.983792][T13337] ___sys_recvmsg+0x52e/0x840 [ 623.988577][T13337] do_recvmmsg+0x55a/0x1180 [ 623.993261][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 623.998409][T13337] do_syscall_64+0x3d/0xb0 [ 624.002995][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.009049][T13337] [ 624.011434][T13337] Uninit was stored to memory at: [ 624.016779][T13337] ___sys_recvmsg+0x52e/0x840 [ 624.021573][T13337] do_recvmmsg+0x55a/0x1180 [ 624.026267][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.031421][T13337] do_syscall_64+0x3d/0xb0 [ 624.036024][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.042152][T13337] [ 624.044537][T13337] Local variable msg_sys created at: [ 624.049893][T13337] do_recvmmsg+0x5c/0x1180 [ 624.054511][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.134088][T13329] not chained 620000 origins [ 624.138792][T13329] CPU: 0 PID: 13329 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 624.149354][T13329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 624.159512][T13329] Call Trace: [ 624.162865][T13329] [ 624.165865][T13329] dump_stack_lvl+0x1c8/0x256 [ 624.170705][T13329] dump_stack+0x1a/0x1c [ 624.174999][T13329] kmsan_internal_chain_origin+0x78/0x120 [ 624.180865][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 624.186819][T13329] ? kfree+0x44/0x980 [ 624.190910][T13329] ? filter_irq_stacks+0x5c/0x1a0 [ 624.196063][T13329] ? do_recvmmsg+0x55a/0x1180 [ 624.200853][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 624.206814][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 624.212782][T13329] ? should_fail+0x3f/0x810 [ 624.217430][T13329] ? __stack_depot_save+0x21/0x4b0 [ 624.222685][T13329] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 624.229088][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 624.235041][T13329] __msan_chain_origin+0xbd/0x140 [ 624.240203][T13329] ___sys_recvmsg+0x52e/0x840 [ 624.245019][T13329] ? kmsan_internal_check_memory+0x94/0x530 [ 624.251068][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 624.257029][T13329] do_recvmmsg+0x55a/0x1180 [ 624.261685][T13329] ? do_syscall_64+0x3d/0xb0 [ 624.266392][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.271558][T13329] do_syscall_64+0x3d/0xb0 [ 624.276090][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.282141][T13329] RIP: 0033:0x7f1c45489279 [ 624.286644][T13329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 624.306664][T13329] RSP: 002b:00007f1c443fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 624.315208][T13329] RAX: ffffffffffffffda RBX: 00007f1c4559c120 RCX: 00007f1c45489279 [ 624.323295][T13329] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 624.331806][T13329] RBP: 00007f1c454e3189 R08: 0000000000000000 R09: 0000000000000000 [ 624.339879][T13329] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 624.347949][T13329] R13: 00007f1c45acfb1f R14: 00007f1c443fe300 R15: 0000000000022000 [ 624.356052][T13329] [ 624.359611][T13329] Uninit was stored to memory at: [ 624.364876][T13329] ___sys_recvmsg+0x52e/0x840 [ 624.369668][T13329] do_recvmmsg+0x55a/0x1180 [ 624.374359][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.379501][T13329] do_syscall_64+0x3d/0xb0 [ 624.384192][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.390244][T13329] [ 624.392746][T13329] Uninit was stored to memory at: [ 624.397932][T13329] ___sys_recvmsg+0x52e/0x840 [ 624.402935][T13329] do_recvmmsg+0x55a/0x1180 [ 624.407559][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.412814][T13329] do_syscall_64+0x3d/0xb0 [ 624.417349][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.423536][T13329] [ 624.425917][T13329] Uninit was stored to memory at: [ 624.431097][T13329] ___sys_recvmsg+0x52e/0x840 [ 624.436025][T13329] do_recvmmsg+0x55a/0x1180 [ 624.440644][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.446036][T13329] do_syscall_64+0x3d/0xb0 [ 624.450569][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.456739][T13329] [ 624.459125][T13329] Uninit was stored to memory at: [ 624.464438][T13329] ___sys_recvmsg+0x52e/0x840 [ 624.469222][T13329] do_recvmmsg+0x55a/0x1180 [ 624.474089][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.479227][T13329] do_syscall_64+0x3d/0xb0 [ 624.481574][T13337] not chained 630000 origins [ 624.483815][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.483926][T13329] [ 624.488526][T13337] CPU: 1 PID: 13337 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 624.494479][T13329] Uninit was stored to memory at: [ 624.496741][T13337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 624.507303][T13329] ___sys_recvmsg+0x52e/0x840 [ 624.512168][T13337] Call Trace: [ 624.512195][T13337] [ 624.512221][T13337] dump_stack_lvl+0x1c8/0x256 [ 624.522354][T13329] do_recvmmsg+0x55a/0x1180 [ 624.526973][T13337] dump_stack+0x1a/0x1c [ 624.530246][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.533183][T13337] kmsan_internal_chain_origin+0x78/0x120 [ 624.537912][T13329] do_syscall_64+0x3d/0xb0 [ 624.542412][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 624.542531][T13337] ? kfree+0x44/0x980 [ 624.542599][T13337] ? filter_irq_stacks+0x5c/0x1a0 [ 624.546776][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.551818][T13337] ? do_recvmmsg+0x55a/0x1180 [ 624.551900][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 624.557588][T13329] [ 624.557603][T13329] Uninit was stored to memory at: [ 624.562011][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 624.567954][T13329] ___sys_recvmsg+0x52e/0x840 [ 624.571853][T13337] ? should_fail+0x3f/0x810 [ 624.576923][T13329] do_recvmmsg+0x55a/0x1180 [ 624.582811][T13337] ? __stack_depot_save+0x21/0x4b0 [ 624.587540][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.593347][T13337] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 624.593460][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 624.595786][T13329] do_syscall_64+0x3d/0xb0 [ 624.600815][T13337] __msan_chain_origin+0xbd/0x140 [ 624.606671][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.611288][T13337] ___sys_recvmsg+0x52e/0x840 [ 624.615842][T13329] [ 624.620312][T13337] ? kmsan_internal_check_memory+0x94/0x530 [ 624.625457][T13329] Uninit was stored to memory at: [ 624.630425][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 624.636799][T13329] ___sys_recvmsg+0x52e/0x840 [ 624.642465][T13337] do_recvmmsg+0x55a/0x1180 [ 624.642575][T13337] ? do_syscall_64+0x3d/0xb0 [ 624.647024][T13329] do_recvmmsg+0x55a/0x1180 [ 624.652053][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.652151][T13337] do_syscall_64+0x3d/0xb0 [ 624.657995][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.662674][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.665057][T13329] do_syscall_64+0x3d/0xb0 [ 624.670946][T13337] RIP: 0033:0x7f8d84489279 [ 624.676027][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.681766][T13337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 624.681850][T13337] RSP: 002b:00007f8d833fe168 EFLAGS: 00000246 [ 624.686495][T13329] [ 624.686511][T13329] Local variable msg_sys created at: [ 624.690995][T13337] ORIG_RAX: 000000000000012b [ 624.691023][T13337] RAX: ffffffffffffffda RBX: 00007f8d8459c120 RCX: 00007f8d84489279 [ 624.695709][T13329] do_recvmmsg+0x5c/0x1180 [ 624.700076][T13337] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 624.705157][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.709509][T13337] RBP: 00007f8d844e3189 R08: 0000000000000000 R09: 0000000000000000 [ 624.808513][T13337] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 624.816586][T13337] R13: 00007f8d84acfb1f R14: 00007f8d833fe300 R15: 0000000000022000 [ 624.824686][T13337] [ 624.828324][T13337] Uninit was stored to memory at: [ 624.833609][T13337] ___sys_recvmsg+0x52e/0x840 [ 624.838394][T13337] do_recvmmsg+0x55a/0x1180 [ 624.843117][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.848332][T13337] do_syscall_64+0x3d/0xb0 [ 624.852955][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.859001][T13337] [ 624.861380][T13337] Uninit was stored to memory at: [ 624.866690][T13337] ___sys_recvmsg+0x52e/0x840 [ 624.871571][T13337] do_recvmmsg+0x55a/0x1180 [ 624.876332][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.881481][T13337] do_syscall_64+0x3d/0xb0 [ 624.886315][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.892505][T13337] [ 624.894895][T13337] Uninit was stored to memory at: [ 624.900071][T13337] ___sys_recvmsg+0x52e/0x840 [ 624.905049][T13337] do_recvmmsg+0x55a/0x1180 [ 624.909666][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.914955][T13337] do_syscall_64+0x3d/0xb0 [ 624.919481][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.925704][T13337] [ 624.928088][T13337] Uninit was stored to memory at: [ 624.933465][T13337] ___sys_recvmsg+0x52e/0x840 [ 624.938266][T13337] do_recvmmsg+0x55a/0x1180 [ 624.943113][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.948293][T13337] do_syscall_64+0x3d/0xb0 [ 624.952961][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.959010][T13337] [ 624.961401][T13337] Uninit was stored to memory at: [ 624.966764][T13337] ___sys_recvmsg+0x52e/0x840 [ 624.971550][T13337] do_recvmmsg+0x55a/0x1180 [ 624.976297][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 624.981449][T13337] do_syscall_64+0x3d/0xb0 [ 624.986143][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.992300][T13337] [ 624.994688][T13337] Uninit was stored to memory at: [ 624.999867][T13337] ___sys_recvmsg+0x52e/0x840 [ 625.004865][T13337] do_recvmmsg+0x55a/0x1180 [ 625.009485][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.014837][T13337] do_syscall_64+0x3d/0xb0 [ 625.017720][T13329] not chained 640000 origins [ 625.019322][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.024273][T13329] CPU: 0 PID: 13329 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 625.030135][T13337] [ 625.030151][T13337] Uninit was stored to memory at: [ 625.040546][T13329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 625.040589][T13329] Call Trace: [ 625.040614][T13329] [ 625.040638][T13329] dump_stack_lvl+0x1c8/0x256 [ 625.043237][T13337] ___sys_recvmsg+0x52e/0x840 [ 625.048026][T13329] dump_stack+0x1a/0x1c [ 625.058175][T13337] do_recvmmsg+0x55a/0x1180 [ 625.061364][T13329] kmsan_internal_chain_origin+0x78/0x120 [ 625.064495][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.068987][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 625.073738][T13337] do_syscall_64+0x3d/0xb0 [ 625.077810][T13329] ? kfree+0x44/0x980 [ 625.082410][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.088027][T13329] ? filter_irq_stacks+0x5c/0x1a0 [ 625.093119][T13337] [ 625.098855][T13329] ? do_recvmmsg+0x55a/0x1180 [ 625.103370][T13337] Local variable msg_sys created at: [ 625.107233][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 625.113204][T13337] do_recvmmsg+0x5c/0x1180 [ 625.118147][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 625.120487][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.125178][T13329] ? should_fail+0x3f/0x810 [ 625.125295][T13329] ? __stack_depot_save+0x21/0x4b0 [ 625.125400][T13329] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 625.125513][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 625.174571][T13329] __msan_chain_origin+0xbd/0x140 [ 625.179753][T13329] ___sys_recvmsg+0x52e/0x840 [ 625.184579][T13329] ? kmsan_internal_check_memory+0x94/0x530 [ 625.190627][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 625.196592][T13329] do_recvmmsg+0x55a/0x1180 [ 625.201247][T13329] ? do_syscall_64+0x3d/0xb0 [ 625.205957][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.211115][T13329] do_syscall_64+0x3d/0xb0 [ 625.215647][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.221699][T13329] RIP: 0033:0x7f1c45489279 [ 625.226207][T13329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 625.245955][T13329] RSP: 002b:00007f1c443fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 625.254494][T13329] RAX: ffffffffffffffda RBX: 00007f1c4559c120 RCX: 00007f1c45489279 [ 625.262574][T13329] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 625.270646][T13329] RBP: 00007f1c454e3189 R08: 0000000000000000 R09: 0000000000000000 [ 625.278717][T13329] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 625.286785][T13329] R13: 00007f1c45acfb1f R14: 00007f1c443fe300 R15: 0000000000022000 [ 625.294888][T13329] [ 625.298383][T13329] Uninit was stored to memory at: [ 625.303652][T13329] ___sys_recvmsg+0x52e/0x840 [ 625.308440][T13329] do_recvmmsg+0x55a/0x1180 [ 625.313114][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.318253][T13329] do_syscall_64+0x3d/0xb0 [ 625.322850][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.328892][T13329] [ 625.331269][T13329] Uninit was stored to memory at: [ 625.336545][T13329] ___sys_recvmsg+0x52e/0x840 [ 625.341338][T13329] do_recvmmsg+0x55a/0x1180 [ 625.346120][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.350657][T13337] not chained 650000 origins [ 625.351216][T13329] do_syscall_64+0x3d/0xb0 [ 625.355983][T13337] CPU: 1 PID: 13337 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 625.360333][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.370738][T13337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 625.370783][T13337] Call Trace: [ 625.370809][T13337] [ 625.370835][T13337] dump_stack_lvl+0x1c8/0x256 [ 625.376762][T13329] [ 625.386773][T13337] dump_stack+0x1a/0x1c [ 625.390107][T13329] Uninit was stored to memory at: [ 625.390225][T13329] ___sys_recvmsg+0x52e/0x840 [ 625.393043][T13337] kmsan_internal_chain_origin+0x78/0x120 [ 625.397780][T13329] do_recvmmsg+0x55a/0x1180 [ 625.400106][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 625.404314][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.409280][T13337] ? kfree+0x44/0x980 [ 625.414188][T13329] do_syscall_64+0x3d/0xb0 [ 625.419688][T13337] ? filter_irq_stacks+0x5c/0x1a0 [ 625.424239][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.429991][T13337] ? do_recvmmsg+0x55a/0x1180 [ 625.435062][T13329] [ 625.438979][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 625.443449][T13329] Uninit was stored to memory at: [ 625.448416][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 625.454444][T13329] ___sys_recvmsg+0x52e/0x840 [ 625.458979][T13337] ? should_fail+0x3f/0x810 [ 625.461292][T13329] do_recvmmsg+0x55a/0x1180 [ 625.467097][T13337] ? __stack_depot_save+0x21/0x4b0 [ 625.467201][T13337] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 625.472285][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.478042][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 625.482764][T13329] do_syscall_64+0x3d/0xb0 [ 625.487201][T13337] __msan_chain_origin+0xbd/0x140 [ 625.491691][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.496802][T13337] ___sys_recvmsg+0x52e/0x840 [ 625.503093][T13329] [ 625.508083][T13337] ? kmsan_internal_check_memory+0x94/0x530 [ 625.514039][T13329] Uninit was stored to memory at: [ 625.518283][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 625.523444][T13329] ___sys_recvmsg+0x52e/0x840 [ 625.529192][T13337] do_recvmmsg+0x55a/0x1180 [ 625.533914][T13329] do_recvmmsg+0x55a/0x1180 [ 625.536219][T13337] ? do_syscall_64+0x3d/0xb0 [ 625.542126][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.547100][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.552959][T13329] do_syscall_64+0x3d/0xb0 [ 625.557589][T13337] do_syscall_64+0x3d/0xb0 [ 625.562199][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.566567][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.571150][T13329] [ 625.571165][T13329] Uninit was stored to memory at: [ 625.576174][T13337] RIP: 0033:0x7f8d84489279 [ 625.576231][T13337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 625.581369][T13329] ___sys_recvmsg+0x52e/0x840 [ 625.585715][T13337] RSP: 002b:00007f8d833fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 625.585791][T13337] RAX: ffffffffffffffda RBX: 00007f8d8459c120 RCX: 00007f8d84489279 [ 625.590206][T13329] do_recvmmsg+0x55a/0x1180 [ 625.596099][T13337] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 625.596150][T13337] RBP: 00007f8d844e3189 R08: 0000000000000000 R09: 0000000000000000 [ 625.602117][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.604380][T13337] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 625.609401][T13329] do_syscall_64+0x3d/0xb0 [ 625.613813][T13337] R13: 00007f8d84acfb1f R14: 00007f8d833fe300 R15: 0000000000022000 [ 625.613891][T13337] [ 625.614629][T13337] Uninit was stored to memory at: [ 625.633713][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.638516][T13337] ___sys_recvmsg+0x52e/0x840 [ 625.646886][T13329] [ 625.646901][T13329] Uninit was stored to memory at: [ 625.647005][T13329] ___sys_recvmsg+0x52e/0x840 [ 625.655020][T13337] do_recvmmsg+0x55a/0x1180 [ 625.659482][T13329] do_recvmmsg+0x55a/0x1180 [ 625.667532][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.675899][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.680623][T13337] do_syscall_64+0x3d/0xb0 [ 625.689971][T13329] do_syscall_64+0x3d/0xb0 [ 625.693211][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.701126][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.704380][T13337] [ 625.709229][T13329] [ 625.709245][T13329] Local variable msg_sys created at: [ 625.715215][T13337] Uninit was stored to memory at: [ 625.719852][T13329] do_recvmmsg+0x5c/0x1180 [ 625.722394][T13337] ___sys_recvmsg+0x52e/0x840 [ 625.727264][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.732120][T13337] do_recvmmsg+0x55a/0x1180 [ 625.809000][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.814268][T13337] do_syscall_64+0x3d/0xb0 [ 625.818795][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.824964][T13337] [ 625.827342][T13337] Uninit was stored to memory at: [ 625.832656][T13337] ___sys_recvmsg+0x52e/0x840 [ 625.837452][T13337] do_recvmmsg+0x55a/0x1180 [ 625.842139][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.847312][T13337] do_syscall_64+0x3d/0xb0 [ 625.851916][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.857952][T13337] [ 625.860334][T13337] Uninit was stored to memory at: [ 625.865624][T13337] ___sys_recvmsg+0x52e/0x840 [ 625.870409][T13337] do_recvmmsg+0x55a/0x1180 [ 625.875137][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.880277][T13337] do_syscall_64+0x3d/0xb0 [ 625.884979][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.891024][T13337] [ 625.893523][T13337] Uninit was stored to memory at: [ 625.898692][T13337] ___sys_recvmsg+0x52e/0x840 [ 625.903581][T13337] do_recvmmsg+0x55a/0x1180 [ 625.908195][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.913450][T13337] do_syscall_64+0x3d/0xb0 [ 625.917970][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.924137][T13337] [ 625.926518][T13337] Uninit was stored to memory at: [ 625.931700][T13337] ___sys_recvmsg+0x52e/0x840 [ 625.936575][T13337] do_recvmmsg+0x55a/0x1180 [ 625.941176][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.946498][T13337] do_syscall_64+0x3d/0xb0 [ 625.951023][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.957208][T13337] [ 625.959592][T13337] Uninit was stored to memory at: [ 625.964870][T13337] ___sys_recvmsg+0x52e/0x840 [ 625.969667][T13337] do_recvmmsg+0x55a/0x1180 [ 625.974387][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 625.979526][T13337] do_syscall_64+0x3d/0xb0 [ 625.984157][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.990205][T13337] [ 625.992734][T13337] Local variable msg_sys created at: [ 625.998087][T13337] do_recvmmsg+0x5c/0x1180 [ 626.002878][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.046054][T13329] not chained 660000 origins [ 626.050741][T13329] CPU: 0 PID: 13329 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 626.061305][T13329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 626.071473][T13329] Call Trace: [ 626.074828][T13329] [ 626.077838][T13329] dump_stack_lvl+0x1c8/0x256 [ 626.082688][T13329] dump_stack+0x1a/0x1c [ 626.087009][T13329] kmsan_internal_chain_origin+0x78/0x120 [ 626.092885][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 626.098852][T13329] ? kfree+0x44/0x980 [ 626.102945][T13329] ? filter_irq_stacks+0x5c/0x1a0 [ 626.108098][T13329] ? do_recvmmsg+0x55a/0x1180 [ 626.112896][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 626.118863][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 626.124822][T13329] ? should_fail+0x3f/0x810 [ 626.129482][T13329] ? __stack_depot_save+0x21/0x4b0 [ 626.134758][T13329] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 626.141179][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 626.147155][T13329] __msan_chain_origin+0xbd/0x140 [ 626.152343][T13329] ___sys_recvmsg+0x52e/0x840 [ 626.157172][T13329] ? kmsan_internal_check_memory+0x94/0x530 [ 626.163230][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 626.169194][T13329] do_recvmmsg+0x55a/0x1180 [ 626.173867][T13329] ? do_syscall_64+0x3d/0xb0 [ 626.178577][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.183738][T13329] do_syscall_64+0x3d/0xb0 [ 626.188275][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.194326][T13329] RIP: 0033:0x7f1c45489279 [ 626.198835][T13329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 626.218601][T13329] RSP: 002b:00007f1c443fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 626.227148][T13329] RAX: ffffffffffffffda RBX: 00007f1c4559c120 RCX: 00007f1c45489279 [ 626.235234][T13329] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 626.243302][T13329] RBP: 00007f1c454e3189 R08: 0000000000000000 R09: 0000000000000000 [ 626.251372][T13329] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 626.259441][T13329] R13: 00007f1c45acfb1f R14: 00007f1c443fe300 R15: 0000000000022000 [ 626.267554][T13329] [ 626.271352][T13329] Uninit was stored to memory at: [ 626.276618][T13329] ___sys_recvmsg+0x52e/0x840 [ 626.281404][T13329] do_recvmmsg+0x55a/0x1180 [ 626.286083][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.291218][T13329] do_syscall_64+0x3d/0xb0 [ 626.295859][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.301960][T13329] [ 626.304333][T13329] Uninit was stored to memory at: [ 626.309515][T13329] ___sys_recvmsg+0x52e/0x840 [ 626.314399][T13329] do_recvmmsg+0x55a/0x1180 [ 626.319006][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.324215][T13329] do_syscall_64+0x3d/0xb0 [ 626.328735][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.334864][T13329] [ 626.337248][T13329] Uninit was stored to memory at: [ 626.342499][T13329] ___sys_recvmsg+0x52e/0x840 [ 626.347281][T13329] do_recvmmsg+0x55a/0x1180 [ 626.352038][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.357178][T13329] do_syscall_64+0x3d/0xb0 [ 626.361705][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.367884][T13329] [ 626.370263][T13329] Uninit was stored to memory at: [ 626.375526][T13329] ___sys_recvmsg+0x52e/0x840 [ 626.380312][T13329] do_recvmmsg+0x55a/0x1180 [ 626.385179][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.390316][T13329] do_syscall_64+0x3d/0xb0 [ 626.394916][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.400964][T13329] [ 626.403448][T13329] Uninit was stored to memory at: [ 626.408628][T13329] ___sys_recvmsg+0x52e/0x840 [ 626.413602][T13329] do_recvmmsg+0x55a/0x1180 [ 626.418214][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.423506][T13329] do_syscall_64+0x3d/0xb0 [ 626.428032][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.434196][T13329] [ 626.436577][T13329] Uninit was stored to memory at: [ 626.441932][T13329] ___sys_recvmsg+0x52e/0x840 [ 626.446720][T13329] do_recvmmsg+0x55a/0x1180 [ 626.451330][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.456632][T13329] do_syscall_64+0x3d/0xb0 [ 626.461157][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.467366][T13329] [ 626.469747][T13329] Uninit was stored to memory at: [ 626.475106][T13329] ___sys_recvmsg+0x52e/0x840 [ 626.479899][T13329] do_recvmmsg+0x55a/0x1180 [ 626.484633][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.489777][T13329] do_syscall_64+0x3d/0xb0 [ 626.494431][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.500476][T13329] [ 626.502967][T13329] Local variable msg_sys created at: [ 626.508312][T13329] do_recvmmsg+0x5c/0x1180 [ 626.512971][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.545470][T13329] not chained 670000 origins [ 626.550159][T13329] CPU: 0 PID: 13329 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 626.560694][T13329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 626.570852][T13329] Call Trace: [ 626.574196][T13329] [ 626.577190][T13329] dump_stack_lvl+0x1c8/0x256 [ 626.582028][T13329] dump_stack+0x1a/0x1c [ 626.586316][T13329] kmsan_internal_chain_origin+0x78/0x120 [ 626.592185][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 626.598146][T13329] ? kfree+0x44/0x980 [ 626.602236][T13329] ? filter_irq_stacks+0x5c/0x1a0 [ 626.607384][T13329] ? do_recvmmsg+0x55a/0x1180 [ 626.612182][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 626.618145][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 626.624107][T13329] ? should_fail+0x3f/0x810 [ 626.628749][T13329] ? __stack_depot_save+0x21/0x4b0 [ 626.634006][T13329] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 626.640401][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 626.646368][T13329] __msan_chain_origin+0xbd/0x140 [ 626.651531][T13329] ___sys_recvmsg+0x52e/0x840 [ 626.656345][T13329] ? kmsan_internal_check_memory+0x94/0x530 [ 626.662410][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 626.668386][T13329] do_recvmmsg+0x55a/0x1180 [ 626.673042][T13329] ? do_syscall_64+0x3d/0xb0 [ 626.677751][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.682919][T13329] do_syscall_64+0x3d/0xb0 [ 626.687449][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.693491][T13329] RIP: 0033:0x7f1c45489279 [ 626.698084][T13329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 626.717848][T13329] RSP: 002b:00007f1c443fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 626.726390][T13329] RAX: ffffffffffffffda RBX: 00007f1c4559c120 RCX: 00007f1c45489279 [ 626.734480][T13329] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 626.742549][T13329] RBP: 00007f1c454e3189 R08: 0000000000000000 R09: 0000000000000000 [ 626.750616][T13329] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 626.758683][T13329] R13: 00007f1c45acfb1f R14: 00007f1c443fe300 R15: 0000000000022000 [ 626.766777][T13329] [ 626.770243][T13329] Uninit was stored to memory at: [ 626.775507][T13329] ___sys_recvmsg+0x52e/0x840 [ 626.780295][T13329] do_recvmmsg+0x55a/0x1180 [ 626.784974][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.790110][T13329] do_syscall_64+0x3d/0xb0 [ 626.794701][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.800746][T13329] [ 626.803280][T13329] Uninit was stored to memory at: [ 626.808453][T13329] ___sys_recvmsg+0x52e/0x840 [ 626.813310][T13329] do_recvmmsg+0x55a/0x1180 [ 626.817919][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.823164][T13329] do_syscall_64+0x3d/0xb0 [ 626.827711][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.834188][T13329] [ 626.836570][T13329] Uninit was stored to memory at: [ 626.841828][T13329] ___sys_recvmsg+0x52e/0x840 [ 626.846615][T13329] do_recvmmsg+0x55a/0x1180 [ 626.851226][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.856449][T13329] do_syscall_64+0x3d/0xb0 [ 626.861151][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.867267][T13329] [ 626.869647][T13329] Uninit was stored to memory at: [ 626.874896][T13329] ___sys_recvmsg+0x52e/0x840 [ 626.879678][T13329] do_recvmmsg+0x55a/0x1180 [ 626.884568][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.889711][T13329] do_syscall_64+0x3d/0xb0 [ 626.894404][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.900455][T13329] [ 626.902944][T13329] Uninit was stored to memory at: [ 626.908127][T13329] ___sys_recvmsg+0x52e/0x840 [ 626.913202][T13329] do_recvmmsg+0x55a/0x1180 [ 626.917829][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.920455][T13337] not chained 680000 origins [ 626.923088][T13329] do_syscall_64+0x3d/0xb0 [ 626.923163][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.927757][T13337] CPU: 1 PID: 13337 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 626.932238][T13329] [ 626.938051][T13337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 626.948521][T13329] Uninit was stored to memory at: [ 626.950781][T13337] Call Trace: [ 626.950809][T13337] [ 626.960996][T13329] ___sys_recvmsg+0x52e/0x840 [ 626.965861][T13337] dump_stack_lvl+0x1c8/0x256 [ 626.969194][T13329] do_recvmmsg+0x55a/0x1180 [ 626.972159][T13337] dump_stack+0x1a/0x1c [ 626.976883][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 626.981557][T13337] kmsan_internal_chain_origin+0x78/0x120 [ 626.986506][T13329] do_syscall_64+0x3d/0xb0 [ 626.990208][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 626.995287][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.000938][T13337] ? kfree+0x44/0x980 [ 627.005412][T13329] [ 627.011162][T13337] ? filter_irq_stacks+0x5c/0x1a0 [ 627.017103][T13329] Uninit was stored to memory at: [ 627.021031][T13337] ? do_recvmmsg+0x55a/0x1180 [ 627.023495][T13329] ___sys_recvmsg+0x52e/0x840 [ 627.028364][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 627.033552][T13329] do_recvmmsg+0x55a/0x1180 [ 627.038071][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 627.042798][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.048545][T13337] ? should_fail+0x3f/0x810 [ 627.053093][T13329] do_syscall_64+0x3d/0xb0 [ 627.058832][T13337] ? __stack_depot_save+0x21/0x4b0 [ 627.063929][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.068377][T13337] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 627.072840][T13329] [ 627.077893][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 627.085259][T13329] Local variable msg_sys created at: [ 627.090006][T13337] __msan_chain_origin+0xbd/0x140 [ 627.092403][T13329] do_recvmmsg+0x5c/0x1180 [ 627.098135][T13337] ___sys_recvmsg+0x52e/0x840 [ 627.103465][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.108550][T13337] ? kmsan_internal_check_memory+0x94/0x530 [ 627.129944][T13337] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 627.135920][T13337] do_recvmmsg+0x55a/0x1180 [ 627.140579][T13337] ? do_syscall_64+0x3d/0xb0 [ 627.145285][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.150451][T13337] do_syscall_64+0x3d/0xb0 [ 627.154979][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.161046][T13337] RIP: 0033:0x7f8d84489279 [ 627.165551][T13337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 627.185310][T13337] RSP: 002b:00007f8d833fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 627.193859][T13337] RAX: ffffffffffffffda RBX: 00007f8d8459c120 RCX: 00007f8d84489279 [ 627.201934][T13337] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 627.210001][T13337] RBP: 00007f8d844e3189 R08: 0000000000000000 R09: 0000000000000000 [ 627.218067][T13337] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 627.226130][T13337] R13: 00007f8d84acfb1f R14: 00007f8d833fe300 R15: 0000000000022000 [ 627.234225][T13337] [ 627.237814][T13337] Uninit was stored to memory at: [ 627.243103][T13337] ___sys_recvmsg+0x52e/0x840 [ 627.247896][T13337] do_recvmmsg+0x55a/0x1180 [ 627.252634][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.257772][T13337] do_syscall_64+0x3d/0xb0 [ 627.262412][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.268461][T13337] [ 627.270842][T13337] Uninit was stored to memory at: [ 627.276198][T13337] ___sys_recvmsg+0x52e/0x840 [ 627.280985][T13337] do_recvmmsg+0x55a/0x1180 [ 627.285782][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.290922][T13337] do_syscall_64+0x3d/0xb0 [ 627.295677][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.301726][T13337] [ 627.304230][T13337] Uninit was stored to memory at: [ 627.309427][T13337] ___sys_recvmsg+0x52e/0x840 [ 627.314385][T13337] do_recvmmsg+0x55a/0x1180 [ 627.318994][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.324344][T13337] do_syscall_64+0x3d/0xb0 [ 627.328964][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.335188][T13337] [ 627.337574][T13337] Uninit was stored to memory at: [ 627.342903][T13337] ___sys_recvmsg+0x52e/0x840 [ 627.347686][T13337] do_recvmmsg+0x55a/0x1180 [ 627.352575][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.357716][T13337] do_syscall_64+0x3d/0xb0 [ 627.362382][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.368425][T13337] [ 627.369318][T13329] not chained 690000 origins [ 627.370762][T13337] Uninit was stored to memory at: [ 627.370878][T13337] ___sys_recvmsg+0x52e/0x840 [ 627.375585][T13329] CPU: 0 PID: 13329 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 627.380499][T13337] do_recvmmsg+0x55a/0x1180 [ 627.385169][T13329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 627.385213][T13329] Call Trace: [ 627.385239][T13329] [ 627.385264][T13329] dump_stack_lvl+0x1c8/0x256 [ 627.395812][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.400206][T13329] dump_stack+0x1a/0x1c [ 627.410501][T13337] do_syscall_64+0x3d/0xb0 [ 627.413617][T13329] kmsan_internal_chain_origin+0x78/0x120 [ 627.413725][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 627.416659][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.421332][T13329] ? kfree+0x44/0x980 [ 627.426463][T13337] [ 627.430507][T13329] ? filter_irq_stacks+0x5c/0x1a0 [ 627.435023][T13337] Uninit was stored to memory at: [ 627.440633][T13329] ? do_recvmmsg+0x55a/0x1180 [ 627.446636][T13337] ___sys_recvmsg+0x52e/0x840 [ 627.452318][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 627.452435][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 627.456406][T13337] do_recvmmsg+0x55a/0x1180 [ 627.458746][T13329] ? should_fail+0x3f/0x810 [ 627.463855][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.468769][T13329] ? __stack_depot_save+0x21/0x4b0 [ 627.473552][T13337] do_syscall_64+0x3d/0xb0 [ 627.478117][T13329] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 627.484006][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.489717][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 627.494303][T13337] [ 627.498703][T13329] __msan_chain_origin+0xbd/0x140 [ 627.503853][T13337] Uninit was stored to memory at: [ 627.508832][T13329] ___sys_recvmsg+0x52e/0x840 [ 627.513430][T13337] ___sys_recvmsg+0x52e/0x840 [ 627.519494][T13329] ? kmsan_internal_check_memory+0x94/0x530 [ 627.525479][T13337] do_recvmmsg+0x55a/0x1180 [ 627.531161][T13329] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 627.533576][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.538499][T13329] do_recvmmsg+0x55a/0x1180 [ 627.543584][T13337] do_syscall_64+0x3d/0xb0 [ 627.548216][T13329] ? do_syscall_64+0x3d/0xb0 [ 627.552959][T13337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.558771][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.563426][T13337] [ 627.569094][T13329] do_syscall_64+0x3d/0xb0 [ 627.574214][T13337] Local variable msg_sys created at: [ 627.578608][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.583099][T13337] do_recvmmsg+0x5c/0x1180 [ 627.587600][T13329] RIP: 0033:0x7f1c45489279 [ 627.593600][T13337] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.598505][T13329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 627.651624][T13329] RSP: 002b:00007f1c443fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 627.660170][T13329] RAX: ffffffffffffffda RBX: 00007f1c4559c120 RCX: 00007f1c45489279 [ 627.668247][T13329] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 627.676420][T13329] RBP: 00007f1c454e3189 R08: 0000000000000000 R09: 0000000000000000 [ 627.684493][T13329] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 627.692654][T13329] R13: 00007f1c45acfb1f R14: 00007f1c443fe300 R15: 0000000000022000 [ 627.700752][T13329] [ 627.704217][T13329] Uninit was stored to memory at: [ 627.709413][T13329] ___sys_recvmsg+0x52e/0x840 [ 627.714279][T13329] do_recvmmsg+0x55a/0x1180 [ 627.718889][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.724088][T13329] do_syscall_64+0x3d/0xb0 [ 627.728604][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.734857][T13329] [ 627.737240][T13329] Uninit was stored to memory at: [ 627.742504][T13329] ___sys_recvmsg+0x52e/0x840 [ 627.747285][T13329] do_recvmmsg+0x55a/0x1180 [ 627.751982][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.757204][T13329] do_syscall_64+0x3d/0xb0 [ 627.761728][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.769100][T13329] [ 627.771480][T13329] Uninit was stored to memory at: [ 627.776733][T13329] ___sys_recvmsg+0x52e/0x840 [ 627.781510][T13329] do_recvmmsg+0x55a/0x1180 [ 627.786191][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.791335][T13329] do_syscall_64+0x3d/0xb0 [ 627.795941][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.802052][T13329] [ 627.804443][T13329] Uninit was stored to memory at: [ 627.809616][T13329] ___sys_recvmsg+0x52e/0x840 [ 627.814479][T13329] do_recvmmsg+0x55a/0x1180 [ 627.819095][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.824355][T13329] do_syscall_64+0x3d/0xb0 [ 627.828888][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.835020][T13329] [ 627.837407][T13329] Uninit was stored to memory at: [ 627.842651][T13329] ___sys_recvmsg+0x52e/0x840 [ 627.847434][T13329] do_recvmmsg+0x55a/0x1180 [ 627.852163][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.857311][T13329] do_syscall_64+0x3d/0xb0 [ 627.861964][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.868009][T13329] [ 627.870384][T13329] Uninit was stored to memory at: [ 627.875691][T13329] ___sys_recvmsg+0x52e/0x840 [ 627.880475][T13329] do_recvmmsg+0x55a/0x1180 [ 627.885216][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.890371][T13329] do_syscall_64+0x3d/0xb0 [ 627.895041][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.901091][T13329] [ 627.903599][T13329] Uninit was stored to memory at: [ 627.908780][T13329] ___sys_recvmsg+0x52e/0x840 [ 627.913701][T13329] do_recvmmsg+0x55a/0x1180 [ 627.918339][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 627.923603][T13329] do_syscall_64+0x3d/0xb0 [ 627.928129][T13329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.934309][T13329] [ 627.936695][T13329] Local variable msg_sys created at: [ 627.942170][T13329] do_recvmmsg+0x5c/0x1180 [ 627.946707][T13329] __x64_sys_recvmmsg+0x3a7/0x4b0 18:28:49 executing program 5: io_setup(0x905, &(0x7f0000000240)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200)={0x0}) 18:28:49 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x2000, 0x4) 18:28:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'netpci0\x00'}]}, 0x3c}}, 0x0) 18:28:49 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0xc7f, &(0x7f0000000000)=0x0) io_submit(r1, 0x4, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 18:28:49 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='\\') process_vm_readv(r0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/118, 0x76}], 0x1, &(0x7f0000001a40)=[{&(0x7f00000007c0)=""/249, 0xf9}, {0x0}], 0x2, 0x0) 18:28:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd3, &(0x7f00000000c0)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:28:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7}, 0x48) 18:28:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0xaaba76b82d4aa7b7, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 18:28:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) preadv2(r0, &(0x7f0000002580)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xa) 18:28:49 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x4004510f, 0x7fffffffefff) 18:28:49 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x401, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@fd={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c90b7604"}}) 18:28:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000004140)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 18:28:49 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x40045109, 0x7fffffffefff) 18:28:49 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40081271, r1) 18:28:49 executing program 1: syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:28:49 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) 18:28:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:28:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtaction={0x44, 0x32, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 18:28:49 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfe, 0x0) 18:28:49 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) 18:28:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/123, 0x7b}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000a40)="5f234816be0cc7b16a688b1628f34f1c1e1059192a333d686ad13544895a85df96ec256792f815f87e3249650bf0f13112a80526617e6eec799a92a3d2758164", 0x40}], 0x1, &(0x7f0000001d80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 18:28:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:28:50 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000002c0)="f3a7c181050002440f20c0663505000000440f22c064660f2dbfffff7e972e0f73f4c566b9800000c00f326635004000000f3066b95a0800000f32671af62e0fce", 0x41}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:28:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT(r1, 0xae71, &(0x7f00000001c0)) 18:28:50 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close(r1) 18:28:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f0000000100), 0xc) 18:28:50 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000006c0)={"ded11536c36c788f1f6ac52588c08e545785f75d5e963b496e7734a1ec67f4c986540aeed84933338a0b338aaf1e4f642f8421a9d067eed093e293741199a4d93344f32ebc3cb8b2bf5ac168e0ef980f676f2900e8a8921c4c87c7f4f59d6d0c5f81157ce3a827eeff3817ae74ad832d633efc21c5195f601230bc31577c4cad67fa84d58f9631d9fdf6a40b26b3a423dc49b9f172c801a804531f827ba7d51c98307f2623287e3da95aecc8bc5db4f1f4c246ca84396c2c5fba48e2a6c1e3af46c1cf41cc116f705c17a8ee3d10fc518bc96a9bcfa3dfcf8fe2aceb3df2d0083f9ca538e971d3df7bee5443d435309f8cc13e126c2807419652e62ba7d337b73bab4470cbcb974cba269de6db6d74e0854096d3af6e0cc3e42fc070a19aebb3b5a4d58febc46c8e8aa9784fc7a3e258fe8f00c888affb1e4ca3498e40ae66e021d3cfd13207479d06ca2d0c08385dc25e93f1ddd3aee2523b13d47571581abd9d5383785d87ac2c8759895d856ee4c25f13145cda91ef1e63892db3c3637b731b0221d5611c89fe8f5eaac3e27fd28265c8ba90ce5d292f7f32b0eb779e05da407b1adaffea36db24c08ee27ce034d43d575692ac7bfa2cda6cd4433022699bcb39e59ece1a5ec7c408afbbc4570eadfc339c82f5d0859b5b967dba95822444455004c10aa23ae7c2f5b0f9d129e65197e8426cfe0f3685952c3b2eac82a30cfb4c2b383437f8ec4bc2bdc64c45e8eee81db6d41a94535ab98a2d96cb8e021dcef0db515dc3ed61ce606b0fa04f8a8c5406507c87c5af0a724d8de91d5034aaa4dc9e08de8fa2dcebe2255b6e6cdc83e8ce850b4ea1fc2799526fd793a2863b9474c9b4494b3e02bc01395d36ffac724295b1e10e98d01aa4bcfa75c579386b166a02eca60ec479299613ddd113c7aaf83cabf23d50ed1de122d2bb5d875806c659f776cd870fe88a419b90db10ad6c4a697c038292068262ebb5847feaec945653d3393ad469f964f21a49f0b350cdd9c85baab72e7a70f7803a0738110476a881082c1827a98391ffa2a46e3aa6008dfe4277890b4a3e3ae1772ba0a6457e81160f65947c4cdfdf82f4f78c617498ce4117af71a16358a693a5638730f52eafb75f83e58904af7161796aa7c7e08ee7398caaf53c937d437b4ba9027057c929fa3f3aee5ba52bf9c690611e4defc06be3ef0a30e5d1392fd20dcc2ea523172f2c3e50d7e6edb74e36384a4507820c7c2b487923550e22317c72daf722b3611718259ca67a275bc41d0bc219a8d136fa17328a9ca22d101d7325538b38f3e97dc80edefa84edf3e80e2edaf4ba4ab799b836ca25afd94bfc5fb70ce9f6cd4ac0cde1d98a2fbf8edcec493af264ac4ca76bafaeca29f3cc8392a5deac6c276bcffb9dbdc7402c09cea1441c870b936a3e6211d789425729b542eb1a427414e6"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) [ 629.483102][T13408] loop4: detected capacity change from 0 to 1036 18:28:50 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000030001010009210000000122050009058103ecbf"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 18:28:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) dup2(r1, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0), 0x98) 18:28:51 executing program 2: io_setup(0x7, &(0x7f0000000840)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r0, 0x3, &(0x7f0000000a40)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, 0x0]) 18:28:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x4}) mmap(&(0x7f000007a000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0xb83f9000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 630.092923][ T28] usb 6-1: new full-speed USB device number 7 using dummy_hcd 18:28:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) 18:28:51 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:28:51 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:28:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r2, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 18:28:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f00000001c0)=[@cr4={0x1, 0x40002}], 0x1) [ 630.452936][ T28] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 630.464413][ T28] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49132, setting to 64 [ 630.475730][ T28] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 630.488941][ T28] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 630.498285][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:28:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000280)={0x0, {0x0, 0x0, 0x0, 0x0, 0xde90}}) [ 630.721036][T13451] loop4: detected capacity change from 0 to 1036 [ 630.797222][ T28] usb 6-1: config 0 descriptor?? [ 630.825549][T13427] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 630.879906][ T28] hub 6-1:0.0: USB hub found 18:28:51 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x24802, 0x0) 18:28:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4bfa, &(0x7f0000000080)) [ 631.102232][ T28] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 631.165964][T13454] not chained 700000 origins [ 631.170785][T13454] CPU: 1 PID: 13454 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 631.181333][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 631.191489][T13454] Call Trace: [ 631.194835][T13454] [ 631.197829][T13454] dump_stack_lvl+0x1c8/0x256 [ 631.202650][T13454] dump_stack+0x1a/0x1c [ 631.206926][T13454] kmsan_internal_chain_origin+0x78/0x120 [ 631.212775][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 631.218726][T13454] ? kfree+0x44/0x980 [ 631.222810][T13454] ? filter_irq_stacks+0x5c/0x1a0 [ 631.227956][T13454] ? do_recvmmsg+0x55a/0x1180 [ 631.232749][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 631.238709][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 631.244649][T13454] ? should_fail+0x3f/0x810 [ 631.249280][T13454] ? __stack_depot_save+0x21/0x4b0 [ 631.254530][T13454] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 631.260916][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 631.266853][T13454] __msan_chain_origin+0xbd/0x140 [ 631.271998][T13454] ___sys_recvmsg+0x52e/0x840 [ 631.276800][T13454] ? kmsan_internal_check_memory+0x94/0x530 [ 631.282824][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 631.288768][T13454] do_recvmmsg+0x55a/0x1180 [ 631.293402][T13454] ? do_syscall_64+0x3d/0xb0 [ 631.298100][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 631.303243][T13454] do_syscall_64+0x3d/0xb0 [ 631.307755][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 631.313785][T13454] RIP: 0033:0x7f8d84489279 [ 631.318279][T13454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 631.338009][T13454] RSP: 002b:00007f8d854ff168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 631.346535][T13454] RAX: ffffffffffffffda RBX: 00007f8d8459c050 RCX: 00007f8d84489279 [ 631.354774][T13454] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 631.362831][T13454] RBP: 00007f8d844e3189 R08: 0000000000000000 R09: 0000000000000000 [ 631.370887][T13454] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 631.378940][T13454] R13: 00007f8d84acfb1f R14: 00007f8d854ff300 R15: 0000000000022000 [ 631.387023][T13454] [ 631.390926][T13454] Uninit was stored to memory at: [ 631.396226][T13454] ___sys_recvmsg+0x52e/0x840 [ 631.401019][T13454] do_recvmmsg+0x55a/0x1180 [ 631.405784][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 631.410947][T13454] do_syscall_64+0x3d/0xb0 [ 631.415696][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 631.421886][T13454] [ 631.424267][T13454] Uninit was stored to memory at: [ 631.429470][T13454] ___sys_recvmsg+0x52e/0x840 [ 631.434372][T13454] do_recvmmsg+0x55a/0x1180 [ 631.438988][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 631.444449][T13454] do_syscall_64+0x3d/0xb0 [ 631.448993][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 631.455223][T13454] [ 631.457605][T13454] Uninit was stored to memory at: [ 631.462945][T13454] ___sys_recvmsg+0x52e/0x840 [ 631.467735][T13454] do_recvmmsg+0x55a/0x1180 [ 631.472788][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 631.477940][T13454] do_syscall_64+0x3d/0xb0 [ 631.482639][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 631.488696][T13454] [ 631.491095][T13454] Uninit was stored to memory at: [ 631.496467][T13454] ___sys_recvmsg+0x52e/0x840 [ 631.501268][T13454] do_recvmmsg+0x55a/0x1180 [ 631.506165][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 631.511330][T13454] do_syscall_64+0x3d/0xb0 [ 631.516025][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 631.522245][T13454] [ 631.524627][T13454] Uninit was stored to memory at: [ 631.529819][T13454] ___sys_recvmsg+0x52e/0x840 [ 631.534751][T13454] do_recvmmsg+0x55a/0x1180 [ 631.539374][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 631.544746][T13454] do_syscall_64+0x3d/0xb0 [ 631.549273][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 631.555485][T13454] [ 631.557878][T13454] Uninit was stored to memory at: [ 631.563368][T13454] ___sys_recvmsg+0x52e/0x840 [ 631.568159][T13454] do_recvmmsg+0x55a/0x1180 [ 631.572945][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 631.578093][T13454] do_syscall_64+0x3d/0xb0 [ 631.582752][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 631.588737][T13454] [ 631.591085][T13454] Uninit was stored to memory at: [ 631.596318][T13454] ___sys_recvmsg+0x52e/0x840 [ 631.601062][T13454] do_recvmmsg+0x55a/0x1180 [ 631.605785][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 631.610887][T13454] do_syscall_64+0x3d/0xb0 [ 631.615448][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 631.621432][T13454] [ 631.624186][T13454] Local variable msg_sys created at: [ 631.629496][T13454] do_recvmmsg+0x5c/0x1180 [ 631.634041][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 631.648110][ T28] usb 6-1: USB disconnect, device number 7 18:28:52 executing program 5: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r0, 0x1) r2 = dup3(r0, r1, 0x0) shutdown(r2, 0x0) 18:28:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000295000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000180)="b8010000000f01c167470f01c566b867000f00d0c7442400b6000000c74424026a8d0000c7442406000000000f01142440d8ce66baf80cb8e21c258cef66bafc0c66edc744240008000000c74424022bffffffc7442406000000000f01142465430f77c744240000000000c744240267420000c7442406000000000f011c24b9800000c00f3235000100000f30", 0x8d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:28:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0x4138ae84, 0x0) 18:28:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000200)=""/79, 0x4f}], 0x1, 0x0, 0x0) 18:28:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) [ 631.964730][T13482] loop4: detected capacity change from 0 to 1036 18:28:53 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 18:28:53 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, 0x0) [ 632.761391][T13454] not chained 710000 origins [ 632.766294][T13454] CPU: 0 PID: 13454 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 632.776962][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 632.787121][T13454] Call Trace: [ 632.790479][T13454] [ 632.793492][T13454] dump_stack_lvl+0x1c8/0x256 [ 632.798334][T13454] dump_stack+0x1a/0x1c [ 632.802643][T13454] kmsan_internal_chain_origin+0x78/0x120 [ 632.808516][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 632.814476][T13454] ? kfree+0x44/0x980 [ 632.818563][T13454] ? filter_irq_stacks+0x5c/0x1a0 [ 632.823707][T13454] ? do_recvmmsg+0x55a/0x1180 [ 632.828491][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 632.834438][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 632.840382][T13454] ? should_fail+0x3f/0x810 [ 632.845010][T13454] ? __stack_depot_save+0x21/0x4b0 [ 632.850250][T13454] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 632.856629][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 632.862567][T13454] __msan_chain_origin+0xbd/0x140 [ 632.867712][T13454] ___sys_recvmsg+0x52e/0x840 [ 632.872513][T13454] ? kmsan_internal_check_memory+0x94/0x530 [ 632.878542][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 632.884519][T13454] do_recvmmsg+0x55a/0x1180 [ 632.889157][T13454] ? do_syscall_64+0x3d/0xb0 [ 632.893857][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 632.899004][T13454] do_syscall_64+0x3d/0xb0 [ 632.903515][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 632.909546][T13454] RIP: 0033:0x7f8d84489279 [ 632.914040][T13454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 632.933783][T13454] RSP: 002b:00007f8d854ff168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 632.942329][T13454] RAX: ffffffffffffffda RBX: 00007f8d8459c050 RCX: 00007f8d84489279 [ 632.950415][T13454] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 632.958495][T13454] RBP: 00007f8d844e3189 R08: 0000000000000000 R09: 0000000000000000 [ 632.966560][T13454] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 632.974615][T13454] R13: 00007f8d84acfb1f R14: 00007f8d854ff300 R15: 0000000000022000 [ 632.982699][T13454] [ 632.986366][T13454] Uninit was stored to memory at: [ 632.991555][T13454] ___sys_recvmsg+0x52e/0x840 [ 632.996447][T13454] do_recvmmsg+0x55a/0x1180 [ 633.001075][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 633.006325][T13454] do_syscall_64+0x3d/0xb0 [ 633.010850][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.017061][T13454] [ 633.019457][T13454] Uninit was stored to memory at: [ 633.024732][T13454] ___sys_recvmsg+0x52e/0x840 [ 633.029530][T13454] do_recvmmsg+0x55a/0x1180 [ 633.034238][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 633.039379][T13454] do_syscall_64+0x3d/0xb0 [ 633.044055][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.050106][T13454] [ 633.052563][T13454] Uninit was stored to memory at: [ 633.057785][T13454] ___sys_recvmsg+0x52e/0x840 [ 633.062659][T13454] do_recvmmsg+0x55a/0x1180 [ 633.067280][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 633.072720][T13454] do_syscall_64+0x3d/0xb0 [ 633.077266][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.083489][T13454] [ 633.085873][T13454] Uninit was stored to memory at: [ 633.091054][T13454] ___sys_recvmsg+0x52e/0x840 [ 633.095986][T13454] do_recvmmsg+0x55a/0x1180 [ 633.100606][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 633.105812][T13454] do_syscall_64+0x3d/0xb0 [ 633.110337][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.116447][T13454] [ 633.118825][T13454] Uninit was stored to memory at: [ 633.124146][T13454] ___sys_recvmsg+0x52e/0x840 [ 633.128942][T13454] do_recvmmsg+0x55a/0x1180 [ 633.133898][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 633.139055][T13454] do_syscall_64+0x3d/0xb0 [ 633.143741][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.149796][T13454] [ 633.152293][T13454] Uninit was stored to memory at: [ 633.157477][T13454] ___sys_recvmsg+0x52e/0x840 [ 633.162467][T13454] do_recvmmsg+0x55a/0x1180 [ 633.167111][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 633.172365][T13454] do_syscall_64+0x3d/0xb0 [ 633.176894][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.183098][T13454] [ 633.185501][T13454] Uninit was stored to memory at: [ 633.190694][T13454] ___sys_recvmsg+0x52e/0x840 [ 633.195606][T13454] do_recvmmsg+0x55a/0x1180 [ 633.200226][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 633.205599][T13454] do_syscall_64+0x3d/0xb0 [ 633.210131][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.216307][T13454] [ 633.218690][T13454] Local variable msg_sys created at: [ 633.224352][T13454] do_recvmmsg+0x5c/0x1180 [ 633.228876][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 633.521541][T13454] not chained 720000 origins [ 633.526411][T13454] CPU: 0 PID: 13454 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 633.536960][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 633.547123][T13454] Call Trace: [ 633.550477][T13454] [ 633.553480][T13454] dump_stack_lvl+0x1c8/0x256 [ 633.558321][T13454] dump_stack+0x1a/0x1c [ 633.562629][T13454] kmsan_internal_chain_origin+0x78/0x120 [ 633.568497][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 633.574456][T13454] ? kfree+0x44/0x980 [ 633.578552][T13454] ? filter_irq_stacks+0x5c/0x1a0 [ 633.583718][T13454] ? do_recvmmsg+0x55a/0x1180 [ 633.588523][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 