1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.541033][ T3549] usb 5-1: Product: syz [ 758.545925][ T3549] usb 5-1: Manufacturer: syz [ 758.550751][ T3549] usb 5-1: SerialNumber: syz [ 758.600768][T11105] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 758.782532][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 758.814079][T11120] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 758.822169][T11120] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 758.904406][ T3551] usb 4-1: USB disconnect, device number 14 [ 758.938392][ T25] usb 2-1: config 1 has an invalid descriptor of length 243, skipping remainder of the config [ 758.949005][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 16:07:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000280)={'veth0_to_bridge\x00', @ifru_ivalue}) [ 759.254818][ T3549] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 759.274536][ T3595] usb 3-1: USB disconnect, device number 10 [ 759.285241][ T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 759.295607][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.303990][ T25] usb 2-1: Product: syz [ 759.308373][ T25] usb 2-1: Manufacturer: syz [ 759.313275][ T25] usb 2-1: SerialNumber: syz 16:07:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000280), &(0x7f0000000300)=0x4) [ 759.464484][ T3549] usb 5-1: USB disconnect, device number 7 16:07:19 executing program 3: unshare(0x2000000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x21, 0x2}, &(0x7f0000000540)) unshare(0x60020200) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) unshare(0x76000800) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000003a40)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f00000001c0)=@in={0x2, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x2018}}, {{&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x2, 0x3}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000007ac285338a00001000"/40], 0x28}}], 0x2, 0x4000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) unshare(0x46010900) unshare(0x240) mkdir(&(0x7f0000000040)='./file1\x00', 0x168) 16:07:19 executing program 2: syz_open_dev$vcsn(&(0x7f0000001300), 0x0, 0xce642) [ 759.943434][ T25] usb 2-1: 0:2 : does not exist 16:07:20 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_clone(0xc9202000, 0x0, 0x0, 0x0, 0x0, 0x0) 16:07:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000021c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x9c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x90, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfc}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x44, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x40}, {0x8, 0x0, 0xd4}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x119}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0xfeb}, {0x8, 0x0, 0x4e}, {0x8}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xe0c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xe00, 0x4, 0x0, 0x1, [{0x2d0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xb0, 0x1, "31e2f694b05ea84a7b0838c8a5c8a4f6a8b85d857421943b5270da9fe7efa637ae8c36ad0c4cd38089028872f4a9420e4752493637d8042192a17b0546a8ec50ffd7f62bd90b1160c252d8944a0e03fa36c81851cd2dabe7b38aa75f9e83d741d08463ed246156cbaf88aa04ad7a3155a469fc12fafbd5f728f4c9488d1fb4be992e77f50863e0fe729f03876c43fe8e6ddad8bf42bf618926c4a53b722c62519363bb562f64ea20b0f4479b"}, @NL80211_PKTPAT_PATTERN={0xfa, 0x2, "a04515e0d1c548146038cd4df7910a220a5c6facc010d153214caf1a9f6a21afe2086f84c3c4a1deda2761347b6bed8336e73d0ffb73d171b25c2dbada8ba3a227132cc1f73afc79d77dbb32eec7978cdb40a17c14ee559f98fc3d59252a7f34982f335eea624d85cc2d59c251ffffc172a7a68d6d0ca7cd9372d6fc070d4df9630e595bbda8635459a1ad33b1a4f2258285dbfc3d6d3c6f90a0823b93e9dfbc57bd701a44ec24857d55e2d369a764d9134febef16f7a8bd4e71f160d60fb0a18e2f99faad70f931e47f6f132e6094db1d0f5a99c8fa62b09c6e3a2b9ca0981ba0b0e5f464b054243ecbe52d045cd8789cf57652fd9e"}, @NL80211_PKTPAT_PATTERN={0x1a, 0x2, "15bfdf69685ca67a62bec238d929a2b37bd78419a44b"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_MASK={0xea, 0x1, "651beadebacd6bfb31390fc0e13ccb6cc1a70413b01517daf64a47630f6acfa06ae2bddfae49c5d46459cca7cf26193af68397c871d46bdc692cc11b48fb4228de0f4db35a57fbf0f035a0a38160f09b025735d74b39c80fec3ed1ee491855353cb6200965c74014aad949e7fab469e4c16619ec1aecb1b07d1f6933caae00431272e203e7c4cbd651071b1864c0f45c4e221e87c9115fc25f8771802b6868825d36609797849be64f9a7b6d7b367281a3d928b12275b3de1255e75eba5b9bddb6e317267c9c778e467abcf75527022db988d9e9283a25f1c969232139b0298ec18db15058e6"}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0x2dc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0xfd, 0x1, "48571b09b3e41656b4461ced6dd25fe86c27a744ba74f9714a070171a733d366644478d23026ae3284bf5f173b922468eef94066197a3a9e6d173b7973c4d18e5a7cf67638d8d8822b194e64748e29ec1d7b07ddf960b96367233fcac3638bb14239bcfff6294ecc611b8a07916970fa9408696727d69b4021f62e41627c9908b4b1798df01f9c7d221f4d99404fcb072e67f964068565067ab245c189a7e56f87c8d3d2690615de8cd236fcf5333268a5e47efff5a9f53916de8bcc23510cda55149a3664ed5224ccf7ca2c7e381eaa105c59ce4cb69400e379ac80839b5c42908c133840b5593919e26e78ffb2ed875f0888d272f0876b6e"}, @NL80211_PKTPAT_MASK={0xd6, 0x1, "359efb5f9085390fa983f93c753893549ae072bcba98d87b07086b5bb85200634544a0433a31c7f6103168f09f204ae92644ade12fd7a010f147f83840de46a0407212e4b1f3a45b49aacd1512b94e8f7bed3ad229af8dacff1500b47f5f6ce4b98876381708219a9f338f0071c7763cc65913b3493e8d5d3730bbf5ea4f491f445adccec1f47d6a663a3125c4f9450bdc1f8ee2b9b23ae47964482ca98d02265f2957e999a628e7676a4d4718bf7e30a84fd8bf103bf45ff7e10772b2163d9730e5f928d83e90efed7fc24c323d3d26c607"}, @NL80211_PKTPAT_PATTERN={0x20, 0x2, "d3cd3adc9e603c056fdb32abd668cff9c0d7d5fba3a1232654ef4f72"}, @NL80211_PKTPAT_MASK={0x86, 0x1, "65cbae604a850cfbeed76dee5e02a1e1c1e704165dbc47e97c0eb477e4f46a4561b01f8c5f0ff0126fb936778f2da20a3624e4923b289d6a3569ad5e5301a73abf297d5170a2d06a88046decd4e62238b435bfe4b24fc081f33e84f8a2c5a5eab1cb7cc9b496e697f6edb6400542f31c026d87de48d80c61cd31ad107a6ba2a0a436"}, @NL80211_PKTPAT_PATTERN={0x43, 0x2, "2c44d9f870111c9748f6870fb8371984c0f648fb92ea82a2b4a4e99688a087d395c6ba923465fec8c8bdbad27920a26606504a5309900aa63410aba470c06a"}, @NL80211_PKTPAT_PATTERN={0xc, 0x2, "557a81e999dc2310"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x4f, 0x1, "433c21677a2c69686a6d684038303c6e49ab06985fa28811aaef27c1b979d690c256d97e5bfee1c8ef6a8bfae481622774e02cade43811f0b3d1e21fe0fc069cb0eb3571dfe93d376f6b49"}, @NL80211_PKTPAT_MASK={0x75, 0x1, "a64f8bb9c040d5ccb5b1a3761f06986de415b2bedc6bd9d0aa583cfaf5f45742256664a1e259b6e8edbbe183c3bd074c489f262603101d4e775953b1858fbb0d4a5e78bbc087418d1daca5076374078a9d0b9044577e2e541f2e205b1b7909615814d088d4cdaff8aa2c6972e9ed57dc95"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xf22}]}, {0x320, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xa1, 0x2, "1d596ceea8c399a7a6d821e1371a7e18990c76bc3f863577d4e92643552c7d680e147cdfe5ec1741851f0fd7221166224d6771d7c4a7844d10082f90c793c452d9df5924d5b3f94db11e21b9bafac7e6d2f46d3587a45e4c30713b79f9d563b4d322115215f4a379e0217637b7ba96fa75ae1d236f7d26110f3f2543a64b9ef4b7243ec5394a7c4a2e5be46629bb05246328548a3bef49e0611f26f0e6"}, @NL80211_PKTPAT_PATTERN={0xfd, 0x2, "23e74e68b84016fdd16aca95fba7b17292a94f46b3621f0e60e7128a2815bc5d1880835c4dfcb0def753165266b775aec45c350d95c721febfa7338e48f0602c9a0d4a8f6c871d707a9d6aed6a8cb2fdc6461a348f12cf0c9b84ae5cff7b8a31517d6c04256500c395764a4c2ed4d7914967d0dceb07fc627747c2f2917d88d9d7ce2cfee3a15e5dd9ec74b10aa6676187a0bc2a1ba7af5ef5a62ddce09cd7d58c704108e3824f322e99159c2ce9e92e7ce80af9558fe123204995cf31fcc2af098ef82954820d1a932283b347a1c33832b4c943ac676710f74f4b3268f9615f91e4a03d79a78fb00e8bd725f39388713fe3dbedb76c8e5550"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x75, 0x1, "c67db10c11c8d726d1cb877aa8f3e8e0f04ac69c98589da703883884ebd28b5841a38255a08763ada33a439d22c866909ac93559fe2559c4771b11796f98cb56fba22983a0338593feae2ce922700a2b5c202eab72d9fa9ced6d1d45ad614665ee3533ebbb89d590c9382d8c67f21d703a"}, @NL80211_PKTPAT_PATTERN={0x1d, 0x2, "9cd9ac275b195c1c9198a3dd6c9bdfe0eea75600cc939a0889"}, @NL80211_PKTPAT_PATTERN={0x68, 0x2, "b67e17693c6a8d94fa0e7027891d3650b30a6e40bb40609f161bbce1ebbd25999fc25e26bc7b9fb1edfdb160ae7edb66f9e4bf07d6c3b913c85dc8911d2a4cf8c7c11bdad2e0f7d29527044c846bb4fef18ae43914a3a4d83a376955646487a58b7d7a9a"}, @NL80211_PKTPAT_MASK={0x70, 0x1, "00204175f6f11cd65ce56ba4eb33218064bcc12e78795e48a818a2561326862a3c46ea71878de46637e522d1d1e741ef7c181bc3c526ecceccc779ee3837c388e90315a5f430caea505e4942cb74f72c324d47c1cef8651eb05022cf410eddc3305e4b6f961ae643e0acdb14"}]}, {0x44c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x2f, 0x2, "741fcec61317107f4583aef5b0270cad3b3f96870e500c9e559002e27f1fa3f67d4f7a154a7926e7d82bbc"}, @NL80211_PKTPAT_MASK={0x95, 0x1, "9f6846e5257486ea89ef9447d3b20681b0cd1e4a49398af39928d7740e41d9e1408697587144e25d5565c257fec90dcef2451f99bb64f78c6fec789fa80172ec5a4a8c19b6bbe48902b6599c022a5138aaa1c64d8248841b224dc3c62ae138b19c4652c0283869e10f60e80032c0bc8db42efa8c6f2d24b70c52f01403d1fbcfffd00cc6459057c3a9f2a3d6853abce7e2"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_PATTERN={0x69, 0x2, "21e6f8f42f71c622db3cc44bfb36b0e8b9a48e78b336f602e420a885e1eb086f9a45b64dcf86ed44db1ca25548b4c0bf5a9446332ad7e642970ffeafb5bb6e114bd81eb67ef3866a4b9dc293384eb72601973c3f021b86471c9c20cce95431841773e1b487"}, @NL80211_PKTPAT_PATTERN={0x304, 0x2, "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"}]}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x4}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x200000d4}, 0x8050) [ 760.085827][ T25] usb 2-1: USB disconnect, device number 11 16:07:20 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:07:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000280)={'veth0_to_bridge\x00', @ifru_ivalue}) 16:07:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x30, 0x0, &(0x7f0000002180)) 16:07:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r1) 16:07:21 executing program 3: unshare(0x2000000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x21, 0x2}, &(0x7f0000000540)) unshare(0x60020200) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) unshare(0x76000800) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000003a40)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f00000001c0)=@in={0x2, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x2018}}, {{&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x2, 0x3}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000007ac285338a00001000"/40], 0x28}}], 0x2, 0x4000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) unshare(0x46010900) unshare(0x240) mkdir(&(0x7f0000000040)='./file1\x00', 0x168) 16:07:21 executing program 0: socketpair(0x2, 0x3, 0x0, &(0x7f0000000180)) 16:07:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x28}]}, 0x10) 16:07:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000830000000800", @ANYRES32=0x0, @ANYBLOB="0c0099"], 0x34}}, 0x0) 16:07:21 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "57f8e47a4152d935f1ebb6c572a8afd8e904e72d0bdc2e8e77b7c9067dcc3a00d1f875c45c5be85aac76ca184a7257d5b1832aa9deb1d8afae355094e3649cb9"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000000)='rxrpc\x00', 0x0) 16:07:22 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 762.580576][T11167] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 16:07:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 16:07:23 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x5450, 0x0) 16:07:23 executing program 1: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x88e80) 16:07:23 executing program 5: bpf$MAP_CREATE(0x2, &(0x7f0000000700), 0x48) 16:07:23 executing program 0: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, &(0x7f0000000000)='logon\x00', &(0x7f0000000040)='^,[,\x83@\x00') 16:07:24 executing program 2: fanotify_mark(0xffffffffffffffff, 0x2, 0x40000008, 0xffffffffffffffff, 0x0) 16:07:25 executing program 3: unshare(0x2000000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x21, 0x2}, &(0x7f0000000540)) unshare(0x60020200) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) unshare(0x76000800) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000003a40)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f00000001c0)=@in={0x2, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x2018}}, {{&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x2, 0x3}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000007ac285338a00001000"/40], 0x28}}], 0x2, 0x4000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) unshare(0x46010900) unshare(0x240) mkdir(&(0x7f0000000040)='./file1\x00', 0x168) 16:07:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 16:07:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000021c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x9c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x90, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfc}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x44, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x40}, {0x8, 0x0, 0xd4}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x119}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0xfeb}, {0x8, 0x0, 0x4e}, {0x8, 0x0, 0x7f}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xe0c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xe04, 0x4, 0x0, 0x1, [{0x2d0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xae, 0x1, "31e2f694b05ea84a7b0838c8a5c8a4f6a8b85d857421943b5270da9fe7efa637ae8c36ad0c4cd38089028872f4a9420e4752493637d8042192a17b0546a8ec50ffd7f62bd90b1160c252d8944a0e03fa36c81851cd2dabe7b38aa75f9e83d741d08463ed246156cbaf88aa04ad7a3155a469fc12fafbd5f728f4c9488d1fb4be992e77f50863e0fe729f03876c43fe8e6ddad8bf42bf618926c4a53b722c62519363bb562f64ea20b0f4"}, @NL80211_PKTPAT_PATTERN={0xf9, 0x2, "a04515e0d1c548146038cd4df7910a220a5c6facc010d153214caf1a9f6a21afe2086f84c3c4a1deda2761347b6bed8336e73d0ffb73d171b25c2dbada8ba3a227132cc1f73afc79d77dbb32eec7978cdb40a17c14ee559f98fc3d59252a7f34982f335eea624d85cc2d59c251ffffc172a7a68d6d0ca7cd9372d6fc070d4df9630e595bbda8635459a1ad33b1a4f2258285dbfc3d6d3c6f90a0823b93e9dfbc57bd701a44ec24857d55e2d369a764d9134febef16f7a8bd4e71f160d60fb0a18e2f99faad70f931e47f6f132e6094db1d0f5a99c8fa62b09c6e3a2b9ca0981ba0b0e5f464b054243ecbe52d045cd8789cf57652fd"}, @NL80211_PKTPAT_PATTERN={0x1a, 