633.594497][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 633.600462][T13454] ? should_fail+0x3f/0x810 [ 633.605118][T13454] ? __stack_depot_save+0x21/0x4b0 [ 633.610384][T13454] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 633.616789][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 633.622761][T13454] __msan_chain_origin+0xbd/0x140 [ 633.627969][T13454] ___sys_recvmsg+0x52e/0x840 [ 633.632805][T13454] ? kmsan_internal_check_memory+0x94/0x530 [ 633.638860][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 633.644919][T13454] do_recvmmsg+0x55a/0x1180 [ 633.649584][T13454] ? do_syscall_64+0x3d/0xb0 [ 633.654295][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 633.659479][T13454] do_syscall_64+0x3d/0xb0 [ 633.664016][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.670080][T13454] RIP: 0033:0x7f8d84489279 [ 633.674594][T13454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 633.694352][T13454] RSP: 002b:00007f8d854ff168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 633.702902][T13454] RAX: ffffffffffffffda RBX: 00007f8d8459c050 RCX: 00007f8d84489279 [ 633.710996][T13454] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 633.719175][T13454] RBP: 00007f8d844e3189 R08: 0000000000000000 R09: 0000000000000000 [ 633.727259][T13454] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 633.735349][T13454] R13: 00007f8d84acfb1f R14: 00007f8d854ff300 R15: 0000000000022000 [ 633.743459][T13454] [ 633.747678][T13454] Uninit was stored to memory at: [ 633.752946][T13454] ___sys_recvmsg+0x52e/0x840 [ 633.757747][T13454] do_recvmmsg+0x55a/0x1180 [ 633.762452][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 633.767601][T13454] do_syscall_64+0x3d/0xb0 [ 633.772268][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.778335][T13454] [ 633.780718][T13454] Uninit was stored to memory at: [ 633.786029][T13454] ___sys_recvmsg+0x52e/0x840 [ 633.790821][T13454] do_recvmmsg+0x55a/0x1180 [ 633.795506][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 633.800643][T13454] do_syscall_64+0x3d/0xb0 [ 633.805299][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.811349][T13454] [ 633.813854][T13454] Uninit was stored to memory at: [ 633.819046][T13454] ___sys_recvmsg+0x52e/0x840 [ 633.823957][T13454] do_recvmmsg+0x55a/0x1180 [ 633.828589][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 633.833870][T13454] do_syscall_64+0x3d/0xb0 [ 633.838413][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.844640][T13454] [ 633.847028][T13454] Uninit was stored to memory at: [ 633.852340][T13454] ___sys_recvmsg+0x52e/0x840 [ 633.857138][T13454] do_recvmmsg+0x55a/0x1180 [ 633.861933][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 633.867086][T13454] do_syscall_64+0x3d/0xb0 [ 633.871628][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.877824][T13454] [ 633.880206][T13454] Uninit was stored to memory at: [ 633.885526][T13454] ___sys_recvmsg+0x52e/0x840 [ 633.890322][T13454] do_recvmmsg+0x55a/0x1180 [ 633.895104][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 633.900247][T13454] do_syscall_64+0x3d/0xb0 [ 633.904871][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.910928][T13454] [ 633.913474][T13454] Uninit was stored to memory at: [ 633.918663][T13454] ___sys_recvmsg+0x52e/0x840 [ 633.923579][T13454] do_recvmmsg+0x55a/0x1180 [ 633.928198][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 633.933500][T13454] do_syscall_64+0x3d/0xb0 [ 633.938034][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.944222][T13454] [ 633.946606][T13454] Uninit was stored to memory at: [ 633.951923][T13454] ___sys_recvmsg+0x52e/0x840 [ 633.956723][T13454] do_recvmmsg+0x55a/0x1180 [ 633.961366][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 633.966663][T13454] do_syscall_64+0x3d/0xb0 [ 633.971194][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.977396][T13454] [ 633.979789][T13454] Local variable msg_sys created at: [ 633.985278][T13454] do_recvmmsg+0x5c/0x1180 [ 633.989823][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 634.518594][T13454] not chained 730000 origins [ 634.523503][T13454] CPU: 0 PID: 13454 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 634.534066][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 634.544231][T13454] Call Trace: [ 634.547594][T13454] [ 634.550595][T13454] dump_stack_lvl+0x1c8/0x256 [ 634.555442][T13454] dump_stack+0x1a/0x1c [ 634.559680][T13454] kmsan_internal_chain_origin+0x78/0x120 [ 634.565505][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 634.571459][T13454] ? kfree+0x44/0x980 [ 634.575580][T13454] ? filter_irq_stacks+0x5c/0x1a0 [ 634.580713][T13454] ? do_recvmmsg+0x55a/0x1180 [ 634.585461][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 634.591384][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 634.597301][T13454] ? should_fail+0x3f/0x810 [ 634.601971][T13454] ? __stack_depot_save+0x21/0x4b0 [ 634.607202][T13454] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 634.613554][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 634.619507][T13454] __msan_chain_origin+0xbd/0x140 [ 634.624658][T13454] ___sys_recvmsg+0x52e/0x840 [ 634.629421][T13454] ? kmsan_internal_check_memory+0x94/0x530 [ 634.635421][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 634.641361][T13454] do_recvmmsg+0x55a/0x1180 [ 634.645957][T13454] ? do_syscall_64+0x3d/0xb0 [ 634.650620][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 634.655745][T13454] do_syscall_64+0x3d/0xb0 [ 634.660258][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 634.666241][T13454] RIP: 0033:0x7f8d84489279 [ 634.670703][T13454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 634.690394][T13454] RSP: 002b:00007f8d854ff168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 634.698874][T13454] RAX: ffffffffffffffda RBX: 00007f8d8459c050 RCX: 00007f8d84489279 [ 634.706916][T13454] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 634.714970][T13454] RBP: 00007f8d844e3189 R08: 0000000000000000 R09: 0000000000000000 [ 634.723008][T13454] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 634.731083][T13454] R13: 00007f8d84acfb1f R14: 00007f8d854ff300 R15: 0000000000022000 [ 634.739161][T13454] [ 634.742567][T13454] Uninit was stored to memory at: [ 634.747760][T13454] ___sys_recvmsg+0x52e/0x840 [ 634.752634][T13454] do_recvmmsg+0x55a/0x1180 [ 634.757263][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 634.762483][T13454] do_syscall_64+0x3d/0xb0 [ 634.766996][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 634.773140][T13454] [ 634.775521][T13454] Uninit was stored to memory at: [ 634.780657][T13454] ___sys_recvmsg+0x52e/0x840 [ 634.785539][T13454] do_recvmmsg+0x55a/0x1180 [ 634.790412][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 634.795632][T13454] do_syscall_64+0x3d/0xb0 [ 634.800142][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 634.806278][T13454] [ 634.808646][T13454] Uninit was stored to memory at: [ 634.813928][T13454] ___sys_recvmsg+0x52e/0x840 [ 634.818709][T13454] do_recvmmsg+0x55a/0x1180 [ 634.823364][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 634.828493][T13454] do_syscall_64+0x3d/0xb0 [ 634.833119][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 634.839163][T13454] [ 634.841537][T13454] Uninit was stored to memory at: [ 634.846802][T13454] ___sys_recvmsg+0x52e/0x840 [ 634.851580][T13454] do_recvmmsg+0x55a/0x1180 [ 634.856325][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 634.861464][T13454] do_syscall_64+0x3d/0xb0 [ 634.866096][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 634.872250][T13454] [ 634.874630][T13454] Uninit was stored to memory at: [ 634.879769][T13454] ___sys_recvmsg+0x52e/0x840 [ 634.884654][T13454] do_recvmmsg+0x55a/0x1180 [ 634.889263][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 634.894501][T13454] do_syscall_64+0x3d/0xb0 [ 634.899029][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 634.905222][T13454] [ 634.907607][T13454] Uninit was stored to memory at: [ 634.912974][T13454] ___sys_recvmsg+0x52e/0x840 [ 634.917790][T13454] do_recvmmsg+0x55a/0x1180 [ 634.922535][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 634.927663][T13454] do_syscall_64+0x3d/0xb0 [ 634.932263][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 634.943165][T13454] [ 634.945560][T13454] Uninit was stored to memory at: [ 634.950749][T13454] ___sys_recvmsg+0x52e/0x840 [ 634.955632][T13454] do_recvmmsg+0x55a/0x1180 [ 634.960244][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 634.965479][T13454] do_syscall_64+0x3d/0xb0 [ 634.969993][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 634.976083][T13454] [ 634.978462][T13454] Local variable msg_sys created at: [ 634.983934][T13454] do_recvmmsg+0x5c/0x1180 [ 634.988454][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 635.157215][T13454] not chained 740000 origins [ 635.161984][T13454] CPU: 0 PID: 13454 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 635.172525][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 635.182674][T13454] Call Trace: [ 635.186004][T13454] [ 635.188967][T13454] dump_stack_lvl+0x1c8/0x256 [ 635.193763][T13454] dump_stack+0x1a/0x1c [ 635.198032][T13454] kmsan_internal_chain_origin+0x78/0x120 [ 635.203854][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 635.209812][T13454] ? kfree+0x44/0x980 [ 635.213885][T13454] ? filter_irq_stacks+0x5c/0x1a0 [ 635.219016][T13454] ? do_recvmmsg+0x55a/0x1180 [ 635.223775][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 635.229741][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 635.235706][T13454] ? should_fail+0x3f/0x810 [ 635.240339][T13454] ? __stack_depot_save+0x21/0x4b0 [ 635.245994][T13454] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 635.252346][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 635.258293][T13454] __msan_chain_origin+0xbd/0x140 [ 635.263427][T13454] ___sys_recvmsg+0x52e/0x840 [ 635.268303][T13454] ? kmsan_internal_check_memory+0x94/0x530 [ 635.274309][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 635.280257][T13454] do_recvmmsg+0x55a/0x1180 [ 635.284876][T13454] ? do_syscall_64+0x3d/0xb0 [ 635.289563][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 635.294686][T13454] do_syscall_64+0x3d/0xb0 [ 635.299199][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.305185][T13454] RIP: 0033:0x7f8d84489279 [ 635.309649][T13454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 635.329604][T13454] RSP: 002b:00007f8d854ff168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 635.338105][T13454] RAX: ffffffffffffffda RBX: 00007f8d8459c050 RCX: 00007f8d84489279 [ 635.346193][T13454] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 635.354284][T13454] RBP: 00007f8d844e3189 R08: 0000000000000000 R09: 0000000000000000 [ 635.362359][T13454] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 635.370416][T13454] R13: 00007f8d84acfb1f R14: 00007f8d854ff300 R15: 0000000000022000 [ 635.378461][T13454] [ 635.383407][T13454] Uninit was stored to memory at: [ 635.388603][T13454] ___sys_recvmsg+0x52e/0x840 [ 635.393476][T13454] do_recvmmsg+0x55a/0x1180 [ 635.398094][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 635.403357][T13454] do_syscall_64+0x3d/0xb0 [ 635.407888][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.414153][T13454] [ 635.416534][T13454] Uninit was stored to memory at: [ 635.421707][T13454] ___sys_recvmsg+0x52e/0x840 [ 635.426618][T13454] do_recvmmsg+0x55a/0x1180 [ 635.431226][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 635.436550][T13454] do_syscall_64+0x3d/0xb0 [ 635.441083][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.447201][T13454] [ 635.449582][T13454] Uninit was stored to memory at: [ 635.454882][T13454] ___sys_recvmsg+0x52e/0x840 [ 635.459658][T13454] do_recvmmsg+0x55a/0x1180 [ 635.464313][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 635.469447][T13454] do_syscall_64+0x3d/0xb0 [ 635.474056][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.480083][T13454] [ 635.482559][T13454] Uninit was stored to memory at: [ 635.487698][T13454] ___sys_recvmsg+0x52e/0x840 [ 635.492558][T13454] do_recvmmsg+0x55a/0x1180 [ 635.497185][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 635.502442][T13454] do_syscall_64+0x3d/0xb0 [ 635.506954][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.513069][T13454] [ 635.515453][T13454] Uninit was stored to memory at: [ 635.520590][T13454] ___sys_recvmsg+0x52e/0x840 [ 635.525428][T13454] do_recvmmsg+0x55a/0x1180 [ 635.530031][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 635.535255][T13454] do_syscall_64+0x3d/0xb0 [ 635.539767][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.545851][T13454] [ 635.548223][T13454] Uninit was stored to memory at: [ 635.553507][T13454] ___sys_recvmsg+0x52e/0x840 [ 635.558290][T13454] do_recvmmsg+0x55a/0x1180 [ 635.562980][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 635.568206][T13454] do_syscall_64+0x3d/0xb0 [ 635.572851][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.578881][T13454] [ 635.581313][T13454] Uninit was stored to memory at: [ 635.586597][T13454] ___sys_recvmsg+0x52e/0x840 [ 635.591381][T13454] do_recvmmsg+0x55a/0x1180 [ 635.596047][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 635.601169][T13454] do_syscall_64+0x3d/0xb0 [ 635.605781][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.611902][T13454] [ 635.614290][T13454] Local variable msg_sys created at: [ 635.619698][T13454] do_recvmmsg+0x5c/0x1180 [ 635.624316][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 635.785404][T13454] not chained 750000 origins [ 635.790103][T13454] CPU: 0 PID: 13454 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 635.800624][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 635.810761][T13454] Call Trace: [ 635.814077][T13454] [ 635.817040][T13454] dump_stack_lvl+0x1c8/0x256 [ 635.821836][T13454] dump_stack+0x1a/0x1c [ 635.826124][T13454] kmsan_internal_chain_origin+0x78/0x120 [ 635.831978][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 635.837868][T13454] ? kfree+0x44/0x980 [ 635.841929][T13454] ? filter_irq_stacks+0x5c/0x1a0 [ 635.847078][T13454] ? do_recvmmsg+0x55a/0x1180 [ 635.851872][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 635.857789][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 635.863698][T13454] ? should_fail+0x3f/0x810 [ 635.868350][T13454] ? __stack_depot_save+0x21/0x4b0 [ 635.873552][T13454] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 635.879881][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 635.885800][T13454] __msan_chain_origin+0xbd/0x140 [ 635.890976][T13454] ___sys_recvmsg+0x52e/0x840 [ 635.895790][T13454] ? kmsan_internal_check_memory+0x94/0x530 [ 635.901838][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 635.907789][T13454] do_recvmmsg+0x55a/0x1180 [ 635.912425][T13454] ? do_syscall_64+0x3d/0xb0 [ 635.917112][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 635.922229][T13454] do_syscall_64+0x3d/0xb0 [ 635.926752][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.932748][T13454] RIP: 0033:0x7f8d84489279 [ 635.937265][T13454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 635.957104][T13454] RSP: 002b:00007f8d854ff168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 635.965615][T13454] RAX: ffffffffffffffda RBX: 00007f8d8459c050 RCX: 00007f8d84489279 [ 635.973675][T13454] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 635.981733][T13454] RBP: 00007f8d844e3189 R08: 0000000000000000 R09: 0000000000000000 [ 635.989785][T13454] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 635.997828][T13454] R13: 00007f8d84acfb1f R14: 00007f8d854ff300 R15: 0000000000022000 [ 636.005941][T13454] [ 636.009519][T13454] Uninit was stored to memory at: [ 636.014802][T13454] ___sys_recvmsg+0x52e/0x840 [ 636.019587][T13454] do_recvmmsg+0x55a/0x1180 [ 636.024292][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 636.029450][T13454] do_syscall_64+0x3d/0xb0 [ 636.034059][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.040107][T13454] [ 636.042596][T13454] Uninit was stored to memory at: [ 636.047777][T13454] ___sys_recvmsg+0x52e/0x840 [ 636.052685][T13454] do_recvmmsg+0x55a/0x1180 [ 636.057303][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 636.062569][T13454] do_syscall_64+0x3d/0xb0 [ 636.067093][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.073270][T13454] [ 636.075655][T13454] Uninit was stored to memory at: [ 636.080799][T13454] ___sys_recvmsg+0x52e/0x840 [ 636.086825][T13454] do_recvmmsg+0x55a/0x1180 [ 636.091407][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 636.096631][T13454] do_syscall_64+0x3d/0xb0 [ 636.101149][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.107276][T13454] [ 636.109648][T13454] Uninit was stored to memory at: [ 636.114928][T13454] ___sys_recvmsg+0x52e/0x840 [ 636.120235][T13454] do_recvmmsg+0x55a/0x1180 [ 636.124933][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 636.130063][T13454] do_syscall_64+0x3d/0xb0 [ 636.134690][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.140731][T13454] [ 636.143180][T13454] Uninit was stored to memory at: [ 636.148330][T13454] ___sys_recvmsg+0x52e/0x840 [ 636.153202][T13454] do_recvmmsg+0x55a/0x1180 [ 636.157825][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 636.163046][T13454] do_syscall_64+0x3d/0xb0 [ 636.167558][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.173670][T13454] [ 636.176050][T13454] Uninit was stored to memory at: [ 636.181186][T13454] ___sys_recvmsg+0x52e/0x840 [ 636.186041][T13454] do_recvmmsg+0x55a/0x1180 [ 636.190645][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 636.195867][T13454] do_syscall_64+0x3d/0xb0 [ 636.200383][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.206473][T13454] [ 636.208844][T13454] Uninit was stored to memory at: [ 636.214123][T13454] ___sys_recvmsg+0x52e/0x840 [ 636.218910][T13454] do_recvmmsg+0x55a/0x1180 [ 636.223641][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 636.228784][T13454] do_syscall_64+0x3d/0xb0 [ 636.233430][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.239462][T13454] [ 636.241923][T13454] Local variable msg_sys created at: [ 636.247272][T13454] do_recvmmsg+0x5c/0x1180 [ 636.251895][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 636.411653][T13454] not chained 760000 origins [ 636.416411][T13454] CPU: 0 PID: 13454 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 636.426894][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 636.437019][T13454] Call Trace: [ 636.440349][T13454] [ 636.443326][T13454] dump_stack_lvl+0x1c8/0x256 [ 636.448169][T13454] dump_stack+0x1a/0x1c [ 636.452463][T13454] kmsan_internal_chain_origin+0x78/0x120 [ 636.458312][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 636.464221][T13454] ? kfree+0x44/0x980 [ 636.468290][T13454] ? filter_irq_stacks+0x5c/0x1a0 [ 636.473406][T13454] ? do_recvmmsg+0x55a/0x1180 [ 636.478176][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 636.484086][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 636.490045][T13454] ? should_fail+0x3f/0x810 [ 636.494691][T13454] ? __stack_depot_save+0x21/0x4b0 [ 636.499969][T13454] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 636.506465][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 636.512427][T13454] __msan_chain_origin+0xbd/0x140 [ 636.517531][T13454] ___sys_recvmsg+0x52e/0x840 [ 636.522305][T13454] ? kmsan_internal_check_memory+0x94/0x530 [ 636.528333][T13454] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 636.534231][T13454] do_recvmmsg+0x55a/0x1180 [ 636.538817][T13454] ? do_syscall_64+0x3d/0xb0 [ 636.543490][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 636.548647][T13454] do_syscall_64+0x3d/0xb0 [ 636.553174][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.559203][T13454] RIP: 0033:0x7f8d84489279 [ 636.563684][T13454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 636.583440][T13454] RSP: 002b:00007f8d854ff168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 636.591975][T13454] RAX: ffffffffffffffda RBX: 00007f8d8459c050 RCX: 00007f8d84489279 [ 636.600032][T13454] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 636.608056][T13454] RBP: 00007f8d844e3189 R08: 0000000000000000 R09: 0000000000000000 [ 636.616078][T13454] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 636.624117][T13454] R13: 00007f8d84acfb1f R14: 00007f8d854ff300 R15: 0000000000022000 [ 636.632212][T13454] [ 636.635940][T13454] Uninit was stored to memory at: [ 636.641128][T13454] ___sys_recvmsg+0x52e/0x840 [ 636.646021][T13454] do_recvmmsg+0x55a/0x1180 [ 636.650658][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 636.655913][T13454] do_syscall_64+0x3d/0xb0 [ 636.660447][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.666605][T13454] [ 636.668984][T13454] Uninit was stored to memory at: [ 636.674244][T13454] ___sys_recvmsg+0x52e/0x840 [ 636.679017][T13454] do_recvmmsg+0x55a/0x1180 [ 636.683718][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 636.688862][T13454] do_syscall_64+0x3d/0xb0 [ 636.693515][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.699544][T13454] [ 636.702045][T13454] Uninit was stored to memory at: [ 636.707219][T13454] ___sys_recvmsg+0x52e/0x840 [ 636.712120][T13454] do_recvmmsg+0x55a/0x1180 [ 636.716724][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 636.721936][T13454] do_syscall_64+0x3d/0xb0 [ 636.726471][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.732664][T13454] [ 636.735030][T13454] Uninit was stored to memory at: [ 636.740172][T13454] ___sys_recvmsg+0x52e/0x840 [ 636.745049][T13454] do_recvmmsg+0x55a/0x1180 [ 636.749662][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 636.754896][T13454] do_syscall_64+0x3d/0xb0 [ 636.759406][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.765546][T13454] [ 636.767928][T13454] Uninit was stored to memory at: [ 636.773236][T13454] ___sys_recvmsg+0x52e/0x840 [ 636.778020][T13454] do_recvmmsg+0x55a/0x1180 [ 636.782742][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 636.787890][T13454] do_syscall_64+0x3d/0xb0 [ 636.792522][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.798553][T13454] [ 636.800902][T13454] Uninit was stored to memory at: [ 636.806206][T13454] ___sys_recvmsg+0x52e/0x840 [ 636.810999][T13454] do_recvmmsg+0x55a/0x1180 [ 636.815738][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 636.820863][T13454] do_syscall_64+0x3d/0xb0 [ 636.825470][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.831502][T13454] [ 636.833987][T13454] Uninit was stored to memory at: [ 636.839132][T13454] ___sys_recvmsg+0x52e/0x840 [ 636.843977][T13454] do_recvmmsg+0x55a/0x1180 [ 636.848609][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 636.853858][T13454] do_syscall_64+0x3d/0xb0 [ 636.858387][T13454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.864463][T13454] [ 636.866832][T13454] Local variable msg_sys created at: [ 636.872309][T13454] do_recvmmsg+0x5c/0x1180 [ 636.876837][T13454] __x64_sys_recvmmsg+0x3a7/0x4b0 18:28:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x0, 0x0, @ioapic={0x4000}}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000200)={0x81, 0x0, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0x600}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:28:58 executing program 4: syz_open_dev$vcsn(&(0x7f0000004580), 0x0, 0x73f6d017a0eb25c9) 18:28:58 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x4) 18:28:58 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:28:58 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3) 18:28:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x140005}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:28:58 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 18:28:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) [ 637.300936][T13511] loop4: detected capacity change from 0 to 1036 18:28:58 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x0, 0x0) 18:28:58 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 18:28:58 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0xa, @raw_data="af68ce8cd93732dfec1f3590275684af5fa6f195074f35f7f3a10c2452db70cc9cef74fccd8c5658b09a879342e3f44a88f965e4294268c3671b5b9f0a2cf0d32d45a2d98d5f72b57a3ba02a2a0c2dcd891f27470780c7debae29680134e025c8dce9e04701839863b474f165b3eac5576392c2c503dc34976285350a80a9d11bd8b9ce452af53830f5e1de670d451663b8e848cc45d29e20337265c88cb8c894dadd308ee8402f651c5c58ddbe64aa05ea8b2c0db77ef487f318453d991f0b4449b1343dc8f798f"}) 18:28:58 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003) pkey_alloc(0x0, 0x0) 18:28:59 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) 18:28:59 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000600)=ANY=[@ANYBLOB="1c08"], 0x48) 18:28:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x0, 0x0, @ioapic={0x4000}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0x600}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:28:59 executing program 4: symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000500)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0) 18:28:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0xa5bf0f9680adac5}) [ 638.563230][T13543] kvm: pic: non byte read [ 638.596109][T13543] kvm: pic: level sensitive irq not supported [ 638.596343][T13543] kvm: pic: non byte read 18:28:59 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0xfb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 638.787335][T13497] udevd[13497]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 18:29:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1274, 0x0) [ 639.231476][T13526] not chained 770000 origins [ 639.236874][T13526] CPU: 1 PID: 13526 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 639.247433][T13526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 639.257595][T13526] Call Trace: [ 639.260954][T13526] [ 639.263964][T13526] dump_stack_lvl+0x1c8/0x256 [ 639.268822][T13526] dump_stack+0x1a/0x1c [ 639.273133][T13526] kmsan_internal_chain_origin+0x78/0x120 [ 639.279004][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 639.284968][T13526] ? kfree+0x44/0x980 [ 639.289070][T13526] ? filter_irq_stacks+0x5c/0x1a0 [ 639.294258][T13526] ? do_recvmmsg+0x55a/0x1180 [ 639.299062][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 639.305034][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 639.311000][T13526] ? should_fail+0x3f/0x810 [ 639.315656][T13526] ? __stack_depot_save+0x21/0x4b0 [ 639.320926][T13526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 639.327328][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 639.333290][T13526] __msan_chain_origin+0xbd/0x140 [ 639.338443][T13526] ___sys_recvmsg+0x52e/0x840 [ 639.343247][T13526] ? kmsan_internal_check_memory+0x94/0x530 [ 639.349281][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 639.355252][T13526] do_recvmmsg+0x55a/0x1180 [ 639.359899][T13526] ? do_syscall_64+0x3d/0xb0 [ 639.364596][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 639.369743][T13526] do_syscall_64+0x3d/0xb0 [ 639.374258][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 639.380287][T13526] RIP: 0033:0x7f7deda89279 [ 639.384783][T13526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 639.404531][T13526] RSP: 002b:00007f7deebb0168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 639.413051][T13526] RAX: ffffffffffffffda RBX: 00007f7dedb9c050 RCX: 00007f7deda89279 [ 639.421115][T13526] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 639.429167][T13526] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 639.437219][T13526] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 639.445270][T13526] R13: 00007f7dee0cfb1f R14: 00007f7deebb0300 R15: 0000000000022000 [ 639.453961][T13526] [ 639.458264][T13526] Uninit was stored to memory at: [ 639.463575][T13526] ___sys_recvmsg+0x52e/0x840 [ 639.468355][T13526] do_recvmmsg+0x55a/0x1180 [ 639.473091][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 639.478240][T13526] do_syscall_64+0x3d/0xb0 [ 639.482953][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 639.489016][T13526] [ 639.491411][T13526] Uninit was stored to memory at: [ 639.496742][T13526] ___sys_recvmsg+0x52e/0x840 [ 639.501545][T13526] do_recvmmsg+0x55a/0x1180 [ 639.506258][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 639.511410][T13526] do_syscall_64+0x3d/0xb0 [ 639.516107][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 639.522353][T13526] [ 639.524735][T13526] Uninit was stored to memory at: [ 639.529919][T13526] ___sys_recvmsg+0x52e/0x840 [ 639.534934][T13526] do_recvmmsg+0x55a/0x1180 [ 639.539553][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 639.545111][T13526] do_syscall_64+0x3d/0xb0 [ 639.549653][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 639.555821][T13526] [ 639.558207][T13526] Uninit was stored to memory at: [ 639.563524][T13526] ___sys_recvmsg+0x52e/0x840 [ 639.568317][T13526] do_recvmmsg+0x55a/0x1180 [ 639.573126][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 639.578274][T13526] do_syscall_64+0x3d/0xb0 [ 639.582942][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 639.588990][T13526] [ 639.591377][T13526] Uninit was stored to memory at: [ 639.596696][T13526] ___sys_recvmsg+0x52e/0x840 [ 639.601485][T13526] do_recvmmsg+0x55a/0x1180 [ 639.606200][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 639.611341][T13526] do_syscall_64+0x3d/0xb0 [ 639.615999][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 639.622192][T13526] [ 639.624572][T13526] Uninit was stored to memory at: [ 639.629751][T13526] ___sys_recvmsg+0x52e/0x840 [ 639.634766][T13526] do_recvmmsg+0x55a/0x1180 [ 639.639384][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 639.644656][T13526] do_syscall_64+0x3d/0xb0 [ 639.649186][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 639.655364][T13526] [ 639.657740][T13526] Uninit was stored to memory at: [ 639.663141][T13526] ___sys_recvmsg+0x52e/0x840 [ 639.667929][T13526] do_recvmmsg+0x55a/0x1180 [ 639.672684][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 639.677827][T13526] do_syscall_64+0x3d/0xb0 [ 639.682573][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 639.688619][T13526] [ 639.691002][T13526] Local variable msg_sys created at: [ 639.696477][T13526] do_recvmmsg+0x5c/0x1180 [ 639.701006][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 640.209703][T13526] not chained 780000 origins [ 640.214539][T13526] CPU: 0 PID: 13526 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 640.225081][T13526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 640.235252][T13526] Call Trace: [ 640.238602][T13526] [ 640.241610][T13526] dump_stack_lvl+0x1c8/0x256 [ 640.246448][T13526] dump_stack+0x1a/0x1c [ 640.250757][T13526] kmsan_internal_chain_origin+0x78/0x120 [ 640.256635][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 640.262599][T13526] ? kfree+0x44/0x980 [ 640.266689][T13526] ? filter_irq_stacks+0x5c/0x1a0 [ 640.271850][T13526] ? do_recvmmsg+0x55a/0x1180 [ 640.276644][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 640.282610][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 640.288577][T13526] ? should_fail+0x3f/0x810 [ 640.293230][T13526] ? __stack_depot_save+0x21/0x4b0 [ 640.298490][T13526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 640.304896][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 640.310863][T13526] __msan_chain_origin+0xbd/0x140 [ 640.316029][T13526] ___sys_recvmsg+0x52e/0x840 [ 640.320858][T13526] ? kmsan_internal_check_memory+0x94/0x530 [ 640.326905][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 640.332875][T13526] do_recvmmsg+0x55a/0x1180 [ 640.337534][T13526] ? do_syscall_64+0x3d/0xb0 [ 640.342244][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 640.347419][T13526] do_syscall_64+0x3d/0xb0 [ 640.351954][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 640.358000][T13526] RIP: 0033:0x7f7deda89279 [ 640.362513][T13526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 640.382270][T13526] RSP: 002b:00007f7deebb0168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 640.390821][T13526] RAX: ffffffffffffffda RBX: 00007f7dedb9c050 RCX: 00007f7deda89279 [ 640.398905][T13526] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 640.407069][T13526] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 640.415147][T13526] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 640.423221][T13526] R13: 00007f7dee0cfb1f R14: 00007f7deebb0300 R15: 0000000000022000 [ 640.431328][T13526] [ 640.436000][T13526] Uninit was stored to memory at: [ 640.441198][T13526] ___sys_recvmsg+0x52e/0x840 [ 640.446234][T13526] do_recvmmsg+0x55a/0x1180 [ 640.450854][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 640.456068][T13526] do_syscall_64+0x3d/0xb0 [ 640.460599][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 640.466719][T13526] [ 640.469101][T13526] Uninit was stored to memory at: [ 640.474352][T13526] ___sys_recvmsg+0x52e/0x840 [ 640.479140][T13526] do_recvmmsg+0x55a/0x1180 [ 640.483824][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 640.488970][T13526] do_syscall_64+0x3d/0xb0 [ 640.493556][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 640.499600][T13526] [ 640.502041][T13526] Uninit was stored to memory at: [ 640.507218][T13526] ___sys_recvmsg+0x52e/0x840 [ 640.512073][T13526] do_recvmmsg+0x55a/0x1180 [ 640.516684][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 640.521889][T13526] do_syscall_64+0x3d/0xb0 [ 640.526500][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 640.532613][T13526] [ 640.534990][T13526] Uninit was stored to memory at: [ 640.540164][T13526] ___sys_recvmsg+0x52e/0x840 [ 640.545020][T13526] do_recvmmsg+0x55a/0x1180 [ 640.549643][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 640.554864][T13526] do_syscall_64+0x3d/0xb0 [ 640.559389][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 640.565508][T13526] [ 640.567888][T13526] Uninit was stored to memory at: [ 640.573130][T13526] ___sys_recvmsg+0x52e/0x840 [ 640.577946][T13526] do_recvmmsg+0x55a/0x1180 [ 640.582625][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 640.587771][T13526] do_syscall_64+0x3d/0xb0 [ 640.592369][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 640.598410][T13526] [ 640.600785][T13526] Uninit was stored to memory at: [ 640.606036][T13526] ___sys_recvmsg+0x52e/0x840 [ 640.610829][T13526] do_recvmmsg+0x55a/0x1180 [ 640.615517][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 640.620666][T13526] do_syscall_64+0x3d/0xb0 [ 640.625263][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 640.631310][T13526] [ 640.633766][T13526] Uninit was stored to memory at: [ 640.638959][T13526] ___sys_recvmsg+0x52e/0x840 [ 640.643864][T13526] do_recvmmsg+0x55a/0x1180 [ 640.648475][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 640.653724][T13526] do_syscall_64+0x3d/0xb0 [ 640.658260][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 640.664425][T13526] [ 640.666807][T13526] Local variable msg_sys created at: [ 640.672284][T13526] do_recvmmsg+0x5c/0x1180 [ 640.676810][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 640.879659][T13526] not chained 790000 origins [ 640.884480][T13526] CPU: 0 PID: 13526 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 640.895023][T13526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 640.905180][T13526] Call Trace: [ 640.908531][T13526] [ 640.911529][T13526] dump_stack_lvl+0x1c8/0x256 [ 640.916372][T13526] dump_stack+0x1a/0x1c [ 640.920668][T13526] kmsan_internal_chain_origin+0x78/0x120 [ 640.926543][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 640.932520][T13526] ? kfree+0x44/0x980 [ 640.936616][T13526] ? filter_irq_stacks+0x5c/0x1a0 [ 640.941767][T13526] ? do_recvmmsg+0x55a/0x1180 [ 640.946562][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 640.952527][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 640.958498][T13526] ? should_fail+0x3f/0x810 [ 640.963151][T13526] ? __stack_depot_save+0x21/0x4b0 [ 640.968441][T13526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 640.974848][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 640.980815][T13526] __msan_chain_origin+0xbd/0x140 [ 640.985986][T13526] ___sys_recvmsg+0x52e/0x840 [ 640.990799][T13526] ? kmsan_internal_check_memory+0x94/0x530 [ 640.996857][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 641.002823][T13526] do_recvmmsg+0x55a/0x1180 [ 641.007484][T13526] ? do_syscall_64+0x3d/0xb0 [ 641.012195][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.017358][T13526] do_syscall_64+0x3d/0xb0 [ 641.021896][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.027941][T13526] RIP: 0033:0x7f7deda89279 [ 641.032447][T13526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 641.052210][T13526] RSP: 002b:00007f7deebb0168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 641.060752][T13526] RAX: ffffffffffffffda RBX: 00007f7dedb9c050 RCX: 00007f7deda89279 [ 641.068842][T13526] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 641.076924][T13526] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 641.084997][T13526] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 641.093068][T13526] R13: 00007f7dee0cfb1f R14: 00007f7deebb0300 R15: 0000000000022000 [ 641.101170][T13526] [ 641.104775][T13526] Uninit was stored to memory at: [ 641.109978][T13526] ___sys_recvmsg+0x52e/0x840 [ 641.114855][T13526] do_recvmmsg+0x55a/0x1180 [ 641.119472][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.124697][T13526] do_syscall_64+0x3d/0xb0 [ 641.129227][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.135415][T13526] [ 641.137795][T13526] Uninit was stored to memory at: [ 641.143056][T13526] ___sys_recvmsg+0x52e/0x840 [ 641.147842][T13526] do_recvmmsg+0x55a/0x1180 [ 641.152574][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.157712][T13526] do_syscall_64+0x3d/0xb0 [ 641.162297][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.168350][T13526] [ 641.170731][T13526] Uninit was stored to memory at: [ 641.176059][T13526] ___sys_recvmsg+0x52e/0x840 [ 641.180857][T13526] do_recvmmsg+0x55a/0x1180 [ 641.185604][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.190762][T13526] do_syscall_64+0x3d/0xb0 [ 641.195435][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.201487][T13526] [ 641.203994][T13526] Uninit was stored to memory at: [ 641.209182][T13526] ___sys_recvmsg+0x52e/0x840 [ 641.214085][T13526] do_recvmmsg+0x55a/0x1180 [ 641.218698][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.223960][T13526] do_syscall_64+0x3d/0xb0 [ 641.228488][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.234665][T13526] [ 641.237046][T13526] Uninit was stored to memory at: [ 641.242339][T13526] ___sys_recvmsg+0x52e/0x840 [ 641.247123][T13526] do_recvmmsg+0x55a/0x1180 [ 641.251825][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.256972][T13526] do_syscall_64+0x3d/0xb0 [ 641.261493][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.267665][T13526] [ 641.270051][T13526] Uninit was stored to memory at: [ 641.275360][T13526] ___sys_recvmsg+0x52e/0x840 [ 641.280144][T13526] do_recvmmsg+0x55a/0x1180 [ 641.284819][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.289969][T13526] do_syscall_64+0x3d/0xb0 [ 641.294614][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.300660][T13526] [ 641.303160][T13526] Uninit was stored to memory at: [ 641.308427][T13526] ___sys_recvmsg+0x52e/0x840 [ 641.313325][T13526] do_recvmmsg+0x55a/0x1180 [ 641.317943][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.323210][T13526] do_syscall_64+0x3d/0xb0 [ 641.327745][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.334005][T13526] [ 641.336385][T13526] Local variable msg_sys created at: [ 641.341736][T13526] do_recvmmsg+0x5c/0x1180 [ 641.346392][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.554592][T13526] not chained 800000 origins [ 641.559291][T13526] CPU: 0 PID: 13526 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 641.569834][T13526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 641.579995][T13526] Call Trace: [ 641.583350][T13526] [ 641.586347][T13526] dump_stack_lvl+0x1c8/0x256 [ 641.591181][T13526] dump_stack+0x1a/0x1c [ 641.595476][T13526] kmsan_internal_chain_origin+0x78/0x120 [ 641.601349][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 641.607302][T13526] ? kfree+0x44/0x980 [ 641.611393][T13526] ? filter_irq_stacks+0x5c/0x1a0 [ 641.616547][T13526] ? do_recvmmsg+0x55a/0x1180 [ 641.621346][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 641.627315][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 641.633277][T13526] ? should_fail+0x3f/0x810 [ 641.637913][T13526] ? __stack_depot_save+0x21/0x4b0 [ 641.643155][T13526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 641.649533][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 641.655469][T13526] __msan_chain_origin+0xbd/0x140 [ 641.660616][T13526] ___sys_recvmsg+0x52e/0x840 [ 641.665415][T13526] ? kmsan_internal_check_memory+0x94/0x530 [ 641.671441][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 641.677386][T13526] do_recvmmsg+0x55a/0x1180 [ 641.682025][T13526] ? do_syscall_64+0x3d/0xb0 [ 641.686719][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.691872][T13526] do_syscall_64+0x3d/0xb0 [ 641.696387][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.702412][T13526] RIP: 0033:0x7f7deda89279 [ 641.706906][T13526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 641.726640][T13526] RSP: 002b:00007f7deebb0168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 641.735162][T13526] RAX: ffffffffffffffda RBX: 00007f7dedb9c050 RCX: 00007f7deda89279 [ 641.743230][T13526] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 641.751283][T13526] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 641.759338][T13526] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 641.767389][T13526] R13: 00007f7dee0cfb1f R14: 00007f7deebb0300 R15: 0000000000022000 [ 641.775471][T13526] [ 641.780092][T13526] Uninit was stored to memory at: [ 641.785343][T13526] ___sys_recvmsg+0x52e/0x840 [ 641.790126][T13526] do_recvmmsg+0x55a/0x1180 [ 641.794812][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.799954][T13526] do_syscall_64+0x3d/0xb0 [ 641.804537][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.810577][T13526] [ 641.813022][T13526] Uninit was stored to memory at: [ 641.818214][T13526] ___sys_recvmsg+0x52e/0x840 [ 641.823076][T13526] do_recvmmsg+0x55a/0x1180 [ 641.827695][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.832914][T13526] do_syscall_64+0x3d/0xb0 [ 641.837445][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.843568][T13526] [ 641.845944][T13526] Uninit was stored to memory at: [ 641.851116][T13526] ___sys_recvmsg+0x52e/0x840 [ 641.855980][T13526] do_recvmmsg+0x55a/0x1180 [ 641.860600][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.865821][T13526] do_syscall_64+0x3d/0xb0 [ 641.870349][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.876488][T13526] [ 641.878881][T13526] Uninit was stored to memory at: [ 641.884127][T13526] ___sys_recvmsg+0x52e/0x840 [ 641.888909][T13526] do_recvmmsg+0x55a/0x1180 [ 641.893601][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.898748][T13526] do_syscall_64+0x3d/0xb0 [ 641.903384][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.909426][T13526] [ 641.911880][T13526] Uninit was stored to memory at: [ 641.917060][T13526] ___sys_recvmsg+0x52e/0x840 [ 641.921961][T13526] do_recvmmsg+0x55a/0x1180 [ 641.926595][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.931736][T13526] do_syscall_64+0x3d/0xb0 [ 641.936393][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.942547][T13526] [ 641.944927][T13526] Uninit was stored to memory at: [ 641.950111][T13526] ___sys_recvmsg+0x52e/0x840 [ 641.955042][T13526] do_recvmmsg+0x55a/0x1180 [ 641.959664][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.964945][T13526] do_syscall_64+0x3d/0xb0 [ 641.969482][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.975666][T13526] [ 641.978052][T13526] Uninit was stored to memory at: [ 641.983337][T13526] ___sys_recvmsg+0x52e/0x840 [ 641.988114][T13526] do_recvmmsg+0x55a/0x1180 [ 641.992812][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 641.997947][T13526] do_syscall_64+0x3d/0xb0 [ 642.002559][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 642.008585][T13526] [ 642.010931][T13526] Local variable msg_sys created at: [ 642.016387][T13526] do_recvmmsg+0x5c/0x1180 [ 642.020914][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 642.191611][T13526] not chained 810000 origins [ 642.196345][T13526] CPU: 1 PID: 13526 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 642.206839][T13526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 642.217061][T13526] Call Trace: [ 642.220391][T13526] [ 642.223371][T13526] dump_stack_lvl+0x1c8/0x256 [ 642.228188][T13526] dump_stack+0x1a/0x1c [ 642.232434][T13526] kmsan_internal_chain_origin+0x78/0x120 [ 642.238243][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 642.244152][T13526] ? kfree+0x44/0x980 [ 642.248222][T13526] ? filter_irq_stacks+0x5c/0x1a0 [ 642.253339][T13526] ? do_recvmmsg+0x55a/0x1180 [ 642.258127][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 642.264054][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 642.270000][T13526] ? should_fail+0x3f/0x810 [ 642.274590][T13526] ? __stack_depot_save+0x21/0x4b0 [ 642.279779][T13526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 642.286133][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 642.292071][T13526] __msan_chain_origin+0xbd/0x140 [ 642.297171][T13526] ___sys_recvmsg+0x52e/0x840 [ 642.301962][T13526] ? kmsan_internal_check_memory+0x94/0x530 [ 642.307986][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 642.313883][T13526] do_recvmmsg+0x55a/0x1180 [ 642.318468][T13526] ? do_syscall_64+0x3d/0xb0 [ 642.323136][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 642.328272][T13526] do_syscall_64+0x3d/0xb0 [ 642.332748][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 642.338727][T13526] RIP: 0033:0x7f7deda89279 [ 642.343204][T13526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 642.362952][T13526] RSP: 002b:00007f7deebb0168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 642.371486][T13526] RAX: ffffffffffffffda RBX: 00007f7dedb9c050 RCX: 00007f7deda89279 [ 642.379546][T13526] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 642.387569][T13526] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 642.395594][T13526] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 642.403651][T13526] R13: 00007f7dee0cfb1f R14: 00007f7deebb0300 R15: 0000000000022000 [ 642.411721][T13526] [ 642.415331][T13526] Uninit was stored to memory at: [ 642.420531][T13526] ___sys_recvmsg+0x52e/0x840 [ 642.425398][T13526] do_recvmmsg+0x55a/0x1180 [ 642.430014][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 642.435301][T13526] do_syscall_64+0x3d/0xb0 [ 642.439825][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 642.445965][T13526] [ 642.448335][T13526] Uninit was stored to memory at: [ 642.453653][T13526] ___sys_recvmsg+0x52e/0x840 [ 642.458425][T13526] do_recvmmsg+0x55a/0x1180 [ 642.463115][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 642.468240][T13526] do_syscall_64+0x3d/0xb0 [ 642.472911][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 642.478962][T13526] [ 642.481340][T13526] Uninit was stored to memory at: [ 642.486646][T13526] ___sys_recvmsg+0x52e/0x840 [ 642.491424][T13526] do_recvmmsg+0x55a/0x1180 [ 642.496105][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 642.501231][T13526] do_syscall_64+0x3d/0xb0 [ 642.505805][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 642.511948][T13526] [ 642.514315][T13526] Uninit was stored to memory at: [ 642.519429][T13526] ___sys_recvmsg+0x52e/0x840 [ 642.524321][T13526] do_recvmmsg+0x55a/0x1180 [ 642.529007][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 642.534346][T13526] do_syscall_64+0x3d/0xb0 [ 642.538869][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 642.545016][T13526] [ 642.547389][T13526] Uninit was stored to memory at: [ 642.552692][T13526] ___sys_recvmsg+0x52e/0x840 [ 642.557465][T13526] do_recvmmsg+0x55a/0x1180 [ 642.562245][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 642.567383][T13526] do_syscall_64+0x3d/0xb0 [ 642.572067][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 642.578104][T13526] [ 642.580450][T13526] Uninit was stored to memory at: [ 642.585751][T13526] ___sys_recvmsg+0x52e/0x840 [ 642.590550][T13526] do_recvmmsg+0x55a/0x1180 [ 642.595392][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 642.600530][T13526] do_syscall_64+0x3d/0xb0 [ 642.605129][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 642.611159][T13526] [ 642.613684][T13526] Uninit was stored to memory at: [ 642.618832][T13526] ___sys_recvmsg+0x52e/0x840 [ 642.623667][T13526] do_recvmmsg+0x55a/0x1180 [ 642.628263][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 642.633515][T13526] do_syscall_64+0x3d/0xb0 [ 642.638052][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 642.644174][T13526] [ 642.646544][T13526] Local variable msg_sys created at: [ 642.652038][T13526] do_recvmmsg+0x5c/0x1180 [ 642.656568][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 642.825205][T13526] not chained 820000 origins [ 642.829863][T13526] CPU: 0 PID: 13526 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 642.840369][T13526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 642.850492][T13526] Call Trace: [ 642.853805][T13526] [ 642.856768][T13526] dump_stack_lvl+0x1c8/0x256 [ 642.861539][T13526] dump_stack+0x1a/0x1c [ 642.865769][T13526] kmsan_internal_chain_origin+0x78/0x120 [ 642.871588][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 642.877520][T13526] ? kfree+0x44/0x980 [ 642.881604][T13526] ? filter_irq_stacks+0x5c/0x1a0 [ 642.886702][T13526] ? do_recvmmsg+0x55a/0x1180 [ 642.891465][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 642.897363][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 642.903258][T13526] ? should_fail+0x3f/0x810 [ 642.907946][T13526] ? __stack_depot_save+0x21/0x4b0 [ 642.913153][T13526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 642.919493][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 642.925435][T13526] __msan_chain_origin+0xbd/0x140 [ 642.930609][T13526] ___sys_recvmsg+0x52e/0x840 [ 642.935432][T13526] ? kmsan_internal_check_memory+0x94/0x530 [ 642.941564][T13526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 642.947529][T13526] do_recvmmsg+0x55a/0x1180 [ 642.952183][T13526] ? do_syscall_64+0x3d/0xb0 [ 642.956870][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 642.961969][T13526] do_syscall_64+0x3d/0xb0 [ 642.966445][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 642.972440][T13526] RIP: 0033:0x7f7deda89279 [ 642.976953][T13526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 642.996706][T13526] RSP: 002b:00007f7deebb0168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 643.005328][T13526] RAX: ffffffffffffffda RBX: 00007f7dedb9c050 RCX: 00007f7deda89279 [ 643.013406][T13526] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 643.021472][T13526] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 643.029537][T13526] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 643.037598][T13526] R13: 00007f7dee0cfb1f R14: 00007f7deebb0300 R15: 0000000000022000 [ 643.045698][T13526] [ 643.058264][T13526] Uninit was stored to memory at: [ 643.063567][T13526] ___sys_recvmsg+0x52e/0x840 [ 643.064673][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 643.068311][T13526] do_recvmmsg+0x55a/0x1180 [ 643.074859][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 [ 643.079171][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 643.090700][T13526] do_syscall_64+0x3d/0xb0 [ 643.095311][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 643.101358][T13526] [ 643.103819][T13526] Uninit was stored to memory at: [ 643.109010][T13526] ___sys_recvmsg+0x52e/0x840 [ 643.113912][T13526] do_recvmmsg+0x55a/0x1180 [ 643.118523][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 643.123751][T13526] do_syscall_64+0x3d/0xb0 [ 643.128282][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 643.134423][T13526] [ 643.136804][T13526] Uninit was stored to memory at: [ 643.142048][T13526] ___sys_recvmsg+0x52e/0x840 [ 643.146831][T13526] do_recvmmsg+0x55a/0x1180 [ 643.151459][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 643.156690][T13526] do_syscall_64+0x3d/0xb0 [ 643.161210][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 643.167337][T13526] [ 643.169715][T13526] Uninit was stored to memory at: [ 643.174982][T13526] ___sys_recvmsg+0x52e/0x840 [ 643.179763][T13526] do_recvmmsg+0x55a/0x1180 [ 643.184461][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 643.189608][T13526] do_syscall_64+0x3d/0xb0 [ 643.194223][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 643.200348][T13526] [ 643.202807][T13526] Uninit was stored to memory at: [ 643.208071][T13526] ___sys_recvmsg+0x52e/0x840 [ 643.212936][T13526] do_recvmmsg+0x55a/0x1180 [ 643.217547][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 643.222786][T13526] do_syscall_64+0x3d/0xb0 [ 643.227320][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 643.233551][T13526] [ 643.235926][T13526] Uninit was stored to memory at: [ 643.241100][T13526] ___sys_recvmsg+0x52e/0x840 [ 643.246003][T13526] do_recvmmsg+0x55a/0x1180 [ 643.250611][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 643.255851][T13526] do_syscall_64+0x3d/0xb0 [ 643.260384][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 643.266577][T13526] [ 643.268967][T13526] Uninit was stored to memory at: [ 643.274287][T13526] ___sys_recvmsg+0x52e/0x840 [ 643.279080][T13526] do_recvmmsg+0x55a/0x1180 [ 643.283837][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 643.288983][T13526] do_syscall_64+0x3d/0xb0 [ 643.293647][T13526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 643.299692][T13526] [ 643.302202][T13526] Local variable msg_sys created at: [ 643.307549][T13526] do_recvmmsg+0x5c/0x1180 [ 643.312201][T13526] __x64_sys_recvmmsg+0x3a7/0x4b0 18:29:04 executing program 0: signalfd4(0xffffffffffffffff, &(0x7f0000000880), 0x8, 0x80000) 18:29:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) 18:29:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x80, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000280)=0x205, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) 18:29:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f00000000c0)=0x18) 18:29:04 executing program 4: add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5450) pipe(0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5450) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0x5451, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000000)={'team0\x00', {0x2, 0x4e20, @loopback}}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x5451, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) dup2(r0, r3) 18:29:04 executing program 5: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@rand_addr, @multicast1, @broadcast}, 0xc) [ 643.600607][T13570] loop4: detected capacity change from 0 to 1036 [ 643.618250][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 18:29:04 executing program 5: open(&(0x7f0000000180)='./file0\x00', 0x84c2c41878a7375, 0x0) getgroups(0x7, &(0x7f0000000140)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0]) chown(&(0x7f0000000040)='./file0\x00', 0x0, r0) 18:29:04 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000000)=[{0x4c}, {0x7}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 18:29:04 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, 0x0}}], 0x1, 0x1, 0x0) 18:29:04 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$xdp(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 643.970479][ T24] audit: type=1326 audit(1661797745.020:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f105f689279 code=0x0 18:29:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00807880000002e500000005430000620065000007000000ac"]}) 18:29:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) 18:29:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0xa4}, {0x2c}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:05 executing program 5: r0 = socket(0x2b, 0x1, 0x0) connect$rxrpc(r0, &(0x7f0000000580)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) [ 644.254410][ T24] audit: type=1326 audit(1661797745.310:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7deda89279 code=0x0 [ 644.287773][T13592] loop4: detected capacity change from 0 to 1036 18:29:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x161281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020023031c0000000500000002000020d3f46ffb"]) 18:29:05 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20a003) vmsplice(r0, 0x0, 0x0, 0x0) 18:29:05 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000001840)={0x0, @l2tp={0x2, 0x0, @empty=0x3bb}, @l2={0x1f, 0x0, @none}, @nl=@unspec, 0x3d6}) 18:29:05 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 18:29:05 executing program 5: open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) pkey_mprotect(&(0x7f0000462000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 18:29:05 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x1ff}}) 18:29:05 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fsetxattr$security_evm(r0, &(0x7f0000000180), 0x0, 0x0, 0x0) 18:29:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:05 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x5437, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) [ 644.803238][T13603] mmap: syz-executor.5 (13603) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. 