0x2, "15bfdf69685ca67a62bec238d929a2b37bd78419a44b"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_MASK={0xea, 0x1, "651beadebacd6bfb31390fc0e13ccb6cc1a70413b01517daf64a47630f6acfa06ae2bddfae49c5d46459cca7cf26193af68397c871d46bdc692cc11b48fb4228de0f4db35a57fbf0f035a0a38160f09b025735d74b39c80fec3ed1ee491855353cb6200965c74014aad949e7fab469e4c16619ec1aecb1b07d1f6933caae00431272e203e7c4cbd651071b1864c0f45c4e221e87c9115fc25f8771802b6868825d36609797849be64f9a7b6d7b367281a3d928b12275b3de1255e75eba5b9bddb6e317267c9c778e467abcf75527022db988d9e9283a25f1c969232139b0298ec18db15058e6"}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0x2dc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x88}, @NL80211_PKTPAT_MASK={0xfe, 0x1, "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"}, @NL80211_PKTPAT_MASK={0xd6, 0x1, "359efb5f9085390fa983f93c753893549ae072bcba98d87b07086b5bb85200634544a0433a31c7f6103168f09f204ae92644ade12fd7a010f147f83840de46a0407212e4b1f3a45b49aacd1512b94e8f7bed3ad229af8dacff1500b47f5f6ce4b98876381708219a9f338f0071c7763cc65913b3493e8d5d3730bbf5ea4f491f445adccec1f47d6a663a3125c4f9450bdc1f8ee2b9b23ae47964482ca98d02265f2957e999a628e7676a4d4718bf7e30a84fd8bf103bf45ff7e10772b2163d9730e5f928d83e90efed7fc24c323d3d26c607"}, @NL80211_PKTPAT_PATTERN={0x20, 0x2, "d3cd3adc9e603c056fdb32abd668cff9c0d7d5fba3a1232654ef4f72"}, @NL80211_PKTPAT_MASK={0x86, 0x1, "65cbae604a850cfbeed76dee5e02a1e1c1e704165dbc47e97c0eb477e4f46a4561b01f8c5f0ff0126fb936778f2da20a3624e4923b289d6a3569ad5e5301a73abf297d5170a2d06a88046decd4e62238b435bfe4b24fc081f33e84f8a2c5a5eab1cb7cc9b496e697f6edb6400542f31c026d87de48d80c61cd31ad107a6ba2a0a436"}, @NL80211_PKTPAT_PATTERN={0x41, 0x2, "2c44d9f870111c9748f6870fb8371984c0f648fb92ea82a2b4a4e99688a087d395c6ba923465fec8c8bdbad27920a26606504a5309900aa63410aba470"}, @NL80211_PKTPAT_PATTERN={0x9, 0x2, "557a81e999"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7fff}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x4f, 0x1, "433c21677a2c69686a6d684038303c6e49ab06985fa28811aaef27c1b979d690c256d97e5bfee1c8ef6a8bfae481622774e02cade43811f0b3d1e21fe0fc069cb0eb3571dfe93d376f6b49"}, @NL80211_PKTPAT_MASK={0x76, 0x1, "a64f8bb9c040d5ccb5b1a3761f06986de415b2bedc6bd9d0aa583cfaf5f45742256664a1e259b6e8edbbe183c3bd074c489f262603101d4e775953b1858fbb0d4a5e78bbc087418d1daca5076374078a9d0b9044577e2e541f2e205b1b7909615814d088d4cdaff8aa2c6972e9ed57dc954f"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xf22}]}, {0x37c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xa3, 0x2, "1d596ceea8c399a7a6d821e1371a7e18990c76bc3f863577d4e92643552c7d680e147cdfe5ec1741851f0fd7221166224d6771d7c4a7844d10082f90c793c452d9df5924d5b3f94db11e21b9bafac7e6d2f46d3587a45e4c30713b79f9d563b4d322115215f4a379e0217637b7ba96fa75ae1d236f7d26110f3f2543a64b9ef4b7243ec5394a7c4a2e5be46629bb05246328548a3bef49e0611f26f0e6cb99"}, @NL80211_PKTPAT_PATTERN={0xfd, 0x2, "23e74e68b84016fdd16aca95fba7b17292a94f46b3621f0e60e7128a2815bc5d1880835c4dfcb0def753165266b775aec45c350d95c721febfa7338e48f0602c9a0d4a8f6c871d707a9d6aed6a8cb2fdc6461a348f12cf0c9b84ae5cff7b8a31517d6c04256500c395764a4c2ed4d7914967d0dceb07fc627747c2f2917d88d9d7ce2cfee3a15e5dd9ec74b10aa6676187a0bc2a1ba7af5ef5a62ddce09cd7d58c704108e3824f322e99159c2ce9e92e7ce80af9558fe123204995cf31fcc2af098ef82954820d1a932283b347a1c33832b4c943ac676710f74f4b3268f9615f91e4a03d79a78fb00e8bd725f39388713fe3dbedb76c8e5550"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1f}, @NL80211_PKTPAT_MASK={0x75, 0x1, "c67db10c11c8d726d1cb877aa8f3e8e0f04ac69c98589da703883884ebd28b5841a38255a08763ada33a439d22c866909ac93559fe2559c4771b11796f98cb56fba22983a0338593feae2ce922700a2b5c202eab72d9fa9ced6d1d45ad614665ee3533ebbb89d590c9382d8c67f21d703a"}, @NL80211_PKTPAT_PATTERN={0x79, 0x2, "9cd9ac275b195c1c9198a3dd6c9bdfe0eea75600cc939a0889425f5e9e6182fcb03f671a6341ab3d1f9b66a3251ed051d40ab75e309ab6f84bcdb76f081b92acc8238fe21a36c7fca238e2a246ed3c49e48062e24f97d73a98fb31982f2686af50733ae85283897876199db3a33fbd09e4def5a96d"}, @NL80211_PKTPAT_PATTERN={0x65, 0x2, "b67e17693c6a8d94fa0e7027891d3650b30a6e40bb40609f161bbce1ebbd25999fc25e26bc7b9fb1edfdb160ae7edb66f9e4bf07d6c3b913c85dc8911d2a4cf8c7c11bdad2e0f7d29527044c846bb4fef18ae43914a3a4d83a376955646487a58b"}, @NL80211_PKTPAT_MASK={0x6d, 0x1, "00204175f6f11cd65ce56ba4eb33218064bcc12e78795e48a818a2561326862a3c46ea71878de46637e522d1d1e741ef7c181bc3c526ecceccc779ee3837c388e90315a5f430caea505e4942cb74f72c324d47c1cef8651eb05022cf410eddc3305e4b6f961ae643e0"}]}, {0x3f4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x2d, 0x2, "741fcec61317107f4583aef5b0270cad3b3f96870e500c9e559002e27f1fa3f67d4f7a154a7926e7d8"}, @NL80211_PKTPAT_MASK={0x85, 0x1, "9f6846e5257486ea89ef9447d3b20681b0cd1e4a49398af39928d7740e41d9e1408697587144e25d5565c257fec90dcef2451f99bb64f78c6fec789fa80172ec5a4a8c19b6bbe48902b6599c022a5138aaa1c64d8248841b224dc3c62ae138b19c4652c0283869e10f60e80032c0bc8db42efa8c6f2d24b70c52f01403d1fbcfff"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_PATTERN={0x69, 0x2, "21e6f8f42f71c622db3cc44bfb36b0e8b9a48e78b336f602e420a885e1eb086f9a45b64dcf86ed44db1ca25548b4c0bf5a9446332ad7e642970ffeafb5bb6e114bd81eb67ef3866a4b9dc293384eb72601973c3f021b86471c9c20cce95431841773e1b487"}, @NL80211_PKTPAT_PATTERN={0x2bc, 0x2, "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"}]}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x200000d4}, 0x0) 16:07:25 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x2008200, 0x0, 0x0, 0x0, 0x0, 0x0) 16:07:25 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000540)) 16:07:25 executing program 2: r0 = getpid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfff}) [ 765.503552][ T9360] udevd[9360]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 16:07:25 executing program 4: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000080)='P', 0x1}, {&(0x7f0000000180)='}', 0x1, 0xffffffffffffffff}, {&(0x7f0000000380)='n', 0x1, 0xa6d8}], 0x0, 0x0) 16:07:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000002180)) 16:07:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) 16:07:26 executing program 2: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x84003) [ 766.261242][T11195] ISOFS: Unable to identify CD-ROM format. [ 766.462992][T11201] loop4: detected capacity change from 0 to 264192 16:07:26 executing program 1: socketpair(0x10, 0x0, 0xa5, &(0x7f0000000040)) 16:07:26 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x2ffe, 0x4042) 16:07:28 executing program 3: unshare(0x2000000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x21, 0x2}, &(0x7f0000000540)) unshare(0x60020200) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) unshare(0x76000800) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000003a40)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f00000001c0)=@in={0x2, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003a80)=ANY=[@ANYBLOB="d8000000000000000600000003000000c4a1518a5d8d620a9d20f068a1a10367eb0a741aa7e0966784df9b36f39717f93fa6e2ef71c3f2a151d2083a9de5700141773c92f3f466eefb35b69406811f2bd1f3c9f3afd4af85d1d1a4fba35752f0c89f1a80144e108155b04a944cc9db2d7661b64a296be563afb6be6c00e7c202c7bcbecd36eddd8cc5bd1375f786449aa26a04a7b23907cb7b8aed3188023677a70954814578cd14dc08b2dad982ec6a8d8b40cfe732d3b3a7f689a91a2cb1c4f67549a07cb931887dffd848207facb0a86c2d7f1b31f80010100000000000000d0100000000008015383161b79a4412afcc16210d14072df2b7f675f3f70f77010971063343add621a13d72f4afd50eb1af9602fbaa32b6ce81d9b1d0bd8acbdc532f2ca47f59f9bd17534305c432b72813669d80025939007a4abc206287773707ddff85f550cc0b46bf120b3e85ddc0c9b184e0a9408c4b4d93aa2ace9b3188fd3057ff67b7f88f98a1e06a8b18fd0efa578cc28be2987e487d87b69c9d5f9c029173bfb97b402c6596e4609e6592e3c02b036a88f932a175d610838d6e73020c78285447bc85c6bed6d0d1599fb5960e3db3089e7710f6221e3204fcfd31e4e39d415705410704bea772ae2d87f20b0b67efcd7a7a2df75e3cde71409be64254145e73792e0fd251f4e7c1ed2d589d4763512bcc5ad0f35e3a7f62f9ba45ab2b8bcd25717aee11e89d4b78c11afbfac59395b06ddc9bf48f65d89fc98c359c02d7184f1633abdc389eec432096684ba2a43611afa027ae842affc9b3b8a9607d8b87214b60a318564388480de319ddf6acb4176afd2bc65bbd011a8ac5f9a735096fd7a72f39a3d353a8cc96f3abd79243f71ba1b941561dfbac7d8a7c819faffebe77cd00fd3f5fdee40c9538d353341a8ab2659c6ab2f058383632a7a030c9312d45e2c48b2696dcc50bb943037a842ca3fa4711b0359a6e5ba1a3fd9b58ed612e7ca8b9f72445329f88b447927dadbfcab8b9bc8b316fa30b2265ebf3f2f2ce6ab789384764e53cc9a32f5411ddc899ae00de7ed6c20b58c0634cda5fe1a07ddaf93421db166b2b4f5b6aab951e2d17f55ab0b249d644bc51f36f4bc4162777578c26b77d17adc0ed569ea2d5561bae88c0bc44b3c60e3042cb43a232760c9e7e0943bdb55fdfe6e2990ec66875769f999b2978525a0fcb367f5885e4224efcdff7c5411fcc04ceb2b0f09976a93d3805190a5dfdba7d8523665761d0ff06bee877759b7758a9600070b042a495054d7fc1d10700778a1bfe46930c70db30349f800332a7b171026376bc0f6769e14d11d6856f10d9ba400793a7ebcc00aadb2c0ab140a049d77ad8e7baa00c95af7a23ba5f40373fa2cde93c2514e4950f217f8433fae9f1c85303aa87f8cfb41ef639f2b0bcdabd3af5c05612a2571e55f0eef6bd64449498db29190301706d1e548678704417fe349d2f4b599b9078bc6f6ffb9bb7b7087db76b7f7a6156cf7d1644d20653afdb548c322ef285e42a6a792202efcb1604bbf6f22ff89b407ad95ec94b6314b0139a5f49db545371930143c40b16188a3bf85b44f79a537faab5e4ad4dd36035ae31dc6e7b3d2535788055871b4db53a355869c944fcbfac73a43dd098179c4afb83a82ab42959a222208c6fca21741f56ba12640c2aace96687e54b0a7d2ef8036e721dee3bb5b79d735025b905be12e42c620d9d8753c25e44a2f7cec4f396be4483f863633b3fbc946ef1f0ba5c80971e87d97e75f96718af99d3e5219eadd949008a3651272898e54b3b1cb73be370990001799a151cdb4af9eb36086d99df02f37dcc179f5a5ece4dd02f3168695d30d425e493eb193e38872728b727e826ab89d9d16a6e54499de7cecd0a4eb795181e2f61820363acc419790080c68e225d7b593f0a587ce0f8b458fd6c3f2a1c3fe9bbb387e9719fabf69e74bd5feecef8494fb3425e69a6210d70d3055178e36f1e330c1d127b512709164460017c48669b340ce62f35b91123461456cdfc29e26542387a91cf19c1ba28984274ce2f22f192bc910fcf386367dc114b9dfafcd121230d88b25ef4d5786a2f1603798f6950c864ff5753c91d2d196d693b4c3f1e45f4a8a607d04409132fc2f7bbd40ab31ccd6c8ae6d5984c4e1ad717c84f1fdbad764646b89109e5f622c18bc7149db1a193a8646616c7b777049d76a9b67059dbda376c233409d8f208307069a80b2a19104bf87780295fb70c5b23a018b07aaf3360c93a22733fd6da7e8ae50cf28ad8744204d921b99db2103664c55a26fe86955d417bc59b347f2cc842843d5eb96f35144f17622e0e1af2392c74686c8563c9ca14992de7bd66df7727b42ccd6fa14d2592023de6cb490b050f7605383f59cb2da727a90f18da6eaa2807e196882b40968bec24d15d86c53eb0cdafc78a66e92c1011b9841d10b5b071814b2cd93f9c6033bd2bdf4a5d93b8e55139d2f83294c524abcaf706edc6310ab337cfe749fa1d024929f1d178dd513717128f1d1729f819744d5c7d985898050fccbe92f99bb2fbfd56045a0baf287f9dab4100be3e1afc27c55a69af45c8900c67faf4513f3e73acdfc878cae2c38df001c69203988545608f30c2339c2dfad07961b104e68488f1d207bf7bf291b96d56a5f28c520e5720b56cb289e818a4fea45d1a7b53acfc9bd994e905ae5e31ace16e32df53c80069559ab53643a961159b14f55f35333869e3cbcf8b33eac6df4a45eb9f03d029f6ae0100444a8ccb9d9962b49899d5852407a2c370d8dae95223218043dfc880fd8bcfc8fbfa839d9f9ca711d9192c8b7ab7db928de4ba01ea65ba4b0c4cba73ae0f52e860a1f3b9629a9f6d2d3e7bf45965dc1a4d011cff06dd19342a8174aed262ebacf91120c506463580b0d3bb07e8adb0c45aa9a335000c9ddfb50624645af12c7cc53bc62bf92d1591c9233d714ff0e288831cae04dc4b8640e8fae54544f0e8dca78dda7e61fbb4e36070226b1af9dc7edc0ab3f64aef550e274b2c3d1afbb8fee13c7e59ce0b07478635b6756de86ce3b6265fc15a6ffe39f5b3c0cf31a5b287f1361ec8d9b80b87432b4c408192b552c192664a79c616c329c0fe6e5adc23a2a909becfd2d2d41d60e107aa4aaf4cb4107bae5126c497e949f6da504bbf3c21f0391b5e26b0dd90b6582ee0e22b9aeaba3527f7060b210bdaa42ec5b961754171050b6f2eb7d55c9831debcb195da9bf366b16abe9bd9f9385be6a29e697eb789f72a23e19d664575c00c61d2a3c0717237c2ee74cdd19b6adde4ccc06dcac1790b1b25802ce5dd7c1639e18f393c89107d201864cb2648268f47e93c46f6d04eb527623bab33cf3a06fd2e6f36c261baf8c5f191f119cb0c598a97b8777674d77510c3c209814faada4629931f56c3ae0abc1c050f0bc686a031de3ac8521b297fb66b285564507833276caefa1d7d6ab4c30fc99f4b0f1fc871adcfb155e8eeef8c37c4db771baaad48f040629b9e953bc32b2578c4616f6f39285fb762d59c291fadf684de133cf6f2752ae0a842d04f6ac84094e3bde47f5898357de1d12d63963c931a0181400edc98a9843100755bcbeab974a3745f685ad56bb2951fe57f324f03214f72920ee10aaa412cee9064e07c47021eaa243d400aeda26bbc6cf5d5618a1cdeabb596685e849bff58a5330d058a3b77f22a3789e8f1e2219d2b043683b204385386a184a14f186144d26bb52d4055e05d50afb5cf915be2bb73dbbdcb38c672c99fc8607345693bd11e7baa10cf60e93755ce3fa01bc09b1cfe7536b5491aa1d5e9c31280ce1d50d538d78393b7af954c4b5d796b5d97d6c50b4433250b7d82ac8042348ba6ab3032f2a2e5d72619ea9f66d6eb63ebf8617ddb139492362dbf4b9626e4a710cc9b18fbfbea7a1df5bdd4c7fdc5241bdd679a78ef1743804b1c26e831bfd92bebcfa36494ae1002a9dd2a413e7c3775cc27db0a332b9ebc8e9103566612a584b766a69b94d159149b0b99686c5f2ccae6621c27acc2072d2492d402531d2336888c26f193eddb6dac27b94fe45c22c0f9dd715db0a33cbd5f97102409f43a7dcb7d1503dd6ff51e8bfe71ae6d44220acdd0eb3bfc8f96cba69a551e5d10887351cd54f236c932980962dca7839521e00f2ab5dc39a02a3db53d654d8fb0ceda574aac991f8d9b816f62c76431ad4fc7c5ed9f8b5f3abf3feb7ecf53488ce9a21ff990bed036c41624498f050adaed031d2007a70365a7e0a8689579ac007f8242bc0f88972f9aa142f345ebc8041f6f62e8c498b26713cf81463507ee6a741e395bd14e3bfee1e3cc5b3cef59de8e8b80d3be92f1cb72ec7ac488d8892fbc99116bbc16ce5f511681f00173908e725de68d03cfba42c8ddf2ae488f5be2890d7228326b9274039c10e176545aeb53a01759b98a88d080f56e2d68c72b7d05a6f1f952cc299b5cb061d4f6787fde5fed13ea6395362c73176efe907f9078ee6336bc604f1c78d698ea50be935f67fd2adf0d394ac897534e77b4187210e119bde067cfe9ea3f2b66b5a7679dd777a1b1fbf475b1d0a33fa0b9c3e969e8d2fc682909bf0b408d7a141f49ce7f08181d4484db6d6b7c9b6f8b88eee858657d1f563eee3e8351143507c9dfbe64b84d1b3f1e5ebb84be4d78b44317dd09fd49d33cc038209c1b451fc265ce9193815ac70cf5fe661682600a5f6578dc7f24e5843abbb3c66177c8f28cd6192a5ec3ed1bb5fb8f46d0ab60957fd6cc872857379e3ef8ff88ffba355fbe9bc775455580fe67750da02183d5f54fb837c9a81334163e70bbbe4e3899d32ad3996ea74362f2d2cecd0485f8c757eb42652b5c8b25621754b985f8678f400e220866fddebd42d4c652e30c1223a5fa2abf5212b1839e85b605ffcd37a30500763003fdcf32a1129a51c5808c26fd8afdc5cc719111f56d2e11f85220c6c2cb9e2b7257ae0bdcca381444bb9ad65920af75672c8f908c6f11d9cda334ae3478ee64966bed865e2f81f3cb77247c51ea452f2d4e1487277389caf8db1259cee8170b7c0eb64c10982960c380d7da850a413521da1f6afce70685bc374d46762fa8f57ee65911e8a25ac35ac9c71fa99af46b92d75e436f5d720a17ddff4502d8731bb74f2c76a70126bd973a67ce04e004d0ce64afc99e37c2475bdb2064b9c1aaf5262386a2bf97122f4eaf19aa854dee5b71f8d600fc033d8be3d2e44aded9db43d8bbebfd8249a45889403a2f6d33bc6b98c2e068cab5fdf9be768115bfb6dba113adfd0423b6df708f889db898732ddef72f7ad4d8930cec1eee1be9d75e5ef33d4b4ff1ff085792a62e7f93dd31c92faa02cf9c6f138698636134706e43716e09c7938dbb6b7d4b24953b88fdac2d06d7a64d06443e9651dcb6b74fe20692adcc04c6b6382368fe7bc97f51f988ab017564e0b3b43aa1e96b040e51efa5530fb429f23dae81c273f139d3bcd2ff1e904de364796827919946acddfc27727ab3cf4b257a828dbc2e8fd52b78fa45f05025b598ffb2683a4759b380869169ae95644fbe77d69335295ddd3c2ac31e3a86754a090bdc7a4ad990c5780b365b6619b935"], 0x2018}}, {{&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x2, 0x3}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000007ac285338a00001000"/40], 0x28}}], 0x2, 0x4000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) unshare(0x46010900) unshare(0x240) mkdir(&(0x7f0000000040)='./file1\x00', 0x168) 16:07:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 16:07:28 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x88440) 16:07:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=[@hopopts={{0x18}}], 0x18}, 0x0) 16:07:28 executing program 2: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0xee01}}) 16:07:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f00000003c0)) 16:07:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000280)={'veth0_to_bridge\x00', @ifru_ivalue}) 16:07:29 executing program 0: openat$nvram(0xffffffffffffff9c, 0x0, 0x711200, 0x0) 16:07:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000002180)) 16:07:29 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000280)={0x0, "70647880142a9e4953116764b020a213c5d01ad748554fecd20141ae00ff0c48622ac38711ba0ac62b6fe9c914ec2e6de4137f1cb4b07da143ae9dbc7a92ce68"}, 0x48, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "57f8e47a4152d935f1ebb6c572a8afd8e904e72d0bdc2e8e77b7c9067dcc3a00d1f875c45c5be85aac76ca184a7257d5b1832aa9deb1d8afae355094e3649cb9"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r0, 0x0) 16:07:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x28}}, 0x4010) 16:07:29 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_peer\x00'}, 0x10) 16:07:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x894c, 0x0) 16:07:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) 16:07:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x48) 16:07:30 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x10001}, 0x8) 16:07:30 executing program 5: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x6, &(0x7f00000024c0)=[{&(0x7f0000002000)='%', 0x1}, {&(0x7f00000020c0)='\x00', 0xfdef}, {&(0x7f0000002140)="dc", 0x1}, {&(0x7f0000002200)='~', 0x1}, {&(0x7f0000002240)='`', 0x1}, {&(0x7f00000023c0)="1e", 0x1}], 0x0, 0x0) [ 770.971204][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 770.978000][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 [ 770.981241][T11246] loop5: detected capacity change from 0 to 126 16:07:31 executing program 2: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2800) 16:07:31 executing program 5: r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, &(0x7f00000000c0)=""/135, 0x87) 16:07:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x93f7}]}, 0x10) 16:07:31 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, 0x0) 16:07:31 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 16:07:32 executing program 1: r0 = epoll_create1(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 16:07:32 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x42f82, 0x0) 16:07:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:07:32 executing program 5: sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000340), 0x84000, 0x0) 16:07:32 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:07:32 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:07:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x5c) 16:07:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={0x0}}, 0x1) 16:07:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x1ec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0xa38, 0x5, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x1a4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}]}, {0x300, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x168, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x33c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x64, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x11c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1ac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x170, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xe8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1464, 0x5, 0x0, 0x1, [{0x4b8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x120, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x16c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x204, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x70, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}]}, {0x2b0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x10c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x45c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x418, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x138, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x4b0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x160, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x130, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x13c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xfc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}]}]}]}, 0x1ec4}}, 0x0) 16:07:32 executing program 5: sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x0, {}, [""]}, 0x14}}, 0x0) [ 772.969431][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 773.100617][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:33 executing program 0: syz_open_dev$vcsn(&(0x7f00000006c0), 0x0, 0x141503) 16:07:33 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_delete(0x0) timer_create(0x0, 0x0, 0x0) 16:07:33 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x34, r0, 0x1c5c905bc0c22533, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9}]}, 0x34}}, 0x0) 16:07:33 executing program 2: clock_gettime(0x0, &(0x7f00000001c0)) 16:07:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f0000002180)) [ 773.785749][T11284] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 773.796013][T11284] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 16:07:34 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xee00}}}}, 0xa0) 16:07:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x0, 0x0, &(0x7f0000002180)=0xfffffffffffffd6e) 16:07:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x890c, 0x0) 16:07:34 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 16:07:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) 16:07:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) 16:07:34 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, &(0x7f00000002c0)) 16:07:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000000280)={'veth0_to_bridge\x00', @ifru_ivalue}) 16:07:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x8000}]}, 0x10) 16:07:35 executing program 2: clock_gettime(0x0, &(0x7f00000001c0)={0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={r0}, 0x0) 16:07:35 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x1023014, &(0x7f00000009c0)) 16:07:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000280)={'veth0_to_bridge\x00', @ifru_ivalue}) 16:07:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8081) 16:07:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x0) 16:07:35 executing program 1: syz_clone(0x8011000, 0x0, 0x0, 0x0, 0x0, 0x0) 16:07:36 executing program 0: msgsnd(0x0, &(0x7f0000000280), 0x8, 0x0) [ 776.260540][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state 16:07:36 executing program 5: semget(0x0, 0x0, 0x206) 16:07:36 executing program 4: socket$inet(0x2, 0x0, 0x80000001) 16:07:36 executing program 3: syz_clone(0xc9202000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) 16:07:36 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000040)=@raw=[@kfunc], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:07:36 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x8d) 16:07:36 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) 16:07:37 executing program 5: sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x995c4f09abe1d924) 16:07:37 executing program 4: r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) fsmount(r0, 0x0, 0x0) 16:07:37 executing program 1: syz_clone(0x40140000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f00000004c0)="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") 16:07:37 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000100)) 16:07:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) 16:07:37 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000480)) 16:07:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x890c, &(0x7f0000000280)={'veth0_to_bridge\x00', @ifru_ivalue}) 16:07:38 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x2, &(0x7f0000000100)) 16:07:38 executing program 3: setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0xfffffffffffffe00) 16:07:38 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 16:07:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000083000000080003"], 0x34}}, 0x0) 16:07:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0xa, 0x5, 0x2, 0xffffffff}, 0x48) 16:07:38 executing program 4: openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) [ 778.760176][T11359] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 16:07:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xae}]}, 0x10) 16:07:39 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x280880, 0x0) 16:07:39 executing program 5: r0 = fsopen(&(0x7f0000000000)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 16:07:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth0_macvtap\x00', {0x2, 0x0, @local}}) 16:07:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x891e, &(0x7f0000000280)={'veth0_to_bridge\x00', @ifru_ivalue}) 16:07:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettfilter={0x24}, 0x24}}, 0x0) 16:07:39 executing program 0: select(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x3e}, 0x0) 16:07:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x9) 16:07:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0xdd8, 0x5, 0x0, 0x1, [{0x1d8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x104, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}]}, {0x250, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x180, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xebbb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x41c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x114, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x65}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xcc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x188, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe0f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}]}, {0x55c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xee}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ad}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x338, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3b}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6ca3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfeff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0xc4, 0x5, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xbc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 16:07:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x2, 0x0, &(0x7f0000002180)) 16:07:40 executing program 3: timer_create(0x2, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, r0+10000000}}, 0x0) 16:07:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x3, 0x0, &(0x7f0000002180)) 16:07:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0xdd8, 0x5, 0x0, 0x1, [{0x1d8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x104, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}]}, {0x250, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x180, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xebbb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x41c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x114, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x74}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xcc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x188, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe0f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa0}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffbb52}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}]}, {0x55c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x393}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x218}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xee}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ad}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x338, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6ca3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0xc4, 0x5, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xbc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 16:07:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x5452, &(0x7f0000000280)={'veth0_to_bridge\x00', @ifru_ivalue}) 16:07:40 executing program 4: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='session=0x0000000000000059,map=normal,block=0']) 16:07:40 executing program 3: r0 = syz_open_dev$MSR(&(0x7f0000001b40), 0x0, 0x0) read$msr(r0, 0x0, 0x0) 16:07:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x34}}, 0x0) 16:07:40 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e00001"], 