18:29:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 18:29:06 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x161281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000180)=ANY=[@ANYBLOB="0200230306000000050000d3"]) 18:29:06 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{0x0, 0xff}}) 18:29:06 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000100)={{0x0, 0xff}}) 18:29:06 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:06 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000000180)=ANY=[], 0x1ec4}}, 0x0) 18:29:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='S', 0x1}], 0x1) 18:29:06 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) 18:29:06 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchown(0xffffffffffffffff, 0x0, 0x0) 18:29:06 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x80081270, 0x0) 18:29:06 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:06 executing program 2: r0 = socket(0x21, 0x2, 0x2) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000240)={&(0x7f0000000000), 0x61, &(0x7f0000000200)={&(0x7f0000000040)={0x110, 0x1, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_USERDATA={0xe1, 0x6, "be7c7bb79c6d07f1f7ebe842bf1cac020f2eb790a58a6f528cfc7a8ee0994c0ea6659373dfa03876d54831b30d240eb7f120c0435b1072bc4dea3e8fd9abb44c104ac3a8358cbf0a42f8e1ebaa6b68bb30eee0caef657acee59b315e8faa3a9e53dc7ef4684ef73e00b6b1e9c50353034f3c6b3caca2cceb014c646473ff06c18c28522204863fcb1578ef19de10005e7220ec4f557a3027699ac27596deb1979f2388b8aa27334833936d993b20ba7aba0fe4649731999c6599dd25490c31a42f5576074dc0e6f913c3631ca41fbf61b11c454049569f8c98019a6e3b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc}]}, 0x110}, 0x1, 0x0, 0x0, 0x20004080}, 0x400c014) 18:29:06 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x541b, 0x0) 18:29:06 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0xe60d}) 18:29:06 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000000)) 18:29:06 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000100)={{0x0, 0xfe}}) 18:29:06 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:06 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000003c0)={'veth1_to_hsr\x00'}) 18:29:06 executing program 3: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000340), 0x0, &(0x7f00000003c0)={0x0, "fc932f9c2d18b08454e10941e485ce781269aad30d6652343f52df6b767b9885dfbbf4edfc2106d13c0da51dba60ec9f2f157aa47a54424b4d4393cf6184f74a"}, 0x48, r0) 18:29:06 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x84}, {0x2c}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:06 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f00000004c0)={0x0, @remote, 0x0, 0x0, 'none\x00'}, 0x2c) 18:29:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x161281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80085504, 0x0) [ 646.088114][ T24] audit: type=1326 audit(1661797747.140:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732f089279 code=0x0 18:29:07 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:07 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40a02) write$binfmt_aout(r0, &(0x7f00000004c0)={{}, "438bf110"}, 0x24) 18:29:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x161281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80085504, &(0x7f0000000180)=ANY=[@ANYBLOB="020023"]) 18:29:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 18:29:07 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, 0x0, 0x0) 18:29:07 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x767a41) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) 18:29:07 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140), 0x0, 0x0, 0x0) 18:29:07 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000000)=[{}, {0x7}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 18:29:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x1260, 0x0) [ 646.770977][ T24] audit: type=1326 audit(1661797747.820:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13674 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c45489279 code=0x0 18:29:08 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x84}, {0x2c}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:08 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(0xffffffffffffffff, 0x0) 18:29:08 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000280)="b9ff0300600d698c389e14f008001fffffff000040006384ffffff00000006e00000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:29:08 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0xc004743e, 0x0) 18:29:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5194}, 0x80) 18:29:08 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) 18:29:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x161281) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x7) 18:29:08 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e", 0x0, 0x0, 0x0, 0x0, 0x0}) 18:29:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETPERSIST(r2, 0xc004743e, 0x20000000) ioctl$TUNSETPERSIST(r1, 0x4004743d, 0x2000ff00) [ 647.182590][ T24] audit: type=1326 audit(1661797748.230:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732f089279 code=0x0 18:29:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, 0x0, &(0x7f0000000340)=""/74}, 0x20) 18:29:09 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x84}, {0x2c}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:09 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:29:09 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 18:29:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:09 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x5, 0x2}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000001e00)=""/4096, 0x34, 0x1000, 0x1}, 0x20) 18:29:09 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000280)="b9ff0300600d698c389e14f008001fffffff00004000632f00000000000006e00000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:29:09 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000400)=""/217, 0x26, 0xd9, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x8) 18:29:09 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5194}, 0x80) [ 648.192858][ T24] audit: type=1326 audit(1661797749.250:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13713 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732f089279 code=0x0 18:29:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:09 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x9, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu, @alu, @map_idx, @exit]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:29:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x1, &(0x7f0000000080)=@raw=[@jmp={0x6, 0x0, 0x8}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:29:09 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a0afe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83927dd29c034055b67dafe6c8dc3d5d7870336e6a3523d1f5310efd4989147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e36708d6704902cbe7bc0b132b8667c21476619f28d9e61b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e6ea09c346dfebd31a08060000000200000000000000334d83239dd27080e758e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0288535c133f71303767d2e24f29e5dad9796edb697a6ea0182babc186ae2ed4b4390af9a9ceefd07e002cab5ebf8aad34732181feb215139f15ea7e8cb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7a8b259e2202e117b7992d4a1a4abf8cd3fcc3dc3dec04b25df512e75238345d4f71af35910b158c36657b7218baaa7cbf781c0a99bd50499ccc421ace5e85efb5b7e64e4beba3da8223fe5308e4e65ee93e1d92b9f99f8ddebf70132a4d0175b989b8eccf707882042e716df749717570631ca965031086e97bcc5ca0e221a0e34323c129102b6ff0500002e88c0f6dfda02ed9c92d6f64b1282dc51bb00159830d7617001154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059514119d06d5ea9a8d0857382ec6e2a071408000000000000007f4ead7cf754a56e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9424db65c1e00015c1d093dab01bad188885f1ea8f2371b1f243e99fe33c3fedc5f3580397b449d70c060d57bc88fbe3bbaa058b040362ab9261503def363fb099408885afc2bf9a4f8c35070669ea69f4e4be1b8e0d6697e97186fc51439d670dba6623279f73db9dec75070cd9ab0fd96b069ee6d2857b6bf955012cf7fe50d133d541da86e0477e4a6cc999dc21c3ef408e633dfa35f14d6e734837d36000000003c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cad4ead134847425a6da2c8067ab743c1d82a5687f2ed6900000000000000000000000000000000000000000000996e291aa1503a601b3f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb06a6deaf0047b88486cacee4ccd8aeedaf919a4bff2ed893f20a6aba26cce2d4eedf356701c56051a9f748e5aaf10a10bd8c40889967a39d57e6565264e3d3f8e0ae289ce2ad77c43c549737d6d79ce71d4dca0cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef009e335ac1d579c29cbf09fd1ce5242402c8c88272395d2d7bbd79589787ca56314c3b90d51e8b74a669010b09d1fa90320e83ec9e6c03e683e2615d66a3a83f5a3ffef9d9429fbc5d9c6a3f2bebec94a3bb64e1b2cd5c38cad3f1457c6b1b2318706ce5f4f73c05a2ffc6d0af1a514d228ff6ca2c0ef73a370751b171cd72970d60b26cfe6649f4c0add883e729e1d546f1e1bb5470a7f90415ac0081005a898b4d52b76d18e8e3c619d50f76bc5fc7212b5fcfa177c13c558f19da8f5db2cc032932a924de4916470ccc6b80034ee90bd4b938580bb71b43bf38e7a3fe0446b5348e3d610e2f5db43e49562ccc1ac5b6c2751a6a786a4090a14e23d225a5dd452a30ea88b2cf2b9261b0157d2822ff706586675f463094f563437177e41e0a99116092736a4976e81513fc8dcf08d494c7f1c3edce1f7b0313d0376e36cb2dde63d77a4452a0faf723c4940c0a77b8ab3aa02a55ee8872fe84b2b91edaa6670f2ddae2079f8e9a6bcd98449761624e6767ff00000000000000000000000000000000e423432788ce02f5e3a0979103719dc5e790d85ce6d55f8a380500000000000000598a89bd8c59796fe1500f5252ffd193952d8a5976cbf494780000000000db97b88e4ae1c401f3d97e8d32339cec6d4e1be9ac0525b7adc046fde293e4c5442a8ae3a6a7708967882f4fca0df2274ef1816b2bedf41f2b0272fab6d5f9772f8d8afd3f56ae6329f9240f22bb42927704b4b2693d6cc9bbfbf5305b93a9dc2cab7b38ca271433e73fee9eb6f3bf6199ba7a821ff20c403e507c975abfd5d6abe447f37c7cce000000000000006365686afae5d44d767bcf542e7a85a228565efa00995a6a7077243821e7bc5b06ed3e65ccfc0629b5437f3fed4271dfd90738d356a520fb1a28da552c9d14ec4da018a0a707ed61aa24c9c9e0d2c062fd13f285bd0c708a88c6022e163855a8cef1a9424bd9cbbcc26d542af0a93a0359f6ebee380cecd55eb0c82ba8a22217e450b6ecc2706a8fe9e01af17ce3f35eb3c18cd8946adea524141ff813c2793bcae0568069a4ca4f7b2e03288e7a4b10c45435f55f471b8be25f708abb58418125457d5f33fb719acde11f98fcde66c9b84503a4250ec25de7e586f425d2bd5319dc549c37949f0fbd519d3dc075f9a5c08ad80c6a26692f8c20a13336e4ce01a9793cfe98f0d2d7b5ab9dbc750a9f120ce1a5000000000000c6cec736edc12630c90693baff8733f72f5814dd2779b5ec1d45f7a0c73ce250bca9f1dcedc61fc595e5e60525d44315c4d7c93202e49b2d20386c01f8ffffffffffffe3de286bf630b73d44849f7a1f07b0b53f22693eb89fa3f9d0e1d260bd87252a3371a73fd97264c0c15e81647d1eec7f8519b37c9947d787c8c27c43926211f64277eaa2d91babf96c7d083bcb271b343fd767bb6a055f8cd44844a5abab000000000000000000000000000702"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002100)={r0, 0xe0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001e80)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 18:29:10 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x84}, {0x2c}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:10 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:29:10 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x2, &(0x7f00000000c0)=@raw=[@map_idx_val], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, &(0x7f0000000480), &(0x7f0000000340)=""/74}, 0x20) 18:29:10 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:10 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x10) 18:29:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0x4) 18:29:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0x13f, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 18:29:10 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@enum={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000001580)=""/217, 0x2e, 0xd9, 0x1}, 0x20) 18:29:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000400)=""/202, 0x26, 0xca, 0x2}, 0x20) [ 649.302546][ T24] audit: type=1326 audit(1661797750.350:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732f089279 code=0x0 18:29:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0}}, 0x10) 18:29:10 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 18:29:10 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:11 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:11 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) 18:29:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x5, 0x2}]}]}}, &(0x7f0000001e00)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 18:29:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'geneve0\x00', 0x2}) close(r0) 18:29:11 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x22, 0x2, &(0x7f0000000280)="b9ff0300600d698c389e14f008001fffffff00004000633200000000000006e00000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:29:11 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:11 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0}}, 0x10) 18:29:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5194}, 0x80) 18:29:11 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xd, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x10) 18:29:11 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:11 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000280)="b9ff0300600d698c389e14f008001fffffff0000400063320000002e000006e00000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:29:11 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) [ 650.648224][T13776] loop4: detected capacity change from 0 to 1036 18:29:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x9, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu, @alu, @map_idx, @exit]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:29:11 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:29:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2}]}, {0x0, [0x0, 0x61, 0x25]}}, &(0x7f0000001e00)=""/4096, 0x29, 0x1000, 0x1}, 0x20) 18:29:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001dc0)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x6}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000dc0)=""/4096, 0x3c, 0x1000, 0x1}, 0x20) 18:29:11 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:12 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5194}, 0x80) 18:29:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000001580)=""/217, 0x2d, 0xd9, 0x1}, 0x20) 18:29:12 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 18:29:12 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:12 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:12 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0xc004743e, 0x20000000) 18:29:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:29:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 18:29:12 executing program 2: mkdir(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) [ 651.458707][T13799] loop4: detected capacity change from 0 to 1036 18:29:12 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:12 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x4004743d, 0x20000000) 18:29:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f0000001e00)=""/4096, 0x29, 0x1000, 0x1}, 0x20) 18:29:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000280)="b9ff0300600d698c389e14f008001fffffff00004000633200000000040006e00000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:29:12 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x20, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0xb}}, 0x10) 18:29:13 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x6002, &(0x7f0000000000)=@framed={{}, [@alu]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:29:13 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/2208], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x1e, 0x0, &(0x7f0000000280)="b9ff0300600d698c389e14f008001fffffff000040006302000000000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:29:13 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000280)="b9ff0300600d698c389e14f008001fffffff00004000633200000000220006e00000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 652.091189][T13822] loop4: detected capacity change from 0 to 1036 18:29:13 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:13 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x11d200, 0x0) 18:29:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) write$cgroup_int(r0, 0x0, 0x0) 18:29:13 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000280)="b9ff0300600d698c389e14f008001fffffff000040006384ffffff00000006e00000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:29:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETPERSIST(r2, 0xc004743e, 0x20000000) ioctl$TUNSETPERSIST(r1, 0x4004743d, 0x2000ff00) 18:29:13 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000280)="b9ff0300600d698c389e14f008001fffffff00004000630600000000000006e00000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:29:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0x2}, 0x80) 18:29:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@enum={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000400)=""/217, 0x2e, 0xd9, 0x1}, 0x20) 18:29:13 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:13 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80) 18:29:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, 0x0, 0x1a}, 0x20) 18:29:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000280)="b9ff0300600d698c389e14f008001fffffff00004000636c00000000000006e00000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 652.917538][T13852] loop4: detected capacity change from 0 to 1036 18:29:14 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)="a0", 0x1}, {&(0x7f0000000440)="b0", 0x1}, {&(0x7f0000000540)="f9", 0x1}, {0x0}, {0x0}, {&(0x7f0000000700)='\b', 0x1}], 0x6, &(0x7f0000000800)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0) 18:29:14 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:14 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x541b, 0x0) 18:29:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80) 18:29:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000140)=@raw=[@jmp, @map_val, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:29:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26}, 0x20) 18:29:14 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x84}, {0x2c}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:14 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xa, &(0x7f0000000100)=@framed={{}, [@func, @map_idx_val, @generic, @map_fd, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:29:14 executing program 3: socketpair(0x23, 0x0, 0x3ff, &(0x7f0000000480)) 18:29:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 18:29:14 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x100000, 0x0) 18:29:14 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x84}, {0x2c}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xc}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:29:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x9}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5194}, 0x80) 18:29:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 18:29:14 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000280)="b9ff0300600d698c389e14f008001fffffff000040006388ffffff00000006e00000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 653.741012][T13883] loop4: detected capacity change from 0 to 1036 18:29:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 18:29:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, &(0x7f0000000480)='Z', &(0x7f0000000340)=""/74}, 0x20) 18:29:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:15 executing program 3: mkdir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 18:29:15 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x84}, {0x2c}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:15 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000280)="b9ff0300600d698c389e14f008001fffffff00004000633200000000000006e00000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:29:15 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000048000000000019d5bb2d0a00000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000180)=""/212, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:29:15 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000016000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a0afe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27105000000000400008b5e5a076d83927dd29c034055b67dafe6c8dc3d5d89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc57099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e36708d6704902cbe7bc0b132b8667c21476619f28d9e61b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e6ea09c346dfebd31a08060000000200000000000000334d83239dd27080e758e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0288535c133f71303767d2e24f29e5dad9796edb697a6ea0182babc186ae2ed4b4390af9a9ceefd07e002cab5ebf8aad34732181feb215139f15ea7e8cb0c7cbe31fbae7c34d5ac5e7e64c21add91905add6e1795ad6a0f7a8b259e2202e117b7992d4a1a4abf8cd3fcc3dc3dec04b25df512e75238345d4f71af35910b158c36657b7218baaa7cbf781c0a99bd50499ccc421ace5e85efb5b7e64e4beba3da8223fe5308e4e65ee93e1d92b9f99f8ddebf70132a4d0175b989b8eccf707882042e716df749717570631ca965031086e97bcc5ca0e221a0e34323c129102b6ff0500002e88c0f3dfda02ed9c92d6f64b1282dc51bb00159830d7617001154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059514119d06d5ea9a8d0857382ec6e2a071408000000000000007f4ead7cf754a56e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9424db65c1e00015c1d093dab01bad188885f1ea8f2371b1f243e99fe33c3fedc5f35803957d93bfc7921415fc88fbe3bbaa058b040362ab9261503def363fb099408885afc2bf9a4f8c35070669ea69f4e4bb2ef982ee1b8e0d6697e97186fc51439d670dba6623279f73db9dec75070cd9ab0fd96b069ee6d2857b6bf955012cf7fe50d133d541da86e0477e4a6cc999dc21c3ef408e633dfa35f14d6e734837d36000000003c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cad4ead134847425a6da2c8067ab743c1d82a5687f2ed6900000000000000000000000000000000000000000000996e291aa1800000003f0ecdc7c92e72919c91d2039afe17e95edeeeba72205beff7771bcb06a6deaf0047b88486cacee4ccd8aeedaf919a4bff2ed893f20a6aba26cce2d4eedf356701c56051a9f748e5aaf10a10bd8c40889967a39d57e6565264e3d3f8e0ae289ce2ad77c43c549737d6d79ce71d4dca0cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef009e335ac1d579c29cbf09fd1ce5242402c8c88272395d2d7bbd79589787ca56314c3b90d51e8b74a669010b09d1fa90320e83ec9e6c03e683e2615d66a3a83f5a3ffef9d9429fbc5d9c6a3f2bebec94a3bb64e1b2cd5c38cad3f1457c6b1b2318706ce5f4f73c05a2ffc6d0af1a514d228ff6ca2c0ef73a370751b171cd72970d60b26cfee1d546f1e1bb5470a7f90415ac0081005a898b4d52b76d18e8e3c619d50f76bc5fc7212b5fcfa177c13c558f19da8f5db2cc032932a924de4916470ccc6b80034ee90bd4b938580bb71b43bf38e7a3fe0446b5348e3d610e2f5db43e49562ccc1ac5b6c2751a6a786a4090a14e23d225a5dd452a30ea88b2cf2b9261b0157d2822ff706586675f463094f563437177e41e0a99116092736a4976e81513fc8dcf08d494c7f1c3edce1f7b0313d0376e36cb2dde63d77a4452a0faf723c4940c0a77b8ab3aa02a55ee8872fe84b2b91edaa6670f2ddae2079f8e9a6bcd98449761624e6767ff00000000000000000000000000000000e423432788ce02f5e3a0979103719dc5e790d85ce6d55f8a380500000000000000598a89bd8c59796fe1500f5252ffd193952d8a5976cbf494780000000000db97b88e4ae1c401f3d97e8d32339cec6d4e1be9ac0525b7adc046fde293e4c5442a8ae3a6a7708967882f4fb6d5f9772f8d8afd3f56ae6329f924a0ef8396927704b4b2693d6cc9bbfbf5305b93a9dc2cab7b38ca271433e73fee9eb6f3bf6199ba7a821ff20c403e507c975abfd5d6abe447f37c7cce000000000000006365686afae5d44d767bcf542e7a85a228565efa00995a6a7077243821e7bc5b06ed3e65ccfc0629b5437f3fed4271dfd90738d356a520fb1a28da552c9d14ec4da018a0a707ed61aa24c9c9e0d2c062fd13f285bd0c708a88c6022e163855a8cef1a9424bd9cbbcc26d542af0a93a0359f6ebee380cecd55eb0c82ba8a22217e450b6ecc2706a8fe9e01af17ce3f35eb3c18cd8946ade8624141ff813c2793bcae0568069a4ca4f7b2e03288e7a4b10c45435f55f471b8be25f708abb58418125457d5f33fb719acde11f98fcde66c9b84503a4250ec25de7e586f425d2bd5319dc549c37949f0fbd519d3dc075f9a5c08ad80c6a26692f8c20a13336e4ce01a9793cfe98f0d2d7b5ab9dbc750a9f120ce1a5000000000000c6cec736edc12630c90693baff8733f72f5814dd2779b5ec1d45f7a0c73ce250bca9f1dcedc61fc595e5e60525d44315c4d7c93202e49b2d20386c01f8ffffffffffffe3de286bf630b73d44849f7a1f07b0b53f22693eb89fa3f9d0e1d260bd87252a3371a73fd97264c0c15e81647d1eec7f8519b37c9947d787c8c27c43926211f64277eaa2d91babf96c7d083bcb271b343fd767bb6a055f8cd44844a5abab000000000000000000000000000702bd5ec518c7cff829ad742e9161a74a55a4cdb182b340c946c2489f463fe225ae398aba8000"/2208], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff0300600d698c389e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:29:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5194}, 0x80) 18:29:15 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x84}, {0x2c}, {}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:15 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='f2fs_fallocate\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_devices(r2, &(0x7f0000000140)={'b', ' *:* ', 'm\x00'}, 0x24000) [ 654.414523][T13908] loop4: detected capacity change from 0 to 1036 18:29:15 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r0) 18:29:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x9, &(0x7f0000000100)=@framed={{}, [@func, @map_idx_val, @generic, @map_fd, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:29:15 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a0afe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83927dd29c034055b67dafe6c8dc3d5d7870336e6a3523d1f5310efd4989147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e36708d6704902cbe7bc0b132b8667c21476619f28d9e61b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e6ea09c346dfebd31a08060000000200000000000000334d83239dd27080e758e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0288535c133f71303767d2e24f29e5dad9796edb697a6ea0182babc186ae2ed4b4390af9a9ceefd07e002cab5ebf8aad34732181feb215139f15ea7e8cb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7a8b259e2202e117b7992d4a1a4abf8cd3fcc3dc3dec04b25df512e75238345d4f71af35910b158c36657b7218baaa7cbf781c0a99bd50499ccc421ace5e85efb5b7e64e4beba3da8223fe5308e4e65ee93e1d92b9f99f8ddebf70132a4d0175b989b8eccf707882042e716df749717570631ca965031086e97bcc5ca0e221a0e34323c129102b6ff0500002e88c0f6dfda02ed9c92d6f64b1282dc51bb00159830d7617001154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059514119d06d5ea9a8d0857382ec6e2a071408000000000000007f4ead7cf754a56e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9424db65c1e00015c1d093dab01bad188885f1ea8f2371b1f243e99fe33c3fedc5f3580397b449d70c060d57bc88fbe3bbaa058b040362ab9261503def363fb099408885afc2bf9a4f8c35070669ea69f4e4be1b8e0d6697e97186fc51439d670dba6623279f73db9dec75070cd9ab0fd96b069ee6d2857b6bf955012cf7fe50d133d541da86e0477e4a6cc999dc21c3ef408e633dfa35f14d6e734837d36000000003c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cad4ead134847425a6da2c8067ab743c1d82a5687f2ed6900000000000000000000000000000000000000000000996e291aa1503a601b3f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb06a6deaf0047b88486cacee4ccd8aeedaf919a4bff2ed893f20a6aba26cce2d4eedf356701c56051a9f748e5aaf10a10bd8c40889967a39d57e6565264e3d3f8e0ae289ce2ad77c43c549737d6d79ce71d4dca0cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef009e335ac1d579c29cbf09fd1ce5242402c8c88272395d2d7bbd79589787ca56314c3b90d51e8b74a669010b09d1fa90320e83ec9e6c03e683e2615d66a3a83f5a3ffef9d9429fbc5d9c6a3f2bebec94a3bb64e1b2cd5c38cad3f1457c6b1b2318706ce5f4f73c05a2ffc6d0af1a514d228ff6ca2c0ef73a370751b171cd72970d60b26cfe6649f4c0add883e729e1d546f1e1bb5470a7f90415ac0081005a898b4d52b76d18e8e3c619d50f76bc5fc7212b5fcfa177c13c558f19da8f5db2cc032932a924de4916470ccc6b80034ee90bd4b938580bb71b43bf38e7a3fe0446b5348e3d610e2f5db43e49562ccc1ac5b6c2751a6a786a4090a14e23d225a5dd452a30ea88b2cf2b9261b0157d2822ff706586675f463094f563437177e41e0a99116092736a4976e81513fc8dcf08d494c7f1c3edce1f7b0313d0376e36cb2dde63d77a4452a0faf723c4940c0a77b8ab3aa02a55ee8872fe84b2b91edaa6670f2ddae2079f8e9a6bcd98449761624e6767ff00000000000000000000000000000000e423432788ce02f5e3a0979103719dc5e790d85ce6d55f8a380500000000000000598a89bd8c59796fe1500f5252ffd193952d8a5976cbf494780000000000db97b88e4ae1c401f3d97e8d32339cec6d4e1be9ac0525b7adc046fde293e4c5442a8ae3a6a7708967882f4fca0df2274ef1816b2bedf41f2b0272fab6d5f9772f8d8afd3f56ae6329f9240f22bb42927704b4b2693d6cc9bbfbf5305b93a9dc2cab7b38ca271433e73fee9eb6f3bf6199ba7a821ff20c403e507c975abfd5d6abe447f37c7cce000000000000006365686afae5d44d767bcf542e7a85a228565efa00995a6a7077243821e7bc5b06ed3e65ccfc0629b5437f3fed4271dfd90738d356a520fb1a28da552c9d14ec4da018a0a707ed61aa24c9c9e0d2c062fd13f285bd0c708a88c6022e163855a8cef1a9424bd9cbbcc26d542af0a93a0359f6ebee380cecd55eb0c82ba8a22217e450b6ecc2706a8fe9e01af17ce3f35eb3c18cd8946adea524141ff813c2793bcae0568069a4ca4f7b2e03288e7a4b10c45435f55f471b8be25f708abb58418125457d5f33fb719acde11f98fcde66c9b84503a4250ec25de7e586f425d2bd5319dc549c37949f0fbd519d3dc075f9a5c08ad80c6a26692f8c20a13336e4ce01a9793cfe98f0d2d7b5ab9dbc750a9f120ce1a5000000000000c6cec736edc12630c90693baff8733f72f5814dd2779b5ec1d45f7a0c73ce250bca9f1dcedc61fc595e5e60525d44315c4d7c93202e49b2d20386c01f8ffffffffffffe3de286bf630b73d44849f7a1f07b0b53f22693eb89fa3f9d0e1d260bd87252a3371a73fd97264c0c15e81647d1eec7f8519b37c9947d787c8c27c43926211f64277eaa2d91babf96c7d083bcb271b343fd767bb6a055f8cd44844a5abab000000000000000000000000000702"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000280)="b9ff0300600d698c389e14f008001fffffff00004000630200000000000006e00000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:29:15 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x84}, {0x2c}, {}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x5}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000001e00)=""/4096, 0x34, 0x1000, 0x1}, 0x20) 18:29:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:15 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x2, &(0x7f0000000080)=@raw=[@jmp, @call={0x85, 0x0, 0x0, 0xc}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:29:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x10) 18:29:16 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000280)="b9ff0300600d698c389e14f008001fffffff00004000633200000022000006e00000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:29:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) 18:29:16 executing program 5: pipe(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000001980)=[{0x0}, {0x0}, {&(0x7f0000001900)="8a", 0x1}], 0x3) 18:29:16 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}], 0x1, 0x81806, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xfffffffd, 0x8, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e", [0xfffffffffffffff7, 0x8000000000000000]}) 18:29:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7fff}]}}) 18:29:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x440, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000003c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=@v1={0x0, @aes256, 0x0, @desc2}) 18:29:16 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x84}, {0x2c}, {}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:16 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 18:29:16 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 18:29:16 executing program 0: syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120123005520f010402038b1420104000001090238000100000000090400000371053938090582eb"], 0x0) 18:29:16 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x84}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 18:29:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1263, 0x0) [ 655.848016][ T24] audit: type=1326 audit(1661797756.900:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732f089279 code=0x0 [ 655.886613][T13949] not chained 830000 origins [ 655.891378][T13949] CPU: 1 PID: 13949 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 655.901929][T13949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 655.912093][T13949] Call Trace: [ 655.915453][T13949] [ 655.918445][T13949] dump_stack_lvl+0x1c8/0x256 [ 655.923280][T13949] dump_stack+0x1a/0x1c [ 655.927576][T13949] kmsan_internal_chain_origin+0x78/0x120 [ 655.933437][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 655.939391][T13949] ? kfree+0x44/0x980 [ 655.943468][T13949] ? filter_irq_stacks+0x5c/0x1a0 [ 655.948612][T13949] ? do_recvmmsg+0x55a/0x1180 [ 655.953397][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 655.959352][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 655.965300][T13949] ? should_fail+0x3f/0x810 [ 655.969941][T13949] ? __stack_depot_save+0x21/0x4b0 [ 655.975183][T13949] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 655.981564][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 655.987504][T13949] __msan_chain_origin+0xbd/0x140 [ 655.992657][T13949] ___sys_recvmsg+0x52e/0x840 [ 655.997458][T13949] ? kmsan_internal_check_memory+0x94/0x530 [ 656.003486][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 656.009433][T13949] do_recvmmsg+0x55a/0x1180 [ 656.014072][T13949] ? do_syscall_64+0x3d/0xb0 [ 656.018764][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 656.023912][T13949] do_syscall_64+0x3d/0xb0 [ 656.028425][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 656.034460][T13949] RIP: 0033:0x7f105f689279 [ 656.038954][T13949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 656.058694][T13949] RSP: 002b:00007f10607e9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 656.067221][T13949] RAX: ffffffffffffffda RBX: 00007f105f79c050 RCX: 00007f105f689279 [ 656.075287][T13949] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 656.083359][T13949] RBP: 00007f105f6e3189 R08: 0000000000000000 R09: 0000000000000000 [ 656.091418][T13949] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 656.099490][T13949] R13: 00007f105fccfb1f R14: 00007f10607e9300 R15: 0000000000022000 [ 656.107615][T13949] [ 656.112281][T13949] Uninit was stored to memory at: [ 656.117495][T13949] ___sys_recvmsg+0x52e/0x840 [ 656.122395][T13949] do_recvmmsg+0x55a/0x1180 [ 656.127028][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 656.132277][T13949] do_syscall_64+0x3d/0xb0 [ 656.136817][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 656.143027][T13949] [ 656.145424][T13949] Uninit was stored to memory at: [ 656.150626][T13949] ___sys_recvmsg+0x52e/0x840 [ 656.155530][T13949] do_recvmmsg+0x55a/0x1180 [ 656.160161][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 656.165461][T13949] do_syscall_64+0x3d/0xb0 [ 656.170001][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 656.176205][T13949] [ 656.178593][T13949] Uninit was stored to memory at: [ 656.183914][T13949] ___sys_recvmsg+0x52e/0x840 [ 656.188710][T13949] do_recvmmsg+0x55a/0x1180 [ 656.193487][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 656.198646][T13949] do_syscall_64+0x3d/0xb0 [ 656.203316][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 656.209393][T13949] [ 656.211893][T13949] Uninit was stored to memory at: [ 656.217078][T13949] ___sys_recvmsg+0x52e/0x840 [ 656.222002][T13949] do_recvmmsg+0x55a/0x1180 [ 656.226631][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 656.231925][T13949] do_syscall_64+0x3d/0xb0 [ 656.236481][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 656.242678][T13949] [ 656.245057][T13949] Uninit was stored to memory at: [ 656.250245][T13949] ___sys_recvmsg+0x52e/0x840 [ 656.255221][T13949] do_recvmmsg+0x55a/0x1180 [ 656.259843][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 656.265144][T13949] do_syscall_64+0x3d/0xb0 [ 656.269681][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 656.276060][T13949] [ 656.278450][T13949] Uninit was stored to memory at: [ 656.282036][ T125] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 656.283756][T13949] ___sys_recvmsg+0x52e/0x840 [ 656.295915][T13949] do_recvmmsg+0x55a/0x1180 [ 656.300546][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 656.305866][T13949] do_syscall_64+0x3d/0xb0 [ 656.310406][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 656.316650][T13949] [ 656.319034][T13949] Uninit was stored to memory at: [ 656.324325][T13949] ___sys_recvmsg+0x52e/0x840 [ 656.329120][T13949] do_recvmmsg+0x55a/0x1180 [ 656.333843][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 656.338985][T13949] do_syscall_64+0x3d/0xb0 [ 656.343619][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd 18:29:17 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) [ 656.349672][T13949] [ 656.352151][T13949] Local variable msg_sys created at: [ 656.357507][T13949] do_recvmmsg+0x5c/0x1180 [ 656.362106][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 18:29:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 18:29:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x8, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 656.542272][ T125] usb 1-1: Using ep0 maxpacket: 16 [ 656.672886][ T125] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.683474][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 656.694628][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 656.704623][ T125] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 656.892936][ T125] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 656.902340][ T125] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 656.910528][ T125] usb 1-1: Manufacturer: syz [ 656.986910][ T125] usb 1-1: config 0 descriptor?? [ 657.356180][ T125] usb 1-1: USB disconnect, device number 8 [ 657.499132][T13949] not chained 840000 origins [ 657.504172][T13949] CPU: 1 PID: 13949 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 657.514728][T13949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 657.524892][T13949] Call Trace: [ 657.528250][T13949] [ 657.531257][T13949] dump_stack_lvl+0x1c8/0x256 [ 657.536104][T13949] dump_stack+0x1a/0x1c [ 657.540413][T13949] kmsan_internal_chain_origin+0x78/0x120 [ 657.546297][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 657.552263][T13949] ? kfree+0x44/0x980 [ 657.556362][T13949] ? filter_irq_stacks+0x5c/0x1a0 [ 657.561533][T13949] ? do_recvmmsg+0x55a/0x1180 [ 657.566331][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 657.572302][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 657.578274][T13949] ? should_fail+0x3f/0x810 [ 657.582931][T13949] ? __stack_depot_save+0x21/0x4b0 [ 657.588202][T13949] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 657.594611][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 657.600581][T13949] __msan_chain_origin+0xbd/0x140 [ 657.605757][T13949] ___sys_recvmsg+0x52e/0x840 [ 657.610585][T13949] ? kmsan_internal_check_memory+0x94/0x530 [ 657.616641][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 657.622614][T13949] do_recvmmsg+0x55a/0x1180 [ 657.627276][T13949] ? do_syscall_64+0x3d/0xb0 [ 657.631985][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 657.637155][T13949] do_syscall_64+0x3d/0xb0 [ 657.641690][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 657.647745][T13949] RIP: 0033:0x7f105f689279 [ 657.652262][T13949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 657.672025][T13949] RSP: 002b:00007f10607e9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 657.680586][T13949] RAX: ffffffffffffffda RBX: 00007f105f79c050 RCX: 00007f105f689279 [ 657.688683][T13949] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 657.696787][T13949] RBP: 00007f105f6e3189 R08: 0000000000000000 R09: 0000000000000000 [ 657.704881][T13949] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 657.712969][T13949] R13: 00007f105fccfb1f R14: 00007f10607e9300 R15: 0000000000022000 [ 657.721080][T13949] [ 657.727977][T13949] Uninit was stored to memory at: [ 657.733298][T13949] ___sys_recvmsg+0x52e/0x840 [ 657.738095][T13949] do_recvmmsg+0x55a/0x1180 [ 657.742830][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 657.747980][T13949] do_syscall_64+0x3d/0xb0 [ 657.752629][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 657.758686][T13949] [ 657.761079][T13949] Uninit was stored to memory at: [ 657.766372][T13949] ___sys_recvmsg+0x52e/0x840 [ 657.771157][T13949] do_recvmmsg+0x55a/0x1180 [ 657.775873][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 657.781021][T13949] do_syscall_64+0x3d/0xb0 [ 657.785656][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 657.791707][T13949] [ 657.794172][T13949] Uninit was stored to memory at: [ 657.799353][T13949] ___sys_recvmsg+0x52e/0x840 [ 657.804246][T13949] do_recvmmsg+0x55a/0x1180 [ 657.808865][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 657.814114][T13949] do_syscall_64+0x3d/0xb0 [ 657.818647][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 657.824802][T13949] [ 657.827186][T13949] Uninit was stored to memory at: [ 657.832465][T13949] ___sys_recvmsg+0x52e/0x840 [ 657.837254][T13949] do_recvmmsg+0x55a/0x1180 [ 657.841937][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 657.847083][T13949] do_syscall_64+0x3d/0xb0 [ 657.851679][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 657.857824][T13949] [ 657.860207][T13949] Uninit was stored to memory at: [ 657.865504][T13949] ___sys_recvmsg+0x52e/0x840 [ 657.870291][T13949] do_recvmmsg+0x55a/0x1180 [ 657.875007][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 657.880147][T13949] do_syscall_64+0x3d/0xb0 [ 657.884771][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 657.890824][T13949] [ 657.893313][T13949] Uninit was stored to memory at: [ 657.898502][T13949] ___sys_recvmsg+0x52e/0x840 [ 657.903398][T13949] do_recvmmsg+0x55a/0x1180 [ 657.908021][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 657.913260][T13949] do_syscall_64+0x3d/0xb0 [ 657.917816][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 657.923967][T13949] [ 657.926353][T13949] Uninit was stored to memory at: [ 657.931538][T13949] ___sys_recvmsg+0x52e/0x840 [ 657.936437][T13949] do_recvmmsg+0x55a/0x1180 [ 657.941056][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 657.946305][T13949] do_syscall_64+0x3d/0xb0 [ 657.950834][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 657.957000][T13949] [ 657.959387][T13949] Local variable msg_sys created at: [ 657.964844][T13949] do_recvmmsg+0x5c/0x1180 [ 657.969390][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 658.314880][T13949] not chained 850000 origins [ 658.319579][T13949] CPU: 0 PID: 13949 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 658.330105][T13949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 658.340225][T13949] Call Trace: [ 658.343542][T13949] [ 658.346509][T13949] dump_stack_lvl+0x1c8/0x256 [ 658.351286][T13949] dump_stack+0x1a/0x1c [ 658.355552][T13949] kmsan_internal_chain_origin+0x78/0x120 [ 658.361359][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 658.367254][T13949] ? kfree+0x44/0x980 [ 658.371296][T13949] ? filter_irq_stacks+0x5c/0x1a0 [ 658.376430][T13949] ? do_recvmmsg+0x55a/0x1180 [ 658.381171][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 658.387077][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 658.392984][T13949] ? should_fail+0x3f/0x810 [ 658.397586][T13949] ? __stack_depot_save+0x21/0x4b0 [ 658.402783][T13949] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 658.409138][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 658.415061][T13949] __msan_chain_origin+0xbd/0x140 [ 658.420210][T13949] ___sys_recvmsg+0x52e/0x840 [ 658.424997][T13949] ? kmsan_internal_check_memory+0x94/0x530 [ 658.431029][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 658.436928][T13949] do_recvmmsg+0x55a/0x1180 [ 658.441523][T13949] ? do_syscall_64+0x3d/0xb0 [ 658.446177][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 658.451281][T13949] do_syscall_64+0x3d/0xb0 [ 658.455762][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 658.461757][T13949] RIP: 0033:0x7f105f689279 [ 658.466274][T13949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 658.485978][T13949] RSP: 002b:00007f10607e9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 658.494464][T13949] RAX: ffffffffffffffda RBX: 00007f105f79c050 RCX: 00007f105f689279 [ 658.502497][T13949] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 658.510539][T13949] RBP: 00007f105f6e3189 R08: 0000000000000000 R09: 0000000000000000 [ 658.518563][T13949] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 658.526601][T13949] R13: 00007f105fccfb1f R14: 00007f10607e9300 R15: 0000000000022000 [ 658.534718][T13949] [ 658.540692][T13949] Uninit was stored to memory at: [ 658.545968][T13949] ___sys_recvmsg+0x52e/0x840 [ 658.550758][T13949] do_recvmmsg+0x55a/0x1180 [ 658.555463][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 658.560610][T13949] do_syscall_64+0x3d/0xb0 [ 658.565225][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 658.571279][T13949] [ 658.573738][T13949] Uninit was stored to memory at: [ 658.578918][T13949] ___sys_recvmsg+0x52e/0x840 [ 658.583779][T13949] do_recvmmsg+0x55a/0x1180 [ 658.588390][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 658.593656][T13949] do_syscall_64+0x3d/0xb0 [ 658.598189][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 658.604359][T13949] [ 658.606741][T13949] Uninit was stored to memory at: [ 658.612039][T13949] ___sys_recvmsg+0x52e/0x840 [ 658.616817][T13949] do_recvmmsg+0x55a/0x1180 [ 658.621380][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 658.626605][T13949] do_syscall_64+0x3d/0xb0 [ 658.631120][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 658.637237][T13949] [ 658.639604][T13949] Uninit was stored to memory at: [ 658.644877][T13949] ___sys_recvmsg+0x52e/0x840 [ 658.649669][T13949] do_recvmmsg+0x55a/0x1180 [ 658.654398][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 658.659525][T13949] do_syscall_64+0x3d/0xb0 [ 658.664130][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 658.670160][T13949] [ 658.672599][T13949] Uninit was stored to memory at: [ 658.677739][T13949] ___sys_recvmsg+0x52e/0x840 [ 658.682597][T13949] do_recvmmsg+0x55a/0x1180 [ 658.687206][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 658.692424][T13949] do_syscall_64+0x3d/0xb0 [ 658.696941][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 658.703065][T13949] [ 658.705448][T13949] Uninit was stored to memory at: [ 658.710583][T13949] ___sys_recvmsg+0x52e/0x840 [ 658.715409][T13949] do_recvmmsg+0x55a/0x1180 [ 658.720013][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 658.725233][T13949] do_syscall_64+0x3d/0xb0 [ 658.729770][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 658.735849][T13949] [ 658.738221][T13949] Uninit was stored to memory at: [ 658.743497][T13949] ___sys_recvmsg+0x52e/0x840 [ 658.748311][T13949] do_recvmmsg+0x55a/0x1180 [ 658.753005][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 658.758144][T13949] do_syscall_64+0x3d/0xb0 [ 658.762785][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 658.768837][T13949] [ 658.771194][T13949] Local variable msg_sys created at: [ 658.776606][T13949] do_recvmmsg+0x5c/0x1180 [ 658.781124][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 658.958854][T13949] not chained 860000 origins [ 658.963703][T13949] CPU: 1 PID: 13949 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 658.974203][T13949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 658.984533][T13949] Call Trace: [ 658.987871][T13949] [ 658.990834][T13949] dump_stack_lvl+0x1c8/0x256 [ 658.995614][T13949] dump_stack+0x1a/0x1c [ 658.999848][T13949] kmsan_internal_chain_origin+0x78/0x120 [ 659.005654][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 659.011542][T13949] ? kfree+0x44/0x980 [ 659.015581][T13949] ? filter_irq_stacks+0x5c/0x1a0 [ 659.020678][T13949] ? do_recvmmsg+0x55a/0x1180 [ 659.025434][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 659.031399][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 659.037346][T13949] ? should_fail+0x3f/0x810 [ 659.041935][T13949] ? __stack_depot_save+0x21/0x4b0 [ 659.047130][T13949] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 659.053465][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 659.059358][T13949] __msan_chain_origin+0xbd/0x140 [ 659.064460][T13949] ___sys_recvmsg+0x52e/0x840 [ 659.069217][T13949] ? kmsan_internal_check_memory+0x94/0x530 [ 659.075218][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 659.081160][T13949] do_recvmmsg+0x55a/0x1180 [ 659.085751][T13949] ? do_syscall_64+0x3d/0xb0 [ 659.090410][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 659.095510][T13949] do_syscall_64+0x3d/0xb0 [ 659.099983][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 659.105965][T13949] RIP: 0033:0x7f105f689279 [ 659.110429][T13949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 659.130135][T13949] RSP: 002b:00007f10607e9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 659.138627][T13949] RAX: ffffffffffffffda RBX: 00007f105f79c050 RCX: 00007f105f689279 [ 659.146683][T13949] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 659.154709][T13949] RBP: 00007f105f6e3189 R08: 0000000000000000 R09: 0000000000000000 [ 659.162734][T13949] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 659.170774][T13949] R13: 00007f105fccfb1f R14: 00007f10607e9300 R15: 0000000000022000 [ 659.178857][T13949] [ 659.182559][T13949] Uninit was stored to memory at: [ 659.187755][T13949] ___sys_recvmsg+0x52e/0x840 [ 659.192655][T13949] do_recvmmsg+0x55a/0x1180 [ 659.197268][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 659.202545][T13949] do_syscall_64+0x3d/0xb0 [ 659.207081][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 659.213244][T13949] [ 659.215634][T13949] Uninit was stored to memory at: [ 659.220812][T13949] ___sys_recvmsg+0x52e/0x840 [ 659.225746][T13949] do_recvmmsg+0x55a/0x1180 [ 659.230380][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 659.235665][T13949] do_syscall_64+0x3d/0xb0 [ 659.240199][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 659.246434][T13949] [ 659.248806][T13949] Uninit was stored to memory at: [ 659.254109][T13949] ___sys_recvmsg+0x52e/0x840 [ 659.258885][T13949] do_recvmmsg+0x55a/0x1180 [ 659.263652][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 659.268786][T13949] do_syscall_64+0x3d/0xb0 [ 659.273395][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 659.279445][T13949] [ 659.281998][T13949] Uninit was stored to memory at: [ 659.287194][T13949] ___sys_recvmsg+0x52e/0x840 [ 659.292104][T13949] do_recvmmsg+0x55a/0x1180 [ 659.296717][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 659.302041][T13949] do_syscall_64+0x3d/0xb0 [ 659.306561][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 659.312703][T13949] [ 659.315089][T13949] Uninit was stored to memory at: [ 659.320327][T13949] ___sys_recvmsg+0x52e/0x840 [ 659.325202][T13949] do_recvmmsg+0x55a/0x1180 [ 659.329809][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 659.335018][T13949] do_syscall_64+0x3d/0xb0 [ 659.339532][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 659.345726][T13949] [ 659.348111][T13949] Uninit was stored to memory at: [ 659.353384][T13949] ___sys_recvmsg+0x52e/0x840 [ 659.358162][T13949] do_recvmmsg+0x55a/0x1180 [ 659.362966][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 659.368092][T13949] do_syscall_64+0x3d/0xb0 [ 659.372739][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 659.378778][T13949] [ 659.381155][T13949] Uninit was stored to memory at: [ 659.386444][T13949] ___sys_recvmsg+0x52e/0x840 [ 659.391219][T13949] do_recvmmsg+0x55a/0x1180 [ 659.395895][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 659.401023][T13949] do_syscall_64+0x3d/0xb0 [ 659.405701][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 659.411857][T13949] [ 659.414241][T13949] Local variable msg_sys created at: [ 659.419578][T13949] do_recvmmsg+0x5c/0x1180 [ 659.424235][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 659.609526][T13949] not chained 870000 origins [ 659.614355][T13949] CPU: 0 PID: 13949 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 659.624874][T13949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 659.635018][T13949] Call Trace: [ 659.638335][T13949] [ 659.641297][T13949] dump_stack_lvl+0x1c8/0x256 [ 659.646071][T13949] dump_stack+0x1a/0x1c [ 659.650302][T13949] kmsan_internal_chain_origin+0x78/0x120 [ 659.656104][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 659.661994][T13949] ? kfree+0x44/0x980 [ 659.666034][T13949] ? filter_irq_stacks+0x5c/0x1a0 [ 659.671132][T13949] ? do_recvmmsg+0x55a/0x1180 [ 659.675895][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 659.681862][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 659.687821][T13949] ? should_fail+0x3f/0x810 [ 659.692456][T13949] ? __stack_depot_save+0x21/0x4b0 [ 659.697680][T13949] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 659.704011][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 659.709903][T13949] __msan_chain_origin+0xbd/0x140 [ 659.715006][T13949] ___sys_recvmsg+0x52e/0x840 [ 659.719760][T13949] ? kmsan_internal_check_memory+0x94/0x530 [ 659.725764][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 659.731707][T13949] do_recvmmsg+0x55a/0x1180 [ 659.736318][T13949] ? do_syscall_64+0x3d/0xb0 [ 659.740971][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 659.746091][T13949] do_syscall_64+0x3d/0xb0 [ 659.750569][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 659.756562][T13949] RIP: 0033:0x7f105f689279 [ 659.761024][T13949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 659.780738][T13949] RSP: 002b:00007f10607e9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 659.789263][T13949] RAX: ffffffffffffffda RBX: 00007f105f79c050 RCX: 00007f105f689279 [ 659.797304][T13949] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 659.805325][T13949] RBP: 00007f105f6e3189 R08: 0000000000000000 R09: 0000000000000000 [ 659.813345][T13949] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 659.821366][T13949] R13: 00007f105fccfb1f R14: 00007f10607e9300 R15: 0000000000022000 [ 659.829438][T13949] [ 659.833237][T13949] Uninit was stored to memory at: [ 659.838435][T13949] ___sys_recvmsg+0x52e/0x840 [ 659.843353][T13949] do_recvmmsg+0x55a/0x1180 [ 659.847971][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 659.853240][T13949] do_syscall_64+0x3d/0xb0 [ 659.857773][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 659.863941][T13949] [ 659.866314][T13949] Uninit was stored to memory at: [ 659.871431][T13949] ___sys_recvmsg+0x52e/0x840 [ 659.876355][T13949] do_recvmmsg+0x55a/0x1180 [ 659.880957][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 659.886162][T13949] do_syscall_64+0x3d/0xb0 [ 659.890676][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 659.896826][T13949] [ 659.899194][T13949] Uninit was stored to memory at: [ 659.904477][T13949] ___sys_recvmsg+0x52e/0x840 [ 659.909262][T13949] do_recvmmsg+0x55a/0x1180 [ 659.913999][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 659.919127][T13949] do_syscall_64+0x3d/0xb0 [ 659.923820][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 659.929852][T13949] [ 659.932359][T13949] Uninit was stored to memory at: [ 659.937506][T13949] ___sys_recvmsg+0x52e/0x840 [ 659.942397][T13949] do_recvmmsg+0x55a/0x1180 [ 659.947008][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 659.952278][T13949] do_syscall_64+0x3d/0xb0 [ 659.956803][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 659.962998][T13949] [ 659.965368][T13949] Uninit was stored to memory at: [ 659.970485][T13949] ___sys_recvmsg+0x52e/0x840 [ 659.975397][T13949] do_recvmmsg+0x55a/0x1180 [ 659.985005][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 659.990134][T13949] do_syscall_64+0x3d/0xb0 [ 659.994757][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 660.000803][T13949] [ 660.003511][T13949] Uninit was stored to memory at: [ 660.008703][T13949] ___sys_recvmsg+0x52e/0x840 [ 660.013708][T13949] do_recvmmsg+0x55a/0x1180 [ 660.018328][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 660.023577][T13949] do_syscall_64+0x3d/0xb0 [ 660.028092][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 660.034210][T13949] [ 660.036582][T13949] Uninit was stored to memory at: [ 660.041697][T13949] ___sys_recvmsg+0x52e/0x840 [ 660.046696][T13949] do_recvmmsg+0x55a/0x1180 [ 660.051383][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 660.056599][T13949] do_syscall_64+0x3d/0xb0 [ 660.061117][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 660.067296][T13949] [ 660.069688][T13949] Local variable msg_sys created at: [ 660.075220][T13949] do_recvmmsg+0x5c/0x1180 [ 660.079747][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 660.239915][T13949] not chained 880000 origins [ 660.244738][T13949] CPU: 1 PID: 13949 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 660.255285][T13949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 660.265426][T13949] Call Trace: [ 660.268738][T13949] [ 660.271700][T13949] dump_stack_lvl+0x1c8/0x256 [ 660.276501][T13949] dump_stack+0x1a/0x1c [ 660.280730][T13949] kmsan_internal_chain_origin+0x78/0x120 [ 660.286534][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 660.292426][T13949] ? kfree+0x44/0x980 [ 660.296469][T13949] ? filter_irq_stacks+0x5c/0x1a0 [ 660.301573][T13949] ? do_recvmmsg+0x55a/0x1180 [ 660.306329][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 660.312300][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 660.318247][T13949] ? should_fail+0x3f/0x810 [ 660.322865][T13949] ? __stack_depot_save+0x21/0x4b0 [ 660.328055][T13949] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 660.334384][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 660.340289][T13949] __msan_chain_origin+0xbd/0x140 [ 660.345400][T13949] ___sys_recvmsg+0x52e/0x840 [ 660.350158][T13949] ? kmsan_internal_check_memory+0x94/0x530 [ 660.356161][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 660.362111][T13949] do_recvmmsg+0x55a/0x1180 [ 660.366702][T13949] ? do_syscall_64+0x3d/0xb0 [ 660.371376][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 660.376478][T13949] do_syscall_64+0x3d/0xb0 [ 660.380953][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 660.386936][T13949] RIP: 0033:0x7f105f689279 [ 660.391397][T13949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 660.411116][T13949] RSP: 002b:00007f10607e9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 660.419608][T13949] RAX: ffffffffffffffda RBX: 00007f105f79c050 RCX: 00007f105f689279 [ 660.427634][T13949] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 660.435666][T13949] RBP: 00007f105f6e3189 R08: 0000000000000000 R09: 0000000000000000 [ 660.443710][T13949] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 660.451730][T13949] R13: 00007f105fccfb1f R14: 00007f10607e9300 R15: 0000000000022000 [ 660.459825][T13949] [ 660.463423][T13949] Uninit was stored to memory at: [ 660.468606][T13949] ___sys_recvmsg+0x52e/0x840 [ 660.473505][T13949] do_recvmmsg+0x55a/0x1180 [ 660.478151][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 660.483463][T13949] do_syscall_64+0x3d/0xb0 [ 660.487975][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 660.494094][T13949] [ 660.496475][T13949] Uninit was stored to memory at: [ 660.501622][T13949] ___sys_recvmsg+0x52e/0x840 [ 660.506503][T13949] do_recvmmsg+0x55a/0x1180 [ 660.511126][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 660.516420][T13949] do_syscall_64+0x3d/0xb0 [ 660.520936][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 660.527116][T13949] [ 660.529486][T13949] Uninit was stored to memory at: [ 660.534792][T13949] ___sys_recvmsg+0x52e/0x840 [ 660.539569][T13949] do_recvmmsg+0x55a/0x1180 [ 660.544274][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 660.549432][T13949] do_syscall_64+0x3d/0xb0 [ 660.554037][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 660.560068][T13949] [ 660.562593][T13949] Uninit was stored to memory at: [ 660.567824][T13949] ___sys_recvmsg+0x52e/0x840 [ 660.572739][T13949] do_recvmmsg+0x55a/0x1180 [ 660.577359][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 660.582721][T13949] do_syscall_64+0x3d/0xb0 [ 660.587238][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 660.593413][T13949] [ 660.595797][T13949] Uninit was stored to memory at: [ 660.600933][T13949] ___sys_recvmsg+0x52e/0x840 [ 660.605804][T13949] do_recvmmsg+0x55a/0x1180 [ 660.610406][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 660.615610][T13949] do_syscall_64+0x3d/0xb0 [ 660.620123][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 660.626246][T13949] [ 660.628641][T13949] Uninit was stored to memory at: [ 660.633967][T13949] ___sys_recvmsg+0x52e/0x840 [ 660.638770][T13949] do_recvmmsg+0x55a/0x1180 [ 660.643582][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 660.648710][T13949] do_syscall_64+0x3d/0xb0 [ 660.653305][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 660.659372][T13949] [ 660.661721][T13949] Uninit was stored to memory at: [ 660.667052][T13949] ___sys_recvmsg+0x52e/0x840 [ 660.671951][T13949] do_recvmmsg+0x55a/0x1180 [ 660.676554][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 660.681668][T13949] do_syscall_64+0x3d/0xb0 [ 660.686412][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 660.692581][T13949] [ 660.694962][T13949] Local variable msg_sys created at: [ 660.700306][T13949] do_recvmmsg+0x5c/0x1180 [ 660.705011][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 660.862247][T13949] not chained 890000 origins [ 660.866943][T13949] CPU: 0 PID: 13949 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 660.877464][T13949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 660.887577][T13949] Call Trace: [ 660.890890][T13949] [ 660.893857][T13949] dump_stack_lvl+0x1c8/0x256 [ 660.898627][T13949] dump_stack+0x1a/0x1c [ 660.902876][T13949] kmsan_internal_chain_origin+0x78/0x120 [ 660.908732][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 660.914629][T13949] ? kfree+0x44/0x980 [ 660.918670][T13949] ? filter_irq_stacks+0x5c/0x1a0 [ 660.923787][T13949] ? do_recvmmsg+0x55a/0x1180 [ 660.928590][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 660.934507][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 660.940468][T13949] ? should_fail+0x3f/0x810 [ 660.945117][T13949] ? __stack_depot_save+0x21/0x4b0 [ 660.950372][T13949] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 660.956750][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 660.962667][T13949] __msan_chain_origin+0xbd/0x140 [ 660.967834][T13949] ___sys_recvmsg+0x52e/0x840 [ 660.972630][T13949] ? kmsan_internal_check_memory+0x94/0x530 [ 660.978620][T13949] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 660.985314][T13949] do_recvmmsg+0x55a/0x1180 [ 660.989947][T13949] ? do_syscall_64+0x3d/0xb0 [ 660.994601][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 660.999699][T13949] do_syscall_64+0x3d/0xb0 [ 661.004195][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 661.010244][T13949] RIP: 0033:0x7f105f689279 [ 661.014712][T13949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 661.034408][T13949] RSP: 002b:00007f10607e9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 661.042907][T13949] RAX: ffffffffffffffda RBX: 00007f105f79c050 RCX: 00007f105f689279 [ 661.050982][T13949] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 661.059056][T13949] RBP: 00007f105f6e3189 R08: 0000000000000000 R09: 0000000000000000 [ 661.067130][T13949] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 661.075181][T13949] R13: 00007f105fccfb1f R14: 00007f10607e9300 R15: 0000000000022000 [ 661.083250][T13949] [ 661.086868][T13949] Uninit was stored to memory at: [ 661.092152][T13949] ___sys_recvmsg+0x52e/0x840 [ 661.096947][T13949] do_recvmmsg+0x55a/0x1180 [ 661.101579][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 661.106874][T13949] do_syscall_64+0x3d/0xb0 [ 661.111395][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 661.117666][T13949] [ 661.120041][T13949] Uninit was stored to memory at: [ 661.125366][T13949] ___sys_recvmsg+0x52e/0x840 [ 661.130142][T13949] do_recvmmsg+0x55a/0x1180 [ 661.134835][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 661.139962][T13949] do_syscall_64+0x3d/0xb0 [ 661.144625][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 661.150661][T13949] [ 661.153142][T13949] Uninit was stored to memory at: [ 661.158321][T13949] ___sys_recvmsg+0x52e/0x840 [ 661.163181][T13949] do_recvmmsg+0x55a/0x1180 [ 661.167792][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 661.173088][T13949] do_syscall_64+0x3d/0xb0 [ 661.177606][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 661.183724][T13949] [ 661.186110][T13949] Uninit was stored to memory at: [ 661.191252][T13949] ___sys_recvmsg+0x52e/0x840 [ 661.196110][T13949] do_recvmmsg+0x55a/0x1180 [ 661.200714][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 661.207257][T13949] do_syscall_64+0x3d/0xb0 [ 661.211887][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 661.217926][T13949] [ 661.220278][T13949] Uninit was stored to memory at: [ 661.225575][T13949] ___sys_recvmsg+0x52e/0x840 [ 661.231136][T13949] do_recvmmsg+0x55a/0x1180 [ 661.235804][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 661.240960][T13949] do_syscall_64+0x3d/0xb0 [ 661.245605][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 661.251639][T13949] [ 661.254094][T13949] Uninit was stored to memory at: [ 661.259243][T13949] ___sys_recvmsg+0x52e/0x840 [ 661.264117][T13949] do_recvmmsg+0x55a/0x1180 [ 661.268727][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 661.273940][T13949] do_syscall_64+0x3d/0xb0 [ 661.278457][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 661.284577][T13949] [ 661.286948][T13949] Uninit was stored to memory at: [ 661.292218][T13949] ___sys_recvmsg+0x52e/0x840 [ 661.297007][T13949] do_recvmmsg+0x55a/0x1180 [ 661.301661][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 661.306931][T13949] do_syscall_64+0x3d/0xb0 [ 661.311469][T13949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 661.317648][T13949] [ 661.320039][T13949] Local variable msg_sys created at: [ 661.325533][T13949] do_recvmmsg+0x5c/0x1180 [ 661.330067][T13949] __x64_sys_recvmmsg+0x3a7/0x4b0 18:29:22 executing program 3: select(0x40, &(0x7f0000000100), 0x0, &(0x7f0000003180)={0x6}, &(0x7f00000031c0)={0x0, 0x2710}) 18:29:22 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x84}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:22 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 18:29:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 18:29:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:22 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x3305, 0x0) [ 661.717624][ T24] audit: type=1326 audit(1661797762.770:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13983 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732f089279 code=0x0 18:29:22 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 18:29:23 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x84}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:23 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 18:29:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000036c0)=ANY=[@ANYBLOB="44000000020601000000000000000000000000000c000300686173683a6970000900020073797a3000000000050001000700000005000400000000000500050002"], 0x44}}, 0x0) [ 661.992302][ T3559] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 662.137059][ T24] audit: type=1326 audit(1661797763.190:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13997 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732f089279 code=0x0 18:29:23 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 18:29:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5421, 0xfffffffffffffffe) 18:29:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) [ 662.353057][ T3559] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.364499][ T3559] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.374692][ T3559] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 662.384006][ T3559] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.493562][ T3559] usb 6-1: config 0 descriptor?? [ 662.965755][ T3559] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 663.000884][ T3559] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000A/input/input13 [ 663.099448][ T3559] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 663.182612][ T3559] usb 6-1: USB disconnect, device number 8 18:29:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3f}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}}, 0x0) 18:29:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x8000, 0x0, 0x0, @stepwise}) 18:29:24 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 18:29:24 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x0) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:24 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000840)='net/ipv6_route\x00') ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r1) 18:29:24 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x84}, {}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) [ 663.816893][ T24] audit: type=1326 audit(1661797764.870:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732f089279 code=0x0 [ 663.855676][T14018] loop4: detected capacity change from 0 to 1036 18:29:24 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 18:29:25 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5452, &(0x7f0000000000)={'wg2\x00'}) 18:29:25 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x46}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) 18:29:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0x1c, r1, 0x10d, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) 18:29:25 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x0) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x2c}}, 0x0) 18:29:25 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 18:29:25 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x600, 0x0}}) 18:29:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}}, 0x0) 18:29:25 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x0) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@abs, 0xffffffffffffff95) 18:29:25 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x84}, {}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:25 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 18:29:25 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0xc0045878, 0x0) 18:29:25 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x41, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='lock '], 0x9) 18:29:25 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)) 18:29:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) [ 664.869031][ T24] audit: type=1326 audit(1661797765.920:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14054 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732f089279 code=0x0 18:29:26 executing program 3: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x0, 0x7, &(0x7f00000000c0)={0x0, "d8bc6c979a6e5fbef780545759a37f5703b872a2a11866b41d6bec96c15ba183ae"}}) 18:29:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) [ 665.067398][T14060] binder: 14057:14060 ioctl c018620c 20000040 returned -22 18:29:26 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a1e5940a2060300de05010000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 18:29:26 executing program 3: syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120123005520f010402038b1420104000001090238000100000000090400000371053938090582eb100000000109050276"], 0x0) 18:29:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x6, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x0) [ 665.621968][ T28] usb 1-1: new high-speed USB device number 9 using dummy_hcd 18:29:26 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x84}, {}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 18:29:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:26 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) [ 665.742100][ T3559] usb 4-1: new high-speed USB device number 12 using dummy_hcd 18:29:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 18:29:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) [ 665.936757][ T24] audit: type=1326 audit(1661797766.990:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732f089279 code=0x0 [ 666.022041][ T3559] usb 4-1: Using ep0 maxpacket: 16 18:29:27 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) [ 666.092858][ T28] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice= 5.de [ 666.102311][ T28] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 666.110496][ T28] usb 1-1: Manufacturer: syz 18:29:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 666.170036][ T28] usb 1-1: config 0 descriptor?? [ 666.182392][ T3559] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.193395][ T3559] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 666.204623][ T3559] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 666.214491][ T3559] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 666.224413][ T3559] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 666.258760][ T28] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 18:29:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) [ 666.356268][ T3559] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 666.366442][ T3559] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 666.374754][ T3559] usb 4-1: Manufacturer: syz [ 666.450289][ T3559] usb 4-1: config 0 descriptor?? [ 666.675059][ T28] gspca_topro: reg_w err -71 [ 666.712126][ T28] gspca_topro: Sensor soi763a [ 666.725243][ T28] usb 1-1: USB disconnect, device number 9 [ 666.982452][ T3559] rc_core: IR keymap rc-hauppauge not found [ 666.988670][ T3559] Registered IR keymap rc-empty [ 666.994100][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 667.022522][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 667.064155][ T3559] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 667.079495][ T3559] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 667.105072][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 667.142134][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 18:29:28 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000180)={0x20000, 0x0, &(0x7f0000000080), 0x0, {0x6}, &(0x7f0000000740)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 18:29:28 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120123005520f010402038b1420104000001090238000100000000090400000371053938090582eb100000000109050276"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000000c0)=ANY=[@ANYRES32]) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 18:29:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 18:29:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:28 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:28 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x2c}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) [ 667.184488][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 667.222564][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 667.270150][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 667.323435][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 667.336617][ T24] audit: type=1326 audit(1661797768.390:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14100 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732f089279 code=0x0 [ 667.366154][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 667.417289][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 667.462330][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 667.508805][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 18:29:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 667.556150][ T3559] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 667.564478][ T3559] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 18:29:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:28 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) [ 667.691105][ T3559] usb 4-1: USB disconnect, device number 12 18:29:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 18:29:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 668.192860][ T3559] usb 4-1: new high-speed USB device number 13 using dummy_hcd 18:29:29 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x2c}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) [ 668.452031][ T3559] usb 4-1: Using ep0 maxpacket: 16 [ 668.477768][ T24] audit: type=1326 audit(1661797769.530:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732f089279 code=0x0 [ 668.583395][ T3559] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.593915][ T3559] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 668.605156][ T3559] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 668.615156][ T3559] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 668.625086][ T3559] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 668.712707][ T3559] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 668.722117][ T3559] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 668.730295][ T3559] usb 4-1: Manufacturer: syz [ 668.740010][ T3559] usb 4-1: config 0 descriptor?? [ 669.661957][ T3559] rc_core: IR keymap rc-hauppauge not found [ 669.668073][ T3559] Registered IR keymap rc-empty [ 669.673741][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 669.708015][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 669.753243][ T3559] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 669.768606][ T3559] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 669.788225][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 669.822119][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 669.862329][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 669.892048][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 669.928440][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 669.972683][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 670.012628][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 670.042202][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 670.082192][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 670.112145][ T3559] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 670.150980][ T3559] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 670.159321][ T3559] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 670.201462][ T28] usb 4-1: USB disconnect, device number 13 18:29:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r1, 0x1ca2606e6a851a8f, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) 18:29:31 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:31 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 18:29:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 18:29:31 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x2c}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) [ 670.757392][ T24] audit: type=1326 audit(1661797771.810:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14128 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732f089279 code=0x0 18:29:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x301}, 0x14}}, 0x0) 18:29:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 18:29:32 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:32 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:32 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)) 18:29:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 18:29:32 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:32 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:32 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x41, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'trylock', ' ', 'none'}, 0xd) 18:29:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 18:29:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 18:29:32 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{}, {0x2c}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:32 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:32 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) 18:29:32 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 671.942745][ T24] audit: type=1326 audit(1661797773.000:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14166 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732f089279 code=0x0 18:29:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x301}, 0x14}}, 0x0) 18:29:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:33 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) 18:29:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x301}, 0x14}}, 0x0) 18:29:33 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540), 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 18:29:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 18:29:34 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) 18:29:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x301}, 0x14}}, 0x0) 18:29:34 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{}, {0x2c}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:34 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540), 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:34 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x0, r0}) [ 673.341722][ T24] audit: type=1326 audit(1661797774.390:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14192 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732f089279 code=0x0 18:29:34 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) 18:29:34 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{}, {0x2c}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 18:29:34 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540), 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001640)={0x0, 0x7ff, 0x1, [0x0]}, 0xa) [ 673.759564][ T24] audit: type=1326 audit(1661797774.810:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14208 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732f089279 code=0x0 18:29:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:35 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) [ 674.172002][ T24] audit: type=1326 audit(1661797775.220:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14199 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105f689279 code=0x7fc00000 18:29:35 executing program 0: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x14900000, &(0x7f0000000ac0), 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000c00)="de") 18:29:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='net/ipv6_route\x00') read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004900)={0x2020}, 0x2020) 18:29:35 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:35 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:35 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0xc7, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}]) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[0x0]) 18:29:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(0xffffffffffffffff) openat$urandom(0xffffffffffffff9c, &(0x7f00000197c0), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 18:29:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='net/ipv6_route\x00') read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 18:29:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0) 18:29:36 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) 18:29:36 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:36 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, 0x1]}, 0x80) io_setup(0x905, &(0x7f0000000240)) socket(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 18:29:36 executing program 0: syz_open_dev$loop(&(0x7f0000000700), 0x0, 0x4080) 18:29:36 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='net/ipv6_route\x00') mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) 18:29:37 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0xc7, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}]) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[0x0]) 18:29:37 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89a1, &(0x7f0000000000)={'wg2\x00'}) 18:29:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@private2, 0x80000000, 0x0, 0xff, 0x9, 0x0, 0xfffc}, 0x20) 18:29:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0}) 18:29:37 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x24}}, 0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0xc7, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}]) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000100)) 18:29:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='wchan\x00') read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 18:29:37 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @val, {@ipv4}}, 0x0) 18:29:37 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:37 executing program 3: syz_clone(0x14900000, 0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0) 18:29:38 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0xc7, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}]) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[0x0]) 18:29:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_ZONE={0x6}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8}]}]}, 0x30}}, 0x0) 18:29:38 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:38 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:38 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f40)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @ptr, @union]}}, &(0x7f0000000e40)=""/241, 0x3e, 0xf1, 0x1}, 0x20) 18:29:38 executing program 2: r0 = getegid() r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x7a545d2d1c0a6712) r2 = msgget$private(0x0, 0xfffffffffffffffd) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) close(r3) fchmod(0xffffffffffffffff, 0xd0) setsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0xffffffffffffffff, r0}, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="e6c8ca7b6b654cf5ad8a7845bbe631adf0ed87927db136d12c011ba4643e5b89332acd0ff3d416a808ae3075149558e6ef4e542c06f35d3b89762b46c0cbb8ecaef58e3d484bf525ff780b578d5d32d8c94d667bd6ae10a0790c6040d28f28ab1937e70c324cff406c748062855c8f12a2c11aabc12334eefaff1a171b2912baacbc88abaa61aa6948daf1cd9f61536228"], 0xa, &(0x7f00000003c0)=[{&(0x7f0000000140)="21ba77fd248b3e7f760066aa7be2680b77b5b8d24716813e326e6b93b659cc3b16d07d787ad1accfe4a0d637adfee683e590a93d42f5ab30e3dd072c65dfdf624d2b5dea", 0x44}, {&(0x7f00000001c0)="a4d603e58e466d52af68d00b08f251b7f9fa2c503c6aeb1dc31e642b14a6f3d99289138984e49d210d212f667130498a4fd73d6531242f4173a74db3c479e9f6aa8cc44e85465d6848b2022c7438ae85e5113eb0e15bf6b4e2e0adcb042659f111c3aed91ecd40e7caf254dd69d97fdc736276766cfae0828e9bdd1dcbde2e20f7de9763ef8a65ccfe42178165efb7dae356d98676b2fe7d73551aa7621ea3d4", 0xa0}, {&(0x7f0000000280)="3f7d1713885cab8f3787d1da1a3e8552bf0b05619ca21ce40ebab544beeab616e868769446a55a66e0cf0b5322d76dea85a5e3f2cc08de94e1bba3d954aec85ca88c6e722ceaeea07f91d25edacd167e669c461459713a31f73d1a556cb6cebe807996d334d83cd7da9404a087e6732733772f7eb45c206051090da9066b", 0x7e}, {&(0x7f0000000300)="1fe46ddf96e61010049765d6c3fc288d11fbb7fee8dfa2fd32e7bfb13a8ecce309c4e2c2c94ef1522c1368615bafa7851d69a9321d9690cc0b8eefb5472a0067a09dc3b6c7d0aa448265b6dd91728073818f168783d4ba3ac47dad043f5c5915b27eb0935c47ec221c84bd940fb3faaf2cef96e4727f62ca92c4a63178d2a03f4d1bd4c2dd9b71c6352b2a71ef191fc5d019", 0x92}], 0x4, &(0x7f0000000400)=[@cred], 0x20, 0x9}, 0x9) msgrcv(r2, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYRESDEC=r4, @ANYRESHEX, @ANYRES8, @ANYRESDEC=r3, @ANYRESOCT=r2, @ANYRES32=r0], 0x9a, 0xd6d0c418f59fe7d3, 0x1000) msgsnd(r2, &(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x104, 0x0) 18:29:38 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x3, @win={{}, 0x3, 0x0, 0x0, 0x0, 0x0}}) 18:29:38 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b4a, 0xfffffffffffffffe) 18:29:39 executing program 3: unshare(0x4000400) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:29:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:39 executing program 4: mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 18:29:39 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "23f200", 0x14, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 18:29:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:39 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000100100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x66e2e093, 0x0, r1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x66e2e093, 0x0, r2}, 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0xb, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @generic={0x9, 0x7, 0xa, 0x3, 0x4}, @generic={0x8, 0x4, 0x1, 0x3ff, 0x7ff}, @jmp={0x5, 0x1, 0xd, 0x0, 0x0, 0x30}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x96}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0x3, 0x6, 0x6, 0x8, 0x1}, @ldst={0x0, 0x1, 0x1, 0x0, 0xa, 0x54, 0xfffffffffffffff0}], &(0x7f0000000100)='GPL\x00', 0x4, 0x87, &(0x7f00000003c0)=""/135, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xe, 0x7fff, 0x3f}, 0x10, 0x2c149, r0, 0x0, &(0x7f0000000540)=[r1, r2, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='dax_writeback_one\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x40) 18:29:39 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x2) 18:29:39 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8902, &(0x7f0000000000)={'wg2\x00'}) 18:29:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:39 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) utimes(&(0x7f0000002880)='./file0\x00', 0x0) 18:29:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b31, &(0x7f0000000480)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:29:40 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3900}, 0x0, r2}) 18:29:40 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000280), 0x0, 0x0}}) 18:29:40 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000640)={0x1, 0x0, [{0x80000008, 0xffff}]}) 18:29:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:29:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, 0x0, 0x0) 18:29:40 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:40 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000400)) 18:29:40 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 18:29:40 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000240)={0x4c, 0x13, 0x601}, 0x4c}}, 0x0) 18:29:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ptype\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/119, 0x77}], 0x1, 0xf000000, 0x0) 18:29:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:41 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:41 executing program 0: syz_emit_ethernet(0x52, &(0x7f00000011c0)={@local, @empty, @val, {@ipv6}}, 0x0) 18:29:41 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x527e) 18:29:41 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:29:41 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:41 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000000)) 18:29:41 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:41 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)="63ce26288f8628e2a78d", 0xa) 18:29:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x1, 0x0, 0x0, {}, [""]}, 0x14}}, 0x20000840) 18:29:41 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') 18:29:41 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:41 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) 18:29:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 18:29:42 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0285628, &(0x7f0000000400)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 18:29:42 executing program 2: r0 = socket(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00'}) 18:29:42 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x1}, 0x14}}, 0x20000840) 18:29:42 executing program 0: mq_open(&(0x7f0000000040)=']^#%^{^{@,)}--)\x00', 0x40, 0x0, 0x0) 18:29:42 executing program 3: dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:29:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:42 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000400)=""/202, 0x2e, 0xca, 0x2}, 0x20) 18:29:42 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x80) 18:29:42 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:42 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000040)) 18:29:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000000), 0x4) 18:29:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:42 executing program 3: dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:29:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) write$binfmt_elf64(r0, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x478) 18:29:42 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:42 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x41, 0x0) write$vga_arbiter(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='lock '], 0x9) 18:29:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x76, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @mptcp=@remove_addr={0x1e, 0x21, 0x0, 0x0, "a8df5c34c310d61bf0cc603efce4183a6cd397f6b8b6d92a5b4df5d5f355"}, @md5sig={0x13, 0x12, "9800"}]}}}}}}}, 0x0) 18:29:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000660001002dbd", @ANYRES32, @ANYBLOB="060006defeff0f"], 0x34}}, 0x0) 18:29:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x1, 0x0, 0x25dfdbff}, 0x14}}, 0x0) 18:29:43 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0xb00, 0x0) 18:29:43 executing program 4: socket(0x18, 0x2, 0x0) 18:29:43 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) [ 682.259790][T14461] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 18:29:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:43 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x1001, 0x0, 0x0) 18:29:43 executing program 3: pipe2(&(0x7f0000000180), 0x4) 18:29:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000700)}, 0x0) 18:29:43 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x70040, 0x0) r0 = open(&(0x7f0000004840)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 18:29:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) [ 682.546666][T14469] loop4: detected capacity change from 0 to 1036 18:29:43 executing program 3: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) getpeername$inet(r0, 0x0, 0x0) 18:29:43 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) lseek(r0, 0x0, 0x0) 18:29:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$setown(r0, 0x6, 0x0) 18:29:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:29:44 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=""/121, 0x79}, 0x41) [ 683.000378][T14491] loop4: detected capacity change from 0 to 1036 18:29:44 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 18:29:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="b6f64fa324f114375cf60aba4408b55504bbd2f25018c8a9eeb926b7d98890072c7fe73ae3a97096a903afa7976361d3c8ab5e592f95c229efeaf0a906a246ed6520772012", 0x45}, {&(0x7f00000001c0)="5045a08ce9f645616803f750537f20e39732eb2988e56aeb7f5a7e67675164089374fce68445660ec620032b6632a13bc2a9549a6b8147fb89cbd202b342cb8bfc56be1940e46453c350e5e021ec735e478ff11a3fbb1af500c6b0126a304fd7029034efe3547284312b0acad0df151e42df8c5c34e3967a02e4956289af4922933a889740d41f6eb35bb14150b139e299223edea7b951f5e08b4e3e89ee83073d38606eb30ab75c94eb", 0xaa}, {0x0}, {&(0x7f00000002c0)="3ebedccfa718c72927547c61321014fbcb522a2b92069a6e3e5907a3487a88616621e5863e74c5d89a12140e6523c4812acbd7f702d58f993ac07e6ad084103205bb1b0dc1cda9e436b8d1cd463c3ef6e26646fe54bf78d695a6d1c7316479d4e281c68f52c978f6e3ff15e4df5e672787f96573", 0x74}, {&(0x7f0000000340)="6a313789f2bae443c5581b597797", 0xe}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 18:29:44 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt(r0, 0x0, 0x9, &(0x7f0000000000), 0x0) 18:29:44 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, 0x0, 0x0) close(r0) 18:29:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:44 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000000001}) 18:29:44 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, 0x0, 0x0) close(r0) 18:29:44 executing program 2: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf913252ef2785beb, 0x10, 0xffffffffffffffff, 0x0) [ 683.519069][T14508] loop4: detected capacity change from 0 to 1036 18:29:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f0000000580)) 18:29:44 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, 0x0, 0x0) close(r0) 18:29:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) 18:29:45 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x0) 18:29:45 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bind$unix(r0, 0x0, 0x0) 18:29:45 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r0) 18:29:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r0, 0x1) 18:29:45 executing program 2: setitimer(0x0, &(0x7f0000000000)={{}, {0x6}}, 0x0) setitimer(0x0, &(0x7f0000000080), &(0x7f00000000c0)) 18:29:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:45 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt(r0, 0x0, 0x9, 0x0, 0x0) 18:29:45 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000200)=@in, 0x0) 18:29:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000640)=[{0x0}, {&(0x7f00000001c0)='P', 0x1}, {0x0}, {&(0x7f00000002c0)='>', 0x1}, {&(0x7f0000000340)='j', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 18:29:45 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) fchmod(r0, 0x0) 18:29:45 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r0) [ 684.509564][T14541] loop4: detected capacity change from 0 to 1036 18:29:45 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 18:29:45 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read(r0, 0x0, 0x0) 18:29:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:45 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x2016, r0, 0x0) 18:29:45 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r0) 18:29:46 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) close(r0) 18:29:46 executing program 2: ioctl$TIOCMBIS(0xffffffffffffff9c, 0x8004746c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 18:29:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000340)="85036b8dcb35473bfb95010770c55169bec3349cfd7df51dd2f80136a926c44fc93e211f68c76c744999d3e45a47450b8b8ee67809f999358afae2ef8da07a120e2c249807be6deee0d5a02f53b9475e265439db6e4b576b93b58c95ba275a2eac757738490ab8259b6da9454f96a51f7b72c6afdaa17418ca76418be08b70fbfa5aca96f7137dd82f7ae55ede0d933b95", 0x91, 0x0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x1}, 0x8) 18:29:46 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) 18:29:46 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x8, 0x0, 0x0) [ 685.016465][T14561] loop4: detected capacity change from 0 to 1036 18:29:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa) 18:29:46 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000340)=""/123, 0x7b}], 0x2, 0x0, 0x0) 18:29:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000640)=[{&(0x7f0000000140)="b6f64fa324f114375cf60aba4408b55504bbd2f25018c8a9eeb926b7d98890072c7fe73ae3a97096a903afa7976361d3c8ab5e592f95c229efeaf0a906a246ed6520772012", 0x45}, {&(0x7f00000001c0)="5045a08ce9f645616803f750537f20e39732eb2988e56aeb7f5a7e67675164089374fce68445660ec620032b6632a13bc2a9549a6b8147fb89cbd202b342cb8bfc56be1940e46453c350e5e021ec735e478ff11a3fbb1af500c6b0126a304fd7029034efe3547284312b0acad0df151e42df8c5c34e3967a02e4956289af4922933a889740d41f6eb35bb14150b139e299223edea7b951f5e08b4e3e89ee83073d38606eb30ab75c94eb", 0xaa}, {0x0}, {&(0x7f00000002c0)="3ebedccfa718c72927547c61321014fbcb522a2b92069a6e3e5907a3487a88616621e5863e74c5d89a12140e6523c4812acbd7f702d58f993ac07e6ad084103205bb1b0dc1cda9e436b8d1cd463c3ef6e26646fe54bf78d695a6d1c7316479d4e281c68f52c978f6e3ff15e4df5e672787f96573", 0x74}, {&(0x7f0000000340)="6a313789f2bae443c5581b597797", 0xe}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 18:29:46 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) [ 685.433882][T14579] loop4: detected capacity change from 0 to 1036 18:29:46 executing program 3: mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 18:29:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:46 executing program 0: mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2115026ece07a950, 0xffffffffffffffff, 0x0) 18:29:46 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fchmod(r0, 0x0) 18:29:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000640)=[{&(0x7f0000000140)="b6f64fa324f114375cf60aba4408b55504bbd2f25018c8a9eeb926b7d98890072c7fe73ae3a97096a903afa7976361d3c8ab5e592f95c229efeaf0a906a246ed6520772012", 0x45}, {&(0x7f00000001c0)="5045a08ce9f645616803f750537f20e39732eb2988e56aeb7f5a7e67675164089374fce68445660ec620032b6632a13bc2a9549a6b8147fb89cbd202b342cb8bfc56be1940e46453c350e5e0", 0x4c}, {0x0}, {&(0x7f00000002c0)='>', 0x1}], 0x4}, 0x0) 18:29:46 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) 18:29:46 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x3}, 0xc) 18:29:46 executing program 0: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) 18:29:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 18:29:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:47 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) shutdown(r0, 0x0) 18:29:47 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:29:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 18:29:47 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) 18:29:47 executing program 2: setrlimit(0x0, &(0x7f0000000080)={0x0, 0x8000000000000000}) 18:29:47 executing program 5: r0 = socket$inet6(0x18, 0x1, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040)) 18:29:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}, {&(0x7f00000002c0)='>', 0x1}], 0x3}, 0x0) 18:29:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r1, &(0x7f0000000040)=""/220, 0xdc, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000180)='!', 0x1}, {&(0x7f0000000300)="98bd15e67a8160aea585cfe09e855b3904cee79a0a45cb0a34ad13b129cc8c67be4a9684022bfaed78b9faafdd7c39d86e6f86656b24d91d18b4eff7e082427f3e17eaf56043d0bd9b0dad90cb882889fbe4b6cb31b937b5f1ff195881c047142b733d74675ec285be9f151c0858352f4d636eacb72945eb14549873c64b3a55cd125e298879681b638d8bf42fae58fe09627e61cc311d2b628b772e648ac06b9153bab6425544123138fcb5ddc4189b2638f727797851a1270b5690977808aaa1d304f3a5c5c0d32e86390360d5092f9e02c97d41ad73dd49f548f8", 0xdc}], 0x2}, 0x0) 18:29:47 executing program 3: setitimer(0x2, &(0x7f0000000000)={{0x47}, {0x7}}, &(0x7f0000000040)) 18:29:47 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000340)=""/123, 0x7b}], 0x2, 0x0, 0x0) 18:29:47 executing program 5: ioctl$TIOCMBIS(0xffffffffffffff9c, 0x8004746c, 0x0) [ 686.615866][T14625] loop4: detected capacity change from 0 to 1036 18:29:47 executing program 2: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4011, 0xffffffffffffffff, 0x0) 18:29:47 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x120) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 18:29:47 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockname$inet6(r0, 0x0, 0x0) 18:29:47 executing program 5: ioctl$TIOCMBIS(0xffffffffffffff9c, 0x8004746c, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0xf82c) 18:29:47 executing program 4: shmget(0x1, 0x4000, 0x6e0, &(0x7f0000ffb000/0x4000)=nil) 18:29:48 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 18:29:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) 18:29:48 executing program 2: open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 18:29:48 executing program 3: syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) 18:29:48 executing program 0: socket(0x2c, 0x3, 0x7fff) 18:29:48 executing program 4: syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) 18:29:48 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x2}}}}}}]}}, 0x0) 18:29:48 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x3}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 18:29:48 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='sessionid\x00') write$FUSE_POLL(r0, 0x0, 0x0) [ 687.489805][T14660] loop4: detected capacity change from 0 to 1036 18:29:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a80)={'syztnl0\x00', 0x0}) [ 687.752543][ T125] usb 6-1: new high-speed USB device number 9 using dummy_hcd 18:29:49 executing program 4: syz_open_procfs(0x0, &(0x7f00000000c0)='attr/sockcreate\x00') [ 687.902818][ T28] usb 1-1: new high-speed USB device number 10 using dummy_hcd 18:29:49 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x71) [ 688.122475][ T125] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.133152][ T125] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 688.143219][ T125] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 688.153234][ T125] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 688.163155][ T125] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 18:29:49 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='attr/prev\x00') read$FUSE(r0, &(0x7f0000000c80)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) [ 688.262960][ T28] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.274355][ T28] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.284509][ T28] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 688.295348][ T28] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 18:29:49 executing program 2: open(&(0x7f0000000040)='./file0\x00', 0x70040, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) 18:29:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) [ 688.305350][ T28] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 688.409027][ T125] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 688.418641][ T125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.427027][ T125] usb 6-1: Product: syz [ 688.431366][ T125] usb 6-1: Manufacturer: syz [ 688.436246][ T125] usb 6-1: SerialNumber: syz 18:29:49 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0), 0xffffffffffffff1e) [ 688.499373][T14676] loop4: detected capacity change from 0 to 1036 18:29:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:29:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000c80)={'#! ', '.', [], 0xa, "735af29184758f2b3d0fd128532b9266c231afd0007b950d38e63bb4c6981d3872b4c6a782edfdeea27cb5ca7808c928641925a9d556d7de6462304d15a836a8dd8cb86f4ad74d52968ffe4036243a9d7119e919f1566fce38d4df13e1bda4602a901d1937c768a4560001698197ab343964f281b1638f604f5d56237a5bb01ef242fcd42fd90fdef92c73c229bdfefc5090f0a6770494def59e544408149cce72a94a889c114bfe5a904415daaa9cedaa3e9e0e4cc39740df574c344dea1a72b2b37433ab16207863c733e97aac8fb62b910c77176275b39ace0f8026adf7078820ced3c90a6d9d5a46268a4d23f4281a16480aa714effef2b3ffad5799273f1d7a06b2747640c10701b62641e79e871ed9fa91cc5a5eb96d361f327b5efbdb7662580dd866eff2bb930f52d7e86a8eebe2761ae3ec08d96a81044689600b6e12d167b3b292c5005e0e5780df380601f7d2409aea2b96cee75818be7e61e891a57c04f43b96402a2c05cc2d690457deeb9e72f4468945d6a4b3858b3ca4f7dc15cd9397f247f73b7c22bf1cbcc8dd6cd0b3e2ba768c68e49fa3a9b5fc07e65c024c0f5aa0b09881288ac29b0754d3e83f180bbd41506dc20df48996cbccacff4387cbd77779ce2d11f8d348cc2a09c61e3b7b04c59af3a1c31f6423d0c03377a98b1b3d529c0a5abf904fc6362e4105f7c6d7d7a8ba9ea1349c02fa5c9063b298fdb23d7aee5cef842948a85102482bfff474ee77ac7b6fc6d551aafa321efb7b75b99b5e722f64ff7a28179105b699cf6b5b1dab55c3f259e224f0a9c04b28e2f54f9a1b2f0ae8efde33972f30e98ec07854947e0b01d5ba616610ecd21b795bea63c40f7957d4deb9816be911c8aac2554c0570d1a4781067b993c6873dca92b246f5e14477e8525a7efd9306cd5bf53a7768edc9255c9ead6fd5c5f270baf988222c91c4dffe739ee3dfd936a55775ec6500b1107fd156079ea459acb4fe785d324284a9f4c4c30e5e0b2e7600e56435097c3a07d91d8b671b4da47d48fc091b10abded579edcd37e28de1cfbd84089a319241e77a00f913d558dbd3fdb3ae424e73e9f3b9f93279b1dda5f97d0ef0370bff01122e3c46d15d96936b74fade74281f059724de37f9bfcb5789e84a8d88edd0fed326ca330efb4ec5880c3fb99d3e242818f21e39806d72139ee9663f2b00f6ae0a2efc9bee8b8a31566f0708c62ac80abecc08d77087a8f78a593a52567b301e6e33c40afeebfccae5ec3e0d1b62246c60c45f0b20ba907b301629ac08cc2ae2ea1de16a57a0075e9f75df2d5cee2afbb3c9846af52e4e0dcbf3688d39230c582893c6578c5c6241c2c84ad37ae1a197f13babd6233508a8b08aa09ceb5178cbca7f997748999aaf255216b2f7ccfbc3324256404b84d71581e918afebd5873847b9189177ecdf95c72bc0d017f5d243da69a28bbcafddacaebb3cccbaff8fc357b6c6edbb0f7ca951f8c096bb0e8378cf3f40351a192ac09c3293365a79eebaf939e8fe9c1d908b8a0092d5a8c5406c082ee65b82d5327d068d04059075e6dfc7ba27ba3b7bca0277508163f1697be40bfab226e496dd8c79816ffc7cb5a275862e93de281b81da1686d5af0bf2d9a34ed3323f33167c01807ebba968390e792f521d4230106451c759f81efba2e859ecd20cc09defd037482d365781f06c35fd8983e5d1051b2129444f52f1fd3386affc717fd8f746740a6d8ba01f7f52733b6a4b1390b6fb8fe67a1c52e3e133bd43b3d2f3f5452ca17c8148502960bac5e98ee104b02049ca863ce2a1d118674b17462db67557c5153a1ea1ac3617a6e2c2abc0aa2960088961ac3499fefc8439b81b79d54bc63df3aa365cf6a038498a52edcaa75067bea708983bae470657c333e6071fe02aff60490e082c063b0627e60927fa30dbb0057aba3c4653045eda98c0eca06c1820c3808541b86ff06b8d13484184847a2948007460e4249cba3a9964668d9ef3730bc360145d9cdbf0adc91806413a82db050ebf3859e88d61276c4e8b9dafa323033a2d98241ff251f387e96efa4c272027a74f36fd824afb2b010660f46d79fda57a6396a6ce211ba2b974076f6bd5c12b60487aa70244ebb2379a766bce21312ca50f26251f0dc31eda251d2994fca4cc175baea43e535b6e8f6df9d633fe2e14beefc91bc5dd7090dede9db912d79887de85f11b8ed7ae981d6e82e3df3109b913014920eb77c84fb95193c26ee6766346c0e954c29bfc7bcda92d162b287d409121482684ce3e9e7d4c777e0cbfbfc78b09df1f22d97ee0918994e4a90d885fc1b786f646e3c7b6915eaea8afe9c272bc401bfdc7f2693bcd537d5b9dae3ac67a94abbb5d1357b473826302ab2f7ffd0c5535bd22dd48f9dbaf7389166cffe19313c5c8cecf6c29e19308c7197aa59b54bc90898e9bd65ded3a0f529129b49aa8174cb2b224bf815995e58910ef54132c4f12a298a8c46a75ecb43a86e7d742aa1bf2e3e011be1b0555dda77c3273f8859e2e22c80766b0f1e6e5bb196434ecf94db33095aa8958f71353cbdc4e2057580d41bb19f964208d505e75b1594ba2f46925119be04ae90369811399dbc0f03330542d011f340c028b4488089b88f2e58f1112b47d61e509aeaddd3674f2047c74c3193feb1955e4aa03edd5d2d5fae52cb61537c9bb418b5133bd45b296e90bf65184f3ca1c80d10b33fa6feddd6ca91837bb35107dbc2898fbcec35c56425fb642f2c2b4d68b9b7aa2442caa8fc90c14823cf828052e0203aaa464c7727a9bd05919cc2da904eace3475df393d26209575ff7af928eaa52ebe93ccbb71b40e09fb714f6d5e59e6bf22837d83fa177340adaf7e88558e837c2deebc61ede502e274da7042382a6991f38d4aa035ad251dc34d1419faee995fe131e2398bdb3c2f4b367b90d58b5e5807c045d9f49bbaefb310dd359b1d9594c0c94a7384aceb6f112855879282847ad55034cb0766ff5a55733ac53e0e3120b5d985ac67a04e94334f660fecf1530385e0dc6489b0f3469088f7b07bf834826416c46e59b480d74844ede561d9af0e3513ef4e6baaeb55163cfbbb19d5d164cda2e1e551242d926cfa57328b4b6556ae26f7409ce864a8ddc6c0005353d712f9ae04ec711ad2ec34a415770996b797e853b2ec26343122c6a0fc94e33b629877e45ea2acf9663c923cf2e434f63e23895c420682ec49b9c55884a622d2dc4ac2cdb3fd81076da9fdcf8cc682313ef705445bbc4380f9c8aa43aadc6c19be72580c07f03b8a69b6a751e8eb77e828a8b1725b96d334f288e2fe5a3b122f2043e118b099ed20ebcd914bb8a19f110949cf46b121b52ec8de52f23a13a398d761215182a7c48d042d7d1d7ba17530f517dcce3dba9861ee01c5c8faef68e404a7ce622ffdbce2be3502a9815cd0084892f8156f10104e1ea6e9e42538cf65433121ceeeb03e9fda3f82185c2fc81c6116edd53d69d837b33ea52177b91795fa1234e59aea45195c27c11cb2da5638fedbffcf80dae6574789016c6ed1b895e8eb552d0649d6322a82a7ba6a1915b5469693e6d23b0f55129df8c84d70a05d8e39f24db89849e1a28bac870d5b31bd4c7e8eee7842c68e1cf0e5f5f892f58535e89b690bce36df5152e1777053e056e8f2e7384544165b1fdeb6214a11d61c16e63c7e2ecd4be23eedf9316bb995f9ef42c75e9caab06161987d10d40e30228d37388ca79e07b8103db9c235723e0c29caef6bf1b855eaaac87b9137758f0e90d649bf08c996d59039374059cf7ac63c0c68133b239877d17245dfde1d79669d085b4288f4bdfcbe2fcf3f6bb8ba53df1881569af6163ef92fb2bdde9b3ef93d16ef7381a50a26cbe68e0b3063aa6b997ff3114a249a3860ecafb9cc2dd38bba62f1c43dda8e662f90cdef52cfab68a31dfe447c72f3c18741bfa27684efe719133874cb235f3ce87f9750fad9bb05b33d60e98d5581ad8a7f526d8861ae09d0462d92dae95d987a5095fb6d0128ad1d1e3c4d563102680118f3de0c548f43ef5fd746daf23e7c98b21ba9057f071440a0427e84b0b9959c03467ed88e8b7143b1107a5b1db21e0a5e670ad657406f19927c9449eb1f0080bb80639ea18cfc7f81d6f65b2c42bfa05219647dae5db8b74249a456dbfd895d7237927c6bff9a0a1e2418ad2944834463befe817e2f83b06c4f0c643e2285da102109520e5091b5016a04fe5f831b6b774d2d5f53cb331019e52d2e1a06f82791ae88fb9948ae1268e1230e0606596d629631159d361c1db27861d54e29ac0d1874f2272135ee9ac5ecedf4bb11cd000a5a1cd23ea050fd07e976dea45a127b8da00f09126fb618e722fbd3d26eddd44c9c0448df99ade5cf15ad6cc141a5227cbd03cd26961198724b42962c632ceba8d25df82109d5d98246a981e947501a907a6819a6dc964e33edfb17cd925c20488b53d9094bd8f0d1a088bd22acce0ef054609ccbdd7657b5fc87627fca70536233f1b77ff774ef67ba1c3b7188629e5773647553cb749ef3c07871a2be3c7757a4a34b1164eeddd17cc0c35d8aa51bc273930db1a1bcbbe9f9f7ab6cf733c293d3567b911b795ca46c5cbd54492ee3e60885a3ef625b0a5ad8edf6c4ef97315ed10858755f84ba7a7b1d46a67dd7cbb341754f8f03d42578f50155924ae7dbdc57dfabe17515071c1c86e40bf90bfdb3c838b71137de67ed7b6a1ce8ca26f80a99d173b37d08350cf96c1f6e0bceca830568321b6a5410d6945288fb287035ef6b0fd3798e3a2e97b6c7b489edeb6eab4b48e1e70823e911f612cce12630d0b2e07541d5ac90d3ae1c7b50987a1cdb73b613b488131b1f1d647b721abb261ea4ecc162c579fa94930252b964e8cc8846403f4546c2e6d4c6ad940e79ee2114b90079e37d680c14e17144282b375a3fbdd57c31d783a7a0ee4cd8de757c940383cc4aea4e20ba4f377d42e2ca6d77ef43f672f7078e9afa329bc889ff13ea80fd4a863301a7199d54fe2ec9f44d4d0a69f14e7457106aa2df9228468a29c23b8ab2c2f37e13b44174845a3f771825f8fde5aaeefb732b1672201ae6682665824be1278b834448f84d1ba98523e0f1b7a792946abb629070172f077225c8793161b51b056838870688376aa1b2a73588aae29231086729ff1a85ab83c657eef5c8c71e868238062ad288d5b627f3a2bd71c2ea87b08bc577f5a9f04ebf764f687777fef34e35f8eb34cbd03db4c0dda3dca7b9e8f8d6116cdfd6987e1d91d3755ba438614f1b9c681a702f7e56ca09b18f221a1fbf14b73f02dd8912bb8757a2cb11ae867cb07379407709fa8a438b8558e36915c8c478704cbfdfc2ad3bc1d92235adf2ef7c7e02b54fd63a1162b141f461c0daff75460d5dcc70d08730c4a4ae0c3c5fd846ee3c1f9f5686d12f4584ae1dbf74943bce9d3a6b30c737abdbb8cc53603b0974cfd083cede6e2f970a4c8bd08517eedf4fa2d03a116d75ba125089b0eb0aca401d0aec3576adf0fc942d72d604ab093c5d00fc8a8dfdeb998311e08a8d73a61d6f451ba169b67cd255a1be007f2fbe61a0f4a53da4bd804eecac5642359e04b9c1d17161c85f598e41d36ee0aa1a5ea246cf7f8753cb6524f6cc0eeb7a32763304a923a78b226c08ff7ec1a386206a7205ad5f2c3d10a5879bbc920463efcc50e7665c7d2d218dd763cb59dfc6369a97cf90ddbce924b5b1622f711a"}, 0xfe5) [ 688.723614][ T28] usb 1-1: string descriptor 0 read error: -22 [ 688.730393][ T28] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 688.739902][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.842655][ T125] cdc_ncm 6-1:1.0: bind() failure [ 688.857022][ T125] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 688.864157][ T125] cdc_ncm 6-1:1.1: bind() failure [ 688.948920][ T125] usb 6-1: USB disconnect, device number 9 [ 689.102946][ T3537] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 689.123282][ T28] cdc_ncm 1-1:1.0: bind() failure [ 689.137745][ T28] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 689.145242][ T28] cdc_ncm 1-1:1.1: bind() failure [ 689.166955][ T28] usb 1-1: USB disconnect, device number 10 18:29:50 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='attr/prev\x00') [ 689.472516][ T3537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.483948][ T3537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.494763][ T3537] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 689.504151][ T3537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.566466][ T3537] usb 5-1: config 0 descriptor?? 