0xe0}}, 0x0) 16:07:41 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1023014, &(0x7f00000009c0)) 16:07:41 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 16:07:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, 0x0, 0x0) 16:07:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x1e, 0x0, &(0x7f0000002180)) 16:07:41 executing program 2: sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) 16:07:41 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="332500000000020000000b00000008000300", @ANYRES32=r3, @ANYBLOB="040028000500080000000000180050"], 0x50}}, 0x0) 16:07:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 16:07:41 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "57f8e47a4152d935f1ebb6c572a8afd8e904e72d0bdc2e8e77b7c9067dcc3a00d1f875c45c5be85aac76ca184a7257d5b1832aa9deb1d8afae355094e3649cb9"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 16:07:42 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000080)='P', 0x1}, {&(0x7f0000000180)='}', 0x1, 0xffffffffffffffff}, {&(0x7f0000000380)='n', 0x1, 0xa6d8}], 0x0, &(0x7f0000000540)={[{@session}], [{@dont_hash}, {@context={'context', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) 16:07:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x3e, 0x0, &(0x7f0000002180)) 16:07:42 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x4b47, 0x0) 16:07:42 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x27b6c, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000140)=0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400000) [ 782.401391][T11423] loop1: detected capacity change from 0 to 264192 16:07:42 executing program 0: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16:07:42 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2, 0x10}, 0x1c, 0x0}, 0x0) 16:07:42 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000280)={0x1, @write_voice_setting={{0xc26, 0x2}}}, 0x6) 16:07:42 executing program 1: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1140475f0634ed9c4b924e2e5c51431f93965ce0fbfc4ed90370994fe616db3aa0f754fc4709032687a6fa34b58c4bfda96ac816", 0x34, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000240)={0x0, r0}, &(0x7f0000000280)=""/23, 0x17, &(0x7f0000000300)={&(0x7f00000002c0)={'sha3-224-ce\x00'}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000800), 0x4) 16:07:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0x0, 0x63}}, 0x1c, 0x0}, 0x0) 16:07:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}, @flowinfo={{0x14, 0x29, 0xb, 0x5fab6b99}}], 0x30}, 0x0) 16:07:43 executing program 2: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1140475f0634ed9c4b924e2e5c51431f93965ce0fbfc4ed90370994fe616db3aa0f754fc4709032687a6fa34b58c4bfda96ac816", 0x34, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000240)={0x0, r0}, &(0x7f0000000280)=""/23, 0x17, &(0x7f0000000300)={&(0x7f00000002c0)={'sha3-224-ce\x00'}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000800), 0x4) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 16:07:43 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000280)={0x0, 0x41, "aed3eed91314fb96b47f90eb57df1516428627913c8edf731c259d6671fb0a06bb81bea3a80566ceaff421e77c6e268bafbca13e495ee4a0a7db035274da6c787b"}) 16:07:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2, 0x2}, 0x1c, 0x0}, 0x0) 16:07:43 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) 16:07:43 executing program 0: io_uring_setup(0x0, &(0x7f0000000100)) 16:07:44 executing program 4: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) io_uring_setup(0x0, 0x0) [ 783.985423][T11440] could not allocate digest TFM handle sha3-224-ce 16:07:44 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000040)={0xec4, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "2cba49eb3116319818dcfd32eb7323d207be8331a95edfb6cdb3612ddf00722df8b5b3954797c3e0fa9ec41d62b3f4a2c9109d2ffc6ceb82bd2e539ae50d6ec1e48b00695560ec384d8db686d68fbd4fc4d0e050d27bb90b54534182038a8e6153d356ec2d7e700051"}, @INET_DIAG_REQ_BYTECODE={0xe05, 0x1, "aba3333540cdab8bff36471d0565b9da42be8e4a6154611bd9474ac657b72ff2b2249a4b42d126815e9a401459972f87c1c8d77a8a35d757bf6d0a906e55c0a27dcd6f91e3475d85c67f18d4eb57f6bdcf96f12f0faa6dbb82640c6f5b32cec661d39749b7ae6a392692b01b6cb66973faab1c1ef699e9d78f79ea57910fa90757a5db566f9f23a803e07466d9243ab1cf764d8d7ab147818024f1b23f2277296b92aab5a4576a746201bb3fa1d37b4195c3416c241cd0b0963c391b097927367b9c7416671766aba155b9449bd784ff9c0fc523272fa6f5d761b5da71659a12a48240905c72431a38b264ad92220e0e9b2e00c40ce074e4734b7a478b224cc64db896f91ff44e87ee4606cde757cdfbe3c79f19b286f1b6441f308f982206ec614002358d1422b74e1513fcd9a9bcf4565b62ab0d81cf248d9abf4f69d967b7b1ff7b1c1abc1e28fc5b5d1aba6a10e6745564f14e03d0a9c7671b25d033ccc24cbc68e6a083e3ae0d0c50f53b41d45cb13721edb525dad1b7e7b9cd700d79ac84ebf497b6e01ee9b2fb51b9cb8a908699224d3b5531b27e87267b0fb877fd560ef4af5cc45b58dce3e5162831dd8eddae996de69a1072152ee80a680f74bb7fdcafa9bce0d599f7941df92eb6aab73f2dea55b5b8bd5869e0d352b71dc755057540b8eaa5b86539a8da4975479e20e3fed6987128744e404d2425878099e0923f448de07ad994d512524bec7584d7ff5b944f59da1a9212a450f9fb70b1676b2be0338b9c70b544512a2d9e517dad0755b6a1ee6edaa1d83d24a5d04b9e799c4528d61cb761d511a790254eb1bcadbda3de7eec1d6c6197c6a56ae6cd05cdbb89a78ba5bef98ecfdf0e85218a890e0f80da06ca3a019fbcf557d2a7ac6a3387814b8364bfdba6396cf8fb1364a0943b755b657ecc8e37dd57bd8cbf0e8b2d0d5408b43083b3b678fda0fb6766af34cdecff23bf063116db40ef54715b00a4efb146e32595044999a7de04761f79e7b52bf9ce9f55c9ac29707f758b3d5fb10fe50940c555db665c49553a2cdb5778257cc2cd329bec3ae65d9a8d8998bec78b76a88b3dc993e9b0410963c75bfcdb765580b1b2fc4a892a114b6e55659dbb529bcfabb77140c634685e9595d2f5b0047af0035bba42668ca606059e04eb9052899547fd61b1f5da8ba2d237f25aac15cb46ece2fc2c45485c21d8b070fd83fa763ad89ee06bf34fddcc73523e9a01b18329c03e2bafb0d3ef0f9d1e4491756f4f831094de5db8eed20854ac50695f89e2e3f790e68e0034d42b4865edcc58453bf078803aeab63339b5d846291f71a163b8fa0233535d7ddf19c5cb9b3372818955e6c443e9df24e791e490b22f5d5527d334984a70d6008061ac748398266ba01f90857f74b35f24c2384016cde64a31324596f7075aed82c564f2a3d8ad87192b1e918ef4c91dcb73c3bf66269c7625e38f264e3ba817994b71733b177cb726fe3d918795411e480b7a24ff1ddce83df1856475caaaa607ba15b35c28fa254432daa9131f7b0f67ef7c4c3d24ce8f2822076f72aff142feb02953d1d3ecec59582667bb9001579ba80d4d3548fddf8fc694b2b8737e98a0d7c7e303a5052d92b6b45dafe1f401fe1caeee9bf298cb26f1727f6f8036f61377d99f4aca05a5b2b800aff1bb9fa7c5f97af9229a8afc24b9dd95ec9c827cd9a49ca54cf7dbfb49ee5db8fcc2233c8c643b4f55a942f35b902020c5e2a5d47bb93991fbe6b6dea0aa37f374f1a943f97c75111518d39bc6069e5c13b7520b1db18147cb43db3a52e663c84aae80578d7e2dcaa2d8a59a873deb24c2a4cf0a0c20e41ebf0a164dbc0809242b97d550f69dc190ec22cca8b0f49d935b34bfb29ebd97b783b12cc2f27db7db40db26f3fb41e7f10ad54d77e7116576964d05d8a9f479140a04af4538b460d0025c5f334b6277854fac49416d0b0b23b145bb13a309fe73eaf09b98ae3a7e05f37ea7e6f6356c9ad9b3a97f1e96116f9f166d9a0803bbb2d92c4422616deed331655ac198e6aeccfaf7e0d1ec9f9afddb3703fbc89daaeaf7a5940136fd57be00e0ec60494df6da404da85e250a2d8968ac95124c2a837fe1ca1892766c24fe7d7ed177ddcf6589fa5b7099c2973a1d8174257e6f41e162dd6d5e0e8c3e87d847c9eb8cc0f5f7ab663de53ef34ce9971ca72c6071534ac8fd15592ff06d012e0da1c9b69bf1b0974e1d5f3d20f1a05494019855b1a3114529138e6dc741791d080f94e474d6fdad856afb5ef53714aee29ac9a9b95f348ac9b85d67a305a2f36a5f6bd14c6cb4df3ba77bd529c7daae0cab74f87fbdd6b29ccc647040aa9d93b9f264041f1d2dfe90c7d9d88a349ef3cf9d25aea10be8c9c3d4d8edb2f83f258e1b25d58a854ff8d6a8bb6d4469dc618223a75972c2397f9fe6e33a2a1306568edd8f9ea4d6ebdf33f48423c7cab010317e788c371130f97f457b3a15da67dc6a5cae932ffa191e7279963f83e8eb947fb474e4efb76fb05400002351c2462cd8211ceb78e93b03fc676983c869d47475ca46c5315d9b44a242392f2d5105e55940e3b8c5aca39f713f08b5bf108ec711b3754470d482ab7e05fb00e758e414453e4591d227b4265dfdae5574659e8dd55b1bb195f61ec9f160a54e4458005e5c63f25727e62ad6636f53e4a58e2964983a6977f2308b73ea51f438dd32eb0645e1fb6a95404ec2d569741464de3ef8c778a502c1b6d5b1afbc89cb56410fdfcff69121f088fcf39f104bc0fe176fd67394f4ceca03995afd86eef321a439dfbde256f3bbe948892ce92850453536b89c49f033a8a249d5d0ce8d335e46d0a48fd8656ec2a4ac0aad29c599d1274907f2d8f6b797eaacf34bb79cf8ac72bc1df9da750dca9d8369a735d1ecc3ecbf2164dc1de48822d432a991689f801f27d454612a8f122837db924aa05f395adb6d92ef5230e2482c84698ad27e21e40f0c45e22a5314d65e7d06ef9ebd97227566896bbcb4d3b4899194bc0c3a94fb3ee656c0e7dca78ca18507d79e989b2def1c0688c363ab71af27ebbc9e4352a7bc370561f00568a2c8da904a8e15297d868008de37ad0ea78677d564d63c56defb46085b5c1ad9bf645a1caa1a7e036aeff279999f4b812413c6acfc78eec5a10ad935de66403b7ee3d401795b17bafc53468a32dbd5b0929ce556905968fbe2c8efaa014d1051d6a1d99da9a61768fd39a042b487077aab6e6fde85167792104dd82217ae813ce6e3839c0624e06189d33f40a133e7d0041d22508a6ffb00ca434efef47bc1bb730207272eb4306a30305953cced62a14322b7210d85b539a03745ca4183822afc679ffe00c955670d788ec0bac61a0a8486b37d0712f080de4f4e88a556359d0eb886f9fd3fd4a4686fb4b09d86193942d144c74006cceaa013495de94188104e102067f3715e54e06ecdea7ba661d9ea4e46df8c4a766d0e92ccbe4d7009d4c2cee47584b94ba2f46bd1a1230df111f88856bac1f95fd703c94c556bf1c732abfb7635ffe11e7cef05a3139f565871c6f1cd25f6b13849a6029927869d7116ff54724ecaa5be4639db906750030fc7268750952775fc5977dc0996d3d67790769e0d802946158e01e6c16c16e67884d641e1098afa46859a6891219694efd1188e4a0c78dbb4313682e098ef2723640449d3d5b56112763bd4bf31b93ab0064d4dcfe0e6a656dd82a7291ec1f81a6cd6efb2569af875c7232a726835c791b88dee2ee84ff4d6dc4000b32aa58adf5771416117629dbff4cb3dc315da2c9841711e638f679f3f26c50ea538af1924d03dd27aaa3972934263ecb3af15cfbb37376855357e49e299e3741c387b0143be5d5462a081be4d46e1dac2928900b47eb37d8f2d5959948dc720cfd419cf9c39e1d3e633d44333c539270b0404a4befb39a08217b40cdab6d0260a775e33ab199d762ad62507fb9d4280e3ecc46bddce2c81a3fbb0a57967486a55a2361f589ba33d4a0af8170cb699db1ca0d25722f667ab425a65a1b543d8e0f3c3fd6c45816efde4da66e1d797f9262de1e60078f905dee67d7cccc90fb0db1673b9c0b55b75bc2b55f75d39672a5aca41cc423501505a8bb97b7b59fe9b626b139c1d9895d6b03eb9574af4a01f8effa7a56745525a786890cb9307f024249090033ccddc63283f70151dd9e05d0bd8e6bb32442037dcd17b748fd9a1bbf1ac6e762fda3fbeeae55d486ecac1e832fcc28fb09e5176e44e60df5662b6b6958a5f18a239f74ff744d033254335a0107db915a1dfea49013bdaa532971333061187ab657da9497f800f622b7ae8499de558e768076ee781ecaf8f70a9f008142207f9b57cd557823c64f50f7d7d3194c0c193fd5104961a734aeb1694fcbc3cefbbf62bc8e9e835d1390b9deb5b46710879616e8244d6e04caf8025281172898e7ee5f5c79f8156740df2782541ebb972ea4a30512bf9833c549b0cec3a4eebc7e02845c70c42326315b3c200f4672d8401a88beeb12420bdb7940c7c2b23ff26eecfc9cb4a9c2d4e1df1de0a42c5e35649cbb3431b29330925176bfb5c8787299adfd69f1b0fea336b74ea57fdcc2d5ae23608e7672eecd335521e4a0ac19c5da24c6e081092d8fbb1fd9f4b2ef37aab658cb1e4aa15b286ac70734c094346482dd339721dbdc4ac744d3875fa00e7b62656669db5129fb5fe5944c45e5d65d560592b2765c24a226e6dddb78acacba6ac07ae332f52e7af95be899c449e0169d990303632d77d4d478e1edccd23c741f460b526018a6b4d8545e654bc8251e967ac0c881fbb01b671b67bc26a91567652e9c2c4f320245224b36ce06eab415ca80aa2ccf569448d356ca8c385166a8b9a374a3b2fb7858cc8b76905d9d55bf1826eed0c5caf08fb23986ba3755150e10cef47c2d12882aacaeabbeeba1edc570f0a800eb8d75489008350d325b651c9f6dd15d7ef759aa3aee6cee9f3603740f6ffce9ebe186ca52a8046bf6a99c044030992c16389fb68c74405907053840aaea1598d48d354239bca4953aa"}]}, 0xec4}}, 0x0) 16:07:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)) [ 784.233034][T11105] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 784.482292][T11105] usb 4-1: Using ep0 maxpacket: 32 16:07:44 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 16:07:44 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2, 0xf}, 0x1c, 0x0}, 0x0) [ 784.625301][T11450] could not allocate digest TFM handle sha3-224-ce [ 784.702297][T11105] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 16:07:44 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)="1268b2fcdcda009814998c02f8af2a2f1c57128676449054a9e54d610c2cdf0c8a93f0336a9e724cd3ab8382b565ac6eaa8b06e2f4bd97ae1df62e1c8550e80d5fd193f0dc7ed1aa844b4095fa781fc506e9873093fee302aae7e173c2936a94c182b5f2857f55d1ef132f085890ce35a2a0452e828a69773cbb3792eefb6e87", 0x80}}, 0x0) 16:07:45 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev, r1}}}], 0x28}, 0x0) [ 784.932709][T11105] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 784.942281][T11105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.950535][T11105] usb 4-1: Product: syz [ 784.955172][T11105] usb 4-1: Manufacturer: syz [ 784.959984][T11105] usb 4-1: SerialNumber: syz 16:07:45 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x4c}, 0x4c}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d40)=ANY=[], 0x1510}}, 0x0) 16:07:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x78}}, 0x0) 16:07:45 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0xf}, 0x2}, 0x1c, 0x0}, 0x0) [ 785.377475][T11105] usb 4-1: USB disconnect, device number 15 16:07:46 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000140)='5\x00', 0x2) 16:07:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0) 16:07:46 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000006980)) 16:07:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, '\x00', 0x0}, 0x40}, 0x1c, 0x0}, 0x0) 16:07:46 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2, 0x46}, 0x1c, 0x0}, 0x0) 16:07:46 executing program 4: syz_open_dev$dri(0x0, 0x0, 0x0) io_uring_setup(0x688b, &(0x7f0000000300)={0x0, 0xf833, 0x0, 0x2, 0x1a3}) 16:07:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:07:46 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x7, 0xe0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x10) 16:07:46 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) 16:07:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x34}}, 0x0) 16:07:46 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000580)) 16:07:46 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)=';', 0x1}], 0x1}, 0x44) 16:07:47 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x7, 0xe0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x10) 16:07:47 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0x8f, 0x47, 0xa, 0x10, 0x572, 0xc689, 0x4f0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xaf, 0x6b, 0xc5, 0x0, [], [{}]}}]}}]}}, 0x0) 16:07:47 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x4c}, 0x4c}}, 0x0) [ 787.488892][T11500] ISOFS: Unable to identify CD-ROM format. 16:07:47 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)='8', 0x1, 0xfffffffffffffffd) 16:07:47 executing program 3: ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000200), 0x14) 16:07:48 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x102, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 16:07:48 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:07:48 executing program 2: mount$fuseblk(0x0, &(0x7f0000000200)='.\x00', 0x0, 0xc0ed0000, 0x0) [ 788.352301][ T3549] usb 6-1: new full-speed USB device number 5 using dummy_hcd 16:07:48 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) [ 788.418642][T11517] Unsupported ieee802154 address type: 0 16:07:48 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000880), 0x1, 0x0) 16:07:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="ff"], 0x34}}, 0x0) [ 788.716110][ T3549] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 788.883371][ T3549] usb 6-1: New USB device found, idVendor=0572, idProduct=c689, bcdDevice=4f.0a [ 788.893073][ T3549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.901316][ T3549] usb 6-1: Product: syz [ 788.906151][ T3549] usb 6-1: Manufacturer: syz [ 788.910969][ T3549] usb 6-1: SerialNumber: syz 16:07:49 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000440)=@lang_id={0x4}}]}) [ 789.116227][ T3549] usb 6-1: config 0 descriptor?? 16:07:49 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0x6e, &(0x7f00000004c0)=@string={0x6e, 0x3, "77bed3b260b714ad02ec1d74d1820f6d2850b07506d70c932fc1a70cac9bfa75b2d71c82c5577d76d6ef6113d85dcfad4606e90948314b337cc80efad4b356c7206e499db2edddc080019d955a533c9db1822d48d06c8eb871079acd0c032e6011c32de55404e500475647d8"}}]}) [ 789.245646][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 789.294444][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 789.307502][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 789.436806][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 789.443927][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 789.513793][ T3549] usb 6-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230C' in warm state [ 789.638366][ T3549] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 789.750828][ T3549] usb 6-1: USB disconnect, device number 5 [ 789.832926][ T3541] usb 1-1: new high-speed USB device number 14 using dummy_hcd 16:07:50 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0x8f, 0x47, 0xa, 0x10, 0x572, 0xc689, 0x4f0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xaf, 0x6b, 0xc5, 0x0, [], [{}]}}]}}]}}, 0x0) 16:07:50 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 16:07:50 executing program 1: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card2/oss_mixer\x00', 0x40, 0x0) 16:07:50 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000000c0)) [ 790.052243][ T3595] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 790.123232][ T3541] usb 1-1: Using ep0 maxpacket: 32 [ 790.177470][T11539] ieee802154 phy0 wpan0: encryption failed: -22 16:07:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 790.243036][ T3541] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 16:07:50 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast1, 0x2}, 0x1c, 0x0}, 0x0) [ 790.327568][ T3595] usb 5-1: Using ep0 maxpacket: 32 16:07:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2, 0x47}, 0x1c, 0x0}, 0x0) [ 790.455580][ T3541] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 790.465706][ T3541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.474133][ T3541] usb 1-1: Product: syz [ 790.478606][ T3541] usb 1-1: SerialNumber: syz [ 790.483393][ T3595] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 790.684760][ T3595] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 790.694342][ T3595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.703015][ T3595] usb 5-1: Product: syz [ 790.707395][ T3595] usb 5-1: Manufacturer: ë¹·ë‹“ë ê´”î°‚çè‹‘æ´å€¨ç–°íœ†éŒŒì„¯à²§é®¬ç—ºíž²èˆœåŸ…白á¡å·˜ê·Ù†à§©ã…ˆã‹ì¡¼ï¨Žë”ì–渠鵉ìƒÆ€é–åšé´¼èŠ±ä ­æ³ë¢ŽÝ±ì¶šÌŒæ€®ìŒ‘єå噇 [ 790.725574][ T3595] usb 5-1: SerialNumber: syz [ 790.961245][T11105] usb 1-1: USB disconnect, device number 14 [ 790.972152][ T3549] usb 6-1: new full-speed USB device number 6 using dummy_hcd 16:07:51 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, '\x00', 0x0}, 0x4}, 0x1c, 0x0}, 0x0) 16:07:51 executing program 2: syz_io_uring_setup(0x535a, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x450f, &(0x7f0000000100), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0xdbf, &(0x7f00000006c0)={0x0, 0x0, 0xc00}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000740), &(0x7f0000000780)) [ 791.201714][ T3595] usb 5-1: USB disconnect, device number 8 16:07:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@flowinfo={{0x14, 0x29, 0x3}}], 0x18}, 0x0) [ 791.333048][ T3549] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 791.503407][ T3549] usb 6-1: New USB device found, idVendor=0572, idProduct=c689, bcdDevice=4f.0a [ 791.513290][ T3549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.521545][ T3549] usb 6-1: Product: syz [ 791.526176][ T3549] usb 6-1: Manufacturer: syz [ 791.531007][ T3549] usb 6-1: SerialNumber: syz 16:07:51 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x101100, 0x0) [ 791.699910][ T3549] usb 6-1: config 0 descriptor?? [ 791.753610][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 791.798300][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 791.805886][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 16:07:51 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0x6e, &(0x7f00000004c0)=@string={0x6e, 0x3, "77bed3b260b714ad02ec1d74d1820f6d2850b07506d70c932fc1a70cac9bfa75b2d71c82c5577d76d6ef6113d85dcfad4606e90948314b337cc80efad4b356c7206e499db2edddc080019d955a533c9db1822d48d06c8eb871079acd0c032e6011c32de55404e500475647d8"}}]}) [ 791.933102][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 791.939939][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 792.012572][ T3549] usb 6-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230C' in warm state [ 792.072688][ T3549] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 792.210058][ T3549] usb 6-1: USB disconnect, device number 6 16:07:52 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0x8f, 0x47, 0xa, 0x10, 0x572, 0xc689, 0x4f0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xaf, 0x6b, 0xc5, 0x0, [], [{}]}}]}}]}}, 0x0) 16:07:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000005c0)="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", 0x5ad}], 0x1}, 0x0) 16:07:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) 16:07:52 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000040)) 16:07:52 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x48045) [ 792.637465][ T3595] usb 5-1: new high-speed USB device number 9 using dummy_hcd 16:07:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2, 0xc}, 0x1c, 0x0}, 0x0) 16:07:52 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000240), 0x0, 0x0, 0x0) 16:07:52 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x180000a, 0xc8b2, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x450f, &(0x7f0000000100), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 16:07:52 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cpuacct.usage_all\x00', 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) [ 792.893354][ T3595] usb 5-1: Using ep0 maxpacket: 32 [ 793.017400][ T3595] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 793.213299][ T3595] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 793.225576][ T3595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.234231][ T3595] usb 5-1: Product: syz [ 793.238699][ T3595] usb 5-1: Manufacturer: ë¹·ë‹“ë ê´”î°‚çè‹‘æ´å€¨ç–°íœ†éŒŒì„¯à²§é®¬ç—ºíž²èˆœåŸ…白á¡å·˜ê·Ù†à§©ã…ˆã‹ì¡¼ï¨Žë”ì–渠鵉ìƒÆ€é–åšé´¼èŠ±ä ­æ³ë¢ŽÝ±ì¶šÌŒæ€®ìŒ‘єå噇 [ 793.256719][ T3595] usb 5-1: SerialNumber: syz 16:07:53 executing program 2: syz_io_uring_setup(0x535a, &(0x7f0000000000), &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x450f, &(0x7f0000000100), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 793.324236][ T3549] usb 6-1: new full-speed USB device number 7 using dummy_hcd 16:07:53 executing program 0: ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000000)=0x20) io_uring_setup(0x688b, &(0x7f0000000300)={0x0, 0xf833, 0x0, 0x0, 0x1a3}) [ 793.683710][ T3595] usb 5-1: USB disconnect, device number 9 [ 793.693310][ T3549] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 793.862811][ T3549] usb 6-1: New USB device found, idVendor=0572, idProduct=c689, bcdDevice=4f.0a [ 793.872810][ T3549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.881070][ T3549] usb 6-1: Product: syz [ 793.885667][ T3549] usb 6-1: Manufacturer: syz [ 793.890492][ T3549] usb 6-1: SerialNumber: syz [ 793.951260][ T3549] usb 6-1: config 0 descriptor?? [ 794.000838][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 794.049128][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 794.056022][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 794.192057][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 794.198764][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 16:07:54 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x25, 0x800, 0x6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4e14c6634c45241284e37690010000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x940) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@dev, @multicast1}, 0x10) [ 794.276294][ T3549] usb 6-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230C' in warm state [ 794.317234][ T3549] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 794.407143][ T3549] usb 6-1: USB disconnect, device number 7 16:07:54 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0x8f, 0x47, 0xa, 0x10, 0x572, 0xc689, 0x4f0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xaf, 0x6b, 0xc5, 0x0, [], [{}]}}]}}]}}, 0x0) 16:07:54 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r2}}}], 0x28}, 0x0) 16:07:54 executing program 1: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) add_key$user(&(0x7f0000000480), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000600), &(0x7f0000000640)=""/221, 0xdd, &(0x7f0000000780)={&(0x7f0000000740)={'poly1305-simd\x00'}}) 16:07:54 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RRENAME(r0, &(0x7f0000000000)={0x7}, 0x7) 16:07:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2, 0x3e}, 0x1c, 0x0}, 0x0) 16:07:54 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000140)={@dev, @broadcast, @void}, 0x0) 16:07:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0xf}}, 0x0) 16:07:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 16:07:55 executing program 2: r0 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmdt(r0) 16:07:55 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000580)) [ 795.522044][ T3595] usb 6-1: new full-speed USB device number 8 using dummy_hcd 16:07:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0xf}}, 0x0) [ 795.766900][T11589] could not allocate digest TFM handle poly1305-simd 16:07:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x17, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, 0x20}}, 0x0) [ 795.913438][ T3595] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 796.085894][ T3595] usb 6-1: New USB device found, idVendor=0572, idProduct=c689, bcdDevice=4f.0a [ 796.095619][ T3595] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.103994][ T3595] usb 6-1: Product: syz [ 796.108317][ T3595] usb 6-1: Manufacturer: syz [ 796.113359][ T3595] usb 6-1: SerialNumber: syz [ 796.191984][ T3595] usb 6-1: config 0 descriptor?? [ 796.251027][ T3595] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 796.296513][ T3595] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 796.303410][ T3595] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 796.422225][ T3595] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 796.428950][ T3595] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 796.502165][ T3595] usb 6-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230C' in warm state [ 796.574099][ T3595] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 796.624088][ T3595] usb 6-1: USB disconnect, device number 8 16:07:57 executing program 5: 16:07:57 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmdt(0x0) 16:07:57 executing program 0: r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x0) inotify_rm_watch(r0, 0x0) 16:07:57 executing program 4: socketpair(0x1e, 0x0, 0x1, &(0x7f0000000000)) 16:07:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="a27a"], 0x7aa2}}, 0x0) 16:07:57 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 16:07:57 executing program 1: geteuid() mount$binderfs(0x0, &(0x7f0000000140)='./binderfs\x00', &(0x7f00000001c0), 0x0, 0x0) 16:07:57 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)=@multiplanar_fd={0x0, 0x4, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2a637abb"}, 0x0, 0x4, {0x0}}) 16:07:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 16:07:57 executing program 2: syz_emit_ethernet(0x10, &(0x7f0000000140)={@dev, @broadcast, @void, {@generic={0x0, "d1ad"}}}, 0x0) 16:07:57 executing program 5: 16:07:58 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast2}}) 16:07:58 executing program 5: 16:07:58 executing program 2: syz_emit_ethernet(0x2e, &(0x7f0000000300)={@local, @multicast, @void, {@mpls_mc={0x8848, {[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 16:07:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x7aa2}}, 0x0) 16:07:58 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f00000004c0)) 16:07:58 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0x8f, 0x47, 0xa, 0x10, 0x572, 0xc689, 0x4f0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xaf, 0x6b, 0xc5, 0x0, [], [{}]}}]}}]}}, 0x0) 16:07:58 executing program 4: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x410000) 16:07:59 