18:29:50 executing program 0: fsopen(&(0x7f00000021c0)='ramfs\x00', 0x0) 18:29:50 executing program 3: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x10}}}}}}]}}, 0x0) 18:29:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_GROUP={0x8, 0x1b, 0x7}]}, 0x28}}, 0x0) 18:29:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 18:29:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)=@raw=[@cb_func], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x5, 0xc, 0x97e, 0x4}, 0x10}, 0x80) [ 689.739756][T14693] loop4: detected capacity change from 0 to 1036 18:29:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000007600)='attr/current\x00') fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 18:29:50 executing program 5: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuseblk(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0) 18:29:51 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x10}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x6, 0x0, 0x7}, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc04}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 690.004123][ T3559] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 690.072195][ T3537] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 690.140176][ T3537] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000B/input/input16 18:29:51 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='sessionid\x00') [ 690.278005][ T3537] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 690.356502][ T3537] usb 5-1: USB disconnect, device number 14 [ 690.393498][ T3559] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 690.404973][ T3559] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 690.415196][ T3559] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 690.504903][ T28] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 690.702799][ T3559] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 690.712523][ T3559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.720709][ T3559] usb 4-1: Product: syz [ 690.725144][ T3559] usb 4-1: Manufacturer: syz [ 690.729914][ T3559] usb 4-1: SerialNumber: syz 18:29:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x8201}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x4b47, 0x0) 18:29:51 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 18:29:51 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) 18:29:51 executing program 5: r0 = syz_clone(0x40000000, &(0x7f0000000000)="110d0ff0e4261b80a0eb6fcb90d33c5f315a45b446002e2bb48261f3abdd4de86046659d45499efc911562c291cc6349941123aad2a3434a0db1fc564e46f80b67283e130b54cec9cfeb2326c12ace3980a955e2cf020d11b853a051bab87e78391ffcf807e9670537fb169cbd2b18f307baa08bc63c3e7c48f12221d2ed21cbee8f7ee9c2b80fa35f00f68148826797682adc572a643502976d94ea0ea437407f9ff8a7dfd0b4e249296f58063795c3b8bbc0b66257b7df1e7f80992cf4f006a2ae4312", 0xc4, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="5fc0c287f3fb2d5f4a4302ee68918da2c8c7aebd3be5e9686ff40568caa55581c4c9d2e87f163bdf91269236a7647f") syz_open_procfs(r0, &(0x7f00000001c0)='net/nfsfs\x00') [ 690.873119][ T28] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.884504][ T28] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 690.894623][ T28] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 690.904697][ T28] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 690.914677][ T28] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 691.011361][T14717] loop4: detected capacity change from 0 to 1036 [ 691.073558][ T3559] cdc_ncm 4-1:1.0: bind() failure [ 691.197589][ T3559] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 691.204750][ T3559] cdc_ncm 4-1:1.1: bind() failure [ 691.262891][ T28] usb 3-1: string descriptor 0 read error: -22 [ 691.269647][ T28] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 691.279085][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.327046][ T3559] usb 4-1: USB disconnect, device number 14 18:29:52 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') 18:29:52 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000380)={0x0, 0x0, 0x1000}, 0x20) 18:29:52 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/tty/drivers\x00', 0x0, 0x0) 18:29:52 executing program 5: socket$igmp(0x2, 0x3, 0x2) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000003c0)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) [ 691.642615][ T28] cdc_ncm 3-1:1.0: bind() failure [ 691.657474][ T28] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 691.664628][ T28] cdc_ncm 3-1:1.1: bind() failure 18:29:52 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sysvipc/sem\x00', 0x0, 0x0) 18:29:52 executing program 1: newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 691.860613][ T28] usb 3-1: USB disconnect, device number 9 18:29:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89a0, &(0x7f0000000380)={'sit0\x00', 0x0}) 18:29:53 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) 18:29:53 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x1fffff, 0xf, 0x1b172, 0xffffffffffffffff, 0x0) 18:29:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r0, 0x0, 0x0) 18:29:53 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) syz_clone(0x10200000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:29:53 executing program 0: syz_clone(0x11060000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:29:53 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') write$tcp_mem(r0, &(0x7f00000001c0), 0x48) 18:29:53 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='attr/prev\x00') fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000001c0)='/\x00', &(0x7f0000000200)='./file0\x00', r0) 18:29:53 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xe5}}}}}}}]}}, 0x0) 18:29:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') write$FUSE_LK(r0, 0x0, 0x0) 18:29:53 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000180), 0x4, 0x0) [ 692.475345][ T24] audit: type=1400 audit(1661797793.530:30): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14746 comm="syz-executor.1" 18:29:53 executing program 1: socketpair(0x11, 0x2, 0x1, &(0x7f0000000200)) 18:29:53 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='attr/prev\x00') sendmmsg$sock(r0, 0x0, 0x0, 0x0) 18:29:53 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x44400) 18:29:53 executing program 5: prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffc000/0x4000)=nil) 18:29:53 executing program 2: pipe2$9p(0x0, 0x44080) [ 692.802695][ T28] usb 4-1: new high-speed USB device number 15 using dummy_hcd 18:29:53 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='attr/prev\x00') accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 18:29:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) 18:29:54 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x14, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 18:29:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) [ 693.172812][ T28] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 693.182990][ T28] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 693.193091][ T28] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 693.203177][ T28] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 693.392615][ T28] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 693.402049][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.410330][ T28] usb 4-1: Product: syz [ 693.414897][ T28] usb 4-1: Manufacturer: syz [ 693.419674][ T28] usb 4-1: SerialNumber: syz [ 693.772483][ T28] cdc_ncm 4-1:1.0: bind() failure [ 693.786946][ T28] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 693.794135][ T28] cdc_ncm 4-1:1.1: bind() failure [ 693.865130][ T28] usb 4-1: USB disconnect, device number 15 18:29:55 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000202505a1a46000010203010902"], 0x0) 18:29:55 executing program 2: syz_clone(0x3731dae1f13a8459, 0x0, 0x0, 0x0, 0x0, 0x0) 18:29:55 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x3a1980) 18:29:55 executing program 5: syz_clone(0x40000000, &(0x7f0000000000)="110d0ff0e4261b80a0eb6fcb90d33c5f315a45b446002e2bb4", 0x19, &(0x7f0000000100), &(0x7f0000000140), 0x0) 18:29:55 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008240), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 18:29:55 executing program 0: syz_clone(0x28001080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='b') 18:29:55 executing program 4: socket$unix(0x1, 0xb, 0x0) 18:29:55 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1}}}}}}}]}}, 0x0) 18:29:55 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 18:29:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000c80)={'#! ', '.', [], 0xa, "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"}, 0xe81) [ 694.872055][ T3559] usb 4-1: new high-speed USB device number 16 using dummy_hcd 18:29:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='*'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 695.112571][ T3559] usb 4-1: Using ep0 maxpacket: 32 [ 695.133034][ T6] usb 3-1: new high-speed USB device number 10 using dummy_hcd 18:29:56 executing program 1: r0 = fsopen(&(0x7f00000021c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) [ 695.254665][ T3559] usb 4-1: config 0 has no interfaces? [ 695.379260][T14802] binder: 14798:14802 ioctl c0306201 0 returned -14 [ 695.424224][ T3559] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.60 [ 695.433656][ T3559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.441929][ T3559] usb 4-1: Product: syz [ 695.446256][ T3559] usb 4-1: Manufacturer: syz [ 695.451008][ T3559] usb 4-1: SerialNumber: syz [ 695.511194][ T3559] usb 4-1: config 0 descriptor?? [ 695.532368][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.543760][ T6] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 695.553889][ T6] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 695.564009][ T6] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 695.574075][ T6] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 695.805034][ T3559] usb 4-1: USB disconnect, device number 16 [ 695.814371][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 695.823815][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.832354][ T6] usb 3-1: Product: syz [ 695.836775][ T6] usb 3-1: Manufacturer: syz [ 695.841636][ T6] usb 3-1: SerialNumber: syz [ 696.292441][ T6] cdc_ncm 3-1:1.0: bind() failure 18:29:57 executing program 3: symlinkat(&(0x7f0000001b00)='./file0\x00', 0xffffffffffffffff, 0x0) [ 696.358408][ T6] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 696.365735][ T6] cdc_ncm 3-1:1.1: bind() failure 18:29:57 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000002500050007ffffffbd0301000000000095002008000000006916000000000000bf6700000000000017060000b964b01a4606feff00200000370600000ee60000bf150000000000000f5700000000000065070000020000002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c53e95e5db67754bb12dc8c4ed68ecfd00000000000000030e3e7bdd2d17f2f09000000000000005d7095f9ce000078af6d71d79a5e12814cb1d8a5d4601d295c45a69eb9bdb7dd390700000500000000f16d0a3e127bee45a0100000fe9de56c9d8a814261bdb94a0500000084c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3e1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8da39eb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e4c16dfecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1d932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97792f69b649a462e7ee4bcf8b07a10311145eac1f2ede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b268f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed8400200aab43176e65ec1118d46d1e827f3472f4445d753887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000007f37d83f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9be2a29ab028acfc1cb26a0f6a5480a55d6a0c544ba0dc828c22fe3000072c6000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac693a27051f2ab779b8dbe800aeeda0426c7e7c0032028c955735557df78628a59d56f4400a83b29b6ddb55117669d9598c0f3598073f3a1d2a76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe70cac8b9e44023a1749eb1d0d572b7756e0d0fcd74035c7a1eb6eb4e1c8ef2629f5ecff4626746d6ea4a2215c3b9ee1dbb43f40256b5abcaaa8c27b25def02dbc05823e98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b1d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c716d906fbc3c9b412e0478cfee4485f423c63f49db5a583c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4f18ca372104772a3a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec9f9f3262cb13f4a2575fbe943a6c40000000000000000000000000000000026b80c3899543223a6079ee96198b9a326da3be3098af415ca284b746710c800990e8e29af8d763ef9b1f31befcad2ce5394601c7c4f5975e8bd07d8dcce3c7bebdc233ba3d45dc60f2f54393895650f154dcf83b84e16a29c743544a6091ec93e0d2fd5b4dc42913e1ba32277d5f4bb2142b46be48b41c717858cfefd4946bf19e617d51f964727bfd5cc5ba15370f6e1b39f1541eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d95ac7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1dc02af2b7bcf6f8af68249ce5370e593d9eafbefdb91fbdff9ee3307d4a1837963b2dc3f3698d92a7915b098f19392e792f05675f252f4e948184001b6494e906925a092483adc7e9c8f7a29d226943c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e37f0c85d13a33250d78cfa7daf529c5bea49cad7c3433e322d8dbd6e9b000065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d7d24b20166d7f510f80d13138216e03995da047ccef9de49a90ced031235e3219ebd9d06c257a50497ec523364a42e2e81fc068fcbb9792b673893ff2c1e27ced4b77b0300fbf46a19600b802cba88b7d0a938d9e0e6cfe5d66b874cd004179e5b6025c0e1050fae1f70437ee7cbaa9ab2f8c06a551236278c474914c7cf8406f95351704fc428806c23d16847bde483d98321d7648496e065f120ed7ffc11c29a1145c09b5e48ccbdb66dfe4188952868da9c0ad91463ec7670bec7772deb4e2b56f411f586dd4285146d1a0686975c89d7caa234be3c6aee7697860385f99a4a918fe6efa78e3227d54fe9c9fde78e16db810abb601e15a231f9510c7607204ad685177659b844efeb1d448b692444375c49e2b482b32470fc2e15511bb71cffa87b8c7179f56366666b57a3e1e226a481b6db11367685750cdec47e3c76f84788dbe28aa4a39a196bde8aa2de215d49c552c70000000000000000dbb68e58b4c96972b8e9e06dde8762bf753ec8545cb623afdaa1e52fec9f21ee2454cb653ebc7577a56204c1f942a944e650c1d1820b7fac005ed19bf0d96c3d146478b31af45a1aa9669fd3e25060281aede1e75795eeee3b6abd08ca490c2ce0531ed667898403ff2bb4f074352da58a3afa9057fcdad446222212ef5dc67c9361046a375ecd599f6653ce8df9bc7e177e88b1f171df357cf5256041a620ca68b035ccd784f97930a1f363bfd224e9cd1263ff16e6d513c9d7c67158ec5502c17266cea90306808f50a87fb2aaa1b1954bfa3ba8a6df6fbe38bd7ad09cecf8ecbaf005e68bb476ed3d8ea0cf21a9da7c11eedf3454556b63fe1133bf415cfc1b459c8bfc54ca3bd54d15ee11971b119a28d34ae8d20350ba647d2ef813515f4614c7e8cb04059d2b79867c07ae780ea3d8c875ee3834d3cf37271e882554782fa58781a715dec10864761389cd8cb32350917d17b03d37ad4c169ea912047ce814a78bfa6aa624c498fd927ac1da3b0ddab0cabeb7436b52b59ff23a19b487e1bea3f418b6e3d21e6833edd299b39ccbeddb532d6df19246710b01ad6ed06b18fc4ca5e1e72232dfab2a6f606e4fa637bddddf4ab9f093815de2c1193cf5c014005b1854515f815637caca1a2bff030000b56de1b1927d359fc87abf4dcb23f89c4f8dc93b27e411d1d331153aa8692777ab7076efd7c057dff57c248ba01c52f7a182124ae0f623a0b942581faddacd8f18c812cbcd22a938b6b5df6f3cb0eb5d3aafdacd944650a8fed42eb945293133a4bbc2a7c3ccac0a9055dbbe29b18c87ab4e3b86c3185650da3d9fc9e42228e449f066557462192cba2b2c2a3ad27ef0f719c1e5c99d506d11dca102c408842af65f17f1dd12fd1c35ee264a15fa041b22ca56d91477e8c5a96c7bb5a4db4caa8ac0e61ad8871aa5c3ce5c8a41b53841e1bf67e2bdcf7c3e830549dda33ae785eaff3c33b7c917fbfd747854f87f8a1b084bb91f0d00000000000000000000000000000000c39a4ab1b1f5f9fe629b3f067b64a755e1af70ca2afe9f6a6f3bc859d345064672eb09a4e94f82a820302651a3077313338cfcebb143567c563959f0de0442526c68c3eea5716c6477ba77f32e77aced7ef77fadfb06cd6860bedb7e3feeb169275e9113a22a67a86016a17c7e4a9c26942d65a181cbae11f5bba4230caed6ae7d49986c0edcf201305e7a58ea53c97806b929e7d1dfbbe35c4b25f0742352cfbecb6ea18da0fdc5877c4afb9b7659a9853b313d73bf4f8f4ca26f3633f51cb64ca41e0916169867b4608d684fb618d1f3db858d765ca75bc4a75062523ce6c1f9ab1aa1c1b2d04712eafaf279fd3d594a23e9c5ba4b94425ad0e0dfe43330bc96b163b57b96653b1c3a86257e57586be526d85e981936b1b0027e4de18cf6d7bf47ebe4dc9f3e8be776e3488b704c90b1ff1daec119b70b800a887eed7418bdfd9cfe6a4a9a41c5c7fb3879dfb782f733552401d2c23c0cf528228c238777a5c33f2004fc91df0d4752ddf566"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 18:29:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='*'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:29:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)='c', 0x1) 18:29:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f9, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="008078"]}) [ 696.515386][ T6] usb 3-1: USB disconnect, device number 10 18:29:57 executing program 1: fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/nf_conntrack_expect\x00') r0 = syz_open_procfs(0x0, &(0x7f0000007600)='attr/current\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) 18:29:57 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xde, &(0x7f0000000080)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 696.645483][T14817] binder: 14806:14817 ioctl c0306201 0 returned -14 18:29:57 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/25, 0x19}}, 0x120) 18:29:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) 18:29:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 18:29:57 executing program 5: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 18:29:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='*'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:29:58 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='timerslack_ns\x00') [ 696.944249][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:29:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 697.138045][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.146047][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.152569][T14834] binder: 14828:14834 ioctl c0306201 0 returned -14 [ 697.153884][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.168076][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.175872][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.183632][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.191255][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.199042][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.211468][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.219235][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.226932][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 18:29:58 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='uid_map\x00') 18:29:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='*'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 697.234690][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.242381][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.250085][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.257833][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.265531][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.273310][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.280918][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 18:29:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0xc}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x808}]}]}, 0x24}}, 0x0) [ 697.288661][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.295145][ T6] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 697.296304][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.311589][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.319352][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.327063][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 18:29:58 executing program 1: fsopen(&(0x7f0000002440)='romfs\x00', 0x0) [ 697.334815][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 697.342519][ T3537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 18:29:58 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x4, 0x3, 0x1}}, 0x14) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x80, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x400400, 0x0) [ 697.592324][T14845] binder: 14838:14845 ioctl c0306201 0 returned -14 [ 697.682367][ T6] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 697.694766][ T6] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.704932][ T6] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 697.715038][ T6] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 697.846523][ T3537] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz1 18:29:58 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00') 18:29:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000c80)={'#! ', '.'}, 0x5) 18:29:58 executing program 3: syz_clone(0x40000000, &(0x7f0000000000)="110d0ff0e4261b80a0eb6fcb90d33c5f315a45b446002e2bb48261f3abdd4de86046659d45499efc911562c291cc6349941123aad2a3434a0db1fc564e46f80b67283e130b54cec9cfeb2326c12ace3980a955e2cf020d11b853a051bab87e78391ffcf807e9670537fb169cbd2b18f307baa08bc63c3e7c48f12221d2ed21cbee8f7ee9c2b80fa35f00f68148826797682adc572a643502976d94ea0ea437407f9ff8a7dfd0b4e249296f58", 0xac, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="5fc0c287f3fb2d5f4a4302ee68918da2c8c7aebd3be5e9686ff40568caa55581c4c9d2e87f163bdf91269236a7647f") [ 697.962886][ T6] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 697.972890][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.981168][ T6] usb 6-1: Product: syz [ 697.985696][ T6] usb 6-1: Manufacturer: syz [ 697.990567][ T6] usb 6-1: SerialNumber: syz [ 698.452603][ T6] cdc_ncm 6-1:1.0: bind() failure [ 698.467203][ T6] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 698.474521][ T6] cdc_ncm 6-1:1.1: bind() failure [ 698.598753][ T6] usb 6-1: USB disconnect, device number 10 18:30:00 executing program 5: socket$xdp(0x2c, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) 18:30:00 executing program 4: r0 = fsopen(&(0x7f00000021c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000024c0)='sync\x00', 0x0, 0x0) 18:30:00 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='fdinfo\x00') 18:30:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xad) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x15) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x76, &(0x7f00000000c0)="9ae33c636253a123928639a10688e482e8f1b6e17ec835eb81e43320e6f5090577fc2afbcecc0000006ec0009c6ad2ed8c85b4a5b7877f9600478e393832345f0b025b8539f2da01241454f1aa310f995545bed18e52898c325d9859a7228335acb8f8e03436004885fb0cde7cbe22268a3e4a4ec50c") syz_open_dev$tty20(0xc, 0x4, 0x1) 18:30:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/201, 0xc9}], 0x1, 0x0, 0x0) lseek(r0, 0x1, 0x0) 18:30:00 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000280)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) 18:30:00 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000380)={0x0, 0x1025000, 0x1000}, 0x20) 18:30:00 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xe5}}}}}}}]}}, 0x0) 18:30:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x8e, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x48) 18:30:00 executing program 3: syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="5fc0c287f3fb2d5f4a4302ee68918da2c8c7aebd3be5e9686ff40568caa55581c4c9d2e87f163bdf9126") 18:30:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000000)) [ 699.361981][ T3537] usb 1-1: new high-speed USB device number 11 using dummy_hcd 18:30:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 18:30:00 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f00000023c0)='/sys/block/loop0', 0x101040, 0x0) 18:30:00 executing program 5: socketpair(0x11, 0x2, 0x0, &(0x7f0000000200)) 18:30:00 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f00000000c0)="9a") [ 699.833565][ T3537] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.845036][ T3537] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 699.855133][ T3537] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.864769][ T3564] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 699.950357][ T3537] usb 1-1: config 0 descriptor?? [ 700.213895][ T28] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 700.252679][ T3564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.263195][ T3564] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 700.273673][ T3564] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 700.283736][ T3564] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 700.293775][ T3564] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 700.476312][ T3537] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 700.485820][ T3564] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 700.495527][ T3564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.503872][ T3564] usb 3-1: Product: syz [ 700.508206][ T3564] usb 3-1: Manufacturer: syz [ 700.513221][ T3564] usb 3-1: SerialNumber: syz [ 700.544370][ T3537] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000D/input/input17 [ 700.635616][ T28] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 700.646554][ T28] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 700.656013][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.694163][ T3537] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 700.808467][ T28] usb 2-1: config 0 descriptor?? [ 700.843366][ T3564] cdc_ncm 3-1:1.0: bind() failure [ 700.859149][ T3564] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 700.866931][ T3564] cdc_ncm 3-1:1.1: bind() failure [ 700.896711][ T28] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 700.960573][ T3564] usb 3-1: USB disconnect, device number 11 [ 700.978454][T14785] udevd[14785]: setting mode of /dev/bus/usb/003/011 to 020664 failed: No such file or directory [ 700.993477][T14785] udevd[14785]: setting owner of /dev/bus/usb/003/011 to uid=0, gid=0 failed: No such file or directory [ 701.104296][ T28] usb 2-1: USB disconnect, device number 9 [ 701.224727][ T3559] usb 1-1: USB disconnect, device number 11 [ 701.232039][ C1] keytouch 0003:0926:3333.000D: usb_submit_urb(ctrl) failed: -19 18:30:02 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xad) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x15) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x76, &(0x7f00000000c0)="9ae33c636253a123928639a10688e482e8f1b6e17ec835eb81e43320e6f5090577fc2afbcecc0000006ec0009c6ad2ed8c85b4a5b7877f9600478e393832345f0b025b8539f2da01241454f1aa310f995545bed18e52898c325d9859a7228335acb8f8e03436004885fb0cde7cbe22268a3e4a4ec50c") syz_open_dev$tty20(0xc, 0x4, 0x1) 18:30:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000007600)='attr/current\x00') sendmmsg$sock(0xffffffffffffffff, &(0x7f0000009540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000009740)={0x2020}, 0x2020) 18:30:02 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f00000023c0)='/sys/block/loop0', 0x101040, 0x0) 18:30:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) 18:30:02 executing program 5: mount$fuseblk(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)) 18:30:02 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='attr/prev\x00') r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='attr/prev\x00', 0x0, r0) 18:30:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000007600)='attr/current\x00') sendmmsg$sock(0xffffffffffffffff, &(0x7f0000009540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000009740)={0x2020}, 0x2020) 18:30:03 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f00000023c0)='/sys/block/loop0', 0x101040, 0x0) 18:30:03 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x2, &(0x7f0000000080)) 18:30:03 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)={0xec4, 0x453, 0x0, 0x70bd25, 0x0, "a2ed080ef34982961b2e1987ff66f2bd6cc393476c77d7935573ed47a49c9b0759bbbc2ad77a8a07c9aadc12e34711db4f3f917edc20979af85b4ac34249136a995c3b0cd52f73d0dbc32f473c6cc3016bfa9a1c44ad0ea664cde607288a3a1dda0da28772304ecf12223460d14e4fbbbd77c7e0255f133493ea18179b946fed0ac39bdec52058280618ef2a6424af12a700fc92923e3ef6f1a88d76f43cd8f7473aaccd3e21982bbcaa04e2bd3241e5567cfc5c100fd5062edf74cfdc9931ff12c3e31013a3461f91036804ae9b25f2b06ffdf777344c1985a68288c9af5cc47765c253713e31e25193d52d96d5631c9a5c899c453a52e8373a994d5f55bed9396c6dac73ca29a0c7202a5dd70e2dd21b93bd1a43b660a91a2cf4e148c6fc33497a9c36b8236c102ffa3a5df4aa7ecb44dbe86132df67d9cda23017adebebdab57f0524e764b8f8e26b64a747076f672e1ddf2ad830420a67c9d6710bb22c5d7230c2d6d597abb1de472621beb38a4a4cb8592f83a263ffffc8d1fb37736bc1633491f9120f0169b911113fb09b477bcb796905789c194ebd48a97e0145789ab08e61208e98ec96048cf16faafced39cc3086a085f13c233f348aea60a1e435e5b119c81bf0faef696d86f8ee291f745dcfa7794e4d1cb99ce7a45dc1ead58775382c5a874b216be80622ab4da1c1990234c0730a0cdc95b2eb7cae6110a7a75b1a2ef2dca0b9fccebfcbd8168f584ebd13c8632b29f8cc6f56fb71eac6c1d2ca061d91d1436830c7bd92faf0ec79f32c528150e1f3558219ea0a9664ad76cc8fa6cd33774b443662cc7ed84ce3ec7320f3e39b846f3ebe1cd09b44940eed1255372bd3745bc75e388150d6d8fd6f982106772e4ead2a0124cc8ecbbe5abbe30608e330a90eaa2caadbdab443484fba00f4b26e1aa9a9f9c404d45389c305e0d706863e35eb6cf511ec8fe6eac447e3944baaa5cd9c3f5064ea9319fae419c8476eb7f8d1d3c04e4573945c38af5ca1acad913e272e248ed98185228c5e172937f9ae6d99a67622d18c11098271fd7d8772cabe98c5411213767c16e8269808d3af01ff95a238993fb6cd3ae0a2f6fd2357763f01b2a6e8db428fa771478e6a12a124dc0671488ad0d85aa90c0fb97141c7fe94c51d5ceed64a455baa4db1f059eea6f38e13d5a715ef18a06cc8c910281843136ec9347b70fb19de2e0bbc25df8da05765ad1005df472d7353c1e008a512526f8ad504e18b2d62999cd430b912be3c3051babd5afc5f2983763d2600beee6a151010e778cfdaf288a02e23053a05189ad3d2a28b6528ab1c5bf82a34feb7315e6f78f6d4bee85d9b981622b9135622803d784d1d988b0c52cd842f6580a19d3b9b34d3bf16166fcbd0a371c0d53ea7a44e2998de9febc035bed4d9e2a3a0ff2609b3f4336b7b0a124efa0bad0ce8925956845b459f04e52713d55f6539595086f1d1c577cdcaa12ddbc5d7dcaf3c20922ffca10f55623b7dd190bbec3ab91b7229232be57175351c94e2962eaa6d2285e0e78945f4f9f693fd6be6b4241961b0ff6ba88792929e7ab0136f252b570b1fb327c5033b3bd32f6d86597a39a8f1cc805e7a7f5bdab817391494aa0fc3a323b2f205cc9f1d28538516c85c0b940e1d24a73cd74506f58e30ed09b5a78c22e160544749444eb33f6c8ca143f81da09c091190bf5b016d402a480a806c2a8ba6b937d62f550fbe359808af44c08b84702d677a72ea2756cbac8867356e64d1474945607e9bf1cbb2141f5e72b488acc14df7225ce2743f4af8c3b4b1e929df341276a80620fb62f5d796dd9ff8b68e60f595d5c030321ee00c2d9ea7d4f152215ab21f0aea6227d9dd38678489407b48c1548a7b90da84c7dce8b9f3e5e826b419a045fd71837eb88e92601ea1752cba4b21fa9cbc7010deb99574ba632619f7523805e83e60cd7e1ca711927ca1960cd25910a145cae34476fcf16b1c5d84f73ec8e94b57b684c526f286d6720d5769410fe0dc17e479d2a03707214ab1889d31f94e52c65ea66257fafd32ceea9f91aa95d0b7445d2ce14a29b281d19975064a191670068874c0020b51b092be99157bbe19615cb8a85b0ac8c1c202fcbcd62aeac176d114aacd08d3892624d879e15830bd30588e7a6be137249878cd228093ef8388858e919a4323f8b3691b874fac094a67ee7d96fa0bfa4ff1f51a37cbd943b36e4b3c85eb643b931f48722ded552e723621592ef77d4ef83cc330e4c97159322a665110429bb5cb5c94e40f30680ed4b1797c96cdb29a3f6c0734ce823fa76799a1a19723b419fbae13b3ac0ac818afd2b3df8ea944f483c0cf9c34c509736965038148b4d532e82b2537d0ae1a69ae5ac18dd319a8bd21304394933850ca55d4d50d78763e87eb2c3bac618709d981e1e464d85776c61f2989d90a52b970980cf2188c9968a4a3eb2ac265f565c599724bbfa0aed596b6607336e14c07818ab87e840c2e71d225cd57111ae07d66c1077dc7a3dbba128830b246b9da369f7a027e0ccde6f7837b1db6186a2c9124aede89f3cfbce24da365ddf4c141868338a076acb32e03bb3e0f7d7a8b643353b59e95a1073174cc7001831ab97633b6ac0d28ec0c4216dcc1adc570f132c194b6159fa59b09065067b585731822a61114f4acdb726e63903938229594c318156797cbbf82a35153c1cf9f66d407bce8229a35dab96ce1ab780c014be5f51994eef9408849249d8e25cd144cece94e606720de3f4561ab08dbc3a5704fde5a4a661145e6ec310cb2424e5255a4b4c00ec1c042b2e3f4fe87599ccb20e6dcacc912ded7d65d03955a10c048aebaa4be4e10f129d084c6a15b6c296ecba0225ce85da19df756ad6578f4707fdfae4bdaccb888652329fad6b844571a52d7646f0756bf5faaee180faa044cb62b1fb446a894b567feb3d1c734fe362377093dffa0e594591e07bdf7c57d400c3950b54ff5ca86b3406e1004fdf294d9fdfb12a7f0e6059ba257ee7a3a75397ae8f08421451c3ca43040de2dff04d0d00dc3c52bf178037143d67e68b3812f5359616d06cc83b2d451abe6dee4720941cc532a352e1f44f363d137badae83b3ce615564e4cbe554b51cae4da69ebb9b1247c54f72212e09d740df7fceb74e2f773f38f86c1e408b3dd09a14b07615602ff5f6dcc6fe174a0d05b27e882482839ffe5f050162f155f208a32357d8535f7185dd50d6ca9d27efcea2d83c38cb0bd0203f1edb1bd33af156e953450a4301de167b7255bad9dec3d7b9fc1f6e1ce3125a590d4081349d7ec4356bcb3952f0f1c218579df1ae07407ac88677e95726d05c311bf8a586319654c79901d92d4522619cd1c10fc474d561b29228d2ea5da93d732b222f3641169894f71f5572b52e41581a9d024a62f73ec232cd164e1c5924f4a496391efb02572d939a6c3feaadebe95c0bb6b1954dc821fb24ee6f523fa4386e0e23c483000a6e7137c88adab2e18d6ea04615efbe75ad135421e712dca4623660c16bfbc0fe27188352397788b370ba5ed59b0c835805bf40cd600bcd6061c56ef09164f593c3dd2618e49741ef4ff843e0f6f9ea84428c15a4a9a81e302ab36758d8812c35e95355f8632200de15d3c54c203199b477a48769ef785c19527c6e71bef50d0327a271a92acee1701515ae6e7eb2035efd9b0cc73deddc9c0dfd48ad043b0f9ce4ee4d4a7043e0d281ffa1d2bf55b7012b2f1858d12b40172f399d498616b7751f2e167e449f7b2f7473909e1520fff8198f976420e5771995b293d858ca5e244b4572b078859ced04fea2ef8eb0db8e36a9fb7e7cf38fa940d8b8a421e59c2ed871da5e3bff21f0deb77c6e7d8ea87ee212288b502969cb23a1c0741058e3bc587d03912ef7ff0907114df108802928d4b24096577f1daf93ed8289f2e01731c5f3f661517cd0f003c4b7533fd7a2090f718bb9ccb308974424b43945bc1698d1f91ad13fcbefe38face48552afd1fbb5a80aa427da6139c671f205c76e0233d9281a9cca0f6e52e6296a75cbbbfabf71bfc6f43ccabd408516789fc470baa68245736026af63a9ece4c7d5c4f409b2652117184640641fe15d1b751db0bca05470296b5abf31bb9974f4772859fe61712e8c235156e9c43cc504d53b93e52563d4c8ea5512b78f7133b441efa93526bac32ec9d758d1de08fd9439211505a317487328c3af652c8b01e87d1907475ec10154c4abd53ca51bf0d6a2bf94174d65f167ab407e7ab1d5b0b40ae70797b5ef258351bd881ce3bd9d5a6cec0ae756cc7f2e7080f56af70b9f94342f30a8492ceae255c39121196e11e88bd64fd2108a473a06948f948605e47ada18f421b3ac361b01e40c604219f07e5071239df904390a441ba09de1f415479d024ac617f319f58a98877fd0284529fbeab15fce9ca7c8bb9b7ea9fd38c9077f99aef50d3297ea2d0834ef9e6d443d9056e129e305cb197a4a572e79f3a6994bb6b7653444dbea18d3b6d89427f7e6b36c255d1613e2d7b6e242d6fee9db2373873ee2e2c070abf6c821bec58cb9e0c88cff362a05080d9f1db82b63ddaac0539ee81630c23f91544403b69466285b7e93d07c668cd77fa9541704b118bc8efbd3af8c20cd0d558890b798007479990cc5353bd2fb51d60bd75a6511e2607cd91dc7891df0b7edab7410aeabdfb443c629cb6f80cb07391e54f591ffc0ea70660a8ebec422b2c28a3ffe4ac837c6688b230ca08a20bfd749f9e315676367e176e0aa5c72bb54df61c3395021cf86af4a7d197c8c0be98b56f779878394dfa869d39cba6f301851956e9415fe21ecf24d3ba047d6f64d7929e8e8286f3b51d9904028ecef9b106f3154ab90f4fbf5bc60a9b8eb4e5c6f68a4284209becd926da27f66e4ded5dad70471af835c15626af7e431e5652833d0c2a63bdbabaa548fb5bc86a19b4b1c1053ef71d81cc0e92fde044b886aa0fb9aec0375bf40095aaf73c89231ed8508fad0f03deb41761d81ba8fc8d4e00595f7baab5847094428cb88a60a5be6962a2bbd54b9286e1f76999dfe237a905673d0a14ae93d39adb8316ccd712a20821fcbe4f3919aadf0a79d3ffa11cc24b59a6e02f8aab02088ebc14f92bac28fbfb40194c206c6d2f4bdc4dd71c7f118e1d9d560672e205bc163cade8b2552a966fe4f4ee81882f5958d6b8ea9a5ad44a67a1ef624f32a1be2acb71b315d53e41d114f6d36593a425fb9a24ab3de21f12895648ae1f28d950a3382beab6fc0de5841ea013ba8123203e79e5863df3571869e9672832b9"}, 0xec4}}, 0x0) 18:30:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x3d, &(0x7f0000000140), 0x4) [ 702.222281][ T28] usb 1-1: new high-speed USB device number 12 using dummy_hcd 18:30:03 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f00000023c0)='/sys/block/loop0', 0x101040, 0x0) [ 702.582313][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.594389][ T28] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 702.603770][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.685773][ T28] usb 1-1: config 0 descriptor?? [ 703.171483][ T28] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 703.231727][ T28] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000E/input/input18 [ 703.394032][ T28] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 703.868807][ T25] usb 1-1: USB disconnect, device number 12 [ 703.882044][ C1] keytouch 0003:0926:3333.000E: usb_submit_urb(ctrl) failed: -19 [ 704.411201][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 704.418026][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 18:30:05 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xad) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x15) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x76, &(0x7f00000000c0)="9ae33c636253a123928639a10688e482e8f1b6e17ec835eb81e43320e6f5090577fc2afbcecc0000006ec0009c6ad2ed8c85b4a5b7877f9600478e393832345f0b025b8539f2da01241454f1aa310f995545bed18e52898c325d9859a7228335acb8f8e03436004885fb0cde7cbe22268a3e4a4ec50c") syz_open_dev$tty20(0xc, 0x4, 0x1) 18:30:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000240)=""/187, 0x29, 0xbb, 0x1}, 0x20) 18:30:05 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0xa, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1d1bc}, 0x80) 18:30:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000007600)='attr/current\x00') sendmmsg$sock(0xffffffffffffffff, &(0x7f0000009540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000009740)={0x2020}, 0x2020) 18:30:05 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuseblk(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 18:30:05 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x20) 18:30:05 executing program 5: r0 = openat$capi20(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000280)) 18:30:05 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x894c, 0x0) 18:30:05 executing program 2: socketpair(0x22, 0x0, 0x1, &(0x7f0000000000)) 18:30:05 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8943, &(0x7f0000000080)) 18:30:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000007600)='attr/current\x00') sendmmsg$sock(0xffffffffffffffff, &(0x7f0000009540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000009740)={0x2020}, 0x2020) [ 704.883068][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd 18:30:06 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5421, &(0x7f0000000080)) [ 705.263106][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.275041][ T25] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 705.284404][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.324063][ T25] usb 1-1: config 0 descriptor?? [ 705.805850][ T25] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 705.823373][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000F/input/input19 [ 705.932290][ T25] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 706.549039][ T28] usb 1-1: USB disconnect, device number 13 [ 706.552006][ C0] keytouch 0003:0926:3333.000F: usb_submit_urb(ctrl) failed: -19 18:30:08 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xad) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x15) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x76, &(0x7f00000000c0)="9ae33c636253a123928639a10688e482e8f1b6e17ec835eb81e43320e6f5090577fc2afbcecc0000006ec0009c6ad2ed8c85b4a5b7877f9600478e393832345f0b025b8539f2da01241454f1aa310f995545bed18e52898c325d9859a7228335acb8f8e03436004885fb0cde7cbe22268a3e4a4ec50c") syz_open_dev$tty20(0xc, 0x4, 0x1) 18:30:08 executing program 4: fsmount(0xffffffffffffffff, 0x0, 0xec264618372a1e52) 18:30:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_PHYS_SWITCH_ID={0x4}, @IFLA_NET_NS_PID={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ip_vti0\x00'}]}, 0x40}}, 0x0) 18:30:08 executing program 3: add_key$user(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:30:08 executing program 1: mq_open(&(0x7f00000004c0)='&8-}\x00', 0x0, 0x0, 0x0) 18:30:08 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5460, 0x0) 18:30:08 executing program 4: r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000000040)) 18:30:08 executing program 2: socketpair(0x23, 0x0, 0xffffffff, &(0x7f0000000040)) 18:30:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x2c, &(0x7f0000000140), 0x4) 18:30:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) 18:30:08 executing program 5: openat$6lowpan_control(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) 18:30:08 executing program 2: openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) [ 707.491954][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 707.902888][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.914082][ T25] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 707.923368][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.936739][ T25] usb 1-1: config 0 descriptor?? [ 708.445703][ T25] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 708.462107][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0010/input/input20 [ 708.562792][ T25] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 709.176337][ T28] usb 1-1: USB disconnect, device number 14 [ 709.182101][ C0] keytouch 0003:0926:3333.0010: usb_submit_urb(ctrl) failed: -19 18:30:10 executing program 1: keyctl$dh_compute(0x17, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000001240)={0x0}) 18:30:10 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x2e, &(0x7f0000000140), 0x4) 18:30:10 executing program 4: syz_io_uring_setup(0x27433, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 18:30:10 executing program 5: r0 = openat$capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000080)) 18:30:10 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, &(0x7f0000000080)) 18:30:10 executing program 3: r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c1f698b22f8182d352bbbdb823134e05e12c4cc8b3abb5bf5cf24dd792801dab"}) 18:30:10 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b0000000530404"], 0xb0}}, 0x0) 18:30:10 executing program 4: syz_io_uring_setup(0x29e, &(0x7f0000000040)={0x0, 0x7909, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:30:10 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000020c0)='ns/mnt\x00') setns(r0, 0x0) 18:30:11 executing program 5: r0 = gettid() syz_clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0], 0x1}, 0x58) 18:30:11 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x1}, 0x1c) 18:30:11 executing program 3: getsockopt$sock_timeval(0xffffffffffffff9c, 0xffff, 0x0, 0x0, 0x0) 18:30:11 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 18:30:11 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e31bfffff3353cb4dc1ff2", "b894653ed35f352d585219cdc0439ab784209163966d2681d88940b154dfaa8e"}) [ 710.371070][T14990] loop4: detected capacity change from 0 to 1036 18:30:11 executing program 0: r0 = openat$capi20(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000040)=0x3) 18:30:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000e00)=ANY=[@ANYBLOB="7369743000000000000000adc400000036"]}) 18:30:11 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 18:30:11 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0xc0189436, &(0x7f0000000080)) 18:30:11 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x5, &(0x7f0000000140), 0x4) 18:30:11 executing program 0: capget(&(0x7f0000000200), &(0x7f0000000240)) 18:30:11 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x401c5820, &(0x7f0000000080)) 18:30:12 executing program 3: syz_io_uring_setup(0x29e, &(0x7f0000000040), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:30:12 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) 18:30:12 executing program 4: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x0, @private0}}}, 0x48) 18:30:12 executing program 2: openat$vsock(0xffffff9c, &(0x7f0000000900), 0x101000, 0x0) 18:30:12 executing program 5: syz_open_dev$hidraw(&(0x7f0000000100), 0x7, 0x0) 18:30:12 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 18:30:12 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x12, &(0x7f0000000140), 0x4) 18:30:12 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8924, &(0x7f0000000080)) 18:30:12 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x0) 18:30:12 executing program 2: openat$vsock(0xffffff9c, &(0x7f0000000040), 0x80201, 0x0) 18:30:12 executing program 4: r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) [ 711.480248][T15021] loop4: detected capacity change from 0 to 1036 18:30:12 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8927, &(0x7f0000000080)) 18:30:12 executing program 0: r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) 18:30:12 executing program 5: r0 = epoll_create(0x8) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 18:30:12 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000440)) 18:30:12 executing program 3: r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000dc0), r0) 18:30:13 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2514}, 0x1c) 18:30:13 executing program 1: r0 = openat$fb0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000100)) 18:30:13 executing program 0: openat$vsock(0xffffff9c, &(0x7f0000000900), 0x0, 0x0) 18:30:13 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) 18:30:13 executing program 5: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="8d", 0x1, 0xfffffffffffffffd) 18:30:13 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000000)=""/246) 18:30:13 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x40049409, 0x0) 18:30:13 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x42, &(0x7f0000000140), 0x4) 18:30:13 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) 18:30:13 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) 18:30:13 executing program 5: r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000100)) 18:30:13 executing program 4: io_uring_setup(0x1732, &(0x7f0000000000)={0x0, 0x0, 0x21}) 18:30:13 executing program 1: syz_genetlink_get_family_id$gtp(&(0x7f0000000dc0), 0xffffffffffffffff) 18:30:13 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)=ANY=[], 0x2514}, 0x1c) [ 712.594331][T15065] QAT: Device 0 not found 18:30:13 executing program 0: r0 = openat$capi20(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) 18:30:13 executing program 4: openat$vsock(0xffffff9c, 0x0, 0x458000, 0x0) 18:30:13 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) 18:30:13 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x4b, &(0x7f0000000140), 0x4) 18:30:13 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89b1, 0x0) 18:30:13 executing program 3: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)=""/16) 18:30:13 executing program 0: r0 = openat$vsock(0xffffff9c, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r0, 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) 18:30:14 executing program 2: openat$fb0(0xffffff9c, &(0x7f00000000c0), 0x105001, 0x0) 18:30:14 executing program 4: openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40200, 0x0) 18:30:14 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x10, &(0x7f0000000140), 0x4) 18:30:14 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140), 0x4) 18:30:14 executing program 3: sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) 18:30:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 18:30:14 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x4a, &(0x7f0000000140), 0x4) 18:30:14 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0) 18:30:14 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x10008a, 0x1000b1}, 0x20) 18:30:14 executing program 0: r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080), &(0x7f00000000c0), 0x8) 18:30:14 executing program 5: mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f0000000680)={0x0, 0x0, 0x60000}, 0x20) 18:30:14 executing program 2: syz_io_uring_setup(0x2708, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) io_uring_setup(0x4160, &(0x7f0000000100)) 18:30:14 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x49, &(0x7f0000000140), 0x4) 18:30:14 executing program 1: r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x0) 18:30:14 executing program 4: openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 18:30:14 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x4020940d, &(0x7f0000000080)) 18:30:14 executing program 5: io_uring_setup(0x4160, &(0x7f0000000100)={0x0, 0x0, 0x2}) 18:30:14 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8913, &(0x7f0000000080)) 18:30:14 executing program 2: openat$rdma_cm(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) 18:30:14 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0xc, &(0x7f0000000140), 0x4) 18:30:14 executing program 4: r0 = openat$fb0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, 0x0) 18:30:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x9, &(0x7f0000000140), 0x4) 18:30:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1d, &(0x7f0000000140), 0x4) 18:30:15 executing program 1: mq_open(&(0x7f00000004c0)='&8-}\x00', 0x0, 0x0, &(0x7f0000000540)) 18:30:15 executing program 2: openat$fb0(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 18:30:15 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 18:30:15 executing program 4: socket(0x18, 0x0, 0x7ff) 18:30:15 executing program 0: syz_io_uring_setup(0x2708, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) 18:30:15 executing program 5: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000780)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) 18:30:15 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@rdma_dest={0x18}], 0x18}, 0x0) 18:30:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) 18:30:15 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0) 18:30:15 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) 18:30:15 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 18:30:15 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={'sha224\x00'}}) 18:30:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x0) 18:30:15 executing program 2: socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vsock(0xffffff9c, 0x0, 0x0, 0x0) 18:30:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) 18:30:15 executing program 4: socketpair(0x11, 0xa, 0x1, &(0x7f0000000040)) 18:30:15 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x41) 18:30:15 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), 0xffffffffffffffff) 18:30:15 executing program 0: r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) 18:30:16 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x302c0) 18:30:16 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @local, 'geneve0\x00'}}, 0x1e) 18:30:16 executing program 5: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) 18:30:16 executing program 1: getitimer(0x1, &(0x7f0000000240)) 18:30:16 executing program 2: r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) 18:30:16 executing program 5: getuid() write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, 0x0}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socketpair(0x1e, 0x5, 0x8, &(0x7f0000001040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), 0xffffffffffffffff) 18:30:16 executing program 4: r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 18:30:16 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000200)={0x18}, 0x18) 18:30:16 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, 0x0, 0x0}}, @rdma_dest={0x18}], 0x70}, 0x1) 18:30:16 executing program 1: openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x22440, 0x0) 18:30:16 executing program 5: openat$vsock(0xffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void, @void}}}, 0x14}}, 0x0) 18:30:16 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x2514}, 0x1c) 18:30:16 executing program 4: openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) 18:30:16 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000140)={&(0x7f0000000240), 0xfffffed0, 0x0}, 0x0) 18:30:16 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8905, &(0x7f0000000080)) 18:30:16 executing program 1: openat$capi20(0xffffff9c, &(0x7f0000000000), 0x4080, 0x0) 18:30:16 executing program 5: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8}, 0x10) 18:30:17 executing program 1: r0 = getpid() capget(&(0x7f0000000180)={0x20071026, r0}, &(0x7f00000001c0)) [ 716.003223][ T25] not chained 900000 origins [ 716.007931][ T25] CPU: 0 PID: 25 Comm: kworker/0:1 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 716.017959][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 716.028128][ T25] Workqueue: events psi_avgs_work [ 716.033279][ T25] Call Trace: [ 716.036614][ T25] [ 716.039604][ T25] dump_stack_lvl+0x1c8/0x256 [ 716.044425][ T25] dump_stack+0x1a/0x1c [ 716.048704][ T25] kmsan_internal_chain_origin+0x78/0x120 [ 716.054559][ T25] ? propagate_entity_load_avg+0x81/0x1450 [ 716.060483][ T25] ? collect_percpu_times+0x36d/0x19a0 [ 716.066079][ T25] ? psi_avgs_work+0x8c/0x2b0 [ 716.070896][ T25] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 716.076849][ T25] ? collect_percpu_times+0x36d/0x19a0 [ 716.082447][ T25] ? kmsan_internal_memmove_metadata+0x96/0x350 [ 716.088837][ T25] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 716.094783][ T25] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 716.100723][ T25] __msan_chain_origin+0xbd/0x140 [ 716.105868][ T25] update_averages+0xc2c/0xdf0 [ 716.110784][ T25] psi_avgs_work+0x1e3/0x2b0 [ 716.115503][ T25] ? psi_task_change+0x760/0x760 [ 716.120545][ T25] process_one_work+0xb27/0x13e0 [ 716.125662][ T25] worker_thread+0x1076/0x1d60 [ 716.130648][ T25] kthread+0x31b/0x430 [ 716.134860][ T25] ? worker_clr_flags+0x2b0/0x2b0 [ 716.140046][ T25] ? kthread_blkcg+0x120/0x120 [ 716.144929][ T25] ret_from_fork+0x1f/0x30 [ 716.149490][ T25] 18:30:17 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0xb01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vsock(0xffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) [ 716.153221][ T25] Uninit was stored to memory at: [ 716.158421][ T25] update_averages+0xc2c/0xdf0 [ 716.163375][ T25] psi_avgs_work+0x1e3/0x2b0 [ 716.168086][ T25] process_one_work+0xb27/0x13e0 [ 716.173340][ T25] worker_thread+0x1076/0x1d60 [ 716.178255][ T25] kthread+0x31b/0x430 [ 716.182510][ T25] ret_from_fork+0x1f/0x30 [ 716.187066][ T25] [ 716.189473][ T25] Uninit was stored to memory at: [ 716.194719][ T25] update_averages+0xc2c/0xdf0 [ 716.199602][ T25] psi_avgs_work+0x1e3/0x2b0 18:30:17 executing program 3: r0 = epoll_create(0x1) epoll_pwait2(r0, &(0x7f0000000040)=[{}], 0x1, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) [ 716.204385][ T25] process_one_work+0xb27/0x13e0 [ 716.209482][ T25] worker_thread+0x1076/0x1d60 [ 716.214459][ T25] kthread+0x31b/0x430 [ 716.218657][ T25] ret_from_fork+0x1f/0x30 [ 716.223265][ T25] [ 716.225644][ T25] Uninit was stored to memory at: [ 716.230825][ T25] update_averages+0xc2c/0xdf0 [ 716.235766][ T25] psi_avgs_work+0x1e3/0x2b0 [ 716.240470][ T25] process_one_work+0xb27/0x13e0 [ 716.245613][ T25] worker_thread+0x1076/0x1d60 [ 716.250514][ T25] kthread+0x31b/0x430 18:30:17 executing program 2: socketpair(0x1e, 0x0, 0x8, &(0x7f0000001040)) [ 716.254781][ T25] ret_from_fork+0x1f/0x30 [ 716.259350][ T25] [ 716.261731][ T25] Uninit was stored to memory at: [ 716.266975][ T25] update_averages+0xc2c/0xdf0 [ 716.271913][ T25] psi_avgs_work+0x1e3/0x2b0 [ 716.276643][ T25] process_one_work+0xb27/0x13e0 [ 716.281724][ T25] worker_thread+0x1076/0x1d60 [ 716.286682][ T25] kthread+0x31b/0x430 [ 716.290887][ T25] ret_from_fork+0x1f/0x30 [ 716.295516][ T25] [ 716.297914][ T25] Uninit was stored to memory at: 18:30:17 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8906, 0x0) [ 716.303211][ T25] update_averages+0xc2c/0xdf0 [ 716.308093][ T25] psi_avgs_work+0x1e3/0x2b0 [ 716.312916][ T25] process_one_work+0xb27/0x13e0 [ 716.318010][ T25] worker_thread+0x1076/0x1d60 [ 716.322994][ T25] kthread+0x31b/0x430 [ 716.327181][ T25] ret_from_fork+0x1f/0x30 [ 716.331831][ T25] [ 716.334211][ T25] Uninit was stored to memory at: [ 716.339400][ T25] update_averages+0xc2c/0xdf0 [ 716.344424][ T25] psi_avgs_work+0x1e3/0x2b0 [ 716.349143][ T25] process_one_work+0xb27/0x13e0 18:30:17 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8931, &(0x7f0000000080)) [ 716.354322][ T25] worker_thread+0x1076/0x1d60 [ 716.359228][ T25] kthread+0x31b/0x430 [ 716.363541][ T25] ret_from_fork+0x1f/0x30 [ 716.368087][ T25] [ 716.370487][ T25] Uninit was stored to memory at: [ 716.375786][ T25] update_averages+0xc2c/0xdf0 [ 716.380664][ T25] psi_avgs_work+0x1e3/0x2b0 [ 716.385431][ T25] process_one_work+0xb27/0x13e0 [ 716.390558][ T25] worker_thread+0x1076/0x1d60 [ 716.395595][ T25] kthread+0x31b/0x430 [ 716.399788][ T25] ret_from_fork+0x1f/0x30 [ 716.404452][ T25] [ 716.406832][ T25] Uninit was created at: [ 716.411244][ T25] kmem_cache_alloc_trace+0x696/0xdf0 [ 716.416881][ T25] psi_cgroup_alloc+0x83/0x250 [ 716.421836][ T25] cgroup_mkdir+0x10a3/0x3080 [ 716.426642][ T25] kernfs_iop_mkdir+0x2ba/0x520 [ 716.431614][ T25] vfs_mkdir+0x62a/0x870 [ 716.436104][ T25] do_mkdirat+0x466/0x7b0 [ 716.440575][ T25] __x64_sys_mkdirat+0xc4/0x120 [ 716.445688][ T25] do_syscall_64+0x3d/0xb0 [ 716.450218][ T25] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 716.613964][T15222] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure 18:30:17 executing program 0: getitimer(0x0, &(0x7f0000000240)) 18:30:17 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5451, 0x0) 18:30:17 executing program 2: bpf$OBJ_GET_PROG(0x7, 0xffffffffffffffff, 0x0) 18:30:17 executing program 1: socket$nl_audit(0x10, 0x3, 0x9) r0 = getpid() capget(&(0x7f0000000180)={0xe1252a4dcc9559a6, r0}, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x40000}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000300)={&(0x7f0000000240), 0xc, 0x0}, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x0) openat$vsock(0xffffff9c, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x2, 0x0) 18:30:18 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 18:30:18 executing program 0: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000004480)={0x0, 0x3c}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) 18:30:18 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)) 18:30:18 executing program 5: r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, 0x0) [ 717.245255][T15245] QAT: failed to copy from user. 18:30:18 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)={0xec8, 0x453, 0x0, 0x0, 0x0, "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", [""]}, 0xec8}}, 0x0) 18:30:18 executing program 1: epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff9) 18:30:18 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x3, &(0x7f0000000300)={[0x8bb]}, 0x8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 18:30:18 executing program 2: syz_io_uring_setup(0x3841, &(0x7f0000000000)={0x0, 0x99fd, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:18 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8941, 0x0) 18:30:18 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)={0xf00, 0x453, 0x10, 0x0, 0x0, "a2ed080ef34982961b2e1987ff66f2bd6cc393476c77d7935573ed47a49c9b0759bbbc2ad77a8a07c9aadc12e34711db4f3f917edc20979af85b4ac34249136a995c3b0cd52f73d0dbc32f473c6cc3016bfa9a1c44ad0ea664cde607288a3a1dda0da28772304ecf12223460d14e4fbbbd77c7e0255f133493ea18179b946fed0ac39bdec52058280618ef2a6424af12a700fc92923e3ef6f1a88d76f43cd8f7473aaccd3e21982bbcaa04e2bd3241e5567cfc5c100fd5062edf74cfdc9931ff12c3e31013a3461f91036804ae9b25f2b06ffdf777344c1985a68288c9af5cc47765c253713e31e25193d52d96d5631c9a5c899c453a52e8373a994d5f55bed9396c6dac73ca29a0c7202a5dd70e2dd21b93bd1a43b660a91a2cf4e148c6fc33497a9c36b8236c102ffa3a5df4aa7ecb44dbe86132df67d9cda23017adebebdab57f0524e764b8f8e26b64a747076f672e1ddf2ad830420a67c9d6710bb22c5d7230c2d6d597abb1de472621beb38a4a4cb8592f83a263ffffc8d1fb37736bc1633491f9120f0169b911113fb09b477bcb796905789c194ebd48a97e0145789ab08e61208e98ec96048cf16faafced39cc3086a085f13c233f348aea60a1e435e5b119c81bf0faef696d86f8ee291f745dcfa7794e4d1cb99ce7a45dc1ead58775382c5a874b216be80622ab4da1c1990234c0730a0cdc95b2eb7cae6110a7a75b1a2ef2dca0b9fccebfcbd8168f584ebd13c8632b29f8cc6f56fb71eac6c1d2ca061d91d1436830c7bd92faf0ec79f32c528150e1f3558219ea0a9664ad76cc8fa6cd33774b443662cc7ed84ce3ec7320f3e39b846f3ebe1cd09b44940eed1255372bd3745bc75e388150d6d8fd6f982106772e4ead2a0124cc8ecbbe5abbe30608e330a90eaa2caadbdab443484fba00f4b26e1aa9a9f9c404d45389c305e0d706863e35eb6cf511ec8fe6eac447e3944baaa5cd9c3f5064ea9319fae419c8476eb7f8d1d3c04e4573945c38af5ca1acad913e272e248ed98185228c5e172937f9ae6d99a67622d18c11098271fd7d8772cabe98c5411213767c16e8269808d3af01ff95a238993fb6cd3ae0a2f6fd2357763f01b2a6e8db428fa771478e6a12a124dc0671488ad0d85aa90c0fb97141c7fe94c51d5ceed64a455baa4db1f059eea6f38e13d5a715ef18a06cc8c910281843136ec9347b70fb19de2e0bbc25df8da05765ad1005df472d7353c1e008a512526f8ad504e18b2d62999cd430b912be3c3051babd5afc5f2983763d2600beee6a151010e778cfdaf288a02e23053a05189ad3d2a28b6528ab1c5bf82a34feb7315e6f78f6d4bee85d9b981622b9135622803d784d1d988b0c52cd842f6580a19d3b9b34d3bf16166fcbd0a371c0d53ea7a44e2998de9febc035bed4d9e2a3a0ff2609b3f4336b7b0a124efa0bad0ce8925956845b459f04e52713d55f6539595086f1d1c577cdcaa12ddbc5d7dcaf3c20922ffca10f55623b7dd190bbec3ab91b7229232be57175351c94e2962eaa6d2285e0e78945f4f9f693fd6be6b4241961b0ff6ba88792929e7ab0136f252b570b1fb327c5033b3bd32f6d86597a39a8f1cc805e7a7f5bdab817391494aa0fc3a323b2f205cc9f1d28538516c85c0b940e1d24a73cd74506f58e30ed09b5a78c22e160544749444eb33f6c8ca143f81da09c091190bf5b016d402a480a806c2a8ba6b937d62f550fbe359808af44c08b84702d677a72ea2756cbac8867356e64d1474945607e9bf1cbb2141f5e72b488acc14df7225ce2743f4af8c3b4b1e929df341276a80620fb62f5d796dd9ff8b68e60f595d5c030321ee00c2d9ea7d4f152215ab21f0aea6227d9dd38678489407b48c1548a7b90da84c7dce8b9f3e5e826b419a045fd71837eb88e92601ea1752cba4b21fa9cbc7010deb99574ba632619f7523805e83e60cd7e1ca711927ca1960cd25910a145cae34476fcf16b1c5d84f73ec8e94b57b684c526f286d6720d5769410fe0dc17e479d2a03707214ab1889d31f94e52c65ea66257fafd32ceea9f91aa95d0b7445d2ce14a29b281d19975064a191670068874c0020b51b092be99157bbe19615cb8a85b0ac8c1c202fcbcd62aeac176d114aacd08d3892624d879e15830bd30588e7a6be137249878cd228093ef8388858e919a4323f8b3691b874fac094a67ee7d96fa0bfa4ff1f51a37cbd943b36e4b3c85eb643b931f48722ded552e723621592ef77d4ef83cc330e4c97159322a665110429bb5cb5c94e40f30680ed4b1797c96cdb29a3f6c0734ce823fa76799a1a19723b419fbae13b3ac0ac818afd2b3df8ea944f483c0cf9c34c509736965038148b4d532e82b2537d0ae1a69ae5ac18dd319a8bd21304394933850ca55d4d50d78763e87eb2c3bac618709d981e1e464d85776c61f2989d90a52b970980cf2188c9968a4a3eb2ac265f565c599724bbfa0aed596b6607336e14c07818ab87e840c2e71d225cd57111ae07d66c1077dc7a3dbba128830b246b9da369f7a027e0ccde6f7837b1db6186a2c9124aede89f3cfbce24da365ddf4c141868338a076acb32e03bb3e0f7d7a8b643353b59e95a1073174cc7001831ab97633b6ac0d28ec0c4216dcc1adc570f132c194b6159fa59b09065067b585731822a61114f4acdb726e63903938229594c318156797cbbf82a35153c1cf9f66d407bce8229a35dab96ce1ab780c014be5f51994eef9408849249d8e25cd144cece94e606720de3f4561ab08dbc3a5704fde5a4a661145e6ec310cb2424e5255a4b4c00ec1c042b2e3f4fe87599ccb20e6dcacc912ded7d65d03955a10c048aebaa4be4e10f129d084c6a15b6c296ecba0225ce85da19df756ad6578f4707fdfae4bdaccb888652329fad6b844571a52d7646f0756bf5faaee180faa044cb62b1fb446a894b567feb3d1c734fe362377093dffa0e594591e07bdf7c57d400c3950b54ff5ca86b3406e1004fdf294d9fdfb12a7f0e6059ba257ee7a3a75397ae8f08421451c3ca43040de2dff04d0d00dc3c52bf178037143d67e68b3812f5359616d06cc83b2d451abe6dee4720941cc532a352e1f44f363d137badae83b3ce615564e4cbe554b51cae4da69ebb9b1247c54f72212e09d740df7fceb74e2f773f38f86c1e408b3dd09a14b07615602ff5f6dcc6fe174a0d05b27e882482839ffe5f050162f155f208a32357d8535f7185dd50d6ca9d27efcea2d83c38cb0bd0203f1edb1bd33af156e953450a4301de167b7255bad9dec3d7b9fc1f6e1ce3125a590d4081349d7ec4356bcb3952f0f1c218579df1ae07407ac88677e95726d05c311bf8a586319654c79901d92d4522619cd1c10fc474d561b29228d2ea5da93d732b222f3641169894f71f5572b52e41581a9d024a62f73ec232cd164e1c5924f4a496391efb02572d939a6c3feaadebe95c0bb6b1954dc821fb24ee6f523fa4386e0e23c483000a6e7137c88adab2e18d6ea04615efbe75ad135421e712dca4623660c16bfbc0fe27188352397788b370ba5ed59b0c835805bf40cd600bcd6061c56ef09164f593c3dd2618e49741ef4ff843e0f6f9ea84428c15a4a9a81e302ab36758d8812c35e95355f8632200de15d3c54c203199b477a48769ef785c19527c6e71bef50d0327a271a92acee1701515ae6e7eb2035efd9b0cc73deddc9c0dfd48ad043b0f9ce4ee4d4a7043e0d281ffa1d2bf55b7012b2f1858d12b40172f399d498616b7751f2e167e449f7b2f7473909e1520fff8198f976420e5771995b293d858ca5e244b4572b078859ced04fea2ef8eb0db8e36a9fb7e7cf38fa940d8b8a421e59c2ed871da5e3bff21f0deb77c6e7d8ea87ee212288b502969cb23a1c0741058e3bc587d03912ef7ff0907114df108802928d4b24096577f1daf93ed8289f2e01731c5f3f661517cd0f003c4b7533fd7a2090f718bb9ccb308974424b43945bc1698d1f91ad13fcbefe38face48552afd1fbb5a80aa427da6139c671f205c76e0233d9281a9cca0f6e52e6296a75cbbbfabf71bfc6f43ccabd408516789fc470baa68245736026af63a9ece4c7d5c4f409b2652117184640641fe15d1b751db0bca05470296b5abf31bb9974f4772859fe61712e8c235156e9c43cc504d53b93e52563d4c8ea5512b78f7133b441efa93526bac32ec9d758d1de08fd9439211505a317487328c3af652c8b01e87d1907475ec10154c4abd53ca51bf0d6a2bf94174d65f167ab407e7ab1d5b0b40ae70797b5ef258351bd881ce3bd9d5a6cec0ae756cc7f2e7080f56af70b9f94342f30a8492ceae255c39121196e11e88bd64fd2108a473a06948f948605e47ada18f421b3ac361b01e40c604219f07e5071239df904390a441ba09de1f415479d024ac617f319f58a98877fd0284529fbeab15fce9ca7c8bb9b7ea9fd38c9077f99aef50d3297ea2d0834ef9e6d443d9056e129e305cb197a4a572e79f3a6994bb6b7653444dbea18d3b6d89427f7e6b36c255d1613e2d7b6e242d6fee9db2373873ee2e2c070abf6c821bec58cb9e0c88cff362a05080d9f1db82b63ddaac0539ee81630c23f91544403b69466285b7e93d07c668cd77fa9541704b118bc8efbd3af8c20cd0d558890b798007479990cc5353bd2fb51d60bd75a6511e2607cd91dc7891df0b7edab7410aeabdfb443c629cb6f80cb07391e54f591ffc0ea70660a8ebec422b2c28a3ffe4ac837c6688b230ca08a20bfd749f9e315676367e176e0aa5c72bb54df61c3395021cf86af4a7d197c8c0be98b56f779878394dfa869d39cba6f301851956e9415fe21ecf24d3ba047d6f64d7929e8e8286f3b51d9904028ecef9b106f3154ab90f4fbf5bc60a9b8eb4e5c6f68a4284209becd926da27f66e4ded5dad70471af835c15626af7e431e5652833d0c2a63bdbabaa548fb5bc86a19b4b1c1053ef71d81cc0e92fde044b886aa0fb9aec0375bf40095aaf73c89231ed8508fad0f03deb41761d81ba8fc8d4e00595f7baab5847094428cb88a60a5be6962a2bbd54b9286e1f76999dfe237a905673d0a14ae93d39adb8316ccd712a20821fcbe4f3919aadf0a79d3ffa11cc24b59a6e02f8aab02088ebc14f92bac28fbfb40194c206c6d2f4bdc4dd71c7f118e1d9d560672e205bc163cade8b2552a966fe4f4ee81882f5958d6b8ea9a5ad44a67a1ef624f32a1be2acb71b315d53e41d114f6d36593a425fb9a24ab3de21f12895648ae1f28d950a3382beab6fc0de5841ea013ba8123203e79e5863df3571869e9672832b9cbc151ce204a6e94f180d1260e90785da48ffe7f4e6a6e679b75654966abb0dfbdbc35a34d685797fdd468b047ea2dc09e737f01e1ba925b855d05ccfe", ["", ""]}, 0xf00}}, 0x0) 18:30:18 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89a2, &(0x7f0000000080)) 18:30:18 executing program 4: mq_open(&(0x7f0000000000)='\\{\x00', 0x0, 0x0, &(0x7f0000000040)) 18:30:18 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000020c0)='ns/mnt\x00') 18:30:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0xa, &(0x7f0000000140), 0x4) 18:30:18 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8912, 0x0) 18:30:18 executing program 2: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000480)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x67}}, 0x18) 18:30:18 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x2a, &(0x7f0000000140), 0x4) 18:30:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x29, &(0x7f0000000140), 0x4) 18:30:18 executing program 4: openat$vsock(0xffffff9c, &(0x7f0000000000), 0x20c042, 0x0) 18:30:19 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8993, &(0x7f0000000080)) 18:30:19 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) 18:30:19 executing program 2: r0 = openat$capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000080)) 18:30:19 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x3e, &(0x7f0000000140), 0x4) 18:30:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x41, &(0x7f0000000140), 0x4) 18:30:19 executing program 4: add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="ef", 0x1, 0xffffffffffffffff) 18:30:19 executing program 0: openat$vsock(0xffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) 18:30:19 executing program 5: socketpair(0x2c, 0x3, 0x2, &(0x7f0000000000)) 18:30:19 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) connect$pppoe(r0, 0x0, 0x0) 18:30:19 executing program 1: r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 18:30:19 executing program 4: capget(&(0x7f0000000200)={0x20080522}, &(0x7f0000000240)) 18:30:19 executing program 1: capget(0x0, &(0x7f0000000240)) 18:30:19 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x40046602, 0x0) [ 718.403217][T15300] QAT: failed to copy from user cfg_data. 18:30:19 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8937, &(0x7f0000000080)) 18:30:19 executing program 5: socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 18:30:19 executing program 0: r0 = epoll_create(0x1) epoll_pwait2(r0, &(0x7f0000000040)=[{}], 0x1, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) 18:30:19 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0x200}, {0x6}]}) 18:30:19 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, @loopback, @multicast1}, "0525000000000000"}}}}}, 0x0) 18:30:19 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) creat(&(0x7f0000000040)='./file0/bus\x00', 0x517c1b1a4cd077d3) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) 18:30:19 executing program 1: r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000005, 0x10, r0, 0x0) 18:30:19 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 18:30:19 executing program 2: keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000001240)={0x0}) 18:30:20 executing program 5: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 18:30:20 executing program 1: utimes(0x0, &(0x7f0000000140)={{0x0, 0xfffffffffffffffd}}) 18:30:20 executing program 4: munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 18:30:20 executing program 3: r0 = socket$inet6(0x18, 0x2, 0x0) recvmsg(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0xc41) 18:30:20 executing program 2: munmap(&(0x7f0000ff3000/0xc000)=nil, 0xc000) mprotect(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x0) 18:30:20 executing program 0: getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, 0x0, &(0x7f0000001200)) clock_gettime(0x0, &(0x7f0000001240)) 18:30:20 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) 18:30:20 executing program 1: syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd601b2e55003406008b5daeda2ce663ec03be54657b7eae7afe8000000000000000000000000000aa00000000661217fc9f12d20dd483"], 0x0) 18:30:20 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$getflags(r0, 0xba0aea5f34d83dae) 18:30:20 executing program 3: r0 = socket$inet6(0x18, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000080)) 18:30:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) 18:30:20 executing program 5: poll(0x0, 0x0, 0xffffffff) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) 18:30:20 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000040)) 18:30:20 executing program 3: syz_emit_ethernet(0x1fbf, &(0x7f0000000100)={@local, @local, @val, {@ipv6}}, 0x0) 18:30:20 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd601b2e55003406008b5daeda2ce663ec03be54657b7eae7afe8000000000000000000000000000aa00000000000000000004eccbd4830008"], 0x0) 18:30:20 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f0000000080), 0x4) 18:30:21 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)="0000c746", 0x4) 18:30:21 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 18:30:21 executing program 4: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 18:30:21 executing program 1: r0 = socket$inet6(0x18, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0xc) 18:30:21 executing program 3: r0 = socket(0x18, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0x18, 0x3}, 0xc) 18:30:21 executing program 4: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 18:30:21 executing program 2: syz_emit_ethernet(0x1f3, &(0x7f0000000240)={@local, @remote, @val, {@ipv6}}, 0x0) 18:30:21 executing program 5: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x9811, 0xffffffffffffffff, 0x0) 18:30:21 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt(r0, 0x0, 0x0, &(0x7f0000000040)="3e4ab586c87d0ed51c2489103b13382635b76e7365f2c95cac6edc56d5ae742dc0f46db6662a11292b94a819c6f75280f2dfd8c4ed67aa168746f41cda4ba426cdf9ef3f76a103d4bad5ca437476de835b6fa436d944dd8dcbd7e07da8c4414b9b872feb0cc21c1f9814e3bbe574d2e5df86e695471b2c18b686cdff088257a6acc56e8e9096eb4ad03536e0f4a98341dab8aaf3cb70b366adb88f30858f4e0210ad239df2e19faed6e2ff4f486e3cc08535cc14c56a5b8b395fdc4f8f681d4f075019a36ce70e30b733bb88dce71bec9187fbf910e62590390f2a23e24ad8b78ae4313287384f36a1d6675f9705373fd87695a6376ee43febf50a9ad379c8584b8ff6cfcfb0390f9a8a9c52dd7a0a9017cfa813206b30d9bb987014e05d6630f677eb7dd3d3497595195e5d0a0912d3503d4541c4f774d794ce792c838b0fc40f2de7c6163ed363da51a5dfad4fdc7b1c772ec0de072d7f118e92387cb33e9b0db0628f8bc43f3f8bc0a93317a7849dcbc68dd6799ed03ac5961706e9711c1df651360edbb8030e17f3e457822d52ebe3db65a5bd06ce724556d3237b423fa6adb4c4af3f2e529e1b3d7e6ffc0ebae55912378194ed0b525aa76d5d89764637e3347f3946791d355a1c36042821d6d300a10694134b8c3981faa7c165c248879b55537c8a59bc5f0c04f063e207167cd71de051589d25f47655df9d4a0601bf5bb0d00d996dcd1c69841b05bff7658b8fcfd4f04226642d6e738f1e8b7aa8cca98094a2b55a17ced6cc8ab73b577932857618aa488263e853ce8615985346dab38314df348e218e883934ee4a37a91fbea3f6e36a6e8a10c43625cccd6a941bc6d2fef63decdc4aa39b9fcd4bb4da73537c23c8815421ecad68177ee28cd44491387df4018bc8fcce6eafddfe3cf10efcce16237586ce8b540b0fbfa3275320e5d21bdb46c0da89481099479959c59a1552eb9df41cbb1e75fcbb27343d5a566c89fd4344b00ca4663d6252d15c5b25bdc9c9c7557291d4bb271b3e867fc782986e2f972aff955c6fb8da9c6ae803234045491eed3ec069179c3576f330092629fbbbd333f84bfbd776a5270b87c787f428c49678f4f8067c46d4aa6ddc476ddba87341d850561b602afc6b05a6673954a479a488dbea50de00f06c02140f0317b7a9a0e298b905bfba2e1d1bcf921e5048294b4d19ce0c8393d308671290f5afb472c594a47e259a60880247d8faabea6fe61e616ec697e214b07f2ab2e4d0eb3ff9f69ccbc9b7050cc52287f4602482d67941eb75635cca489a33690d00003ce4942c6148e9a8ddf9ebbc0e7fa270981393fae2743fec17da4815fbd7f5d24a78e27661335c47de1e2fd2ceb8da251dfa5f77e214ead23b7e434bc3ed795177f3d7a57f5981a9c7a07f9e6cd96baa5efd13ec9ef971dbb342db56deaa8eb1d804f4884c3fdcdba7960c3184ae156338607d4fc03f4aa5a244d42f9d51beabbb74610a0f952a5222b24afdcc43af470ee23c878c658ad71507eb612e4e2d028fa72004fe453af755cf64d2741890e721f709023d088c305a9e5879241c8feece2055c2b91b3537919e9893ffcd9d1fc584a5b5ecf8d1ec982a7e137cefa4a32c7f119c78793c9c646ccbecd7a4e56a4703e94279ffb41c858c215d75cece13a796b5aed00c04ec95fe36e46b132dbfa332c7ff9bec59adde02c6b927a39a69439609d1e7bebfe388b6a794c9d54b494f6e4063ca831f0aaff59d115fa2fd6b5e9aee6103aa10b940eb5c4187b5fc76208d174d2b4de4d5b4d65f22c5c0f9507d7ad95aad7982baeb4c8a75afa344a404c3a1e9a5085e51d762bd416edf0481ed36a4c200cde4b1e30596a68cf9777b75853bb77da169e67a3df1d17c93c648b63e7a678621c2f98ff0a4564931716d47d8c50d42beaf52948a4558027d3fbae3dcca3dfb880363a600c56300eca3841693b6cdb7b221b17e65490670473a79c839c57e0642143116949684bae429f848a5239a7763c91a9d54d9ce00e6a7fc21f1a4ccda320473d7b4aa3c2d08ec1f5cd1e203c79e19877f69079ef6fb08dc7416f85ca41911f40d67040e91214f85d82ab46b3fad55a2f83836d246aea636884965dd2f943a251675182506bfc67f42d8dcd9d66606db01db1ec54f88b5385ab5b9799615f6c2cfa0936ea2683191631174bbcfed6599943461864da5768f1de639031c024f3d6f07358cf94904217b4cae87d6eaa01f3027515a94054bee6f4c2abb10ff4a3086f9dc5daae83e2546ca2b1860f8fc753b6b468200d8e34a723c61124d1e9956e8a0bbca0618e1771b602c8b7c452ea6a87a2f63b4be975ff9789ec663e2044464c862154a1f8f485b04c051e390192a3902f5c4d3e8e6b89f68aa21e0b15b1ee901274de690cec8f42af3e1d467635f112f2ece59bdf6bb40b1949b1ffdd6aa2618fd076b941ace6119cbe4547506a91e8c7b81fe36c57b04eac62de57c49ba0ec4240d762b18ee3a718bdedce3b1bfb138d28df3d5d36e16f886ace6da539cda38bf89d97c48596b22b55465efc2d5c49659ba113dd175286de25b7a8fd0ed503cc82b5c98eec5fd5d4a04863c0cff330d19942ef7b562bb6aaeb131e7a3e00a8c68d90f907b6b7b869a5608f4d5ff07e51ba11ea438bb9f1f24d891e2b2e8c1c6e1f626447de80d1425071aac6f71b9a6e12aa90a99ceaec0222c5861f711ab3f20bb5d2b3a0ce4352f1c67ccc87f82559adfa910684587d56b4773a689a91add583ff645562e916576ecdf8f03efa92f592acb254bb1a5bf67ee6ad7cb0960d7932ebbfd410c4ff77f4b4d40af540f701f6d4ea50ee2072698d12668a71d3eb4113565272e0d2128853e91ae97e60ee79225f31e2839df", 0x801) 18:30:21 executing program 1: socket(0x1e, 0x0, 0xff) 18:30:21 executing program 3: poll(0x0, 0x0, 0x0) pipe2(0x0, 0x0) 18:30:21 executing program 4: writev(0xffffffffffffffff, &(0x7f00000028c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 18:30:21 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred], 0xffffffffffffff92}, 0x0) 18:30:22 executing program 4: clock_gettime(0x6, &(0x7f0000001240)) 18:30:22 executing program 3: syz_emit_ethernet(0x181, &(0x7f0000000240)={@local, @remote, @val, {@ipv6}}, 0x0) 18:30:22 executing program 0: r0 = msgget(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)) 18:30:22 executing program 1: pipe(&(0x7f0000001080)={0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:30:22 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000080)={0xffffffffffffffff}, 0x10) 18:30:22 executing program 5: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6) 18:30:22 executing program 4: getrusage(0xffffffffffffffff, 0xffffffffffffffff) 18:30:22 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f00000000c0)={0x0, 0x80000000}, 0x8) 18:30:22 executing program 0: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6) 18:30:22 executing program 2: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000280)={{0x0, 0xfffffffffffffffe}}, 0x0) 18:30:22 executing program 1: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 18:30:22 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000000)=0xffffffff, 0x4) 18:30:22 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @remote, @val, {@ipv6}}, 0x0) 18:30:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x8) 18:30:22 executing program 1: getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, 0x0, &(0x7f0000001200)) clock_gettime(0x2, &(0x7f0000001240)) 18:30:22 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @remote, @val, {@ipv6}}, 0x0) 18:30:22 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="2ae363678c5c", @val, {@ipv6}}, 0x0) 18:30:22 executing program 5: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 18:30:22 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x0, 0x8000000000000001}, 0x10) 18:30:22 executing program 4: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e490d"], 0x35) 18:30:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 18:30:22 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000140)=@string={0x2}}]}) 18:30:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) 18:30:22 executing program 0: r0 = socket(0x18, 0x3, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x3}, 0x8) 18:30:23 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x10, 0x0, 0x0) 18:30:23 executing program 1: bpf$MAP_CREATE(0x15, &(0x7f00000000c0)=@bloom_filter, 0x48) 18:30:23 executing program 4: r0 = socket(0x29, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) 18:30:23 executing program 0: io_uring_setup(0x5033, &(0x7f0000000240)={0x0, 0x5839, 0x8}) 18:30:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)='`', 0x1a000, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 18:30:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}], {0x14}}, 0x3c}}, 0x0) 18:30:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @loopback}}}}) [ 722.272219][ T28] usb 3-1: new high-speed USB device number 12 using dummy_hcd 18:30:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@base={0x5, 0x6, 0x3c02, 0x81}, 0x48) [ 722.512229][ T28] usb 3-1: Using ep0 maxpacket: 16 18:30:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0x4}, @NFTA_OBJ_TYPE={0x8}]}], {0x14}}, 0x50}}, 0x0) [ 722.634296][ T28] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 722.669574][T15459] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 722.686574][ T28] usb 3-1: language id specifier not provided by device, defaulting to English [ 722.813736][ T28] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 722.823142][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.831327][ T28] usb 3-1: Product: syz [ 722.835815][ T28] usb 3-1: Manufacturer: syz [ 722.840601][ T28] usb 3-1: SerialNumber: syz [ 723.101388][ T25] usb 3-1: USB disconnect, device number 12 18:30:24 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 18:30:24 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x55d9091ad6834354) 18:30:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 18:30:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001840)={'ip6_vti0\x00', &(0x7f00000017c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}) 18:30:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x446, 0xffffffffffffffff, 0x3}, 0x48) 18:30:24 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) [ 723.770067][T15468] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. 18:30:24 executing program 0: openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 18:30:24 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 18:30:24 executing program 5: r0 = socket(0x29, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x24000041) 18:30:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8923, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 18:30:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x894a, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 18:30:25 executing program 0: socketpair(0x1d, 0x0, 0x8, &(0x7f0000000100)) 18:30:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8993, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 18:30:25 executing program 5: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000200)=""/183) 18:30:25 executing program 1: syslog(0x3, &(0x7f0000000000)=""/140, 0x8c) 18:30:25 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0xf7, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x9, 0x5}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 18:30:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8953, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 18:30:26 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={0x0}) 18:30:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x890b, 0x0) 18:30:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xc}}], {0x14}}, 0x3c}}, 0x0) 18:30:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891b, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 18:30:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x446}, 0x48) 18:30:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x800464ce, 0x0) 18:30:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8911, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) [ 725.473022][ T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd 18:30:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001840)={'ip6_vti0\x00', &(0x7f00000017c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) 18:30:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xd, 0x0, 0x0) [ 725.732113][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 725.922747][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 726.034101][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 726.272418][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 726.282073][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.290278][ T25] usb 1-1: Product: syz [ 726.294733][ T25] usb 1-1: Manufacturer: syz [ 726.299500][ T25] usb 1-1: SerialNumber: syz [ 726.729495][ T25] usb 1-1: USB disconnect, device number 15 18:30:28 executing program 0: io_uring_setup(0x5033, &(0x7f0000000240)={0x0, 0x5839}) io_uring_setup(0x414d, &(0x7f00000002c0)={0x0, 0xdc91}) 18:30:28 executing program 2: syz_emit_ethernet(0x82, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xa, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, 0x2}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0xac, 0x0, 0x1, 0x3, 0x0, 0x56}, 0x2, {0x0, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={{0x50}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TYPE={0x8}]}], {0x14}}, 0x50}}, 0x0) 18:30:28 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x0, 0x7f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0xf7, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x9, 0x5}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x10}, 0x1d, &(0x7f00000000c0)={0x5, 0xf, 0x1d, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6}, @wireless={0xb}]}, 0x3, [{0x0, 0x0}, {0x2, &(0x7f0000000140)=@string={0x2}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}]}) 18:30:28 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891b, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 18:30:28 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 18:30:28 executing program 5: read$msr(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0x10}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x0, 0x3f}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6}]}, 0x2, [{0x2, &(0x7f0000000140)=@string={0x2}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}]}) 18:30:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@base={0x5, 0x6, 0x1902, 0x81}, 0x48) [ 727.542255][ T3570] usb 5-1: new high-speed USB device number 15 using dummy_hcd 18:30:28 executing program 0: bpf$MAP_CREATE(0xd, &(0x7f00000000c0)=@bloom_filter, 0x48) 18:30:28 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{}, {}, 0x0, {0x2, 0x0, @dev}, 'xfrm0\x00'}) [ 727.771567][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 727.780349][ T6] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 727.782229][ T3570] usb 5-1: Using ep0 maxpacket: 16 18:30:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 18:30:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@private0, @private, 0x6, 0x7}}) [ 727.994306][ T3570] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 728.004515][ T3570] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 728.052061][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 728.057952][ T25] usb 2-1: Using ep0 maxpacket: 16 18:30:29 executing program 2: bpf$MAP_CREATE(0x9, &(0x7f00000000c0)=@bloom_filter, 0x48) 18:30:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}}) [ 728.194327][ T6] usb 6-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 728.207664][ T6] usb 6-1: config 1 interface 0 has no altsetting 0 [ 728.238537][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 728.262574][ T3570] usb 5-1: string descriptor 0 read error: -22 [ 728.269248][ T3570] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 728.278786][ T3570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.291660][ T6] usb 6-1: language id specifier not provided by device, defaulting to English [ 728.342989][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 728.443083][ T6] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 728.452612][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.460889][ T6] usb 6-1: Product: syz [ 728.466109][ T6] usb 6-1: SerialNumber: syz [ 728.523072][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 728.532428][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.540597][ T25] usb 2-1: Product: syz [ 728.544944][ T25] usb 2-1: Manufacturer: syz [ 728.549686][ T25] usb 2-1: SerialNumber: syz [ 728.601081][ T3570] usb 5-1: USB disconnect, device number 15 [ 728.761193][ T25] usb 6-1: USB disconnect, device number 11 [ 728.822325][ T28] usb 2-1: USB disconnect, device number 10 18:30:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x33b}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) request_key(&(0x7f0000000180)='big_key\x00', 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my=0x1}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r1, 0x6905, 0x0, 0x0, 0x0, 0x0) 18:30:30 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:30 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @remote, @val, {@ipv4}}, 0x0) 18:30:30 executing program 2: bpf$MAP_CREATE(0x11, &(0x7f00000000c0)=@bloom_filter, 0x48) 18:30:30 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) 18:30:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:30:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 18:30:30 executing program 2: bpf$MAP_CREATE(0x11, &(0x7f00000000c0)=@bloom_filter, 0x48) 18:30:30 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x0, {{0x2, 0x0, @local}}}, 0x88) 18:30:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8937, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 18:30:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELOBJ={0x14, 0x19, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 18:30:30 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000006c0), 0x4) 18:30:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0x800, 0x7c8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 18:30:31 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x541b, 0x0) 18:30:31 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4000000000000a12, 0x0) 18:30:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0x5, 0x0, 0x0) 18:30:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8932, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 18:30:31 executing program 0: bpf$MAP_CREATE(0x1c, &(0x7f00000000c0)=@bloom_filter, 0x48) 18:30:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELSETELEM={0xe5c, 0xe, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe30, 0x3, 0x0, 0x1, [{0x214, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x20c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "a73faec6650ac4dfbf748ab5055e15d9cd6448a932ee452cdbe596aa67c5572f207a1569b6b9e10a6afc312617408d6dbf530a9b667320a2085b33dcf3f87b27a5faea50659a31cfa5586a0d9c165b97efd811437f3b6a701a609a175271dc17821cecfd409b49d98e292bbcad474d847ed5484d78a416113741c4ef5fd1b2373f1bdf27aa7b7b55269d1f31e64ee59bb26eef7fd3bd184fc39d44e34631b70b00"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "24db85a834c762d9a8582d1da60c4e82eae53409af31b05a1fcc0fb43c4f95a867ac98560e1e91a754c5825d26cba67e9b9c70a21cfa0390b62690e1afffb6fa74ff95ea9afa538fd69e08b60f71ccf34551106b7bf8c2875ae80b5e75597269b17c227a47178b45346125b63e85dc8b2c150eb2d19e421416a28fd2985f4b1c54a4d6c60ae11acd35ad0ca6bfa995877ee63e90fd49ed71c87d7f4e496fb008b206d348338ce7093cad5e4866e8c9baba16edbc7de0f49f6f24160f423ef9dd379161e5669f71ec32c584eb63830b3ac73c507be0354413205eec4b101b148d2672451e29bef8673385080d9dd3eb89973e5f831e"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0xc18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x48, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x21, 0x1, "4e451fe92bb679346500697350e0a7ae0e17123237a683db4e969ec0d4"}]}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "6a04a9ebdabc9c9bb659905db7e4bfe46ef0fc3939395eb67a3cceb93f7cc3c2253832de33bdff370346d1f1daf671698f7a24b05c4141ebd8adadf123aecebdb6ae94186ce57c4360a99327313cb94b65bad0be2d61b31b105f537e5f2602e84a7b5cf04098abd190b99d849ef4844b564a6122dcaae2cd4bcc42516dc8a4394e8ed0a539f4ecb8873c052edf57db4eb0bca04de5a8f3176be869fb0e123cf9a505088319dd968f5a86906dfa1081ff1e33998ac893e6fa00555965694c82391ec07e7822fe202c69f6544082a78ef983842bc2acfc05051a"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_KEY={0x248, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x49, 0x1, "3a0772f83030870712a5621a3652ca327ab1e74f9a9580dee938f0582b7ad2b9533ad05398c340e8eea489f37d54563d6dd2b9f8c377868226b5b4aa9c54d028383b3913f2"}, @NFTA_DATA_VALUE={0x71, 0x1, "75b845f9d07ecd620849a3568caccf6fb4361a894040cf1ef88802afea2e324f77f82e81e7e1f613d3c9af6b4c5aea80529f8a85faafae75fcec190b22bda6739d29c2abbf4c7bbed4d2b09024a1d14ffc4a4f61ae83292c6a89f3e69de9d15796d70b4d2f5494207d20e49ae4"}, @NFTA_DATA_VALUE={0x49, 0x1, "ea6da4c88b15f5eaa9c3a856d85eb80887fd8d868d850c5cede869475989d2cf9dc5932effe8a677a762bfd42099ed6939fe4ac6635891b7e57474b5f719c1b1a843a5d05a"}, @NFTA_DATA_VALUE={0xd9, 0x1, "2a281c69966e9140e266266925533f0fe679b93f8ffa658c83d2fa0886357714a58933879fd0bc0c14208f9db3a005b08cfcc148214f96844c80943d43cabb8d80b8088918a4189b03af07f38c786100d26f29b9b5edbd5e4282ddb543270c3e6d75974c02650750d7bbbfaf2131782068d225f2517171378426f1ad3733982e43c23954b8665c0a1459ff88661d5006c55bfe640ab1368e930012433fb230a37ba9756497cea4885aca8b916e798bf51b7500d27baadf819ffc8f7db2f33f63c50940336194783e49027f01ae71e5c9d6352f3a06"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x84c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "05070f95ad28529e0b0d85ceab9d4cec72d4f57d8fb244f95dca3cfb378d63d4bbc07a8248d4a0a21655690ec3cb2b334d2011094f823d3d2bbbcd0d6ea1def7c1b067a09b294738c56049a29f86cf5ed5a5deeb15e9f7baaadba558d38868567bfe7367aa7e31556b4bc190d693084cbf2c7d326cba8032ea8dbf12af6667bd04eab634b5c62c8b09b5bac4bdf083239d5de2c88e7ea9310b48ea683245deee4b03f0e1d7"}, @NFTA_DATA_VALUE={0x77d, 0x1, "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"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec4}}, 0x0) 18:30:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r0, 0x0, 0x0) 18:30:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002000)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="19a51598271057e1707b0a1aa2fbcc6f034b6fa2a8efe6c0a4e51b25487661acd965b8004dd9585ea0d5f2be4534e58b1fcd39960757d9252d96bcfd3bef0ecc8e2c460d25ad746c11738d9c28e2566d40de23b36605aa0314fcb52b0a3a065ade7ddb5d37c8e5d4c05f461be7a9d5ea588268759a99694e8e0ad449d5e24d58f2529627755d14", 0x87}, {&(0x7f0000000240)="3e5bf121e41cd3aa", 0x8}, {&(0x7f00000002c0)='R', 0x1}], 0x3}], 0x1, 0x0) 18:30:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={{0x14, 0x2}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 18:30:31 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x7f, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x0, 0xf7, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x9, 0x5, 0x10}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x1d, &(0x7f00000000c0)={0x5, 0xf, 0x1d, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x81}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x0, 0x5, 0x2, 0x7}]}, 0x3, [{0x0, 0x0}, {0x12, &(0x7f0000000140)=@string={0x12, 0x3, "f4c39228e1437e00789d4606fcd1aa15"}}, {0x0, 0x0}]}) 18:30:31 executing program 2: r0 = socket(0x29, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14}, 0x7ffff000}}, 0x0) 18:30:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8930, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 18:30:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x11, 0xca, 0x0, 0x0) [ 730.933629][ T28] usb 1-1: new high-speed USB device number 16 using dummy_hcd 18:30:32 executing program 1: syz_emit_ethernet(0x120, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x112, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xac, 0x0, 0x1, 0x3, 0x0, 0x56}, 0x2, {0x0, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "a097e64c8bf095199edcb1b6060a26a579ab75920bc45ad5e154e2cf29aed7d9ec70817b3a19b8b071cac198b9ce43a997d38594014b6613a1326bd916765fa364259e9979d5cf30af9c1691319d5cbfa485cfecf18e36b5e619573fb5952a5b559f74d653e21c520c7463a8b798c1d20159112707923f521647c6eb99de9e1800f0962fa295f5f4556fd207c1ebb7af4c87aee3fe8ac6e491e047df6541d275e01c4a174b23c2732360f74ab1bcaafb31ee"}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:32 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4000000000000a12, 0x0) 18:30:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80e85411, 0x0) 18:30:32 executing program 5: syz_emit_ethernet(0x82, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xa, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x4, 0x2}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0xac, 0x0, 0x1, 0x3, 0x0, 0x56}, 0x2, {0x0, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xab, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "97a7da73c1f18d8f0e92c5131b586dcfef8dd870683eb92a76d0539523474e9f"}}) [ 731.172658][ T28] usb 1-1: Using ep0 maxpacket: 16 18:30:32 executing program 4: memfd_create(&(0x7f00000003c0)='/dev/vfio/vfio\x00', 0x5) 18:30:32 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 731.373719][ T28] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0 [ 731.383981][ T28] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 0 [ 731.394018][ T28] usb 1-1: config 1 interface 0 has no altsetting 0 18:30:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x777, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}) [ 731.653211][ T28] usb 1-1: string descriptor 0 read error: -22 [ 731.659889][ T28] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 731.669377][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.010241][ T28] usb 1-1: USB disconnect, device number 16 18:30:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x24000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x1, 0x10001, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x7800, 0x8, 0x2}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x12200, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000840)) read$msr(r1, &(0x7f0000000680)=""/156, 0x9c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) 18:30:33 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0xc0ed0000, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 18:30:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xc}}, [], {0x14}}, 0x28}}, 0x0) 18:30:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 18:30:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x24000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x12200, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000680)=""/156, 0x9c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, 0x0}, 0x881) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001840)={'ip6_vti0\x00', &(0x7f00000017c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000009c0)={'syztnl2\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x300, 0x70bd26, 0x0, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x28}}, 0x2400c000) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) 18:30:33 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4000000000000a12, 0x0) 18:30:33 executing program 2: r0 = socket(0x29, 0x2, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 18:30:33 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00'}}, 0x118) 18:30:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)='`', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 18:30:34 executing program 0: bpf$MAP_CREATE(0x2, &(0x7f00000000c0)=@bloom_filter, 0x48) 18:30:34 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x33b}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) request_key(&(0x7f0000000180)='big_key\x00', 0x0, &(0x7f0000000300)='@@\x00', 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my=0x1}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r1, 0x6905, 0x0, 0x0, 0x0, 0x0) 18:30:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x39, 0x1, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x885'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x2c}}, 0x0) 18:30:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0x12, 0x0, 0x0) 18:30:34 executing program 0: syz_emit_ethernet(0x114, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x8, 0x4, 0x0, 0x0, 0x106, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0xac, 0x0, 0x1, 0x3, 0x0, 0x56}, 0x2, {0x0, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "a097e64c8bf095199edcb1b6060a26a579ab75920bc45ad5e154e2cf29aed7d9ec70817b3a19b8b071cac198b9ce43a997d38594014b6613a1326bd916765fa364259e9979d5cf30af9c1691319d5cbfa485cfecf18e36b5e619573fb5952a5b559f74d653e21c520c7463a8b798c1d20159112707923f521647c6eb99de9e1800f0962fa295f5f4556fd207c1ebb7af4c87aee3fe8ac6e491e0"}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)='`', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 18:30:34 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) 18:30:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)='7', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000bc0)="8a", 0x1}], 0x1}}], 0x3, 0x4040940) sendto$inet(r0, &(0x7f0000000280)='`', 0x1, 0x0, 0x0, 0x0) 18:30:34 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:34 executing program 1: bpf$MAP_CREATE(0x1e, &(0x7f00000000c0)=@bloom_filter, 0x48) [ 733.649890][T15667] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:30:34 executing program 2: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10923e, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) 18:30:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)='7', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000bc0)="8a", 0x1}], 0x1}}], 0x3, 0x4040940) sendto$inet(r0, &(0x7f0000000280)='`', 0x1, 0x0, 0x0, 0x0) 18:30:35 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000000180)=ANY=[], 0x1ec4}}, 0x0) 18:30:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x4c}}, 0x4000850) 18:30:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) 18:30:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELSETELEM={0xe5c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe30, 0x3, 0x0, 0x1, [{0x214, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x20c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "a73faec6650ac4dfbf748ab5055e15d9cd6448a932ee452cdbe596aa67c5572f207a1569b6b9e10a6afc312617408d6dbf530a9b667320a2085b33dcf3f87b27a5faea50659a31cfa5586a0d9c165b97efd811437f3b6a701a609a175271dc17821cecfd409b49d98e292bbcad474d847ed5484d78a416113741c4ef5fd1b2373f1bdf27aa7b7b55269d1f31e64ee59bb26eef7fd3bd184fc39d44e34631b70b00"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "24db85a834c762d9a8582d1da60c4e82eae53409af31b05a1fcc0fb43c4f95a867ac98560e1e91a754c5825d26cba67e9b9c70a21cfa0390b62690e1afffb6fa74ff95ea9afa538fd69e08b60f71ccf34551106b7bf8c2875ae80b5e75597269b17c227a47178b45346125b63e85dc8b2c150eb2d19e421416a28fd2985f4b1c54a4d6c60ae11acd35ad0ca6bfa995877ee63e90fd49ed71c87d7f4e496fb008b206d348338ce7093cad5e4866e8c9baba16edbc7de0f49f6f24160f423ef9dd379161e5669f71ec32c584eb63830b3ac73c507be0354413205eec4b101b148d2672451e29bef8673385080d9dd3eb89973e5f831e"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0xc18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x48, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x21, 0x1, "4e451fe92bb679346500697350e0a7ae0e17123237a683db4e969ec0d4"}]}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "6a04a9ebdabc9c9bb659905db7e4bfe46ef0fc3939395eb67a3cceb93f7cc3c2253832de33bdff370346d1f1daf671698f7a24b05c4141ebd8adadf123aecebdb6ae94186ce57c4360a99327313cb94b65bad0be2d61b31b105f537e5f2602e84a7b5cf04098abd190b99d849ef4844b564a6122dcaae2cd4bcc42516dc8a4394e8ed0a539f4ecb8873c052edf57db4eb0bca04de5a8f3176be869fb0e123cf9a505088319dd968f5a86906dfa1081ff1e33998ac893e6fa00555965694c82391ec07e7822fe202c69f6544082a78ef983842bc2acfc05051a"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_KEY={0x248, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x49, 0x1, "3a0772f83030870712a5621a3652ca327ab1e74f9a9580dee938f0582b7ad2b9533ad05398c340e8eea489f37d54563d6dd2b9f8c377868226b5b4aa9c54d028383b3913f2"}, @NFTA_DATA_VALUE={0x71, 0x1, "75b845f9d07ecd620849a3568caccf6fb4361a894040cf1ef88802afea2e324f77f82e81e7e1f613d3c9af6b4c5aea80529f8a85faafae75fcec190b22bda6739d29c2abbf4c7bbed4d2b09024a1d14ffc4a4f61ae83292c6a89f3e69de9d15796d70b4d2f5494207d20e49ae4"}, @NFTA_DATA_VALUE={0x49, 0x1, "ea6da4c88b15f5eaa9c3a856d85eb80887fd8d868d850c5cede869475989d2cf9dc5932effe8a677a762bfd42099ed6939fe4ac6635891b7e57474b5f719c1b1a843a5d05a"}, @NFTA_DATA_VALUE={0xd9, 0x1, "2a281c69966e9140e266266925533f0fe679b93f8ffa658c83d2fa0886357714a58933879fd0bc0c14208f9db3a005b08cfcc148214f96844c80943d43cabb8d80b8088918a4189b03af07f38c786100d26f29b9b5edbd5e4282ddb543270c3e6d75974c02650750d7bbbfaf2131782068d225f2517171378426f1ad3733982e43c23954b8665c0a1459ff88661d5006c55bfe640ab1368e930012433fb230a37ba9756497cea4885aca8b916e798bf51b7500d27baadf819ffc8f7db2f33f63c50940336194783e49027f01ae71e5c9d6352f3a06"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x84c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "05070f95ad28529e0b0d85ceab9d4cec72d4f57d8fb244f95dca3cfb378d63d4bbc07a8248d4a0a21655690ec3cb2b334d2011094f823d3d2bbbcd0d6ea1def7c1b067a09b294738c56049a29f86cf5ed5a5deeb15e9f7baaadba558d38868567bfe7367aa7e31556b4bc190d693084cbf2c7d326cba8032ea8dbf12af6667bd04eab634b5c62c8b09b5bac4bdf083239d5de2c88e7ea9310b48ea683245deee4b03f0e1d7"}, @NFTA_DATA_VALUE={0x77d, 0x1, "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"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec4}}, 0x0) 18:30:35 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) 18:30:35 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0) 18:30:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELOBJ={0x14, 0xf, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 18:30:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8953, 0x0) 18:30:35 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000001ec0)=[{{&(0x7f0000000400), 0x6e, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000640)}}], 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x33b}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) request_key(0x0, &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='@@\x00', r2) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my=0x1}}, 0x0) add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000580)={{r8}, "e93b33fd4e6f5892adde5722923d57defb4eba55871418646bdae2cecc46233f3b7ea422029b42fcf31133e420b44eb828a81bd06a1fcc05de031ff4b19d201906d5487b898b633878e59023f17cf06c60d09e0f8d3a9a254377581478dc2e2b9f7a0ec47018dc22f9dd83b84c33454c06d7352d9248c3db34bb48b521b4bd3076b4ba1c3406d1173a41ab970220d58839b4d17bae3f5a3d613629d8421e41d1da4df8c64ad7a5e276a988f329e3c8ee22a41589240375b225a0ed7947fab87f8d7a7504b8a57630f384a1d29ac45f2f88ba470e8fa4187e000ed555d401ed949c764541642b815e2453bafeb6ac381041c0c06d4bc893a0f4805e17340df2b9c51002b464908d3afb0e12e89606da56d4ff96abc9dafd663894fcc44479d73321d86f3f86eaad5d97ddc3767c6e1cb163c2426ff1cd1f4d8930e007bd2ee1dcb7d046a47f01d55506088c9dc4345de0c421186f6613282452ed11b7399906c52a7d246e49dc295161af628f95ab7f80ead8fb642b4f55194032e4e9eade971a113f73d0a3372bcce6d6d5d2362af68a13120080a337d504bb321d8be45e2547029ea787de863c8a4a7fedd27c4d5774418fb30a905d8deaa4263b289a3b832b783365bddcac98b641e002cd73b8d65bb4d4bf8d9b47a9ac57d0f49955260b8fca56b536bed0e3d5938fdf95cd37feeeb5a430a288e707df75f2bf46e0b9ec5ba8ddb3c7dbb95ec703e0fdafc28e19939c8c20d1fe947d67f2818641f2f368b1ad3b67ef190aff7eb61bc185ef68743f1aff9d8aaf1224c2f2530fb2008db2c01d57c5ab31648bef50b0f28b457b67c23299a9e7262e5b2f9935d16ac92b3f461bf81e67dfbfa6d503aa10a3f490770213e5d2ac826241952b437d2ed6b8eabaff8ffbfdff6e4c482b7416059e3896bfc32c10ddf06f3c09cf06cb86705644fd605b8e890c066f4dea4c560e07d4ca8518a0ae34c179ac8002a39366aeaa78f7ef4f5423236d8087c728df875cdf878a02ad61f705a088cd728a96238230e84c0f6ff0f3946c5fe3ee0368f6b92aaf44449cd16376190d450bbc6722b40e08d83bad6b7b792eca7e89fde6e929a8a80e00bd66d8cb516c8367f05a44aa7a0ea70d1291d97675c571eb945421065222f06bf54af7943188008c8b719587dcfc10b6604001b531714915ac52c65e389ef380ddc41073c405806fafc8269937342cd3354e0e77b469563dac1d6770a3821446b2a3e841dc26de69006e541cccc499da8225599630c0d873efb9fa9df26a4e7d41feeccb1ebbd5780c7bd4347f154e9009d190dec5c543125ca38fbacd37091e79caf59d342ac23bfb038fa70d99f5023d0ff811ebca0e2f643328122d2b63d0eab380727887c1b9ac11ca66f3fa98ca757e042e316c6ea3475ccc4d79bbfb5f0fef932a6a711b160b8f4c55de72b2e3eb23b0eab2a357c5f98fe46f0b834a68eeb8fcd907186ea4c4268024add42042657a42856407ad6469becdfc80d6c37bcc9f2d2120211d41e02da94811e1ed46202b08c778061b8f6c213fcd85cab2b5e602c9e9bd10e63bd5f2327f4a9447d034a59fc9d28c08606c5f8ab5b3cbd1b9f4064da3f41b5bd8c4ed0f5ad8553050aea2bcf2405bdcfa2b855ebd910bde98780cd56cbaf3b22b83a1b9884fb388a543ec2f51560e0b856b98c04f9b4248e839f0f7be39f55f78e3c76dbbfa1452013de0a9b443092d6c4b9ef8201f0faddbd4e9925a5280f651ad930ae1fde82bf2cbe8b2eebfc1b235cfb1b002fdb3bdc5da536e746b3b3c756fcdcc2391771b56ed99fc999ab85b676d1a972120638a529120e5299732a6fb58603d8fe803729abc12dc695a8ee096844b8260ac38d7cea35d80e30d327a37fb8c40fde5cce5326cc0349a80041020a9d6e6d4f75625891884a222d5bd12d8f78ed54ed65d066020627cf7b33b99e422be1cdb27599505360c71f03656f3f8bbb10905c35ad9e44ace7cc3686507f02ce5f4617cc9c0259ba536ee7b40e8676bc10c3bbaa1c13ed97ac207dd04095e7e4900f226433466695360f456d67dba4e9231f884c7167d374868ac2790320b954a37103d0f5a04a5252186da22732ddba0bbc4e4b8ea2f012e7fc21a2af3e50ba730fc4b4b666df1b8b3d1a99439beb1a4e530184b43c7966a32343aae4d9818fe889a5a9b959421e33630c45df3576bfcc2a5bb1665c7618a31d0f3a5620a2e80736bba4cd35d4d3c8454f01b488ca84eb1765b45024c4ca88cb24f7bd6c194c7dabab8e02cf522ffeb9e0b9b1b1bb0f52cc447a93911adc86f54c52c820c67dbfee1d120c6f5191c3b831022e05d0aa3e2cab0489bfa7f7991d6f8e4ba5db688ae8adb87d6a68378f09de485a7e71dd62e0543690fe151a46caef597d05489aa8e91066d56a841a2648018c43fde51b1c94b866e14690b091d32805e37ea1ad947e4c355810b8485eb5dc78369f6f9a5a510666d6008a6621762e1b71c9fb33a5d4cd0c251633cd69a3ab5cd567786c52f80b0d3f0a95a200909dfb41aa55671f3817360347db88e296c299926305f85b983afad9cd374cb98793af2ca3ef6631de2b468f13ab0f3e58351eaf70f9e38617153e53e9f45002a4416a350183e5950ae29190bdda0bb1cf7ed8bf1458f61eb6c31d3371a8e1e9986566703883647174d28d1fccb3192f207876b28db6da56ae6e444ba8307f5869612f0b864a98d048f0287173f58005c9f08721bb5e9f7869357c1b94266b71270a1f4a650be03ab255c69f32865f3c6416c086fc7e25ef964ef0ccd770bbd9918bbb2a9629c6d8cf1a41b734b757dfa53887457f29c23de0b3e9c3accd9014853c2cf7396dced0721d92692fbaedd5093a3c91f8860bf7518ee92012adeffde783ebf2bd4c187b756c4e5395afdba145fe05d6f6837886977498ade6bc5203b51fc5ba5bc7b9796f6930ab242f89651739bae20a6deb128019a9f97f36830b600ad44cf02b7cf35adbcba522f57f8d2d4d8506201bc248969fa6de0a248d2ef56a63a24094318fc4607c66858fdc44e5de349be6e85f8ecd2638e995e566263e6ace976565be1102532b8a108c08c4a77b15b7d61b25b035fd404d464e7e4b3ac1ade34b07dc4b13e7383b6db4152561e0cbc105646eac8f3cf967aa0f0d5478b6eef14d7a3e03fca85b601e6934741a93a9b10b4067f373c3a4016f3c40753f23743d10e7b4aadb9921543be44ca9e2dd96ab6916c0af34a8be908e39f1b8b462a731da833ef517b85453b42cc427ff63d7e9d7d858ad23dc4d84e45631aed95be184889427f6c2dcdca9562f0b07d03d565529e6120a8fc64f31359a510f8322ab84dd3e03cfef9c4eb03d3ca036a6ccd04bc56c8e650e581ad63ac506002b288f2f5b973afa5fcc92eea9830713e18f0cd6b848ffd9babf3a49add23953e8950ae88b4d2a2daa13a55c84a513be5b4d0a4f9158ebd52640b7157e609ead0601a0273bcba020a2d78dfe1741f03dca0380b23c4126930e212ab9d45fadbd9ac851045479d5d38f0c5cc61ab33e3dccff796ca827d0dc7240e403909db19dd549af3ffb9410a0e3ac4517f6ef421a65b6553f9bb0501de047a4c57aa75563a3f227fba759418304fb37e116ed7655df74e9a3b00062c54408753bc4600665a3aa8e6e039eb127c76593823c3c25d6e7609150be4ad208aabca07966f63390340d248fb2f8c68428223f6eec136f6a39cfc4940ae935555ed8bc516e1d3a87ca82bf9d87ddd7f3d14cbbb08616765c0e310f85b2d41dd26ef87a89aafb96cc23a749589e71b25f42eb5a6e792737408da3771546766fba37540d148317a083b93f99fa7b0e4c46b0f1e5da1afdfdbbfa8b07c042fe1436c059a588129470e5a82db5c1567dc0eaf38a97b039b0a4939bcf5447fca3f892f9b7e5e2ab80e97c989b96eed26638d32fadcb048f99526918eaf1754b2154569e33e98b56653a7cec13a9a04777fb7405188312899fccc7547fc33d5015f5d0b00e52e1f02431ef1cce76372dee146f6d9f689394f8d410f95d6b89be7b9234fb6b66f2be8cb1650a5b9da23862f5bda1dc00dc5da390266dcaa88d9683a7fb3cd6b2bda8eddc23cce0f1af1739ee4d1db32c608e223529fb927c8765e07afbd02ed19006b7b54fa7efb58819dacae0af3b91c0a8a5f366f98a0c734eb08c4225822c8ff8ca36ca73392854434a365f4676144a51335e4740897b5f56f9735aaecbd820af20fe28e479ba53677df8740353384f1b29b85274a4f47e0a46578baa3dc4358273048d2896a7ef8516c1a2a69f147a87cf3f34b9a2db2847ce3b5f23d6c349651e46686ab9122d40fb51f73e2c2200dd56a2f4706cd5e5e16e0b09a53fc25762274d578fa58417a735e984ed0cd47da53e620eee963b1e5efeca96b0519309215696a95a988d672dcf1c85d130836de1f0a7172b5f9b39529870d5f556918b73b317441885c65fd6e816bce674b7d99b1f33ab98a684a1bf89ff225592eee0c08487e8d47a0080261708426163a11ddc3c9e9ca0393063d2ebe3759d4fb4f8c6ec3637641e09cf7c0534a46454f108a36824708a47cd233d88af952802d772578bbb18da0017032d2efd44975a7c5e37257d0c59e40f7d277550676c7decd34aa1e5ec09ce0d92efcca5aa7704ac3d6cb9c39230afabfe55f4d0f906b3b397822852e874439d56368404ec5109b0ee3762da30e36289552b55221240d3a444a54e3c5b12262e3c53b2590e843ce00c0816bad926e3ed70bbafd8e33cd2ff7ffe8eaafa9a75850d7497d1ea448b56229283bfaf944c1dd8887225bab9bacbe9c31c6d833ac4ffd2a15e0c75fe88692b1b407a6bc3ebb32665dcc8d6bb4956b80ddd0e507a1eddb29fc3e96cc1ce2683e9a4a581363003befbc84c03bdc8665f9a8da198f84ddb78d6d8998541ae1c02ac5702a4021caba05313f0718b2712a9e67f8be1517be6e46d1bc5bd48447355a49cb5a6bb56978ce3a82acd6378ea8305ec6514fc1f7c1957f255ffa2fe4e85894e18df6616314c437c1ecb3c93849507938446db68f3ff488c44177f1b0e14dae07f9371ff92f44fa9dea3b8292a600f358bbebaadc5e0d313c935758922cf7e5d90b0f016943872bb3df34c5872627f1ca3e37fdec372877d428f72414d774f2db3549d75adccdbbfe6f5c107c4cb40e8ec2a68a6795ec3da7953d6ebcba9307600ddf000aae140bc57a1a5c0dfdb4268a7fa1148036a5c4f61a5e38fb6fbe66fdbfce6a52d3ca15a5a99be54c757ea804df029b3a7318e084e1d343126484041a4ccf893873e0147be9edbe3299fb5c3ab2b39c86c829869c0e6e64300bdc92a2b2497e62d966e5c4e1b50273533ea3c858a20bbd6cda3fbea8c310486b6cfa489155e3c735f054b67f34f57f70571cf757cfd7fd5bd51882073202dac37fd2c140e8e989c3177e8217c2a569d659085f959a388f2b0234cfe75fe347751858c41e5a2ba2afd66237b25b3526c7d615439aa7f0da984052855a507e895df2c32bed4832bcd19775876593335e8dfaf921637983acbd450d0ac480f81f60c2e1b19df8cf20b94a3f5ecca378b2060e77cc123042e3d0e9399caebee95dce7e20d31ceee0eb8bf0a25229e78d30fa57a816a76627bb2a1c48344af15148769ebaa2fe24c379c2fa3a3b2f7d8001af954add4ef81f866388c0dcdbd17450e44d0303f6f16eceec26f51408c204cfb0e8ad77a95337598cd6a57c90fe986ab1ee88fcdbbca347ac28"}) io_uring_enter(r5, 