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 16:07:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 16:07:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000194c0)=@base={0xe, 0x0, 0x0, 0x64}, 0x48) [ 799.348191][T11649] QAT: Device 0 not found 16:07:59 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 16:07:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 16:07:59 executing program 2: syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x11cc1) [ 799.633090][ T3549] usb 6-1: new high-speed USB device number 9 using dummy_hcd 16:07:59 executing program 1: r0 = io_uring_setup(0x70d7, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 16:07:59 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x25e641f4e6845ab0, 0x0) [ 799.879991][ T3549] usb 6-1: Using ep0 maxpacket: 16 [ 800.002464][ T3549] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 16:08:00 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x541b, 0x0) [ 800.173091][ T3549] usb 6-1: New USB device found, idVendor=0572, idProduct=c689, bcdDevice=4f.0a [ 800.185456][ T3549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.194299][ T3549] usb 6-1: Product: syz [ 800.198695][ T3549] usb 6-1: Manufacturer: syz [ 800.203625][ T3549] usb 6-1: SerialNumber: syz 16:08:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0xf8}}, 0x0) [ 800.344364][ T3549] usb 6-1: config 0 descriptor?? [ 800.404029][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 800.449019][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 800.455992][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 800.582418][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 800.594120][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 800.702884][ T3549] usb 6-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230C' in warm state [ 800.774301][ T3549] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 800.786108][ T3549] dvbdev: DVB: registering new adapter (MyGica Mini DVB-(T/T2/C) USB Stick T230C) [ 800.802125][ T3549] usb 6-1: media controller created [ 800.808645][T11670] QAT: Invalid ioctl 21531 [ 800.953283][ T3549] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. 16:08:01 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0x8f, 0x47, 0xa, 0x10, 0x572, 0xc689, 0x4f0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xaf, 0x6b, 0xc5, 0x0, [], [{}]}}]}}]}}, 0x0) 16:08:01 executing program 1: io_uring_setup(0x4dbb, &(0x7f0000000040)={0x0, 0x0, 0x2}) 16:08:01 executing program 0: ioprio_set$uid(0x0, 0x0, 0x4007) 16:08:01 executing program 4: bpf$MAP_CREATE(0x8, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 16:08:01 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r1], 0x40}, 0x1, 0x100000000000000}, 0x0) 16:08:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) [ 801.495156][T11683] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 16:08:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x17, 0xa, 0x201}, 0x14}}, 0x0) 16:08:01 executing program 0: syz_io_uring_setup(0x126f, &(0x7f0000000000)={0x0, 0xdb5c, 0x8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:08:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x0, 0x0, 0x1f}, 0x48) 16:08:01 executing program 4: r0 = io_uring_setup(0xa0, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 16:08:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x202) ptrace$peekuser(0x3, r0, 0x6) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) prlimit64(0x0, 0x0, &(0x7f0000000440)={0x1, 0x68}, &(0x7f0000000480)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:08:02 executing program 1: socketpair(0xa, 0x3, 0x0, &(0x7f0000000380)) [ 802.447490][ T3549] usb 6-1: USB disconnect, device number 9 [ 802.922259][ T3549] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 803.172920][ T3549] usb 6-1: Using ep0 maxpacket: 16 [ 803.178199][T11698] not chained 70000 origins [ 803.178240][T11698] CPU: 1 PID: 11698 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 803.193449][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 803.203737][T11698] Call Trace: [ 803.207120][T11698] [ 803.210232][T11698] dump_stack_lvl+0x1c8/0x256 [ 803.215144][T11698] dump_stack+0x1a/0x1c [ 803.219504][T11698] kmsan_internal_chain_origin+0x78/0x120 [ 803.225420][T11698] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 803.231770][T11698] ? kmsan_get_metadata+0x33/0x220 [ 803.237060][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 803.243508][T11698] ? kmsan_get_metadata+0x33/0x220 [ 803.248796][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 803.254786][T11698] ? kmsan_get_metadata+0x33/0x220 [ 803.260074][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 803.266068][T11698] ? __get_compat_msghdr+0x5b/0x750 [ 803.271480][T11698] ? kmsan_get_metadata+0x33/0x220 [ 803.276765][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 803.282757][T11698] ? should_fail+0x3f/0x810 [ 803.287427][T11698] ? __stack_depot_save+0x21/0x4b0 [ 803.292696][T11698] ? kmsan_get_metadata+0x33/0x220 [ 803.297970][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 803.304391][T11698] ? kmsan_get_metadata+0x33/0x220 [ 803.309659][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 803.315642][T11698] __msan_chain_origin+0xbd/0x140 [ 803.320831][T11698] __get_compat_msghdr+0x514/0x750 [ 803.326182][T11698] get_compat_msghdr+0x8c/0x1c0 [ 803.331231][T11698] ? ___sys_recvmsg+0xa9/0x890 [ 803.336139][T11698] ? do_recvmmsg+0x63a/0x10a0 [ 803.340967][T11698] ___sys_recvmsg+0x19d/0x890 [ 803.345801][T11698] ? __schedule+0x1609/0x21d0 [ 803.350635][T11698] ? kmsan_get_metadata+0x33/0x220 [ 803.355911][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 803.361899][T11698] ? kmsan_get_metadata+0x33/0x220 [ 803.367176][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 803.373169][T11698] do_recvmmsg+0x63a/0x10a0 [ 803.377850][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 803.384276][T11698] ? __sys_recvmmsg+0x52/0x450 [ 803.389181][T11698] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 803.395776][T11698] __sys_recvmmsg+0x113/0x450 [ 803.400598][T11698] ? kmsan_get_metadata+0x33/0x220 [ 803.405905][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 803.412330][T11698] __do_fast_syscall_32+0x87/0xe0 [ 803.417504][T11698] ? exit_to_user_mode_prepare+0x119/0x220 [ 803.423473][T11698] do_fast_syscall_32+0x33/0x70 [ 803.428468][T11698] do_SYSENTER_32+0x1b/0x20 [ 803.433110][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 803.439653][T11698] RIP: 0023:0xf7f30549 [ 803.443829][T11698] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 803.463877][T11698] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 803.472439][T11698] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 803.480539][T11698] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 803.488653][T11698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 803.496744][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.504832][T11698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 803.512947][T11698] [ 803.519626][T11698] Uninit was stored to memory at: [ 803.525231][T11698] __get_compat_msghdr+0x514/0x750 [ 803.530550][T11698] get_compat_msghdr+0x8c/0x1c0 [ 803.535700][T11698] ___sys_recvmsg+0x19d/0x890 [ 803.540532][T11698] do_recvmmsg+0x63a/0x10a0 [ 803.545483][T11698] __sys_recvmmsg+0x113/0x450 [ 803.550331][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 803.557110][T11698] __do_fast_syscall_32+0x87/0xe0 [ 803.562387][T11698] do_fast_syscall_32+0x33/0x70 [ 803.563321][ T3549] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 803.567336][T11698] do_SYSENTER_32+0x1b/0x20 [ 803.582757][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 803.589326][T11698] [ 803.591819][T11698] Uninit was stored to memory at: [ 803.597061][T11698] __get_compat_msghdr+0x514/0x750 [ 803.602462][T11698] get_compat_msghdr+0x8c/0x1c0 [ 803.607574][T11698] ___sys_recvmsg+0x19d/0x890 [ 803.612509][T11698] do_recvmmsg+0x63a/0x10a0 [ 803.617167][T11698] __sys_recvmmsg+0x113/0x450 [ 803.622097][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 803.628528][T11698] __do_fast_syscall_32+0x87/0xe0 [ 803.633822][T11698] do_fast_syscall_32+0x33/0x70 [ 803.638831][T11698] do_SYSENTER_32+0x1b/0x20 [ 803.643607][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 803.650209][T11698] [ 803.652733][T11698] Uninit was stored to memory at: [ 803.657986][T11698] __get_compat_msghdr+0x514/0x750 [ 803.663395][T11698] get_compat_msghdr+0x8c/0x1c0 [ 803.668456][T11698] ___sys_recvmsg+0x19d/0x890 [ 803.673415][T11698] do_recvmmsg+0x63a/0x10a0 [ 803.678072][T11698] __sys_recvmmsg+0x113/0x450 [ 803.683029][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 803.689472][T11698] __do_fast_syscall_32+0x87/0xe0 [ 803.694764][T11698] do_fast_syscall_32+0x33/0x70 [ 803.699790][T11698] do_SYSENTER_32+0x1b/0x20 [ 803.704548][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 803.711103][T11698] [ 803.713599][T11698] Uninit was stored to memory at: [ 803.718864][T11698] __get_compat_msghdr+0x514/0x750 [ 803.724286][T11698] get_compat_msghdr+0x8c/0x1c0 [ 803.729368][T11698] ___sys_recvmsg+0x19d/0x890 [ 803.734361][T11698] do_recvmmsg+0x63a/0x10a0 [ 803.739038][T11698] __sys_recvmmsg+0x113/0x450 [ 803.744147][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 803.750566][T11698] __do_fast_syscall_32+0x87/0xe0 [ 803.755922][T11698] do_fast_syscall_32+0x33/0x70 [ 803.760954][T11698] do_SYSENTER_32+0x1b/0x20 [ 803.765754][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 803.772409][T11698] [ 803.774832][T11698] Uninit was stored to memory at: [ 803.780100][T11698] __get_compat_msghdr+0x514/0x750 [ 803.785583][T11698] get_compat_msghdr+0x8c/0x1c0 [ 803.790639][T11698] ___sys_recvmsg+0x19d/0x890 [ 803.795594][T11698] do_recvmmsg+0x63a/0x10a0 [ 803.800272][T11698] __sys_recvmmsg+0x113/0x450 [ 803.805267][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 803.805789][ T3549] usb 6-1: New USB device found, idVendor=0572, idProduct=c689, bcdDevice=4f.0a [ 803.811631][T11698] __do_fast_syscall_32+0x87/0xe0 [ 803.821001][ T3549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.825817][T11698] do_fast_syscall_32+0x33/0x70 [ 803.825913][T11698] do_SYSENTER_32+0x1b/0x20 [ 803.834270][ T3549] usb 6-1: Product: syz [ 803.839097][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 803.843906][ T3549] usb 6-1: Manufacturer: syz [ 803.847907][T11698] [ 803.847927][T11698] Uninit was stored to memory at: [ 803.848085][T11698] __get_compat_msghdr+0x514/0x750 [ 803.854441][ T3549] usb 6-1: SerialNumber: syz [ 803.858979][T11698] get_compat_msghdr+0x8c/0x1c0 [ 803.881853][T11698] ___sys_recvmsg+0x19d/0x890 [ 803.886714][T11698] do_recvmmsg+0x63a/0x10a0 [ 803.891371][T11698] __sys_recvmmsg+0x113/0x450 [ 803.896367][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 803.902895][T11698] __do_fast_syscall_32+0x87/0xe0 [ 803.908094][T11698] do_fast_syscall_32+0x33/0x70 [ 803.913249][T11698] do_SYSENTER_32+0x1b/0x20 [ 803.917933][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 803.924639][T11698] [ 803.927044][T11698] Uninit was stored to memory at: [ 803.932439][T11698] __get_compat_msghdr+0x514/0x750 [ 803.937772][T11698] get_compat_msghdr+0x8c/0x1c0 [ 803.942972][T11698] ___sys_recvmsg+0x19d/0x890 [ 803.947841][T11698] do_recvmmsg+0x63a/0x10a0 [ 803.952645][T11698] __sys_recvmmsg+0x113/0x450 [ 803.957495][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 803.964062][T11698] __do_fast_syscall_32+0x87/0xe0 [ 803.969287][T11698] do_fast_syscall_32+0x33/0x70 [ 803.974437][T11698] do_SYSENTER_32+0x1b/0x20 [ 803.979095][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 803.985745][T11698] [ 803.988165][T11698] Local variable msg_sys created at: [ 803.993698][T11698] do_recvmmsg+0x5f/0x10a0 [ 803.998262][T11698] __sys_recvmmsg+0x113/0x450 [ 804.003501][ T3549] usb 6-1: config 0 descriptor?? [ 804.051475][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 804.099352][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 804.106167][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 804.240232][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 804.247080][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 804.322204][ T3549] usb 6-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230C' in warm state [ 804.364952][ T3549] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 804.382807][ T3549] dvbdev: DVB: registering new adapter (MyGica Mini DVB-(T/T2/C) USB Stick T230C) [ 804.393211][ T3549] usb 6-1: media controller created [ 804.475027][ T3549] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 804.616783][T11698] not chained 80000 origins [ 804.621563][T11698] CPU: 1 PID: 11698 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 804.632246][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 804.642437][T11698] Call Trace: [ 804.645824][T11698] [ 804.648850][T11698] dump_stack_lvl+0x1c8/0x256 [ 804.653763][T11698] dump_stack+0x1a/0x1c [ 804.658110][T11698] kmsan_internal_chain_origin+0x78/0x120 [ 804.664029][T11698] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 804.670307][T11698] ? kmsan_get_metadata+0x33/0x220 [ 804.675597][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 804.682033][T11698] ? kmsan_get_metadata+0x33/0x220 [ 804.687322][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 804.693328][T11698] ? kmsan_get_metadata+0x33/0x220 [ 804.698713][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 804.704720][T11698] ? __get_compat_msghdr+0x5b/0x750 [ 804.710137][T11698] ? kmsan_get_metadata+0x33/0x220 [ 804.715437][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 804.721452][T11698] ? should_fail+0x3f/0x810 [ 804.726145][T11698] ? __stack_depot_save+0x21/0x4b0 [ 804.731474][T11698] ? kmsan_get_metadata+0x33/0x220 [ 804.736779][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 804.743232][T11698] ? kmsan_get_metadata+0x33/0x220 [ 804.748536][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 804.754533][T11698] __msan_chain_origin+0xbd/0x140 [ 804.759737][T11698] __get_compat_msghdr+0x514/0x750 [ 