0x6905, 0x0, 0x0, 0x0, 0x0) 18:30:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000001ec0)=[{{&(0x7f0000000400), 0x6e, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000640)}}], 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x33b}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) request_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='@@\x00', r2) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my=0x1}}, 0x0) r9 = add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, 0x0, r9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000580)={{r8}, "e93b33fd4e6f5892adde5722923d57defb4eba55871418646bdae2cecc46233f3b7ea422029b42fcf31133e420b44eb828a81bd06a1fcc05de031ff4b19d201906d5487b898b633878e59023f17cf06c60d09e0f8d3a9a254377581478dc2e2b9f7a0ec47018dc22f9dd83b84c33454c06d7352d9248c3db34bb48b521b4bd3076b4ba1c3406d1173a41ab970220d58839b4d17bae3f5a3d613629d8421e41d1da4df8c64ad7a5e276a988f329e3c8ee22a41589240375b225a0ed7947fab87f8d7a7504b8a57630f384a1d29ac45f2f88ba470e8fa4187e000ed555d401ed949c764541642b815e2453bafeb6ac381041c0c06d4bc893a0f4805e17340df2b9c51002b464908d3afb0e12e89606da56d4ff96abc9dafd663894fcc44479d73321d86f3f86eaad5d97ddc3767c6e1cb163c2426ff1cd1f4d8930e007bd2ee1dcb7d046a47f01d55506088c9dc4345de0c421186f6613282452ed11b7399906c52a7d246e49dc295161af628f95ab7f80ead8fb642b4f55194032e4e9eade971a113f73d0a3372bcce6d6d5d2362af68a13120080a337d504bb321d8be45e2547029ea787de863c8a4a7fedd27c4d5774418fb30a905d8deaa4263b289a3b832b783365bddcac98b641e002cd73b8d65bb4d4bf8d9b47a9ac57d0f49955260b8fca56b536bed0e3d5938fdf95cd37feeeb5a430a288e707df75f2bf46e0b9ec5ba8ddb3c7dbb95ec703e0fdafc28e19939c8c20d1fe947d67f2818641f2f368b1ad3b67ef190aff7eb61bc185ef68743f1aff9d8aaf1224c2f2530fb2008db2c01d57c5ab31648bef50b0f28b457b67c23299a9e7262e5b2f9935d16ac92b3f461bf81e67dfbfa6d503aa10a3f490770213e5d2ac826241952b437d2ed6b8eabaff8ffbfdff6e4c482b7416059e3896bfc32c10ddf06f3c09cf06cb86705644fd605b8e890c066f4dea4c560e07d4ca8518a0ae34c179ac8002a39366aeaa78f7ef4f5423236d8087c728df875cdf878a02ad61f705a088cd728a96238230e84c0f6ff0f3946c5fe3ee0368f6b92aaf44449cd16376190d450bbc6722b40e08d83bad6b7b792eca7e89fde6e929a8a80e00bd66d8cb516c8367f05a44aa7a0ea70d1291d97675c571eb945421065222f06bf54af7943188008c8b719587dcfc10b6604001b531714915ac52c65e389ef380ddc41073c405806fafc8269937342cd3354e0e77b469563dac1d6770a3821446b2a3e841dc26de69006e541cccc499da8225599630c0d873efb9fa9df26a4e7d41feeccb1ebbd5780c7bd4347f154e9009d190dec5c543125ca38fbacd37091e79caf59d342ac23bfb038fa70d99f5023d0ff811ebca0e2f643328122d2b63d0eab380727887c1b9ac11ca66f3fa98ca757e042e316c6ea3475ccc4d79bbfb5f0fef932a6a711b160b8f4c55de72b2e3eb23b0eab2a357c5f98fe46f0b834a68eeb8fcd907186ea4c4268024add42042657a42856407ad6469becdfc80d6c37bcc9f2d2120211d41e02da94811e1ed46202b08c778061b8f6c213fcd85cab2b5e602c9e9bd10e63bd5f2327f4a9447d034a59fc9d28c08606c5f8ab5b3cbd1b9f4064da3f41b5bd8c4ed0f5ad8553050aea2bcf2405bdcfa2b855ebd910bde98780cd56cbaf3b22b83a1b9884fb388a543ec2f51560e0b856b98c04f9b4248e839f0f7be39f55f78e3c76dbbfa1452013de0a9b443092d6c4b9ef8201f0faddbd4e9925a5280f651ad930ae1fde82bf2cbe8b2eebfc1b235cfb1b002fdb3bdc5da536e746b3b3c756fcdcc2391771b56ed99fc999ab85b676d1a972120638a529120e5299732a6fb58603d8fe803729abc12dc695a8ee096844b8260ac38d7cea35d80e30d327a37fb8c40fde5cce5326cc0349a80041020a9d6e6d4f75625891884a222d5bd12d8f78ed54ed65d066020627cf7b33b99e422be1cdb27599505360c71f03656f3f8bbb10905c35ad9e44ace7cc3686507f02ce5f4617cc9c0259ba536ee7b40e8676bc10c3bbaa1c13ed97ac207dd04095e7e4900f226433466695360f456d67dba4e9231f884c7167d374868ac2790320b954a37103d0f5a04a5252186da22732ddba0bbc4e4b8ea2f012e7fc21a2af3e50ba730fc4b4b666df1b8b3d1a99439beb1a4e530184b43c7966a32343aae4d9818fe889a5a9b959421e33630c45df3576bfcc2a5bb1665c7618a31d0f3a5620a2e80736bba4cd35d4d3c8454f01b488ca84eb1765b45024c4ca88cb24f7bd6c194c7dabab8e02cf522ffeb9e0b9b1b1bb0f52cc447a93911adc86f54c52c820c67dbfee1d120c6f5191c3b831022e05d0aa3e2cab0489bfa7f7991d6f8e4ba5db688ae8adb87d6a68378f09de485a7e71dd62e0543690fe151a46caef597d05489aa8e91066d56a841a2648018c43fde51b1c94b866e14690b091d32805e37ea1ad947e4c355810b8485eb5dc78369f6f9a5a510666d6008a6621762e1b71c9fb33a5d4cd0c251633cd69a3ab5cd567786c52f80b0d3f0a95a200909dfb41aa55671f3817360347db88e296c299926305f85b983afad9cd374cb98793af2ca3ef6631de2b468f13ab0f3e58351eaf70f9e38617153e53e9f45002a4416a350183e5950ae29190bdda0bb1cf7ed8bf1458f61eb6c31d3371a8e1e9986566703883647174d28d1fccb3192f207876b28db6da56ae6e444ba8307f5869612f0b864a98d048f0287173f58005c9f08721bb5e9f7869357c1b94266b71270a1f4a650be03ab255c69f32865f3c6416c086fc7e25ef964ef0ccd770bbd9918bbb2a9629c6d8cf1a41b734b757dfa53887457f29c23de0b3e9c3accd9014853c2cf7396dced0721d92692fbaedd5093a3c91f8860bf7518ee92012adeffde783ebf2bd4c187b756c4e5395afdba145fe05d6f6837886977498ade6bc5203b51fc5ba5bc7b9796f6930ab242f89651739bae20a6deb128019a9f97f36830b600ad44cf02b7cf35adbcba522f57f8d2d4d8506201bc248969fa6de0a248d2ef56a63a24094318fc4607c66858fdc44e5de349be6e85f8ecd2638e995e566263e6ace976565be1102532b8a108c08c4a77b15b7d61b25b035fd404d464e7e4b3ac1ade34b07dc4b13e7383b6db4152561e0cbc105646eac8f3cf967aa0f0d5478b6eef14d7a3e03fca85b601e6934741a93a9b10b4067f373c3a4016f3c40753f23743d10e7b4aadb9921543be44ca9e2dd96ab6916c0af34a8be908e39f1b8b462a731da833ef517b85453b42cc427ff63d7e9d7d858ad23dc4d84e45631aed95be184889427f6c2dcdca9562f0b07d03d565529e6120a8fc64f31359a510f8322ab84dd3e03cfef9c4eb03d3ca036a6ccd04bc56c8e650e581ad63ac506002b288f2f5b973afa5fcc92eea9830713e18f0cd6b848ffd9babf3a49add23953e8950ae88b4d2a2daa13a55c84a513be5b4d0a4f9158ebd52640b7157e609ead0601a0273bcba020a2d78dfe1741f03dca0380b23c4126930e212ab9d45fadbd9ac851045479d5d38f0c5cc61ab33e3dccff796ca827d0dc7240e403909db19dd549af3ffb9410a0e3ac4517f6ef421a65b6553f9bb0501de047a4c57aa75563a3f227fba759418304fb37e116ed7655df74e9a3b00062c54408753bc4600665a3aa8e6e039eb127c76593823c3c25d6e7609150be4ad208aabca07966f63390340d248fb2f8c68428223f6eec136f6a39cfc4940ae935555ed8bc516e1d3a87ca82bf9d87ddd7f3d14cbbb08616765c0e310f85b2d41dd26ef87a89aafb96cc23a749589e71b25f42eb5a6e792737408da3771546766fba37540d148317a083b93f99fa7b0e4c46b0f1e5da1afdfdbbfa8b07c042fe1436c059a588129470e5a82db5c1567dc0eaf38a97b039b0a4939bcf5447fca3f892f9b7e5e2ab80e97c989b96eed26638d32fadcb048f99526918eaf1754b2154569e33e98b56653a7cec13a9a04777fb7405188312899fccc7547fc33d5015f5d0b00e52e1f02431ef1cce76372dee146f6d9f689394f8d410f95d6b89be7b9234fb6b66f2be8cb1650a5b9da23862f5bda1dc00dc5da390266dcaa88d9683a7fb3cd6b2bda8eddc23cce0f1af1739ee4d1db32c608e223529fb927c8765e07afbd02ed19006b7b54fa7efb58819dacae0af3b91c0a8a5f366f98a0c734eb08c4225822c8ff8ca36ca73392854434a365f4676144a51335e4740897b5f56f9735aaecbd820af20fe28e479ba53677df8740353384f1b29b85274a4f47e0a46578baa3dc4358273048d2896a7ef8516c1a2a69f147a87cf3f34b9a2db2847ce3b5f23d6c349651e46686ab9122d40fb51f73e2c2200dd56a2f4706cd5e5e16e0b09a53fc25762274d578fa58417a735e984ed0cd47da53e620eee963b1e5efeca96b0519309215696a95a988d672dcf1c85d130836de1f0a7172b5f9b39529870d5f556918b73b317441885c65fd6e816bce674b7d99b1f33ab98a684a1bf89ff225592eee0c08487e8d47a0080261708426163a11ddc3c9e9ca0393063d2ebe3759d4fb4f8c6ec3637641e09cf7c0534a46454f108a36824708a47cd233d88af952802d772578bbb18da0017032d2efd44975a7c5e37257d0c59e40f7d277550676c7decd34aa1e5ec09ce0d92efcca5aa7704ac3d6cb9c39230afabfe55f4d0f906b3b397822852e874439d56368404ec5109b0ee3762da30e36289552b55221240d3a444a54e3c5b12262e3c53b2590e843ce00c0816bad926e3ed70bbafd8e33cd2ff7ffe8eaafa9a75850d7497d1ea448b56229283bfaf944c1dd8887225bab9bacbe9c31c6d833ac4ffd2a15e0c75fe88692b1b407a6bc3ebb32665dcc8d6bb4956b80ddd0e507a1eddb29fc3e96cc1ce2683e9a4a581363003befbc84c03bdc8665f9a8da198f84ddb78d6d8998541ae1c02ac5702a4021caba05313f0718b2712a9e67f8be1517be6e46d1bc5bd48447355a49cb5a6bb56978ce3a82acd6378ea8305ec6514fc1f7c1957f255ffa2fe4e85894e18df6616314c437c1ecb3c93849507938446db68f3ff488c44177f1b0e14dae07f9371ff92f44fa9dea3b8292a600f358bbebaadc5e0d313c935758922cf7e5d90b0f016943872bb3df34c5872627f1ca3e37fdec372877d428f72414d774f2db3549d75adccdbbfe6f5c107c4cb40e8ec2a68a6795ec3da7953d6ebcba9307600ddf000aae140bc57a1a5c0dfdb4268a7fa1148036a5c4f61a5e38fb6fbe66fdbfce6a52d3ca15a5a99be54c757ea804df029b3a7318e084e1d343126484041a4ccf893873e0147be9edbe3299fb5c3ab2b39c86c829869c0e6e64300bdc92a2b2497e62d966e5c4e1b50273533ea3c858a20bbd6cda3fbea8c310486b6cfa489155e3c735f054b67f34f57f70571cf757cfd7fd5bd51882073202dac37fd2c140e8e989c3177e8217c2a569d659085f959a388f2b0234cfe75fe347751858c41e5a2ba2afd66237b25b3526c7d615439aa7f0da984052855a507e895df2c32bed4832bcd19775876593335e8dfaf921637983acbd450d0ac480f81f60c2e1b19df8cf20b94a3f5ecca378b2060e77cc123042e3d0e9399caebee95dce7e20d31ceee0eb8bf0a25229e78d30fa57a816a76627bb2a1c48344af15148769ebaa2fe24c379c2fa3a3b2f7d8001af954add4ef81f866388c0dcdbd17450e44d0303f6f16eceec26f51408c204cfb0e8ad77a95337598cd6a57c90fe986ab1ee88fcdbbca347ac28"}) io_uring_enter(r5, 0x6905, 0x0, 0x0, 0x0, 0x0) 18:30:36 executing program 0: bpf$MAP_CREATE(0x1d, &(0x7f00000000c0)=@bloom_filter, 0x48) 18:30:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x88, 0xca, 0x0, 0x7) 18:30:36 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8906, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="14200000", @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xf6c}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000050}, 0x20040001) 18:30:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891e, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 18:30:36 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @loopback, {[@lsrr={0x83, 0x3}]}}}}}) 18:30:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x3, 0x0, 0x0, {0xc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x54}}, 0x0) 18:30:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x3}], {0x14}}, 0x3c}}, 0x0) 18:30:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast1}}}}) 18:30:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x24000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x1, 0x10001, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x7800, 0x8, 0x2}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x12200, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000840)) read$msr(r1, &(0x7f0000000680)=""/156, 0x9c) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000225bd7000fddbdf25000000000500070002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x881) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x300, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x2400c000) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3f}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) write$tcp_mem(0xffffffffffffffff, &(0x7f0000001200), 0x48) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf2503000000050014001f000000080009000000000006001d000300000006001d000800000008001700", @ANYRES32, @ANYBLOB="0500140007000000140008006272696467655f736176655f310000050014002a000000050014000700000000"], 0x68}, 0x1, 0x0, 0x0, 0x852}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) 18:30:37 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 737.012219][ T25] usb 1-1: new high-speed USB device number 17 using dummy_hcd 18:30:38 executing program 2: bpf$MAP_CREATE(0x8, &(0x7f00000000c0)=@bloom_filter, 0x48) 18:30:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}]}], {0x14}}, 0x50}}, 0x0) 18:30:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89a0, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 18:30:38 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40485404, 0x0) 18:30:38 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:38 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}, {}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x1, 0x3, 0x0, 0x56}, 0x2, {0x0, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000001ec0)=[{{&(0x7f0000000400), 0x6e, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000640)}}], 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x33b}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) request_key(&(0x7f0000000180)='big_key\x00', 0x0, &(0x7f0000000300)='@@\x00', r2) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my=0x1}}, 0x0) r9 = add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, 0x0, r9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000580)={{r8}, "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"}) io_uring_enter(r5, 0x6905, 0x0, 0x0, 0x0, 0x0) 18:30:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) [ 737.302261][ T25] usb 1-1: Using ep0 maxpacket: 16 18:30:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) [ 737.436011][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 18:30:38 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) 18:30:38 executing program 4: r0 = socket(0x29, 0x2, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f00000001c0)) [ 737.895312][ T25] usb 1-1: string descriptor 0 read error: -22 [ 737.902789][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 737.912036][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.243136][ T25] usb 1-1: USB disconnect, device number 17 18:30:39 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x24000000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001840)={'ip6_vti0\x00', &(0x7f00000017c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}) 18:30:39 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) 18:30:39 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:39 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x11, 0xca, 0x0, 0x0) 18:30:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x50, @mcast2, @private2, 0x8, 0x0, 0x10001, 0x200}}) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x541b, 0x0) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0xd48, 0x0, 0x0, 0x0, 0x2]) 18:30:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x39, 0x1, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}, @typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x24}}, 0x0) 18:30:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0x800, 0x7c8}) 18:30:40 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x890b, 0x0) 18:30:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)) 18:30:40 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001840)={'ip6_vti0\x00', &(0x7f00000017c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) 18:30:40 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101a00) 18:30:40 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000001000)) 18:30:40 executing program 1: r0 = socket(0x29, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x8000) 18:30:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0xc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 18:30:40 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:40 executing program 0: syz_emit_ethernet(0x12f, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xa, 0x4, 0x0, 0x0, 0x121, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x4, 0x2}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xac, 0x0, 0x1, 0x3, 0x0, 0x56}, 0x2, {0x0, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "a097e64c8bf095199edcb1b6060a26a579ab75920bc45ad5e154e2cf29aed7d9ec70817b3a19b8b071cac198b9ce43a997d38594014b6613a1326bd916765fa364259e9979d5cf30af9c1691319d5cbfa485cfecf18e36b5e619573fb5952a5b559f74d653e21c520c7463a8b798c1d20159112707923f521647c6eb99de9e1800f0962fa295f5f4556fd207c1ebb7af4c87aee3fe8ac6e491e047df6541d275e01c4a174b23c2732360f74ab1"}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:40 executing program 2: socketpair(0x25, 0x1, 0x0, &(0x7f0000000180)) 18:30:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 18:30:40 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000000c0), 0x4) 18:30:40 executing program 5: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e490d021b"], 0x35) 18:30:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, "bfd8da1c"}, &(0x7f0000000140)=0x28) 18:30:40 executing program 5: getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000580)) 18:30:40 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 18:30:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/119, 0x77}], 0x1, 0x0, 0x0) 18:30:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELOBJ={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 18:30:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001840)={'ip6_vti0\x00', &(0x7f00000017c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}) 18:30:41 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4000000000000a12, 0x0) 18:30:41 executing program 2: r0 = socket(0x29, 0x2, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) 18:30:41 executing program 1: syz_emit_ethernet(0xd0, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}, {}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0xac, 0x0, 0x1, 0x3}, 0x2, {0x0, 0x6, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "a097e64c8bf095199edcb1b6060a26a579ab75920bc45ad5e154e2cf29aed7d9ec70817b3a19b8b071cac198b9ce43a997d38594014b6613a1326bd916765fa364259e9979d5cf30af9c1691319d5cbfa485cfecf18e36b5e619573fb5952a5b559f"}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:41 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0x541b, 0x0) 18:30:41 executing program 5: prctl$PR_SET_VMA(0x34, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:41 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x0, {0x0, 0xf0}}, 0x18) 18:30:41 executing program 5: prctl$PR_SET_VMA(0x26, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:41 executing program 0: prctl$PR_SET_VMA(0x1b, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x108d, 0xffffffffffffffff, 0x7}, 0x48) 18:30:41 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}}, &(0x7f0000000040)=""/212, 0x32, 0xd4, 0x1}, 0x20) 18:30:42 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) syz_io_uring_setup(0x5a3c, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000340)) 18:30:42 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r2, &(0x7f0000000000)="ce", 0xfef4, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup2(0xffffffffffffffff, r2) write$damon_init_regions(0xffffffffffffffff, &(0x7f0000000080)={{' ', 0xffffffffffffffff}}, 0x3f) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmmsg$unix(r5, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 18:30:42 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4000000000000a12, 0x0) 18:30:42 executing program 0: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 18:30:42 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000013c0)=""/179, 0x26, 0xb3, 0x1}, 0x20) 18:30:42 executing program 5: prctl$PR_SET_VMA(0x2a, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) rt_sigqueueinfo(0x0, 0x39, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xc600, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x5}]}}}]}, 0x3c}}, 0x0) 18:30:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1, 0x0, 0x3}}, 0x20) 18:30:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004740)=[{{&(0x7f0000000280)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000480)=""/234, 0xea}], 0x2, &(0x7f0000000340)=""/52, 0x34}, 0x8000}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/222, 0xde}], 0x1, &(0x7f0000001e40)=""/172, 0xac}, 0x3}, {{&(0x7f0000001a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f80)=""/251, 0xfb}], 0x1, &(0x7f0000002100)=""/52, 0x34}, 0x7}, {{&(0x7f0000002140)=@can, 0x80, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/168, 0xa8}], 0x1, &(0x7f00000022c0)=""/84, 0x54}, 0xffff}, {{&(0x7f0000002340)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000045c0)=[{&(0x7f00000023c0)=""/210, 0xd2}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/4084, 0xff4}, {0x0}, {&(0x7f0000004540)=""/74, 0x4a}], 0x5, &(0x7f0000004640)=""/206, 0xce}, 0xffff}], 0x5, 0x0, &(0x7f0000004900)) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) getuid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) fallocate(r4, 0x0, 0x80000, 0x4103fe) sendfile(r2, r3, 0x0, 0xffffffff054) 18:30:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004740)=[{{&(0x7f0000000280)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/133, 0x85}], 0x1}, 0x8000}, {{&(0x7f0000000580)=@l2, 0x80, &(0x7f0000001880)=[{0x0}, {&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f0000004940)=""/4096, 0x1000}], 0x3}, 0x5}, {{&(0x7f0000001c80)=@can, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/172, 0xac}, 0x3}, {{&(0x7f0000001a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f80)=""/251, 0xfb}], 0x1, &(0x7f0000002100)=""/52, 0x34}}, {{&(0x7f0000002140)=@can, 0x80, 0x0, 0x0, &(0x7f00000022c0)=""/84, 0x54}}, {{&(0x7f0000002340)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000045c0)=[{0x0}, {&(0x7f00000044c0)=""/65, 0x41}, {&(0x7f0000004540)=""/74, 0x4a}], 0x3, &(0x7f0000004640)=""/206, 0xce}, 0xffff}], 0x6, 0x0, &(0x7f0000004900)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) getuid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fallocate(r5, 0x0, 0x80000, 0x4103fe) sendfile(r3, r4, 0x0, 0xffffffff054) 18:30:43 executing program 5: prctl$PR_SET_VMA(0x1a, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:43 executing program 4: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 18:30:43 executing program 5: prctl$PR_SET_VMA(0xd, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:43 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937e, &(0x7f00000010c0)={{0x1, 0x1, 0x79}, './file0/file0\x00'}) 18:30:43 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4000000000000a12, 0x0) 18:30:43 executing program 5: prctl$PR_SET_VMA(0x1e, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) close(r0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 18:30:44 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @local}, 0x10) [ 744.140919][T15847] not chained 910000 origins [ 744.145879][T15847] CPU: 1 PID: 15847 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 744.156433][T15847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 744.166594][T15847] Call Trace: [ 744.169945][T15847] [ 744.172950][T15847] dump_stack_lvl+0x1c8/0x256 [ 744.177824][T15847] dump_stack+0x1a/0x1c [ 744.182123][T15847] kmsan_internal_chain_origin+0x78/0x120 [ 744.187994][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 744.193955][T15847] ? kfree+0x44/0x980 [ 744.198073][T15847] ? filter_irq_stacks+0x5c/0x1a0 [ 744.203228][T15847] ? do_recvmmsg+0x55a/0x1180 [ 744.208035][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 744.214012][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 744.219982][T15847] ? should_fail+0x3f/0x810 [ 744.224629][T15847] ? __stack_depot_save+0x21/0x4b0 [ 744.229890][T15847] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 744.236296][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 744.242260][T15847] __msan_chain_origin+0xbd/0x140 [ 744.247428][T15847] ___sys_recvmsg+0x52e/0x840 [ 744.252245][T15847] ? kmsan_internal_check_memory+0x94/0x530 [ 744.258296][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 744.264260][T15847] do_recvmmsg+0x55a/0x1180 [ 744.268919][T15847] ? do_syscall_64+0x3d/0xb0 [ 744.273633][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 744.278805][T15847] do_syscall_64+0x3d/0xb0 [ 744.283344][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 744.289394][T15847] RIP: 0033:0x7f294d089279 [ 744.293928][T15847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 744.313695][T15847] RSP: 002b:00007f294e212168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 744.322248][T15847] RAX: ffffffffffffffda RBX: 00007f294d19c050 RCX: 00007f294d089279 [ 744.330340][T15847] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 744.338419][T15847] RBP: 00007f294d0e3189 R08: 0000000000000000 R09: 0000000000000000 [ 744.346493][T15847] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 744.354568][T15847] R13: 00007f294d6cfb1f R14: 00007f294e212300 R15: 0000000000022000 [ 744.362673][T15847] [ 744.366345][T15847] Uninit was stored to memory at: [ 744.371528][T15847] ___sys_recvmsg+0x52e/0x840 [ 744.376509][T15847] do_recvmmsg+0x55a/0x1180 [ 744.381127][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 744.386404][T15847] do_syscall_64+0x3d/0xb0 [ 744.390932][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 744.397191][T15847] [ 744.399573][T15847] Uninit was stored to memory at: [ 744.405011][T15847] ___sys_recvmsg+0x52e/0x840 [ 744.409901][T15847] do_recvmmsg+0x55a/0x1180 [ 744.414616][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 744.419754][T15847] do_syscall_64+0x3d/0xb0 [ 744.424517][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 744.430567][T15847] [ 744.433086][T15847] Uninit was stored to memory at: [ 744.438263][T15847] ___sys_recvmsg+0x52e/0x840 [ 744.443168][T15847] do_recvmmsg+0x55a/0x1180 [ 744.447779][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 744.453147][T15847] do_syscall_64+0x3d/0xb0 [ 744.457674][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 744.463853][T15847] [ 744.466234][T15847] Uninit was stored to memory at: [ 744.471408][T15847] ___sys_recvmsg+0x52e/0x840 [ 744.476356][T15847] do_recvmmsg+0x55a/0x1180 [ 744.480970][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 744.486376][T15847] do_syscall_64+0x3d/0xb0 [ 744.490906][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 744.497060][T15847] [ 744.499439][T15847] Uninit was stored to memory at: [ 744.504757][T15847] ___sys_recvmsg+0x52e/0x840 [ 744.509547][T15847] do_recvmmsg+0x55a/0x1180 [ 744.514374][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 744.519515][T15847] do_syscall_64+0x3d/0xb0 [ 744.524158][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 744.530383][T15847] [ 744.532858][T15847] Uninit was stored to memory at: [ 744.538040][T15847] ___sys_recvmsg+0x52e/0x840 [ 744.543098][T15847] do_recvmmsg+0x55a/0x1180 [ 744.547710][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 744.553928][T15847] do_syscall_64+0x3d/0xb0 [ 744.558467][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 744.564733][T15847] [ 744.567118][T15847] Uninit was stored to memory at: [ 744.572484][T15847] ___sys_recvmsg+0x52e/0x840 [ 744.577269][T15847] do_recvmmsg+0x55a/0x1180 [ 744.582001][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 744.587146][T15847] do_syscall_64+0x3d/0xb0 [ 744.591683][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 744.597880][T15847] [ 744.600270][T15847] Local variable msg_sys created at: [ 744.605866][T15847] do_recvmmsg+0x5c/0x1180 [ 744.610391][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 745.359984][T15847] not chained 920000 origins [ 745.367476][T15847] CPU: 1 PID: 15847 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 745.378061][T15847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 745.388222][T15847] Call Trace: [ 745.391575][T15847] [ 745.394581][T15847] dump_stack_lvl+0x1c8/0x256 [ 745.399422][T15847] dump_stack+0x1a/0x1c [ 745.403713][T15847] kmsan_internal_chain_origin+0x78/0x120 [ 745.409580][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 745.415534][T15847] ? kfree+0x44/0x980 [ 745.419627][T15847] ? filter_irq_stacks+0x5c/0x1a0 [ 745.424775][T15847] ? do_recvmmsg+0x55a/0x1180 [ 745.429573][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 745.435534][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 745.441494][T15847] ? should_fail+0x3f/0x810 [ 745.446146][T15847] ? __stack_depot_save+0x21/0x4b0 [ 745.451486][T15847] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 745.457880][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 745.463845][T15847] __msan_chain_origin+0xbd/0x140 [ 745.469020][T15847] ___sys_recvmsg+0x52e/0x840 [ 745.473847][T15847] ? kmsan_internal_check_memory+0x94/0x530 [ 745.479890][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 745.485853][T15847] do_recvmmsg+0x55a/0x1180 [ 745.490517][T15847] ? do_syscall_64+0x3d/0xb0 [ 745.495227][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 745.500386][T15847] do_syscall_64+0x3d/0xb0 [ 745.504910][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.510954][T15847] RIP: 0033:0x7f294d089279 [ 745.515462][T15847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 745.535201][T15847] RSP: 002b:00007f294e212168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 745.543725][T15847] RAX: ffffffffffffffda RBX: 00007f294d19c050 RCX: 00007f294d089279 [ 745.551793][T15847] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 745.559859][T15847] RBP: 00007f294d0e3189 R08: 0000000000000000 R09: 0000000000000000 [ 745.567916][T15847] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 745.575976][T15847] R13: 00007f294d6cfb1f R14: 00007f294e212300 R15: 0000000000022000 [ 745.584071][T15847] [ 745.587378][T15847] Uninit was stored to memory at: [ 745.592658][T15847] ___sys_recvmsg+0x52e/0x840 [ 745.597446][T15847] do_recvmmsg+0x55a/0x1180 [ 745.602169][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 745.607403][T15847] do_syscall_64+0x3d/0xb0 [ 745.612024][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.618076][T15847] [ 745.620459][T15847] Uninit was stored to memory at: [ 745.625721][T15847] ___sys_recvmsg+0x52e/0x840 [ 745.630511][T15847] do_recvmmsg+0x55a/0x1180 [ 745.635208][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 745.640349][T15847] do_syscall_64+0x3d/0xb0 [ 745.644957][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.651013][T15847] [ 745.653482][T15847] Uninit was stored to memory at: [ 745.658660][T15847] ___sys_recvmsg+0x52e/0x840 [ 745.663531][T15847] do_recvmmsg+0x55a/0x1180 [ 745.668143][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 745.673367][T15847] do_syscall_64+0x3d/0xb0 [ 745.677892][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.684114][T15847] [ 745.686497][T15847] Uninit was stored to memory at: [ 745.691675][T15847] ___sys_recvmsg+0x52e/0x840 [ 745.696531][T15847] do_recvmmsg+0x55a/0x1180 [ 745.701139][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 745.706367][T15847] do_syscall_64+0x3d/0xb0 [ 745.710886][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.717023][T15847] [ 745.719401][T15847] Uninit was stored to memory at: [ 745.724672][T15847] ___sys_recvmsg+0x52e/0x840 [ 745.729479][T15847] do_recvmmsg+0x55a/0x1180 [ 745.734179][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 745.739319][T15847] do_syscall_64+0x3d/0xb0 [ 745.743933][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.749988][T15847] [ 745.752451][T15847] Uninit was stored to memory at: [ 745.757631][T15847] ___sys_recvmsg+0x52e/0x840 [ 745.762506][T15847] do_recvmmsg+0x55a/0x1180 [ 745.767124][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 745.772355][T15847] do_syscall_64+0x3d/0xb0 [ 745.776883][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.783028][T15847] [ 745.785405][T15847] Uninit was stored to memory at: [ 745.790585][T15847] ___sys_recvmsg+0x52e/0x840 [ 745.795460][T15847] do_recvmmsg+0x55a/0x1180 [ 745.800077][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 745.805302][T15847] do_syscall_64+0x3d/0xb0 [ 745.809831][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.815966][T15847] [ 745.818352][T15847] Local variable msg_sys created at: [ 745.823794][T15847] do_recvmmsg+0x5c/0x1180 [ 745.828326][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 746.141338][T15847] not chained 930000 origins [ 746.146267][T15847] CPU: 1 PID: 15847 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 746.156803][T15847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 746.166960][T15847] Call Trace: [ 746.170314][T15847] [ 746.173315][T15847] dump_stack_lvl+0x1c8/0x256 [ 746.178147][T15847] dump_stack+0x1a/0x1c [ 746.182441][T15847] kmsan_internal_chain_origin+0x78/0x120 [ 746.188313][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 746.194276][T15847] ? kfree+0x44/0x980 [ 746.198377][T15847] ? filter_irq_stacks+0x5c/0x1a0 [ 746.203537][T15847] ? do_recvmmsg+0x55a/0x1180 [ 746.208329][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 746.214289][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 746.220245][T15847] ? should_fail+0x3f/0x810 [ 746.224881][T15847] ? __stack_depot_save+0x21/0x4b0 [ 746.230137][T15847] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 746.236530][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 746.242484][T15847] __msan_chain_origin+0xbd/0x140 [ 746.247654][T15847] ___sys_recvmsg+0x52e/0x840 [ 746.252474][T15847] ? kmsan_internal_check_memory+0x94/0x530 [ 746.258532][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 746.264502][T15847] do_recvmmsg+0x55a/0x1180 [ 746.269157][T15847] ? do_syscall_64+0x3d/0xb0 [ 746.273863][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 746.279028][T15847] do_syscall_64+0x3d/0xb0 [ 746.283556][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 746.289601][T15847] RIP: 0033:0x7f294d089279 [ 746.294107][T15847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 746.313854][T15847] RSP: 002b:00007f294e212168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 746.322394][T15847] RAX: ffffffffffffffda RBX: 00007f294d19c050 RCX: 00007f294d089279 [ 746.330473][T15847] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 746.338539][T15847] RBP: 00007f294d0e3189 R08: 0000000000000000 R09: 0000000000000000 [ 746.346604][T15847] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 746.354671][T15847] R13: 00007f294d6cfb1f R14: 00007f294e212300 R15: 0000000000022000 [ 746.362766][T15847] [ 746.366413][T15847] Uninit was stored to memory at: [ 746.371597][T15847] ___sys_recvmsg+0x52e/0x840 [ 746.376461][T15847] do_recvmmsg+0x55a/0x1180 [ 746.381066][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 746.386330][T15847] do_syscall_64+0x3d/0xb0 [ 746.390852][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 746.396999][T15847] [ 746.399379][T15847] Uninit was stored to memory at: [ 746.405533][T15847] ___sys_recvmsg+0x52e/0x840 [ 746.410414][T15847] do_recvmmsg+0x55a/0x1180 [ 746.415120][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 746.420253][T15847] do_syscall_64+0x3d/0xb0 [ 746.424948][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 746.430985][T15847] [ 746.433461][T15847] Uninit was stored to memory at: [ 746.438628][T15847] ___sys_recvmsg+0x52e/0x840 [ 746.443533][T15847] do_recvmmsg+0x55a/0x1180 [ 746.448137][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 746.453382][T15847] do_syscall_64+0x3d/0xb0 [ 746.457906][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 746.464061][T15847] [ 746.466437][T15847] Uninit was stored to memory at: [ 746.471601][T15847] ___sys_recvmsg+0x52e/0x840 [ 746.476491][T15847] do_recvmmsg+0x55a/0x1180 [ 746.481096][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 746.486438][T15847] do_syscall_64+0x3d/0xb0 [ 746.490952][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 746.497113][T15847] [ 746.499495][T15847] Uninit was stored to memory at: [ 746.504804][T15847] ___sys_recvmsg+0x52e/0x840 [ 746.509581][T15847] do_recvmmsg+0x55a/0x1180 [ 746.514327][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 746.519458][T15847] do_syscall_64+0x3d/0xb0 [ 746.524099][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 746.530132][T15847] [ 746.532626][T15847] Uninit was stored to memory at: [ 746.537790][T15847] ___sys_recvmsg+0x52e/0x840 [ 746.542730][T15847] do_recvmmsg+0x55a/0x1180 [ 746.547336][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 746.552582][T15847] do_syscall_64+0x3d/0xb0 [ 746.557102][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 746.563297][T15847] [ 746.565689][T15847] Uninit was stored to memory at: [ 746.570854][T15847] ___sys_recvmsg+0x52e/0x840 [ 746.575723][T15847] do_recvmmsg+0x55a/0x1180 [ 746.580414][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 746.585687][T15847] do_syscall_64+0x3d/0xb0 [ 746.590207][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 746.596386][T15847] [ 746.599116][T15847] Local variable msg_sys created at: [ 746.604624][T15847] do_recvmmsg+0x5c/0x1180 [ 746.609140][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 747.003813][T15847] not chained 940000 origins [ 747.008527][T15847] CPU: 1 PID: 15847 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 747.019062][T15847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 747.029220][T15847] Call Trace: [ 747.032572][T15847] [ 747.035574][T15847] dump_stack_lvl+0x1c8/0x256 [ 747.040414][T15847] dump_stack+0x1a/0x1c [ 747.044721][T15847] kmsan_internal_chain_origin+0x78/0x120 [ 747.050586][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 747.056542][T15847] ? kfree+0x44/0x980 [ 747.060631][T15847] ? filter_irq_stacks+0x5c/0x1a0 [ 747.065777][T15847] ? do_recvmmsg+0x55a/0x1180 [ 747.070571][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 747.076542][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 747.082493][T15847] ? should_fail+0x3f/0x810 [ 747.087141][T15847] ? __stack_depot_save+0x21/0x4b0 [ 747.092390][T15847] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 747.098786][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 747.104746][T15847] __msan_chain_origin+0xbd/0x140 [ 747.109927][T15847] ___sys_recvmsg+0x52e/0x840 [ 747.114767][T15847] ? kmsan_internal_check_memory+0x94/0x530 [ 747.120835][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 747.126808][T15847] do_recvmmsg+0x55a/0x1180 [ 747.131455][T15847] ? do_syscall_64+0x3d/0xb0 [ 747.136160][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 747.141320][T15847] do_syscall_64+0x3d/0xb0 [ 747.145845][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.151886][T15847] RIP: 0033:0x7f294d089279 [ 747.156392][T15847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 747.176148][T15847] RSP: 002b:00007f294e212168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 747.184694][T15847] RAX: ffffffffffffffda RBX: 00007f294d19c050 RCX: 00007f294d089279 [ 747.192788][T15847] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 747.200864][T15847] RBP: 00007f294d0e3189 R08: 0000000000000000 R09: 0000000000000000 [ 747.208948][T15847] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 747.217014][T15847] R13: 00007f294d6cfb1f R14: 00007f294e212300 R15: 0000000000022000 [ 747.225114][T15847] [ 747.232337][T15847] Uninit was stored to memory at: [ 747.237538][T15847] ___sys_recvmsg+0x52e/0x840 [ 747.242422][T15847] do_recvmmsg+0x55a/0x1180 [ 747.247032][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 747.252262][T15847] do_syscall_64+0x3d/0xb0 [ 747.256781][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.262914][T15847] [ 747.265296][T15847] Uninit was stored to memory at: [ 747.270474][T15847] ___sys_recvmsg+0x52e/0x840 [ 747.275361][T15847] do_recvmmsg+0x55a/0x1180 [ 747.279980][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 747.285204][T15847] do_syscall_64+0x3d/0xb0 [ 747.289728][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.295872][T15847] [ 747.298248][T15847] Uninit was stored to memory at: [ 747.303519][T15847] ___sys_recvmsg+0x52e/0x840 [ 747.308302][T15847] do_recvmmsg+0x55a/0x1180 [ 747.313005][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 747.318140][T15847] do_syscall_64+0x3d/0xb0 [ 747.322758][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.328803][T15847] [ 747.331180][T15847] Uninit was stored to memory at: [ 747.336458][T15847] ___sys_recvmsg+0x52e/0x840 [ 747.341243][T15847] do_recvmmsg+0x55a/0x1180 [ 747.345948][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 747.351083][T15847] do_syscall_64+0x3d/0xb0 [ 747.355700][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.361810][T15847] [ 747.364187][T15847] Uninit was stored to memory at: [ 747.369459][T15847] ___sys_recvmsg+0x52e/0x840 [ 747.374326][T15847] do_recvmmsg+0x55a/0x1180 [ 747.378939][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 747.384175][T15847] do_syscall_64+0x3d/0xb0 [ 747.388693][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.394825][T15847] [ 747.397200][T15847] Uninit was stored to memory at: [ 747.402465][T15847] ___sys_recvmsg+0x52e/0x840 [ 747.407252][T15847] do_recvmmsg+0x55a/0x1180 [ 747.412009][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 747.417151][T15847] do_syscall_64+0x3d/0xb0 [ 747.421675][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.427853][T15847] [ 747.430229][T15847] Uninit was stored to memory at: [ 747.435549][T15847] ___sys_recvmsg+0x52e/0x840 [ 747.440330][T15847] do_recvmmsg+0x55a/0x1180 [ 747.445084][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 747.450230][T15847] do_syscall_64+0x3d/0xb0 [ 747.454894][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.460943][T15847] [ 747.463465][T15847] Local variable msg_sys created at: [ 747.468815][T15847] do_recvmmsg+0x5c/0x1180 [ 747.473480][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 747.689086][T15847] not chained 950000 origins [ 747.693989][T15847] CPU: 1 PID: 15847 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 747.704550][T15847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 747.714710][T15847] Call Trace: [ 747.718055][T15847] [ 747.721051][T15847] dump_stack_lvl+0x1c8/0x256 [ 747.725887][T15847] dump_stack+0x1a/0x1c [ 747.730177][T15847] kmsan_internal_chain_origin+0x78/0x120 [ 747.736041][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 747.741992][T15847] ? kfree+0x44/0x980 [ 747.746078][T15847] ? filter_irq_stacks+0x5c/0x1a0 [ 747.751226][T15847] ? do_recvmmsg+0x55a/0x1180 [ 747.756024][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 747.761986][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 747.767944][T15847] ? should_fail+0x3f/0x810 [ 747.772774][T15847] ? __stack_depot_save+0x21/0x4b0 [ 747.778035][T15847] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 747.784433][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 747.790389][T15847] __msan_chain_origin+0xbd/0x140 [ 747.795574][T15847] ___sys_recvmsg+0x52e/0x840 [ 747.800387][T15847] ? kmsan_internal_check_memory+0x94/0x530 [ 747.806429][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 747.812395][T15847] do_recvmmsg+0x55a/0x1180 [ 747.817046][T15847] ? do_syscall_64+0x3d/0xb0 [ 747.821749][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 747.826919][T15847] do_syscall_64+0x3d/0xb0 [ 747.831447][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.837497][T15847] RIP: 0033:0x7f294d089279 [ 747.842006][T15847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 747.861788][T15847] RSP: 002b:00007f294e212168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 747.870333][T15847] RAX: ffffffffffffffda RBX: 00007f294d19c050 RCX: 00007f294d089279 [ 747.878421][T15847] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 747.886509][T15847] RBP: 00007f294d0e3189 R08: 0000000000000000 R09: 0000000000000000 [ 747.894581][T15847] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 747.902655][T15847] R13: 00007f294d6cfb1f R14: 00007f294e212300 R15: 0000000000022000 [ 747.910755][T15847] [ 747.914334][T15847] Uninit was stored to memory at: [ 747.919601][T15847] ___sys_recvmsg+0x52e/0x840 [ 747.924596][T15847] do_recvmmsg+0x55a/0x1180 [ 747.929216][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 747.934535][T15847] do_syscall_64+0x3d/0xb0 [ 747.939069][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.945230][T15847] [ 747.947619][T15847] Uninit was stored to memory at: [ 747.952956][T15847] ___sys_recvmsg+0x52e/0x840 [ 747.957924][T15847] do_recvmmsg+0x55a/0x1180 [ 747.962644][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 747.967963][T15847] do_syscall_64+0x3d/0xb0 [ 747.973002][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.979049][T15847] [ 747.981428][T15847] Uninit was stored to memory at: [ 747.986715][T15847] ___sys_recvmsg+0x52e/0x840 [ 747.991504][T15847] do_recvmmsg+0x55a/0x1180 [ 747.996242][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 748.001380][T15847] do_syscall_64+0x3d/0xb0 [ 748.006060][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.012227][T15847] [ 748.014607][T15847] Uninit was stored to memory at: [ 748.019782][T15847] ___sys_recvmsg+0x52e/0x840 [ 748.024689][T15847] do_recvmmsg+0x55a/0x1180 [ 748.029300][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 748.034605][T15847] do_syscall_64+0x3d/0xb0 [ 748.039131][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.045266][T15847] [ 748.047643][T15847] Uninit was stored to memory at: [ 748.052960][T15847] ___sys_recvmsg+0x52e/0x840 [ 748.057743][T15847] do_recvmmsg+0x55a/0x1180 [ 748.062459][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 748.067611][T15847] do_syscall_64+0x3d/0xb0 [ 748.072265][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.078311][T15847] [ 748.080690][T15847] Uninit was stored to memory at: [ 748.085968][T15847] ___sys_recvmsg+0x52e/0x840 [ 748.090754][T15847] do_recvmmsg+0x55a/0x1180 [ 748.095544][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 748.100684][T15847] do_syscall_64+0x3d/0xb0 [ 748.105300][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.111345][T15847] [ 748.113867][T15847] Uninit was stored to memory at: [ 748.119164][T15847] ___sys_recvmsg+0x52e/0x840 [ 748.124061][T15847] do_recvmmsg+0x55a/0x1180 [ 748.128677][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 748.133970][T15847] do_syscall_64+0x3d/0xb0 [ 748.138522][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.144724][T15847] [ 748.147106][T15847] Local variable msg_sys created at: [ 748.152655][T15847] do_recvmmsg+0x5c/0x1180 [ 748.157180][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 748.371255][T15847] not chained 960000 origins [ 748.376078][T15847] CPU: 1 PID: 15847 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 748.386624][T15847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 748.396778][T15847] Call Trace: [ 748.400133][T15847] [ 748.403137][T15847] dump_stack_lvl+0x1c8/0x256 [ 748.407970][T15847] dump_stack+0x1a/0x1c [ 748.412263][T15847] kmsan_internal_chain_origin+0x78/0x120 [ 748.418126][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 748.424081][T15847] ? kfree+0x44/0x980 [ 748.428171][T15847] ? filter_irq_stacks+0x5c/0x1a0 [ 748.433322][T15847] ? do_recvmmsg+0x55a/0x1180 [ 748.438119][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 748.444083][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 748.450052][T15847] ? should_fail+0x3f/0x810 [ 748.454695][T15847] ? __stack_depot_save+0x21/0x4b0 [ 748.459952][T15847] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 748.466353][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 748.472307][T15847] __msan_chain_origin+0xbd/0x140 [ 748.477468][T15847] ___sys_recvmsg+0x52e/0x840 [ 748.482282][T15847] ? kmsan_internal_check_memory+0x94/0x530 [ 748.488325][T15847] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 748.494286][T15847] do_recvmmsg+0x55a/0x1180 [ 748.498944][T15847] ? do_syscall_64+0x3d/0xb0 [ 748.503656][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 748.508819][T15847] do_syscall_64+0x3d/0xb0 [ 748.513345][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.519388][T15847] RIP: 0033:0x7f294d089279 [ 748.523894][T15847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 748.543650][T15847] RSP: 002b:00007f294e212168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 748.552188][T15847] RAX: ffffffffffffffda RBX: 00007f294d19c050 RCX: 00007f294d089279 [ 748.560269][T15847] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 748.568338][T15847] RBP: 00007f294d0e3189 R08: 0000000000000000 R09: 0000000000000000 [ 748.576669][T15847] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 748.584748][T15847] R13: 00007f294d6cfb1f R14: 00007f294e212300 R15: 0000000000022000 [ 748.592848][T15847] [ 748.596564][T15847] Uninit was stored to memory at: [ 748.601847][T15847] ___sys_recvmsg+0x52e/0x840 [ 748.606631][T15847] do_recvmmsg+0x55a/0x1180 [ 748.611881][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 748.617024][T15847] do_syscall_64+0x3d/0xb0 [ 748.621549][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.627743][T15847] [ 748.630126][T15847] Uninit was stored to memory at: [ 748.635455][T15847] ___sys_recvmsg+0x52e/0x840 [ 748.640243][T15847] do_recvmmsg+0x55a/0x1180 [ 748.644958][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 748.650094][T15847] do_syscall_64+0x3d/0xb0 [ 748.654755][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.660803][T15847] [ 748.663293][T15847] Uninit was stored to memory at: [ 748.668468][T15847] ___sys_recvmsg+0x52e/0x840 [ 748.673371][T15847] do_recvmmsg+0x55a/0x1180 [ 748.677981][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 748.683351][T15847] do_syscall_64+0x3d/0xb0 [ 748.687874][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.694049][T15847] [ 748.696427][T15847] Uninit was stored to memory at: [ 748.701600][T15847] ___sys_recvmsg+0x52e/0x840 [ 748.706510][T15847] do_recvmmsg+0x55a/0x1180 [ 748.711129][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 748.716425][T15847] do_syscall_64+0x3d/0xb0 [ 748.720972][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.727179][T15847] [ 748.729557][T15847] Uninit was stored to memory at: [ 748.734851][T15847] ___sys_recvmsg+0x52e/0x840 [ 748.739633][T15847] do_recvmmsg+0x55a/0x1180 [ 748.744369][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 748.749515][T15847] do_syscall_64+0x3d/0xb0 [ 748.754180][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.760218][T15847] [ 748.762702][T15847] Uninit was stored to memory at: [ 748.767875][T15847] ___sys_recvmsg+0x52e/0x840 [ 748.772839][T15847] do_recvmmsg+0x55a/0x1180 [ 748.777453][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 748.782686][T15847] do_syscall_64+0x3d/0xb0 [ 748.787214][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.793387][T15847] [ 748.795763][T15847] Uninit was stored to memory at: [ 748.800933][T15847] ___sys_recvmsg+0x52e/0x840 [ 748.805974][T15847] do_recvmmsg+0x55a/0x1180 [ 748.810588][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 748.815875][T15847] do_syscall_64+0x3d/0xb0 [ 748.820407][T15847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.826580][T15847] [ 748.828959][T15847] Local variable msg_sys created at: [ 748.834464][T15847] do_recvmmsg+0x5c/0x1180 [ 748.838984][T15847] __x64_sys_recvmmsg+0x3a7/0x4b0 18:30:50 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0xb, [@struct={0x3, 0x15555555555555f6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/152, 0xb3, 0x98, 0x1}, 0x20) 18:30:50 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000002, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0xc0d05604, &(0x7f0000000400)=0xa) 18:30:50 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4000000000000a12, 0x0) 18:30:50 executing program 5: bpf$MAP_CREATE(0x21, &(0x7f00000000c0)=@bloom_filter, 0x48) 18:30:50 executing program 2: r0 = openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) 18:30:50 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4}}, @union={0x9, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000100)=""/151, 0x53, 0x97, 0x1}, 0x20) 18:30:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x40045566, 0x0) 18:30:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @empty}, r1}}, 0x30) 18:30:50 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x401, 0x1, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x2, @vbi}) 18:30:50 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000040)={0x2}, 0x18) 18:30:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045503, &(0x7f0000000000)) 18:30:51 executing program 2: munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 18:30:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004740)=[{{&(0x7f0000000280)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/133, 0x85}, {0x0}], 0x2, &(0x7f0000000340)=""/52, 0x34}, 0x8000}, {{&(0x7f0000000580)=@l2, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)=""/152, 0x98}, {&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f00000007c0)=""/181, 0xb5}, {&(0x7f0000004940)=""/4096, 0x1000}], 0x4, &(0x7f00000018c0)=""/245, 0xf5}, 0x5}, {{&(0x7f00000019c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a40)=""/61, 0x3d}], 0x1, &(0x7f0000001b80)=""/245, 0xf5}}, {{0x0, 0x0, 0x0}, 0x7}, {{&(0x7f0000002140)=@can, 0x80, 0x0}, 0xffff}], 0x5, 0x0, &(0x7f0000004900)) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) getuid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fallocate(r4, 0x0, 0x80000, 0x4103fe) sendfile(r2, r3, 0x0, 0xffffffff054) 18:30:51 executing program 1: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil}) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:51 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x2, @raw_data="af68ce8cd93732df42413831275684af5fa6f195074f35f7f3a10c2452db70cc9cef74fccd8c5658b09a879342e3f44a88f965e4294268c3671b5b9f0a2cf0d32d45a2d98d5f72b57a3ba02a2a0c2dcd891f27470780c7debae29680134e025c8dce9e04701839863b474f165b3eac5576392c2c503dc34976285350a80a9d11bd8b9ce452af53830f5e1de670d451663b8e848cc45d29e20337265c88cb8c894dadd308ee8402f651c5c58ddbe64aa05ea8b2c0db77ef487f318453d991f0b4449b1343dc8f798f"}) 18:30:51 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4000000000000a12, 0x0) [ 750.683380][T15911] vim2m vim2m.0: Fourcc format (0x31384142) invalid. 18:30:51 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, 0x0, 0x0, 0xa00000000000}]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x2c3}) 18:30:51 executing program 1: add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "f7b667f49952da0919dd705a6d85c7cd987ce45a7625ed45e399900cfb209b502bf1924d43cac749ee4dfa937d3b5f974c3dade26b716948e1908744cf759888"}, 0x48, 0xffffffffffffffff) 18:30:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 18:30:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) close(r0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x5450, 0x0) 18:30:52 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000040), 0x7ffffffff000) 18:30:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045510, &(0x7f0000000000)) 18:30:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x22, &(0x7f0000000300)=[@cr4={0x1, 0x28080}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:30:52 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0xb9}, '.