804.765099][T11698] get_compat_msghdr+0x8c/0x1c0 [ 804.770173][T11698] ? ___sys_recvmsg+0xa9/0x890 [ 804.775107][T11698] ? do_recvmmsg+0x63a/0x10a0 [ 804.779955][T11698] ___sys_recvmsg+0x19d/0x890 [ 804.784806][T11698] ? __schedule+0x1609/0x21d0 [ 804.789658][T11698] ? kmsan_get_metadata+0x33/0x220 [ 804.794953][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 804.801046][T11698] ? kmsan_get_metadata+0x33/0x220 [ 804.806347][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 804.812359][T11698] do_recvmmsg+0x63a/0x10a0 [ 804.817050][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 804.823497][T11698] ? __sys_recvmmsg+0x52/0x450 [ 804.828421][T11698] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 804.835034][T11698] __sys_recvmmsg+0x113/0x450 [ 804.839874][T11698] ? kmsan_get_metadata+0x33/0x220 [ 804.845277][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 804.851727][T11698] __do_fast_syscall_32+0x87/0xe0 [ 804.856921][T11698] ? exit_to_user_mode_prepare+0x119/0x220 [ 804.862916][T11698] do_fast_syscall_32+0x33/0x70 16:08:04 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0x8f, 0x47, 0xa, 0x10, 0x572, 0xc689, 0x4f0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xaf, 0x6b, 0xc5, 0x0, [], [{}]}}]}}]}}, 0x0) [ 804.867958][T11698] do_SYSENTER_32+0x1b/0x20 [ 804.872628][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 804.879206][T11698] RIP: 0023:0xf7f30549 [ 804.883409][T11698] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 804.903223][T11698] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 16:08:04 executing program 3: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0xe000000000}}]}) 16:08:04 executing program 0: bpf$MAP_CREATE(0xf, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 16:08:04 executing program 4: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffffa) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x9, 0x0, 0x0) 16:08:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0xf8}, 0x300}, 0x0) [ 804.911918][T11698] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 804.920046][T11698] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 804.928185][T11698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 804.936316][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.944444][T11698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 804.952583][T11698] [ 804.959455][T11698] Uninit was stored to memory at: [ 804.966846][T11698] __get_compat_msghdr+0x514/0x750 [ 804.972304][T11698] get_compat_msghdr+0x8c/0x1c0 [ 804.977360][T11698] ___sys_recvmsg+0x19d/0x890 [ 804.982291][T11698] do_recvmmsg+0x63a/0x10a0 [ 804.986948][T11698] __sys_recvmmsg+0x113/0x450 [ 804.991881][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 804.998304][T11698] __do_fast_syscall_32+0x87/0xe0 [ 805.003580][T11698] do_fast_syscall_32+0x33/0x70 [ 805.008590][T11698] do_SYSENTER_32+0x1b/0x20 [ 805.013357][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 805.019923][T11698] [ 805.022426][T11698] Uninit was stored to memory at: [ 805.027696][T11698] __get_compat_msghdr+0x514/0x750 [ 805.033103][T11698] get_compat_msghdr+0x8c/0x1c0 [ 805.038170][T11698] ___sys_recvmsg+0x19d/0x890 [ 805.043128][T11698] do_recvmmsg+0x63a/0x10a0 [ 805.047792][T11698] __sys_recvmmsg+0x113/0x450 [ 805.052720][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 805.059149][T11698] __do_fast_syscall_32+0x87/0xe0 [ 805.064441][T11698] do_fast_syscall_32+0x33/0x70 [ 805.069448][T11698] do_SYSENTER_32+0x1b/0x20 [ 805.074205][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 805.080769][T11698] [ 805.083263][T11698] Uninit was stored to memory at: [ 805.088517][T11698] __get_compat_msghdr+0x514/0x750 [ 805.093920][T11698] get_compat_msghdr+0x8c/0x1c0 [ 805.098972][T11698] ___sys_recvmsg+0x19d/0x890 [ 805.103891][T11698] do_recvmmsg+0x63a/0x10a0 [ 805.108544][T11698] __sys_recvmmsg+0x113/0x450 [ 805.113464][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 805.120144][T11698] __do_fast_syscall_32+0x87/0xe0 [ 805.125440][T11698] do_fast_syscall_32+0x33/0x70 [ 805.130440][T11698] do_SYSENTER_32+0x1b/0x20 [ 805.135188][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 805.141860][T11698] [ 805.144264][T11698] Uninit was stored to memory at: [ 805.149507][T11698] __get_compat_msghdr+0x514/0x750 [ 805.154912][T11698] get_compat_msghdr+0x8c/0x1c0 [ 805.159963][T11698] ___sys_recvmsg+0x19d/0x890 [ 805.164884][T11698] do_recvmmsg+0x63a/0x10a0 [ 805.169546][T11698] __sys_recvmmsg+0x113/0x450 [ 805.174461][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 805.180874][T11698] __do_fast_syscall_32+0x87/0xe0 [ 805.186154][T11698] do_fast_syscall_32+0x33/0x70 [ 805.191171][T11698] do_SYSENTER_32+0x1b/0x20 [ 805.195927][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 805.202589][T11698] [ 805.205004][T11698] Uninit was stored to memory at: [ 805.210258][T11698] __get_compat_msghdr+0x514/0x750 [ 805.215670][T11698] get_compat_msghdr+0x8c/0x1c0 [ 805.220712][T11698] ___sys_recvmsg+0x19d/0x890 [ 805.225639][T11698] do_recvmmsg+0x63a/0x10a0 [ 805.230293][T11698] __sys_recvmmsg+0x113/0x450 [ 805.235222][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 805.241649][T11698] __do_fast_syscall_32+0x87/0xe0 [ 805.246932][T11698] do_fast_syscall_32+0x33/0x70 [ 805.252028][T11698] do_SYSENTER_32+0x1b/0x20 [ 805.256677][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 805.263331][T11698] [ 805.265732][T11698] Uninit was stored to memory at: [ 805.271032][T11698] __get_compat_msghdr+0x514/0x750 [ 805.276471][T11698] get_compat_msghdr+0x8c/0x1c0 [ 805.281524][T11698] ___sys_recvmsg+0x19d/0x890 [ 805.286455][T11698] do_recvmmsg+0x63a/0x10a0 [ 805.291126][T11698] __sys_recvmmsg+0x113/0x450 [ 805.296093][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 805.302603][T11698] __do_fast_syscall_32+0x87/0xe0 [ 805.307787][T11698] do_fast_syscall_32+0x33/0x70 [ 805.312942][T11698] do_SYSENTER_32+0x1b/0x20 [ 805.317595][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 805.324238][T11698] [ 805.326642][T11698] Uninit was stored to memory at: [ 805.332100][T11698] __get_compat_msghdr+0x514/0x750 [ 805.337419][T11698] get_compat_msghdr+0x8c/0x1c0 [ 805.342618][T11698] ___sys_recvmsg+0x19d/0x890 [ 805.347470][T11698] do_recvmmsg+0x63a/0x10a0 [ 805.352271][T11698] __sys_recvmmsg+0x113/0x450 [ 805.357104][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 805.363677][T11698] __do_fast_syscall_32+0x87/0xe0 [ 805.368863][T11698] do_fast_syscall_32+0x33/0x70 [ 805.374017][T11698] do_SYSENTER_32+0x1b/0x20 [ 805.378677][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 805.385440][T11698] [ 805.387849][T11698] Local variable msg_sys created at: [ 805.393379][T11698] do_recvmmsg+0x5f/0x10a0 [ 805.397945][T11698] __sys_recvmmsg+0x113/0x450 [ 805.445074][T11715] binder: Bad value for 'max' 16:08:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x4, 0xfffa}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b61e64c21a6e2f79aa0f8d729cdf362c1802c02103b6740236be"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 16:08:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x17, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x4}]}, 0x18}}, 0x0) 16:08:05 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x6000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 16:08:06 executing program 4: r0 = socket(0xa, 0x3, 0x2a) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa}, 0x18, &(0x7f0000000080)={0x0}}, 0x0) 16:08:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$char_usb(r0, &(0x7f0000000180)='3', 0x1) [ 806.617749][ T3549] usb 6-1: USB disconnect, device number 10 [ 807.102166][ T3549] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 807.342102][ T3549] usb 6-1: Using ep0 maxpacket: 16 [ 807.461229][T11698] not chained 90000 origins [ 807.466357][T11698] CPU: 0 PID: 11698 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 807.477048][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 807.487272][T11698] Call Trace: [ 807.490667][T11698] [ 807.493705][T11698] dump_stack_lvl+0x1c8/0x256 [ 807.498604][T11698] dump_stack+0x1a/0x1c [ 807.502965][T11698] kmsan_internal_chain_origin+0x78/0x120 [ 807.508895][T11698] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 807.515160][T11698] ? kmsan_get_metadata+0x33/0x220 [ 807.520454][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 807.526902][T11698] ? kmsan_get_metadata+0x33/0x220 [ 807.532207][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 807.538216][T11698] ? kmsan_get_metadata+0x33/0x220 [ 807.543518][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 807.549533][T11698] ? __get_compat_msghdr+0x5b/0x750 [ 807.554954][T11698] ? kmsan_get_metadata+0x33/0x220 [ 807.560265][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 807.566288][T11698] ? should_fail+0x3f/0x810 [ 807.570983][T11698] ? __stack_depot_save+0x21/0x4b0 [ 807.576279][T11698] ? kmsan_get_metadata+0x33/0x220 [ 807.581590][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 807.588034][T11698] ? kmsan_get_metadata+0x33/0x220 [ 807.593335][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 807.599343][T11698] __msan_chain_origin+0xbd/0x140 [ 807.604560][T11698] __get_compat_msghdr+0x514/0x750 [ 807.609927][T11698] get_compat_msghdr+0x8c/0x1c0 [ 807.614998][T11698] ? ___sys_recvmsg+0xa9/0x890 [ 807.619924][T11698] ? do_recvmmsg+0x63a/0x10a0 [ 807.624770][T11698] ___sys_recvmsg+0x19d/0x890 [ 807.629621][T11698] ? __schedule+0x1609/0x21d0 [ 807.634480][T11698] ? kmsan_get_metadata+0x33/0x220 [ 807.639778][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 807.645780][T11698] ? kmsan_get_metadata+0x33/0x220 [ 807.651081][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 807.657091][T11698] do_recvmmsg+0x63a/0x10a0 [ 807.661790][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 807.668243][T11698] ? __sys_recvmmsg+0x52/0x450 [ 807.673169][T11698] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 807.679777][T11698] __sys_recvmmsg+0x113/0x450 [ 807.684609][T11698] ? kmsan_get_metadata+0x33/0x220 [ 807.689921][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 807.696385][T11698] __do_fast_syscall_32+0x87/0xe0 [ 807.701597][T11698] ? exit_to_user_mode_prepare+0x119/0x220 [ 807.707595][T11698] do_fast_syscall_32+0x33/0x70 [ 807.712627][T11698] do_SYSENTER_32+0x1b/0x20 [ 807.717301][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 807.723870][T11698] RIP: 0023:0xf7f30549 [ 807.728061][T11698] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 807.747954][T11698] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 807.756572][T11698] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 807.764710][T11698] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 807.772830][T11698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 807.780931][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.789043][T11698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 807.797206][T11698] [ 807.805776][T11698] Uninit was stored to memory at: [ 807.811062][T11698] __get_compat_msghdr+0x514/0x750 [ 807.816882][T11698] get_compat_msghdr+0x8c/0x1c0 [ 807.822082][T11698] ___sys_recvmsg+0x19d/0x890 [ 807.826924][T11698] do_recvmmsg+0x63a/0x10a0 [ 807.831589][T11698] __sys_recvmmsg+0x113/0x450 [ 807.836565][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 807.843747][T11698] __do_fast_syscall_32+0x87/0xe0 [ 807.848940][T11698] do_fast_syscall_32+0x33/0x70 [ 807.854094][T11698] do_SYSENTER_32+0x1b/0x20 [ 807.858797][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 807.865496][T11698] [ 807.867904][T11698] Uninit was stored to memory at: [ 807.873279][T11698] __get_compat_msghdr+0x514/0x750 [ 807.878592][T11698] get_compat_msghdr+0x8c/0x1c0 [ 807.883776][T11698] ___sys_recvmsg+0x19d/0x890 [ 807.888610][T11698] do_recvmmsg+0x63a/0x10a0 [ 807.893398][T11698] __sys_recvmmsg+0x113/0x450 [ 807.898231][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 807.904794][T11698] __do_fast_syscall_32+0x87/0xe0 [ 807.909978][T11698] do_fast_syscall_32+0x33/0x70 [ 807.915113][T11698] do_SYSENTER_32+0x1b/0x20 [ 807.919774][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 807.926489][T11698] [ 807.928894][T11698] Uninit was stored to memory at: [ 807.934275][T11698] __get_compat_msghdr+0x514/0x750 [ 807.939588][T11698] get_compat_msghdr+0x8c/0x1c0 [ 807.944796][T11698] ___sys_recvmsg+0x19d/0x890 [ 807.949679][T11698] do_recvmmsg+0x63a/0x10a0 [ 807.954486][T11698] __sys_recvmmsg+0x113/0x450 [ 807.959327][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 807.965886][T11698] __do_fast_syscall_32+0x87/0xe0 [ 807.971078][T11698] do_fast_syscall_32+0x33/0x70 [ 807.976223][T11698] do_SYSENTER_32+0x1b/0x20 [ 807.980880][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 807.987568][T11698] [ 807.989976][T11698] Uninit was stored to memory at: [ 807.995354][T11698] __get_compat_msghdr+0x514/0x750 [ 808.000665][T11698] get_compat_msghdr+0x8c/0x1c0 [ 808.005868][T11698] ___sys_recvmsg+0x19d/0x890 [ 808.010707][T11698] do_recvmmsg+0x63a/0x10a0 [ 808.015520][T11698] __sys_recvmmsg+0x113/0x450 [ 808.020358][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 808.026919][T11698] __do_fast_syscall_32+0x87/0xe0 [ 808.032224][T11698] do_fast_syscall_32+0x33/0x70 [ 808.037235][T11698] do_SYSENTER_32+0x1b/0x20 [ 808.042017][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 808.048659][T11698] [ 808.051072][T11698] Uninit was stored to memory at: [ 808.056479][T11698] __get_compat_msghdr+0x514/0x750 [ 808.061934][T11698] get_compat_msghdr+0x8c/0x1c0 [ 808.066992][T11698] ___sys_recvmsg+0x19d/0x890 [ 808.071950][T11698] do_recvmmsg+0x63a/0x10a0 [ 808.076615][T11698] __sys_recvmmsg+0x113/0x450 [ 808.081469][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 808.088038][T11698] __do_fast_syscall_32+0x87/0xe0 [ 808.093370][T11698] do_fast_syscall_32+0x33/0x70 [ 808.098385][T11698] do_SYSENTER_32+0x1b/0x20 [ 808.103175][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 808.109765][T11698] [ 808.112319][T11698] Uninit was stored to memory at: [ 808.117573][T11698] __get_compat_msghdr+0x514/0x750 [ 