\x00'}) 18:30:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @raw_data="af68ce8cd93732df42413831275684af5fa6f195074f35f7f3a10c2452db70cc9cef74fccd8c5658b09a879342e3f44a88f965e4294268c3671b5b9f0a2cf0d32d45a2d98d5f72b57a3ba02a2a0c2dcd891f27470780c7debae29680134e025c8dce9e04701839863b474f165b3eac5576392c2c503dc34976285350a80a9d11bd8b9ce452af53830f5e1de670d451663b8e848cc45d29e20337265c88cb8c894dadd308ee8402f651c5c58ddbe64aa05ea8b2c0db77ef487f318453d991f0b4449b1343dc8f798f"}) 18:30:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r0}}, 0x18) 18:30:52 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4000000000000a12, 0x0) 18:30:52 executing program 1: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 18:30:53 executing program 4: prctl$PR_SET_VMA(0x35, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1, 0x0, 0x3, 0x2}}, 0x20) 18:30:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @local, 0x9}]}, &(0x7f0000000300)=0x10) 18:30:53 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000280), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000180)={{0x80000000, r1}}) 18:30:53 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40000}, 0x0) 18:30:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0xfffffffffffffeec}, 0x20) 18:30:53 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000010c0), 0xdb) 18:30:53 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001940)={0x2c, &(0x7f0000001740)={0x0, 0x0, 0x29, {0x29, 0x0, "256f205c569f9355b2b3839378a77a3d53ee76f3283b6c72fc9ed0ec05674d2181c1688ccee41a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:30:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f00000006c0)=""/217, 0x32, 0xd9, 0x1}, 0x20) 18:30:53 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000040)={0x1d, r2}, 0x18) 18:30:53 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4000000000000a12, 0x0) 18:30:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) close(r0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x541b, 0x0) 18:30:53 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0x5452, &(0x7f00000010c0)={{0x1, 0x1, 0x79}, './file0/file0\x00'}) 18:30:53 executing program 1: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') open$dir(&(0x7f0000000500)='./file0\x00', 0xbd98936e25f27e23, 0x0) 18:30:53 executing program 4: mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)='\x00') munlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) [ 752.852922][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd 18:30:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @raw_data="af68ce8cd93732df42413831275684af5fa6f195074f35f7f3a10c2452db70cc9cef74fccd8c5658b09a879342e3f44a88f965e4294268c3671b5b9f0a2cf0d32d45a2d98d5f72b57a3ba02a2a0c2dcd891f27470780c7debae29680134e025c8dce9e04701839863b474f165b3eac5576392c2c503dc34976285350a80a9d11bd8b9ce452af53830f5e1de670d451663b8e848cd05d29e20337265c88cb8c894dadd308ee8402f651c5c58ddbe64aa05ea8b2c0db77ef487f318453d991f0b4449b1343dc8f798f"}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x3cb}) 18:30:54 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @local}, r1}}, 0x30) 18:30:54 executing program 1: prctl$PR_SET_VMA(0x19, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0xc0d05604, &(0x7f0000000400)=0x9) [ 753.238055][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.249267][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.259324][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 753.270382][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 753.280290][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 753.293559][ T25] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd7, bcdDevice= 0.00 [ 753.302876][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.358508][ T25] usb 1-1: config 0 descriptor?? [ 753.837812][ T25] saitek 0003:06A3:0CD7.0011: unknown main item tag 0x2 [ 753.847336][ T25] saitek 0003:06A3:0CD7.0011: unknown main item tag 0xd [ 753.860804][ T25] saitek 0003:06A3:0CD7.0011: hidraw0: USB HID v0.00 Device [HID 06a3:0cd7] on usb-dummy_hcd.0-1/input0 [ 754.040218][ T25] usb 1-1: USB disconnect, device number 18 18:30:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x15) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x15) 18:30:55 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4000000000000a12, 0x0) 18:30:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:30:55 executing program 2: prctl$PR_SET_VMA(0x25, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x401, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x0, 0x2, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) 18:30:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 18:30:55 executing program 2: prctl$PR_SET_VMA(0x59616d61, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:55 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2040) 18:30:55 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x5, &(0x7f00000013c0)=@framed={{}, [@map_fd]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:30:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendto$inet(r0, &(0x7f0000000280)='`', 0x100000, 0x0, 0x0, 0x0) 18:30:55 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x4}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4000000000000a12, 0x0) 18:30:55 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) 18:30:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 18:30:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000280)='`', 0x100000, 0x8000000, 0x0, 0x0) [ 754.936152][T16010] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:30:56 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:56 executing program 5: prctl$PR_SET_VMA(0x16, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:56 executing program 0: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 755.126090][T16017] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:30:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000880)={0x10, 0x28, 0x1}, 0x10}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004740)=[{{&(0x7f0000000280)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000480)=""/234, 0xea}], 0x2, &(0x7f0000000340)=""/52, 0x34}, 0x8000}, {{&(0x7f0000001c80)=@can, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/222, 0xde}], 0x1, &(0x7f0000001e40)=""/172, 0xac}, 0x3}, {{&(0x7f0000001a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f80)=""/251, 0xfb}, {&(0x7f0000002080)=""/62, 0x3e}], 0x2, &(0x7f0000002100)=""/52, 0x34}, 0x7}, {{&(0x7f0000002140)=@can, 0x80, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/168, 0xa8}], 0x1, &(0x7f00000022c0)=""/84, 0x54}, 0xffff}, {{&(0x7f0000002340)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000045c0)=[{&(0x7f00000023c0)=""/210, 0xd2}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/4084, 0xff4}, {&(0x7f00000044c0)=""/65, 0x41}, {&(0x7f0000004540)=""/74, 0x4a}], 0x5, &(0x7f0000004640)=""/206, 0xce}, 0xffff}], 0x5, 0x0, &(0x7f0000004900)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) getuid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fallocate(r5, 0x0, 0x80000, 0x4103fe) sendfile(r3, r4, 0x0, 0xffffffff054) 18:30:56 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000010c0)={{0x1, 0x2, 0x79}, './file0/file0\x00'}) 18:30:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private0}, r1}}, 0x30) 18:30:56 executing program 5: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc1}, &(0x7f00000003c0)={0x0, "fc932f9c2d18b08454e10941e485ce781269aad30d6652343f52df6b767b9885dfbbf4edfc2106d13c0da51dba60ec9f2f157aa47a54424b4d4393cf6184f74a"}, 0x48, r0) keyctl$unlink(0x9, 0x0, r1) 18:30:56 executing program 4: prctl$PR_SET_VMA(0x22, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4bfa, 0xfffffffffffffffe) 18:30:56 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000100)=""/151, 0x26, 0x97, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x8) 18:30:56 executing program 4: prctl$PR_SET_VMA(0x18, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1, 0x0, 0xe}}, 0x20) [ 755.756692][T16037] not chained 970000 origins [ 755.761509][T16037] CPU: 1 PID: 16037 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 755.772064][T16037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 755.782234][T16037] Call Trace: [ 755.785595][T16037] [ 755.788608][T16037] dump_stack_lvl+0x1c8/0x256 [ 755.793466][T16037] dump_stack+0x1a/0x1c [ 755.797768][T16037] kmsan_internal_chain_origin+0x78/0x120 [ 755.803642][T16037] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 755.809613][T16037] ? kfree+0x44/0x980 [ 755.813722][T16037] ? filter_irq_stacks+0x5c/0x1a0 [ 755.818885][T16037] ? do_recvmmsg+0x55a/0x1180 [ 755.823688][T16037] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 755.829671][T16037] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 755.835646][T16037] ? should_fail+0x3f/0x810 [ 755.840307][T16037] ? __stack_depot_save+0x21/0x4b0 [ 755.845578][T16037] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 755.851992][T16037] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 755.857987][T16037] __msan_chain_origin+0xbd/0x140 [ 755.863163][T16037] ___sys_recvmsg+0x52e/0x840 [ 755.867990][T16037] ? kmsan_internal_check_memory+0x94/0x530 [ 755.874048][T16037] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 755.880031][T16037] do_recvmmsg+0x55a/0x1180 [ 755.884707][T16037] ? do_syscall_64+0x3d/0xb0 [ 755.889429][T16037] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 755.894621][T16037] do_syscall_64+0x3d/0xb0 [ 755.899165][T16037] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 755.905231][T16037] RIP: 0033:0x7f8d84489279 [ 755.909758][T16037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 755.929539][T16037] RSP: 002b:00007f8d854ff168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 755.938101][T16037] RAX: ffffffffffffffda RBX: 00007f8d8459c050 RCX: 00007f8d84489279 [ 755.946194][T16037] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 755.954279][T16037] RBP: 00007f8d844e3189 R08: 0000000000000000 R09: 0000000000000000 [ 755.962362][T16037] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 755.970443][T16037] R13: 00007f8d84acfb1f R14: 00007f8d854ff300 R15: 0000000000022000 [ 755.978551][T16037] [ 755.982405][T16037] Uninit was stored to memory at: [ 755.987604][T16037] ___sys_recvmsg+0x52e/0x840 [ 755.992482][T16037] do_recvmmsg+0x55a/0x1180 [ 755.997098][T16037] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 756.002971][T16037] do_syscall_64+0x3d/0xb0 [ 756.007520][T16037] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 756.013816][T16037] [ 756.016204][T16037] Uninit was stored to memory at: [ 756.021390][T16037] ___sys_recvmsg+0x52e/0x840 [ 756.026292][T16037] do_recvmmsg+0x55a/0x1180 [ 756.030915][T16037] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 756.036169][T16037] do_syscall_64+0x3d/0xb0 [ 756.040698][T16037] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 756.046860][T16037] [ 756.049239][T16037] Uninit was stored to memory at: [ 756.054509][T16037] ___sys_recvmsg+0x52e/0x840 [ 756.059296][T16037] do_recvmmsg+0x55a/0x1180 [ 756.064004][T16037] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 756.069170][T16037] do_syscall_64+0x3d/0xb0 [ 756.073878][T16037] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 756.079947][T16037] [ 756.082444][T16037] Uninit was stored to memory at: [ 756.087629][T16037] ___sys_recvmsg+0x52e/0x840 [ 756.092523][T16037] do_recvmmsg+0x55a/0x1180 [ 756.097145][T16037] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 756.102471][T16037] do_syscall_64+0x3d/0xb0 [ 756.106999][T16037] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 756.113133][T16037] [ 756.115518][T16037] Uninit was stored to memory at: [ 756.120704][T16037] ___sys_recvmsg+0x52e/0x840 [ 756.125606][T16037] do_recvmmsg+0x55a/0x1180 [ 756.130239][T16037] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 756.135554][T16037] do_syscall_64+0x3d/0xb0 [ 756.140101][T16037] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 756.146260][T16037] [ 756.148641][T16037] Uninit was stored to memory at: [ 756.153931][T16037] ___sys_recvmsg+0x52e/0x840 [ 756.158721][T16037] do_recvmmsg+0x55a/0x1180 [ 756.163497][T16037] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 756.168656][T16037] do_syscall_64+0x3d/0xb0 [ 756.173258][T16037] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 756.179306][T16037] [ 756.181687][T16037] Uninit was stored to memory at: [ 756.187077][T16037] ___sys_recvmsg+0x52e/0x840 [ 756.192036][T16037] do_recvmmsg+0x55a/0x1180 [ 756.196663][T16037] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 756.201960][T16037] do_syscall_64+0x3d/0xb0 18:30:57 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:57 executing program 1: prctl$PR_SET_VMA(0xe, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:57 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}]}}, &(0x7f00000006c0)=""/217, 0x32, 0xd9, 0x1}, 0x20) [ 756.206502][T16037] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 756.212757][T16037] [ 756.215146][T16037] Local variable msg_sys created at: [ 756.220512][T16037] do_recvmmsg+0x5c/0x1180 [ 756.225197][T16037] __x64_sys_recvmmsg+0x3a7/0x4b0 18:30:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x1f}}) 18:30:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x679}}, 0x10) 18:30:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) dup2(r1, r0) 18:30:57 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x4000, 0x0) 18:30:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x63, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@NDA_LLADDR={0xa, 0x2, @random="63ccc7696324"}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d"], 0x28}}, 0x0) 18:30:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045510, &(0x7f0000000000)) 18:30:57 executing program 0: prctl$PR_SET_VMA(0xf, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) [ 756.776137][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 18:30:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000900)={0x48, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f00000000c0)={0x0, 0x0, 0x8000000000000265, [0x0, 0x0, 0x0]}, 0xe) [ 756.845289][T16066] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 18:30:58 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 18:30:58 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:58 executing program 0: prctl$PR_SET_VMA(0x2, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:58 executing program 4: r0 = syz_usbip_server_init(0x0) write$usbip_server(r0, &(0x7f0000000340)=ANY=[], 0xcd6) 18:30:58 executing program 1: prctl$PR_SET_VMA(0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:30:58 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000000)) 18:30:58 executing program 2: syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) [ 757.384292][T16081] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 18:30:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000240)=""/157, 0x2a, 0x9d, 0x1}, 0x20) 18:30:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x2, @raw_data="af68ce8cd93732df4e563132275684af5fa6f195074f35f7f3a10c2452db70cc9cef74fccd8c5658b09a879342e3f44a88f965e4294268c3671b5b9f0a2cf0d32d45a2d98d5f72b57a3ba02a2a0c2dcd891f27470780c7debae29680134e025c8dce9e04701839863b474f165b3eac5576392c2c503dc34976285350a80a9d11bd8b9ce452af53830f5e1de670d451663b8e848cc45d29e20337265c88cb8c894dadd308ee8402f651c5c58ddbe64aa05ea8b2c0db77ef487f318453d991f0b4449b1343dc8f798f"}) 18:30:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) 18:30:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000000)=""/6, &(0x7f0000000040)=0x6) 18:30:58 executing program 0: unshare(0x6c060000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001700)={0x0, @l2tp={0x2, 0x2, @multicast2}, @ax25={0x3, @bcast}, @phonet, 0xfffe}) 18:30:58 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x0, {0x2}}, 0x18) [ 757.708998][T16096] vim2m vim2m.0: vidioc_s_fmt queue busy 18:30:59 executing program 1: sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x6ccea6d53b6c6509, 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)="5c99653538170a41d881d5f18543f25d04cc2643d278958b6be79b217fbc717d2285d2ec") 18:30:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1, 0x0, 0x3, 0x400000}}, 0x20) 18:30:59 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x2, @raw_data="af68ce8cd93732df4e563132275684af5fa6f195074f35f7f3a10c2452db70cc9cef74fccd8c5658b09a879342e3f44a88f965e4294268c3671b5b9f0a2cf0d32d45a2d98d5f72b57a3ba02a2a0c2dcd891f27470780c7debae29680134e025c8dce9e04701839863b474f165b3eac5576392c2c503dc34976285350a80a9d11bd8b9ce452af53830f5e1de670d451663b8e848cc45d29e20337265c88cb8c894dadd308ee8402f651c5c58ddbe64aa05ea8b2c0db77ef487f318453d991f0b4449b1343dc8f798f"}) 18:30:59 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000700)=""/118, 0x76}], 0x2, &(0x7f0000001a40)=[{&(0x7f00000007c0)=""/249, 0xf9}], 0x1, 0x0) 18:30:59 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:30:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000100)=""/151, 0x26, 0x97, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 18:30:59 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) [ 758.460868][T16112] vim2m vim2m.0: vidioc_s_fmt queue busy 18:30:59 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x2c3, @tick, 0x0, {}, 0x0, 0x0, 0x2}) 18:30:59 executing program 5: munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) 18:30:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4}]}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000013c0)=""/179, 0x31, 0xb3, 0x1}, 0x20) 18:30:59 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x2, @raw_data="af68ce8cd93732df4e563132275684af5fa6f195074f35f7f3a10c2452db70cc9cef74fccd8c5658b09a879342e3f44a88f965e4294268c3671b5b9f0a2cf0d32d45a2d98d5f72b57a3ba02a2a0c2dcd891f27470780c7debae29680134e025c8dce9e04701839863b474f165b3eac5576392c2c503dc34976285350a80a9d11bd8b9ce452af53830f5e1de670d451663b8e848cc45d29e20337265c88cb8c894dadd308ee8402f651c5c58ddbe64aa05ea8b2c0db77ef487f318453d991f0b4449b1343dc8f798f"}) 18:30:59 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000010c0)={{0x2, 0x1, 0x79}, './file0/file0\x00'}) 18:30:59 executing program 5: prctl$PR_SET_VMA(0x4, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) [ 758.846228][T16125] vim2m vim2m.0: vidioc_s_fmt queue busy [ 758.952153][ T6] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 759.192813][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 759.312607][ T6] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 18:31:00 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:31:00 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 18:31:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x2, @raw_data="af68ce8cd93732df4e563132275684af5fa6f195074f35f7f3a10c2452db70cc9cef74fccd8c5658b09a879342e3f44a88f965e4294268c3671b5b9f0a2cf0d32d45a2d98d5f72b57a3ba02a2a0c2dcd891f27470780c7debae29680134e025c8dce9e04701839863b474f165b3eac5576392c2c503dc34976285350a80a9d11bd8b9ce452af53830f5e1de670d451663b8e848cc45d29e20337265c88cb8c894dadd308ee8402f651c5c58ddbe64aa05ea8b2c0db77ef487f318453d991f0b4449b1343dc8f798f"}) 18:31:00 executing program 5: prctl$PR_SET_VMA(0x1d, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:31:00 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{0xfffffffffffffffd}], 0x1}, 0x0) [ 759.468617][T16135] vim2m vim2m.0: vidioc_s_fmt queue busy [ 759.482822][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 759.492378][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.500658][ T6] usb 5-1: Product: syz [ 759.505418][ T6] usb 5-1: Manufacturer: syz [ 759.510292][ T6] usb 5-1: SerialNumber: syz [ 759.684589][ T6] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 759.889574][ T6] usb 5-1: USB disconnect, device number 16 18:31:01 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) 18:31:01 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'full', 0x20, 0x5, 0x20, 0x10000a}, 0x2f) write$cgroup_pressure(r1, &(0x7f00000000c0)={'some'}, 0x2f) 18:31:01 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x2, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:31:01 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x2, @raw_data="af68ce8cd93732df4e563132275684af5fa6f195074f35f7f3a10c2452db70cc9cef74fccd8c5658b09a879342e3f44a88f965e4294268c3671b5b9f0a2cf0d32d45a2d98d5f72b57a3ba02a2a0c2dcd891f27470780c7debae29680134e025c8dce9e04701839863b474f165b3eac5576392c2c503dc34976285350a80a9d11bd8b9ce452af53830f5e1de670d451663b8e848cc45d29e20337265c88cb8c894dadd308ee8402f651c5c58ddbe64aa05ea8b2c0db77ef487f318453d991f0b4449b1343dc8f798f"}) 18:31:01 executing program 0: mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xccb6405b453747fa, 0xffffffffffffffff, 0x0) 18:31:01 executing program 1: prctl$PR_SET_VMA(0x2f, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:31:01 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:31:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x109482) write$evdev(r0, &(0x7f00000002c0)=[{{0x77359400}, 0x1f}], 0x18) 18:31:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendto$inet(r0, &(0x7f0000000280)='`', 0xffffff1f, 0x0, 0x0, 0x0) 18:31:01 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x2, @raw_data="af68ce8cd93732df4e563132275684af5fa6f195074f35f7f3a10c2452db70cc9cef74fccd8c5658b09a879342e3f44a88f965e4294268c3671b5b9f0a2cf0d32d45a2d98d5f72b57a3ba02a2a0c2dcd891f27470780c7debae29680134e025c8dce9e04701839863b474f165b3eac5576392c2c503dc34976285350a80a9d11bd8b9ce452af53830f5e1de670d451663b8e848cc45d29e20337265c88cb8c894dadd308ee8402f651c5c58ddbe64aa05ea8b2c0db77ef487f318453d991f0b4449b1343dc8f798f"}) 18:31:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x401, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@fd={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c90b7604"}}) 18:31:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000000)) [ 760.867923][T16162] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:31:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r1, 0x0, 0x1, 0x4}}, 0x20) 18:31:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x2, @raw_data="af68ce8cd93732df4e563132275684af5fa6f195074f35f7f3a10c2452db70cc9cef74fccd8c5658b09a879342e3f44a88f965e4294268c3671b5b9f0a2cf0d32d45a2d98d5f72b57a3ba02a2a0c2dcd891f27470780c7debae29680134e025c8dce9e04701839863b474f165b3eac5576392c2c503dc34976285350a80a9d11bd8b9ce452af53830f5e1de670d451663b8e848cc45d29e20337265c88cb8c894dadd308ee8402f651c5c58ddbe64aa05ea8b2c0db77ef487f318453d991f0b4449b1343dc8f798f"}) 18:31:02 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x4004556b, 0x0) 18:31:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004900)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) getuid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fallocate(r5, 0x0, 0x80000, 0x4103fe) sendfile(r3, r4, 0x0, 0xffffffff054) 18:31:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000000)) 18:31:02 executing program 2: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x2, @raw_data="af68ce8cd93732df4e563132275684af5fa6f195074f35f7f3a10c2452db70cc9cef74fccd8c5658b09a879342e3f44a88f965e4294268c3671b5b9f0a2cf0d32d45a2d98d5f72b57a3ba02a2a0c2dcd891f27470780c7debae29680134e025c8dce9e04701839863b474f165b3eac5576392c2c503dc34976285350a80a9d11bd8b9ce452af53830f5e1de670d451663b8e848cc45d29e20337265c88cb8c894dadd308ee8402f651c5c58ddbe64aa05ea8b2c0db77ef487f318453d991f0b4449b1343dc8f798f"}) 18:31:02 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:31:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4}]}]}}, &(0x7f00000013c0)=""/179, 0x2e, 0xb3, 0x1}, 0x20) 18:31:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) write$damon_init_regions(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 18:31:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000000)) 18:31:02 executing program 2: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x2, @raw_data="af68ce8cd93732df4e563132275684af5fa6f195074f35f7f3a10c2452db70cc9cef74fccd8c5658b09a879342e3f44a88f965e4294268c3671b5b9f0a2cf0d32d45a2d98d5f72b57a3ba02a2a0c2dcd891f27470780c7debae29680134e025c8dce9e04701839863b474f165b3eac5576392c2c503dc34976285350a80a9d11bd8b9ce452af53830f5e1de670d451663b8e848cc45d29e20337265c88cb8c894dadd308ee8402f651c5c58ddbe64aa05ea8b2c0db77ef487f318453d991f0b4449b1343dc8f798f"}) 18:31:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8004550f, &(0x7f0000000000)) [ 761.784599][T16162] syz-executor.0 (16162) used greatest stack depth: 4872 bytes left 18:31:03 executing program 2: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x2, @raw_data="af68ce8cd93732df4e563132275684af5fa6f195074f35f7f3a10c2452db70cc9cef74fccd8c5658b09a879342e3f44a88f965e4294268c3671b5b9f0a2cf0d32d45a2d98d5f72b57a3ba02a2a0c2dcd891f27470780c7debae29680134e025c8dce9e04701839863b474f165b3eac5576392c2c503dc34976285350a80a9d11bd8b9ce452af53830f5e1de670d451663b8e848cc45d29e20337265c88cb8c894dadd308ee8402f651c5c58ddbe64aa05ea8b2c0db77ef487f318453d991f0b4449b1343dc8f798f"}) 18:31:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000000)) 18:31:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8004550f, &(0x7f0000000000)) [ 762.881965][ T6] not chained 980000 origins [ 762.886673][ T6] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 762.896611][ T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 762.906777][ T6] Workqueue: events psi_avgs_work [ 762.912036][ T6] Call Trace: [ 762.915383][ T6] [ 762.918381][ T6] dump_stack_lvl+0x1c8/0x256 [ 762.923218][ T6] dump_stack+0x1a/0x1c [ 762.927519][ T6] kmsan_internal_chain_origin+0x78/0x120 [ 762.933392][ T6] ? propagate_entity_load_avg+0x81/0x1450 [ 762.939336][ T6] ? collect_percpu_times+0x36d/0x19a0 [ 762.944930][ T6] ? psi_avgs_work+0x8c/0x2b0 [ 762.949734][ T6] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 762.955672][ T6] ? collect_percpu_times+0x36d/0x19a0 [ 762.961214][ T6] ? kmsan_internal_memmove_metadata+0x96/0x350 [ 762.967542][ T6] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 762.973431][ T6] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 762.979314][ T6] __msan_chain_origin+0xbd/0x140 [ 762.984413][ T6] update_averages+0xcb8/0xdf0 [ 762.989269][ T6] psi_avgs_work+0x1e3/0x2b0 [ 762.993933][ T6] ? psi_task_change+0x760/0x760 [ 762.998936][ T6] process_one_work+0xb27/0x13e0 [ 763.003972][ T6] worker_thread+0x1076/0x1d60 [ 763.008833][ T6] kthread+0x31b/0x430 [ 763.012958][ T6] ? worker_clr_flags+0x2b0/0x2b0 [ 763.018065][ T6] ? kthread_blkcg+0x120/0x120 [ 763.022891][ T6] ret_from_fork+0x1f/0x30 [ 763.027383][ T6] [ 763.030694][ T6] Uninit was stored to memory at: [ 763.035869][ T6] update_averages+0xcb8/0xdf0 [ 763.040691][ T6] psi_avgs_work+0x1e3/0x2b0 [ 763.045454][ T6] process_one_work+0xb27/0x13e0 [ 763.050466][ T6] worker_thread+0x1076/0x1d60 [ 763.055580][ T6] kthread+0x31b/0x430 [ 763.059711][ T6] ret_from_fork+0x1f/0x30 [ 763.064250][ T6] [ 763.066615][ T6] Uninit was stored to memory at: [ 763.071725][ T6] update_averages+0xcb8/0xdf0 [ 763.076636][ T6] psi_avgs_work+0x1e3/0x2b0 [ 763.081283][ T6] process_one_work+0xb27/0x13e0 [ 763.086521][ T6] worker_thread+0x1076/0x1d60 [ 763.091358][ T6] kthread+0x31b/0x430 [ 763.095534][ T6] ret_from_fork+0x1f/0x30 [ 763.100100][ T6] [ 763.102506][ T6] Uninit was stored to memory at: [ 763.107650][ T6] update_averages+0xcb8/0xdf0 [ 763.112757][ T6] psi_avgs_work+0x1e3/0x2b0 [ 763.117416][ T6] process_one_work+0xb27/0x13e0 [ 763.122544][ T6] worker_thread+0x1076/0x1d60 [ 763.127451][ T6] kthread+0x31b/0x430 [ 763.131639][ T6] ret_from_fork+0x1f/0x30 [ 763.137150][ T6] [ 763.139525][ T6] Uninit was stored to memory at: [ 763.144992][ T6] update_averages+0xcb8/0xdf0 [ 763.149883][ T6] psi_avgs_work+0x1e3/0x2b0 [ 763.154690][ T6] process_one_work+0xb27/0x13e0 [ 763.159851][ T6] worker_thread+0x1076/0x1d60 [ 763.164856][ T6] kthread+0x31b/0x430 [ 763.169042][ T6] ret_from_fork+0x1f/0x30 [ 763.173800][ T6] [ 763.176173][ T6] Uninit was stored to memory at: [ 763.181358][ T6] update_averages+0xcb8/0xdf0 [ 763.186324][ T6] psi_avgs_work+0x1e3/0x2b0 [ 763.191037][ T6] process_one_work+0xb27/0x13e0 [ 763.196272][ T6] worker_thread+0x1076/0x1d60 [ 763.201173][ T6] kthread+0x31b/0x430 [ 763.205459][ T6] ret_from_fork+0x1f/0x30 [ 763.210000][ T6] [ 763.212456][ T6] Uninit was stored to memory at: [ 763.217633][ T6] update_averages+0xcb8/0xdf0 [ 763.222628][ T6] psi_avgs_work+0x1e3/0x2b0 [ 763.227332][ T6] process_one_work+0xb27/0x13e0 [ 763.232562][ T6] worker_thread+0x1076/0x1d60 [ 763.237458][ T6] kthread+0x31b/0x430 [ 763.241632][ T6] ret_from_fork+0x1f/0x30 [ 763.246252][ T6] [ 763.248619][ T6] Uninit was stored to memory at: [ 763.253818][ T6] update_averages+0xcb8/0xdf0 [ 763.258645][ T6] psi_avgs_work+0x1e3/0x2b0 [ 763.263382][ T6] process_one_work+0xb27/0x13e0 [ 763.268457][ T6] worker_thread+0x1076/0x1d60 [ 763.273368][ T6] kthread+0x31b/0x430 [ 763.277515][ T6] ret_from_fork+0x1f/0x30 [ 763.282086][ T6] [ 763.284432][ T6] Uninit was created at: [ 763.288830][ T6] kmem_cache_alloc_trace+0x696/0xdf0 [ 763.294631][ T6] psi_cgroup_alloc+0x83/0x250 [ 763.299512][ T6] cgroup_mkdir+0x10a3/0x3080 [ 763.304388][ T6] kernfs_iop_mkdir+0x2ba/0x520 [ 763.309317][ T6] vfs_mkdir+0x62a/0x870 [ 763.313727][ T6] do_mkdirat+0x466/0x7b0 [ 763.318132][ T6] __x64_sys_mkdirat+0xc4/0x120 [ 763.323173][ T6] do_syscall_64+0x3d/0xb0 [ 763.327664][ T6] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 763.770209][T16182] not chained 990000 origins [ 763.774998][T16182] CPU: 0 PID: 16182 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 763.785529][T16182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 763.795668][T16182] Call Trace: [ 763.798984][T16182] [ 763.801950][T16182] dump_stack_lvl+0x1c8/0x256 [ 763.806752][T16182] dump_stack+0x1a/0x1c [ 763.811052][T16182] kmsan_internal_chain_origin+0x78/0x120 [ 763.816863][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 763.822756][T16182] ? kfree+0x44/0x980 [ 763.826804][T16182] ? filter_irq_stacks+0x5c/0x1a0 [ 763.831923][T16182] ? do_recvmmsg+0x55a/0x1180 [ 763.836726][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 763.842692][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 763.848654][T16182] ? should_fail+0x3f/0x810 [ 763.853290][T16182] ? __stack_depot_save+0x21/0x4b0 [ 763.858529][T16182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 763.864860][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 763.870796][T16182] __msan_chain_origin+0xbd/0x140 [ 763.875943][T16182] ___sys_recvmsg+0x52e/0x840 [ 763.880700][T16182] ? kmsan_internal_check_memory+0x94/0x530 [ 763.886714][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 763.892684][T16182] do_recvmmsg+0x55a/0x1180 [ 763.897347][T16182] ? do_syscall_64+0x3d/0xb0 [ 763.902038][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 763.907157][T16182] do_syscall_64+0x3d/0xb0 [ 763.911653][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 763.917665][T16182] RIP: 0033:0x7f1c45489279 [ 763.922146][T16182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 763.941882][T16182] RSP: 002b:00007f1c46516168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 763.950388][T16182] RAX: ffffffffffffffda RBX: 00007f1c4559c050 RCX: 00007f1c45489279 [ 763.958542][T16182] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 763.966601][T16182] RBP: 00007f1c454e3189 R08: 0000000000000000 R09: 0000000000000000 [ 763.974627][T16182] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 763.982667][T16182] R13: 00007f1c45acfb1f R14: 00007f1c46516300 R15: 0000000000022000 [ 763.990764][T16182] [ 763.994349][T16182] Uninit was stored to memory at: [ 763.999548][T16182] ___sys_recvmsg+0x52e/0x840 [ 764.004567][T16182] do_recvmmsg+0x55a/0x1180 [ 764.009187][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 764.014430][T16182] do_syscall_64+0x3d/0xb0 [ 764.018966][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 764.025158][T16182] [ 764.027547][T16182] Uninit was stored to memory at: [ 764.032804][T16182] ___sys_recvmsg+0x52e/0x840 [ 764.037579][T16182] do_recvmmsg+0x55a/0x1180 [ 764.042288][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 764.047430][T16182] do_syscall_64+0x3d/0xb0 [ 764.052135][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 764.058166][T16182] [ 764.060517][T16182] Uninit was stored to memory at: [ 764.065818][T16182] ___sys_recvmsg+0x52e/0x840 [ 764.070606][T16182] do_recvmmsg+0x55a/0x1180 [ 764.075388][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 764.080520][T16182] do_syscall_64+0x3d/0xb0 [ 764.085152][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 764.091189][T16182] [ 764.093695][T16182] Uninit was stored to memory at: [ 764.098839][T16182] ___sys_recvmsg+0x52e/0x840 [ 764.103728][T16182] do_recvmmsg+0x55a/0x1180 [ 764.108364][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 764.113602][T16182] do_syscall_64+0x3d/0xb0 [ 764.118114][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 764.124257][T16182] [ 764.126638][T16182] Uninit was stored to memory at: [ 764.132022][T16182] ___sys_recvmsg+0x52e/0x840 [ 764.136820][T16182] do_recvmmsg+0x55a/0x1180 [ 764.141425][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 764.146736][T16182] do_syscall_64+0x3d/0xb0 [ 764.151267][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 764.157410][T16182] [ 764.159789][T16182] Uninit was stored to memory at: [ 764.165138][T16182] ___sys_recvmsg+0x52e/0x840 [ 764.169915][T16182] do_recvmmsg+0x55a/0x1180 [ 764.174616][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 764.179760][T16182] do_syscall_64+0x3d/0xb0 [ 764.184381][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 764.190419][T16182] [ 764.192955][T16182] Uninit was stored to memory at: [ 764.198097][T16182] ___sys_recvmsg+0x52e/0x840 [ 764.203033][T16182] do_recvmmsg+0x55a/0x1180 [ 764.207656][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 764.212899][T16182] do_syscall_64+0x3d/0xb0 [ 764.217409][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 764.223580][T16182] [ 764.225962][T16182] Local variable msg_sys created at: [ 764.231310][T16182] do_recvmmsg+0x5c/0x1180 [ 764.235954][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 764.408690][T16182] not chained 1000000 origins [ 764.413579][T16182] CPU: 0 PID: 16182 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 764.424130][T16182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 764.434268][T16182] Call Trace: [ 764.437618][T16182] [ 764.440580][T16182] dump_stack_lvl+0x1c8/0x256 [ 764.445356][T16182] dump_stack+0x1a/0x1c [ 764.449606][T16182] kmsan_internal_chain_origin+0x78/0x120 [ 764.455446][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 764.461368][T16182] ? kfree+0x44/0x980 [ 764.465408][T16182] ? filter_irq_stacks+0x5c/0x1a0 [ 764.470519][T16182] ? do_recvmmsg+0x55a/0x1180 [ 764.475318][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 764.481280][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 764.487239][T16182] ? should_fail+0x3f/0x810 [ 764.491872][T16182] ? __stack_depot_save+0x21/0x4b0 [ 764.497073][T16182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 764.503404][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 764.509299][T16182] __msan_chain_origin+0xbd/0x140 [ 764.514401][T16182] ___sys_recvmsg+0x52e/0x840 [ 764.519168][T16182] ? kmsan_internal_check_memory+0x94/0x530 [ 764.525170][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 764.531129][T16182] do_recvmmsg+0x55a/0x1180 [ 764.535736][T16182] ? do_syscall_64+0x3d/0xb0 [ 764.540393][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 764.545497][T16182] do_syscall_64+0x3d/0xb0 [ 764.549973][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 764.555969][T16182] RIP: 0033:0x7f1c45489279 [ 764.560443][T16182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 764.580149][T16182] RSP: 002b:00007f1c46516168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 764.588637][T16182] RAX: ffffffffffffffda RBX: 00007f1c4559c050 RCX: 00007f1c45489279 [ 764.596669][T16182] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 764.604702][T16182] RBP: 00007f1c454e3189 R08: 0000000000000000 R09: 0000000000000000 [ 764.612740][T16182] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 764.620771][T16182] R13: 00007f1c45acfb1f R14: 00007f1c46516300 R15: 0000000000022000 [ 764.628848][T16182] [ 764.633759][T16182] Uninit was stored to memory at: [ 764.638948][T16182] ___sys_recvmsg+0x52e/0x840 [ 764.643863][T16182] do_recvmmsg+0x55a/0x1180 [ 764.648492][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 764.653807][T16182] do_syscall_64+0x3d/0xb0 [ 764.658331][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 764.664486][T16182] [ 764.666867][T16182] Uninit was stored to memory at: [ 764.672129][T16182] ___sys_recvmsg+0x52e/0x840 [ 764.676933][T16182] do_recvmmsg+0x55a/0x1180 [ 764.681533][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 764.686740][T16182] do_syscall_64+0x3d/0xb0 [ 764.691272][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 764.697406][T16182] [ 764.699791][T16182] Uninit was stored to memory at: [ 764.705106][T16182] ___sys_recvmsg+0x52e/0x840 [ 764.709882][T16182] do_recvmmsg+0x55a/0x1180 [ 764.714573][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 764.719709][T16182] do_syscall_64+0x3d/0xb0 [ 764.724333][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 764.730370][T16182] [ 764.732883][T16182] Uninit was stored to memory at: [ 764.738027][T16182] ___sys_recvmsg+0x52e/0x840 [ 764.742924][T16182] do_recvmmsg+0x55a/0x1180 [ 764.747539][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 764.752781][T16182] do_syscall_64+0x3d/0xb0 [ 764.757306][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 764.763528][T16182] [ 764.765910][T16182] Uninit was stored to memory at: [ 764.771044][T16182] ___sys_recvmsg+0x52e/0x840 [ 764.775889][T16182] do_recvmmsg+0x55a/0x1180 [ 764.780568][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 764.785782][T16182] do_syscall_64+0x3d/0xb0 [ 764.790294][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 764.796505][T16182] [ 764.798905][T16182] Uninit was stored to memory at: [ 764.804208][T16182] ___sys_recvmsg+0x52e/0x840 [ 764.808982][T16182] do_recvmmsg+0x55a/0x1180 [ 764.813702][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 764.818827][T16182] do_syscall_64+0x3d/0xb0 [ 764.823457][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 764.829501][T16182] [ 764.831973][T16182] Uninit was stored to memory at: [ 764.837150][T16182] ___sys_recvmsg+0x52e/0x840 [ 764.842030][T16182] do_recvmmsg+0x55a/0x1180 [ 764.846627][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 764.851713][T16182] do_syscall_64+0x3d/0xb0 [ 764.856361][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 764.862516][T16182] [ 764.864894][T16182] Local variable msg_sys created at: [ 764.870223][T16182] do_recvmmsg+0x5c/0x1180 [ 764.874854][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 765.034100][T16182] not chained 1010000 origins [ 765.038867][T16182] CPU: 0 PID: 16182 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 765.049348][T16182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 765.059448][T16182] Call Trace: [ 765.062759][T16182] [ 765.065717][T16182] dump_stack_lvl+0x1c8/0x256 [ 765.070487][T16182] dump_stack+0x1a/0x1c [ 765.074730][T16182] kmsan_internal_chain_origin+0x78/0x120 [ 765.080534][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 765.086441][T16182] ? kfree+0x44/0x980 [ 765.090558][T16182] ? filter_irq_stacks+0x5c/0x1a0 [ 765.095735][T16182] ? do_recvmmsg+0x55a/0x1180 [ 765.100512][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 765.106419][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 765.112315][T16182] ? should_fail+0x3f/0x810 [ 765.116992][T16182] ? __stack_depot_save+0x21/0x4b0 [ 765.122188][T16182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 765.128518][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 765.134434][T16182] __msan_chain_origin+0xbd/0x140 [ 765.139609][T16182] ___sys_recvmsg+0x52e/0x840 [ 765.144420][T16182] ? kmsan_internal_check_memory+0x94/0x530 [ 765.150402][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 765.156296][T16182] do_recvmmsg+0x55a/0x1180 [ 765.160885][T16182] ? do_syscall_64+0x3d/0xb0 [ 765.165551][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 765.170659][T16182] do_syscall_64+0x3d/0xb0 [ 765.175130][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 765.181109][T16182] RIP: 0033:0x7f1c45489279 [ 765.185592][T16182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 765.205318][T16182] RSP: 002b:00007f1c46516168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 765.213796][T16182] RAX: ffffffffffffffda RBX: 00007f1c4559c050 RCX: 00007f1c45489279 [ 765.221833][T16182] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 765.229854][T16182] RBP: 00007f1c454e3189 R08: 0000000000000000 R09: 0000000000000000 [ 765.237894][T16182] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 765.245956][T16182] R13: 00007f1c45acfb1f R14: 00007f1c46516300 R15: 0000000000022000 [ 765.254031][T16182] [ 765.257484][T16182] Uninit was stored to memory at: [ 765.262800][T16182] ___sys_recvmsg+0x52e/0x840 [ 765.267614][T16182] do_recvmmsg+0x55a/0x1180 [ 765.272322][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 765.277465][T16182] do_syscall_64+0x3d/0xb0 [ 765.282143][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 765.288179][T16182] [ 765.290534][T16182] Uninit was stored to memory at: [ 765.295803][T16182] ___sys_recvmsg+0x52e/0x840 [ 765.300575][T16182] do_recvmmsg+0x55a/0x1180 [ 765.305341][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 765.310465][T16182] do_syscall_64+0x3d/0xb0 [ 765.315100][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 765.321128][T16182] [ 765.323658][T16182] Uninit was stored to memory at: [ 765.328796][T16182] ___sys_recvmsg+0x52e/0x840 [ 765.333706][T16182] do_recvmmsg+0x55a/0x1180 [ 765.338302][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 765.343537][T16182] do_syscall_64+0x3d/0xb0 [ 765.348056][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 765.354193][T16182] [ 765.356575][T16182] Uninit was stored to memory at: [ 765.361926][T16182] ___sys_recvmsg+0x52e/0x840 [ 765.366710][T16182] do_recvmmsg+0x55a/0x1180 [ 765.371303][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 765.376547][T16182] do_syscall_64+0x3d/0xb0 [ 765.381064][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 765.387186][T16182] [ 765.389599][T16182] Uninit was stored to memory at: [ 765.394921][T16182] ___sys_recvmsg+0x52e/0x840 [ 765.399690][T16182] do_recvmmsg+0x55a/0x1180 [ 765.404381][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 765.409533][T16182] do_syscall_64+0x3d/0xb0 [ 765.414161][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 765.420189][T16182] [ 765.422694][T16182] Uninit was stored to memory at: [ 765.428008][T16182] ___sys_recvmsg+0x52e/0x840 [ 765.432956][T16182] do_recvmmsg+0x55a/0x1180 [ 765.437554][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 765.442768][T16182] do_syscall_64+0x3d/0xb0 [ 765.447278][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 765.453410][T16182] [ 765.455791][T16182] Uninit was stored to memory at: [ 765.460962][T16182] ___sys_recvmsg+0x52e/0x840 [ 765.465930][T16182] do_recvmmsg+0x55a/0x1180 [ 765.470549][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 765.475835][T16182] do_syscall_64+0x3d/0xb0 [ 765.480358][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 765.486521][T16182] [ 765.488896][T16182] Local variable msg_sys created at: [ 765.494404][T16182] do_recvmmsg+0x5c/0x1180 [ 765.498941][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 765.660468][T16182] not chained 1020000 origins [ 765.665302][T16182] CPU: 1 PID: 16182 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 765.675797][T16182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 765.685900][T16182] Call Trace: [ 765.689211][T16182] [ 765.692177][T16182] dump_stack_lvl+0x1c8/0x256 [ 765.696946][T16182] dump_stack+0x1a/0x1c [ 765.701174][T16182] kmsan_internal_chain_origin+0x78/0x120 [ 765.706975][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 765.712865][T16182] ? kfree+0x44/0x980 [ 765.716913][T16182] ? filter_irq_stacks+0x5c/0x1a0 [ 765.722036][T16182] ? do_recvmmsg+0x55a/0x1180 [ 765.726829][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 765.732798][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 765.738738][T16182] ? should_fail+0x3f/0x810 [ 765.743329][T16182] ? __stack_depot_save+0x21/0x4b0 [ 765.748520][T16182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 765.754846][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 765.760737][T16182] __msan_chain_origin+0xbd/0x140 [ 765.765851][T16182] ___sys_recvmsg+0x52e/0x840 [ 765.770604][T16182] ? kmsan_internal_check_memory+0x94/0x530 [ 765.776626][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 765.782589][T16182] do_recvmmsg+0x55a/0x1180 [ 765.787206][T16182] ? do_syscall_64+0x3d/0xb0 [ 765.791859][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 765.796954][T16182] do_syscall_64+0x3d/0xb0 [ 765.801429][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 765.807409][T16182] RIP: 0033:0x7f1c45489279 [ 765.811867][T16182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 765.831556][T16182] RSP: 002b:00007f1c46516168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 765.840039][T16182] RAX: ffffffffffffffda RBX: 00007f1c4559c050 RCX: 00007f1c45489279 [ 765.848092][T16182] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 765.856113][T16182] RBP: 00007f1c454e3189 R08: 0000000000000000 R09: 0000000000000000 [ 765.864134][T16182] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 765.872284][T16182] R13: 00007f1c45acfb1f R14: 00007f1c46516300 R15: 0000000000022000 [ 765.880375][T16182] [ 765.886386][T16182] Uninit was stored to memory at: [ 765.891585][T16182] ___sys_recvmsg+0x52e/0x840 [ 765.896481][T16182] do_recvmmsg+0x55a/0x1180 [ 765.898920][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 765.901137][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 765.907582][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 [ 765.912593][T16182] do_syscall_64+0x3d/0xb0 [ 765.923498][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 765.929538][T16182] [ 765.932004][T16182] Uninit was stored to memory at: [ 765.937192][T16182] ___sys_recvmsg+0x52e/0x840 [ 765.942085][T16182] do_recvmmsg+0x55a/0x1180 [ 765.946701][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 765.951931][T16182] do_syscall_64+0x3d/0xb0 [ 765.956459][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 765.962609][T16182] [ 765.964971][T16182] Uninit was stored to memory at: [ 765.970092][T16182] ___sys_recvmsg+0x52e/0x840 [ 765.974937][T16182] do_recvmmsg+0x55a/0x1180 [ 765.979539][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 765.984788][T16182] do_syscall_64+0x3d/0xb0 [ 765.989299][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 765.995505][T16182] [ 765.997892][T16182] Uninit was stored to memory at: [ 766.003191][T16182] ___sys_recvmsg+0x52e/0x840 [ 766.007972][T16182] do_recvmmsg+0x55a/0x1180 [ 766.012683][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 766.017826][T16182] do_syscall_64+0x3d/0xb0 [ 766.022472][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 766.028503][T16182] [ 766.030849][T16182] Uninit was stored to memory at: [ 766.036110][T16182] ___sys_recvmsg+0x52e/0x840 [ 766.040881][T16182] do_recvmmsg+0x55a/0x1180 [ 766.045607][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 766.050736][T16182] do_syscall_64+0x3d/0xb0 [ 766.055344][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 766.061393][T16182] [ 766.063900][T16182] Uninit was stored to memory at: [ 766.069051][T16182] ___sys_recvmsg+0x52e/0x840 [ 766.073962][T16182] do_recvmmsg+0x55a/0x1180 [ 766.078584][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 766.083783][T16182] do_syscall_64+0x3d/0xb0 [ 766.088305][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 766.094443][T16182] [ 766.096808][T16182] Uninit was stored to memory at: [ 766.102074][T16182] ___sys_recvmsg+0x52e/0x840 [ 766.106859][T16182] do_recvmmsg+0x55a/0x1180 [ 766.111448][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 766.116645][T16182] do_syscall_64+0x3d/0xb0 [ 766.121162][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 766.127305][T16182] [ 766.129689][T16182] Local variable msg_sys created at: [ 766.135188][T16182] do_recvmmsg+0x5c/0x1180 [ 766.139696][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 766.421587][T16182] not chained 1030000 origins [ 766.426388][T16182] CPU: 0 PID: 16182 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 766.436886][T16182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 766.447017][T16182] Call Trace: [ 766.450329][T16182] [ 766.453303][T16182] dump_stack_lvl+0x1c8/0x256 [ 766.458119][T16182] dump_stack+0x1a/0x1c [ 766.462353][T16182] kmsan_internal_chain_origin+0x78/0x120 [ 766.468171][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 766.474075][T16182] ? kfree+0x44/0x980 [ 766.478145][T16182] ? filter_irq_stacks+0x5c/0x1a0 [ 766.483345][T16182] ? do_recvmmsg+0x55a/0x1180 [ 766.488154][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 766.494140][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 766.500110][T16182] ? should_fail+0x3f/0x810 [ 766.504758][T16182] ? __stack_depot_save+0x21/0x4b0 [ 766.510015][T16182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 766.516406][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 766.522324][T16182] __msan_chain_origin+0xbd/0x140 [ 766.527473][T16182] ___sys_recvmsg+0x52e/0x840 [ 766.532256][T16182] ? kmsan_internal_check_memory+0x94/0x530 [ 766.538279][T16182] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 766.544189][T16182] do_recvmmsg+0x55a/0x1180 [ 766.548815][T16182] ? do_syscall_64+0x3d/0xb0 [ 766.553486][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 766.558627][T16182] do_syscall_64+0x3d/0xb0 [ 766.563118][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 766.569149][T16182] RIP: 0033:0x7f1c45489279 [ 766.573626][T16182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 766.593377][T16182] RSP: 002b:00007f1c46516168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 766.601921][T16182] RAX: ffffffffffffffda RBX: 00007f1c4559c050 RCX: 00007f1c45489279 [ 766.609982][T16182] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 766.618018][T16182] RBP: 00007f1c454e3189 R08: 0000000000000000 R09: 0000000000000000 [ 766.626098][T16182] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 766.634138][T16182] R13: 00007f1c45acfb1f R14: 00007f1c46516300 R15: 0000000000022000 [ 766.642204][T16182] [ 766.646808][T16182] Uninit was stored to memory at: [ 766.652077][T16182] ___sys_recvmsg+0x52e/0x840 [ 766.656865][T16182] do_recvmmsg+0x55a/0x1180 [ 766.661483][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 766.666751][T16182] do_syscall_64+0x3d/0xb0 [ 766.671264][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 766.677359][T16182] [ 766.679731][T16182] Uninit was stored to memory at: [ 766.685005][T16182] ___sys_recvmsg+0x52e/0x840 [ 766.689774][T16182] do_recvmmsg+0x55a/0x1180 [ 766.694434][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 766.699568][T16182] do_syscall_64+0x3d/0xb0 [ 766.704206][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 766.710264][T16182] [ 766.712766][T16182] Uninit was stored to memory at: [ 766.717906][T16182] ___sys_recvmsg+0x52e/0x840 [ 766.722796][T16182] do_recvmmsg+0x55a/0x1180 [ 766.727407][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 766.732612][T16182] do_syscall_64+0x3d/0xb0 [ 766.737147][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 766.743312][T16182] [ 766.745706][T16182] Uninit was stored to memory at: [ 766.750881][T16182] ___sys_recvmsg+0x52e/0x840 [ 766.755792][T16182] do_recvmmsg+0x55a/0x1180 [ 766.760405][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 766.765614][T16182] do_syscall_64+0x3d/0xb0 [ 766.770152][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 766.776302][T16182] [ 766.778688][T16182] Uninit was stored to memory at: [ 766.783949][T16182] ___sys_recvmsg+0x52e/0x840 [ 766.788742][T16182] do_recvmmsg+0x55a/0x1180 [ 766.793424][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 766.798575][T16182] do_syscall_64+0x3d/0xb0 [ 766.803219][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 766.809265][T16182] [ 766.811644][T16182] Uninit was stored to memory at: [ 766.816938][T16182] ___sys_recvmsg+0x52e/0x840 [ 766.821726][T16182] do_recvmmsg+0x55a/0x1180 [ 766.826447][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 766.831597][T16182] do_syscall_64+0x3d/0xb0 [ 766.836417][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 766.842533][T16182] [ 766.844911][T16182] Uninit was stored to memory at: [ 766.850097][T16182] ___sys_recvmsg+0x52e/0x840 [ 766.855008][T16182] do_recvmmsg+0x55a/0x1180 [ 766.859632][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 766.864898][T16182] do_syscall_64+0x3d/0xb0 [ 766.869431][T16182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 766.875619][T16182] [ 766.878002][T16182] Local variable msg_sys created at: [ 766.883475][T16182] do_recvmmsg+0x5c/0x1180 [ 766.888002][T16182] __x64_sys_recvmmsg+0x3a7/0x4b0 18:31:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@union={0x9, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000100)=""/151, 0x2f, 0x97, 0x1}, 0x20) 18:31:08 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x2, @raw_data="af68ce8cd93732df4e563132275684af5fa6f195074f35f7f3a10c2452db70cc9cef74fccd8c5658b09a879342e3f44a88f965e4294268c3671b5b9f0a2cf0d32d45a2d98d5f72b57a3ba02a2a0c2dcd891f27470780c7debae29680134e025c8dce9e04701839863b474f165b3eac5576392c2c503dc34976285350a80a9d11bd8b9ce452af53830f5e1de670d451663b8e848cc45d29e20337265c88cb8c894dadd308ee8402f651c5c58ddbe64aa05ea8b2c0db77ef487f318453d991f0b4449b1343dc8f798f"}) 18:31:08 executing program 1: getitimer(0x0, &(0x7f0000000040)) clock_gettime(0x3, &(0x7f0000000100)) 18:31:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8004550f, &(0x7f0000000000)) 18:31:08 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0]}}}}}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 18:31:08 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendfile(r2, r1, 0x0, 0x70) [ 767.192130][T16214] ===================================================== [ 767.199343][T16214] BUG: KMSAN: uninit-value in psi_show+0x701/0x810 [ 767.206264][T16214] psi_show+0x701/0x810 [ 767.210562][T16214] cgroup_cpu_pressure_show+0x2b9/0x300 [ 767.216507][T16214] cgroup_seqfile_show+0x1fe/0x470 [ 767.221878][T16214] kernfs_seq_show+0x13b/0x1f0 [ 767.226779][T16214] seq_read_iter+0x926/0x20c0 [ 767.231617][T16214] kernfs_fop_read_iter+0x1f2/0xa10 18:31:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) [ 767.237120][T16214] generic_file_splice_read+0x1e5/0x770 [ 767.243082][T16214] splice_direct_to_actor+0x5b2/0x1190 [ 767.248702][T16214] do_splice_direct+0x252/0x3d0 [ 767.253930][T16214] do_sendfile+0xbe9/0x1ba0 [ 767.258621][T16214] __se_sys_sendfile64+0x202/0x2a0 [ 767.264020][T16214] __x64_sys_sendfile64+0xb9/0x110 [ 767.269257][T16214] do_syscall_64+0x3d/0xb0 [ 767.274036][T16214] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 767.280088][T16214] [ 767.282655][T16214] Uninit was created at: [ 767.287082][T16214] kmem_cache_alloc_trace+0x696/0xdf0 18:31:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8004550f, &(0x7f0000000000)) [ 767.292798][T16214] psi_cgroup_alloc+0x83/0x250 [ 767.297696][T16214] cgroup_mkdir+0x10a3/0x3080 [ 767.302712][T16214] kernfs_iop_mkdir+0x2ba/0x520 [ 767.307692][T16214] vfs_mkdir+0x62a/0x870 [ 767.312258][T16214] do_mkdirat+0x466/0x7b0 [ 767.316724][T16214] __x64_sys_mkdirat+0xc4/0x120 [ 767.321701][T16214] do_syscall_64+0x3d/0xb0 [ 767.326540][T16214] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 767.333481][T16214] [ 767.335867][T16214] CPU: 1 PID: 16214 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 767.346579][T16214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 767.356889][T16214] ===================================================== [ 767.364246][T16214] Disabling lock debugging due to kernel taint [ 767.371535][T16214] Kernel panic - not syncing: kmsan.panic set ... [ 767.378031][T16214] CPU: 1 PID: 16214 Comm: syz-executor.0 Tainted: G B 6.0.0-rc2-syzkaller-47461-gac3859c02d7f #0 [ 767.390042][T16214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 767.400180][T16214] Call Trace: [ 767.403523][T16214] [ 767.406520][T16214] dump_stack_lvl+0x1c8/0x256 [ 767.411348][T16214] dump_stack+0x1a/0x1c [ 767.415629][T16214] panic+0x4d3/0xc69 [ 767.419676][T16214] kmsan_report+0x2cc/0x2d0 [ 767.424375][T16214] ? __msan_warning+0x92/0x110 [ 767.429269][T16214] ? psi_show+0x701/0x810 [ 767.433708][T16214] ? cgroup_cpu_pressure_show+0x2b9/0x300 [ 767.439576][T16214] ? cgroup_seqfile_show+0x1fe/0x470 [ 767.445000][T16214] ? kernfs_seq_show+0x13b/0x1f0 [ 767.450054][T16214] ? seq_read_iter+0x926/0x20c0 [ 767.455024][T16214] ? kernfs_fop_read_iter+0x1f2/0xa10 [ 767.460509][T16214] ? generic_file_splice_read+0x1e5/0x770 [ 767.466365][T16214] ? splice_direct_to_actor+0x5b2/0x1190 [ 767.472137][T16214] ? do_splice_direct+0x252/0x3d0 [ 767.477286][T16214] ? do_sendfile+0xbe9/0x1ba0 [ 767.482065][T16214] ? __se_sys_sendfile64+0x202/0x2a0 [ 767.487459][T16214] ? __x64_sys_sendfile64+0xb9/0x110 [ 767.492847][T16214] ? do_syscall_64+0x3d/0xb0 [ 767.497536][T16214] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 767.503745][T16214] ? collect_percpu_times+0x196e/0x19a0 [ 767.509440][T16214] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 767.515843][T16214] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 767.521798][T16214] __msan_warning+0x92/0x110 [ 767.526509][T16214] psi_show+0x701/0x810 [ 767.530792][T16214] cgroup_cpu_pressure_show+0x2b9/0x300 [ 767.536480][T16214] ? cgroup_memory_pressure_write+0x50/0x50 [ 767.542512][T16214] cgroup_seqfile_show+0x1fe/0x470 [ 767.547759][T16214] ? cgroup_file_release+0x280/0x280 [ 767.553170][T16214] kernfs_seq_show+0x13b/0x1f0 [ 767.558054][T16214] ? kernfs_seq_next+0x300/0x300 [ 767.563099][T16214] seq_read_iter+0x926/0x20c0 [ 767.567922][T16214] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 767.573870][T16214] ? generic_file_splice_read+0x6e/0x770 [ 767.579663][T16214] kernfs_fop_read_iter+0x1f2/0xa10 [ 767.584992][T16214] ? kernfs_notify_workfn+0xbc0/0xbc0 [ 767.590479][T16214] ? kernfs_notify_workfn+0xbc0/0xbc0 [ 767.595962][T16214] generic_file_splice_read+0x1e5/0x770 [ 767.601648][T16214] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 767.607612][T16214] ? splice_shrink_spd+0xe0/0xe0 [ 767.612673][T16214] splice_direct_to_actor+0x5b2/0x1190 [ 767.618264][T16214] ? do_splice_direct+0x3d0/0x3d0 [ 767.623449][T16214] do_splice_direct+0x252/0x3d0 [ 767.628442][T16214] do_sendfile+0xbe9/0x1ba0 [ 767.633076][T16214] __se_sys_sendfile64+0x202/0x2a0 [ 767.638295][T16214] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 767.644239][T16214] __x64_sys_sendfile64+0xb9/0x110 [ 767.649465][T16214] do_syscall_64+0x3d/0xb0 [ 767.654000][T16214] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 767.660029][T16214] RIP: 0033:0x7f7deda89279 [ 767.664533][T16214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 767.684292][T16214] RSP: 002b:00007f7deebd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 767.692822][T16214] RAX: ffffffffffffffda RBX: 00007f7dedb9bf80 RCX: 00007f7deda89279 [ 767.700894][T16214] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 767.709037][T16214] RBP: 00007f7dedae3189 R08: 0000000000000000 R09: 0000000000000000 [ 767.717096][T16214] R10: 0000000000000070 R11: 0000000000000246 R12: 0000000000000000 [ 767.725153][T16214] R13: 00007f7dee0cfb1f R14: 00007f7deebd1300 R15: 0000000000022000 [ 767.733247][T16214] [ 767.736397][T16214] Kernel Offset: disabled [ 767.740772][T16214] Rebooting in 86400 seconds..