808.123024][T11698] get_compat_msghdr+0x8c/0x1c0 [ 808.128083][T11698] ___sys_recvmsg+0x19d/0x890 [ 808.133053][T11698] do_recvmmsg+0x63a/0x10a0 [ 808.137708][T11698] __sys_recvmmsg+0x113/0x450 [ 808.142943][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 808.149362][T11698] __do_fast_syscall_32+0x87/0xe0 [ 808.154682][T11698] do_fast_syscall_32+0x33/0x70 [ 808.159697][T11698] do_SYSENTER_32+0x1b/0x20 [ 808.164483][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 808.171032][T11698] [ 808.173561][T11698] Uninit was stored to memory at: [ 808.178813][T11698] __get_compat_msghdr+0x514/0x750 [ 808.184248][T11698] get_compat_msghdr+0x8c/0x1c0 [ 808.189305][T11698] ___sys_recvmsg+0x19d/0x890 [ 808.194260][T11698] do_recvmmsg+0x63a/0x10a0 [ 808.198918][T11698] __sys_recvmmsg+0x113/0x450 [ 808.203895][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 808.210335][T11698] __do_fast_syscall_32+0x87/0xe0 [ 808.215653][T11698] do_fast_syscall_32+0x33/0x70 [ 808.220664][T11698] do_SYSENTER_32+0x1b/0x20 [ 808.225452][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 808.232136][T11698] [ 808.234551][T11698] Local variable msg_sys created at: [ 808.235074][ T9358] udevd[9358]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.239869][T11698] do_recvmmsg+0x5f/0x10a0 [ 808.239959][T11698] __sys_recvmmsg+0x113/0x450 [ 808.265528][ T3549] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 808.436610][ T3549] usb 6-1: New USB device found, idVendor=0572, idProduct=c689, bcdDevice=4f.0a [ 808.446146][ T3549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.455056][ T3549] usb 6-1: Product: syz [ 808.459456][ T3549] usb 6-1: Manufacturer: syz [ 808.464416][ T3549] usb 6-1: SerialNumber: syz [ 808.546619][ T9385] udevd[9385]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.551016][ T3549] usb 6-1: config 0 descriptor?? [ 808.634192][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 808.686286][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 808.694245][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 808.813234][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 808.819869][ T3549] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 808.892298][ T3549] usb 6-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230C' in warm state [ 808.974318][ T3549] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 808.985816][ T3549] dvbdev: DVB: registering new adapter (MyGica Mini DVB-(T/T2/C) USB Stick T230C) [ 808.995442][ T3549] usb 6-1: media controller created [ 809.154683][ T3549] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 809.597598][T11698] not chained 100000 origins [ 809.606925][T11698] CPU: 0 PID: 11698 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 809.617649][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 809.627845][T11698] Call Trace: [ 809.631220][T11698] [ 809.634252][T11698] dump_stack_lvl+0x1c8/0x256 [ 809.639157][T11698] dump_stack+0x1a/0x1c [ 809.643516][T11698] kmsan_internal_chain_origin+0x78/0x120 [ 809.649431][T11698] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 809.655698][T11698] ? kmsan_get_metadata+0x33/0x220 [ 809.661000][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 809.667439][T11698] ? kmsan_get_metadata+0x33/0x220 [ 809.672733][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 809.678730][T11698] ? kmsan_get_metadata+0x33/0x220 [ 809.684028][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 809.690043][T11698] ? __get_compat_msghdr+0x5b/0x750 [ 809.695457][T11698] ? kmsan_get_metadata+0x33/0x220 [ 809.700749][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 809.706758][T11698] ? should_fail+0x3f/0x810 [ 809.711444][T11698] ? __stack_depot_save+0x21/0x4b0 [ 809.716743][T11698] ? kmsan_get_metadata+0x33/0x220 [ 809.722066][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 809.728503][T11698] ? kmsan_get_metadata+0x33/0x220 [ 809.733799][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 809.739804][T11698] __msan_chain_origin+0xbd/0x140 [ 809.745008][T11698] __get_compat_msghdr+0x514/0x750 [ 809.750350][T11698] get_compat_msghdr+0x8c/0x1c0 [ 809.755389][T11698] ? ___sys_recvmsg+0xa9/0x890 [ 809.760300][T11698] ? do_recvmmsg+0x63a/0x10a0 [ 809.765125][T11698] ___sys_recvmsg+0x19d/0x890 [ 809.769956][T11698] ? __schedule+0x1609/0x21d0 [ 809.774780][T11698] ? kmsan_get_metadata+0x33/0x220 [ 809.780052][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 809.786031][T11698] ? kmsan_get_metadata+0x33/0x220 [ 809.791306][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 809.797309][T11698] do_recvmmsg+0x63a/0x10a0 [ 809.801986][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 809.808406][T11698] ? __sys_recvmmsg+0x52/0x450 [ 809.813311][T11698] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 809.819905][T11698] __sys_recvmmsg+0x113/0x450 [ 809.824722][T11698] ? kmsan_get_metadata+0x33/0x220 [ 809.830006][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 809.836445][T11698] __do_fast_syscall_32+0x87/0xe0 [ 809.841628][T11698] ? exit_to_user_mode_prepare+0x119/0x220 [ 809.847710][T11698] do_fast_syscall_32+0x33/0x70 [ 809.852729][T11698] do_SYSENTER_32+0x1b/0x20 [ 809.857372][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 809.863918][T11698] RIP: 0023:0xf7f30549 [ 809.868100][T11698] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 809.887966][T11698] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 809.896530][T11698] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 809.904623][T11698] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 809.912713][T11698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 809.920804][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.928893][T11698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 809.937090][T11698] [ 809.940805][T11698] Uninit was stored to memory at: [ 809.946198][T11698] __get_compat_msghdr+0x514/0x750 [ 809.951513][T11698] get_compat_msghdr+0x8c/0x1c0 [ 809.956698][T11698] ___sys_recvmsg+0x19d/0x890 [ 809.961550][T11698] do_recvmmsg+0x63a/0x10a0 [ 809.966335][T11698] __sys_recvmmsg+0x113/0x450 [ 809.971169][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 809.977722][T11698] __do_fast_syscall_32+0x87/0xe0 [ 809.983131][T11698] do_fast_syscall_32+0x33/0x70 [ 809.988141][T11698] do_SYSENTER_32+0x1b/0x20 [ 809.992940][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 809.999581][T11698] [ 810.002108][T11698] Uninit was stored to memory at: [ 810.007369][T11698] __get_compat_msghdr+0x514/0x750 [ 810.012813][T11698] get_compat_msghdr+0x8c/0x1c0 [ 810.017887][T11698] ___sys_recvmsg+0x19d/0x890 [ 810.022861][T11698] do_recvmmsg+0x63a/0x10a0 [ 810.027525][T11698] __sys_recvmmsg+0x113/0x450 [ 810.032509][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 810.038945][T11698] __do_fast_syscall_32+0x87/0xe0 [ 810.044284][T11698] do_fast_syscall_32+0x33/0x70 [ 810.049296][T11698] do_SYSENTER_32+0x1b/0x20 [ 810.054090][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 810.060683][T11698] [ 810.063226][T11698] Uninit was stored to memory at: [ 810.068506][T11698] __get_compat_msghdr+0x514/0x750 [ 810.073963][T11698] get_compat_msghdr+0x8c/0x1c0 [ 810.079026][T11698] ___sys_recvmsg+0x19d/0x890 [ 810.084092][T11698] do_recvmmsg+0x63a/0x10a0 [ 810.088756][T11698] __sys_recvmmsg+0x113/0x450 [ 810.093743][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 810.100199][T11698] __do_fast_syscall_32+0x87/0xe0 [ 810.105546][T11698] do_fast_syscall_32+0x33/0x70 [ 810.110658][T11698] do_SYSENTER_32+0x1b/0x20 [ 810.115458][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 810.122151][T11698] [ 810.124561][T11698] Uninit was stored to memory at: [ 810.129811][T11698] __get_compat_msghdr+0x514/0x750 [ 810.135254][T11698] get_compat_msghdr+0x8c/0x1c0 [ 810.140307][T11698] ___sys_recvmsg+0x19d/0x890 [ 810.145277][T11698] do_recvmmsg+0x63a/0x10a0 [ 810.150106][T11698] __sys_recvmmsg+0x113/0x450 [ 810.155076][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 810.161505][T11698] __do_fast_syscall_32+0x87/0xe0 [ 810.166836][T11698] do_fast_syscall_32+0x33/0x70 [ 810.171968][T11698] do_SYSENTER_32+0x1b/0x20 [ 810.176649][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 810.183342][T11698] [ 810.185745][T11698] Uninit was stored to memory at: [ 810.191001][T11698] __get_compat_msghdr+0x514/0x750 [ 810.196479][T11698] get_compat_msghdr+0x8c/0x1c0 [ 810.201541][T11698] ___sys_recvmsg+0x19d/0x890 [ 810.206526][T11698] do_recvmmsg+0x63a/0x10a0 [ 810.211181][T11698] __sys_recvmmsg+0x113/0x450 [ 810.216154][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 810.222711][T11698] __do_fast_syscall_32+0x87/0xe0 [ 810.227929][T11698] do_fast_syscall_32+0x33/0x70 [ 810.233073][T11698] do_SYSENTER_32+0x1b/0x20 [ 810.237736][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 810.244439][T11698] [ 810.246851][T11698] Uninit was stored to memory at: [ 810.252248][T11698] __get_compat_msghdr+0x514/0x750 [ 810.257561][T11698] get_compat_msghdr+0x8c/0x1c0 [ 810.262732][T11698] ___sys_recvmsg+0x19d/0x890 [ 810.267557][T11698] do_recvmmsg+0x63a/0x10a0 [ 810.272342][T11698] __sys_recvmmsg+0x113/0x450 [ 810.277178][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 810.283734][T11698] __do_fast_syscall_32+0x87/0xe0 [ 810.288940][T11698] do_fast_syscall_32+0x33/0x70 [ 810.294077][T11698] do_SYSENTER_32+0x1b/0x20 [ 810.298734][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 810.305424][T11698] [ 810.307834][T11698] Uninit was stored to memory at: [ 810.313217][T11698] __get_compat_msghdr+0x514/0x750 [ 810.318525][T11698] get_compat_msghdr+0x8c/0x1c0 [ 810.323807][T11698] ___sys_recvmsg+0x19d/0x890 [ 810.328662][T11698] do_recvmmsg+0x63a/0x10a0 [ 810.333574][T11698] __sys_recvmmsg+0x113/0x450 [ 810.338416][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 810.345048][T11698] __do_fast_syscall_32+0x87/0xe0 [ 810.350252][T11698] do_fast_syscall_32+0x33/0x70 [ 810.355470][T11698] do_SYSENTER_32+0x1b/0x20 [ 810.360136][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 810.366911][T11698] [ 810.369317][T11698] Local variable msg_sys created at: [ 810.374903][T11698] do_recvmmsg+0x5f/0x10a0 [ 810.379466][T11698] __sys_recvmmsg+0x113/0x450 [ 811.013068][ T3549] usb 6-1: USB disconnect, device number 11 [ 811.998716][T11698] not chained 110000 origins [ 812.003640][T11698] CPU: 1 PID: 11698 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 812.014326][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 812.024529][T11698] Call Trace: [ 812.027920][T11698] [ 812.030965][T11698] dump_stack_lvl+0x1c8/0x256 [ 812.035868][T11698] dump_stack+0x1a/0x1c [ 812.040214][T11698] kmsan_internal_chain_origin+0x78/0x120 [ 812.046133][T11698] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 812.052414][T11698] ? kmsan_get_metadata+0x33/0x220 [ 812.057722][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 812.064172][T11698] ? kmsan_get_metadata+0x33/0x220 [ 812.069465][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 812.075465][T11698] ? kmsan_get_metadata+0x33/0x220 [ 812.080769][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 812.086774][T11698] ? __get_compat_msghdr+0x5b/0x750 [ 812.092191][T11698] ? kmsan_get_metadata+0x33/0x220 [ 812.097499][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 812.103530][T11698] ? should_fail+0x3f/0x810 [ 812.108225][T11698] ? __stack_depot_save+0x21/0x4b0 [ 812.113629][T11698] ? kmsan_get_metadata+0x33/0x220 [ 812.118922][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 812.125359][T11698] ? kmsan_get_metadata+0x33/0x220 [ 812.130659][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 812.136671][T11698] __msan_chain_origin+0xbd/0x140 [ 812.141971][T11698] __get_compat_msghdr+0x514/0x750 [ 812.147341][T11698] get_compat_msghdr+0x8c/0x1c0 [ 812.152414][T11698] ? ___sys_recvmsg+0xa9/0x890 [ 812.157332][T11698] ? do_recvmmsg+0x63a/0x10a0 [ 812.162190][T11698] ___sys_recvmsg+0x19d/0x890 [ 812.167034][T11698] ? __schedule+0x1609/0x21d0 [ 812.171881][T11698] ? kmsan_get_metadata+0x33/0x220 [ 812.177181][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 812.183170][T11698] ? kmsan_get_metadata+0x33/0x220 [ 812.188454][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 812.194466][T11698] do_recvmmsg+0x63a/0x10a0 [ 812.199149][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 812.205592][T11698] ? __sys_recvmmsg+0x52/0x450 [ 812.210510][T11698] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 812.217116][T11698] __sys_recvmmsg+0x113/0x450 [ 812.221950][T11698] ? kmsan_get_metadata+0x33/0x220 [ 812.227250][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 812.233694][T11698] __do_fast_syscall_32+0x87/0xe0 [ 812.238888][T11698] ? exit_to_user_mode_prepare+0x119/0x220 [ 812.244874][T11698] do_fast_syscall_32+0x33/0x70 [ 812.249888][T11698] do_SYSENTER_32+0x1b/0x20 [ 812.254545][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 812.261138][T11698] RIP: 0023:0xf7f30549 [ 812.265322][T11698] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 812.285129][T11698] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 812.293715][T11698] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 812.301834][T11698] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 812.309933][T11698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 812.318032][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.326140][T11698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 812.334273][T11698] [ 812.340992][T11698] Uninit was stored to memory at: [ 812.346577][T11698] __get_compat_msghdr+0x514/0x750 [ 812.351993][T11698] get_compat_msghdr+0x8c/0x1c0 [ 812.357046][T11698] ___sys_recvmsg+0x19d/0x890 [ 812.361970][T11698] do_recvmmsg+0x63a/0x10a0 [ 812.366665][T11698] __sys_recvmmsg+0x113/0x450 [ 812.371496][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 812.378099][T11698] __do_fast_syscall_32+0x87/0xe0 [ 812.383374][T11698] do_fast_syscall_32+0x33/0x70 [ 812.388379][T11698] do_SYSENTER_32+0x1b/0x20 [ 812.393133][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 812.399689][T11698] [ 812.402335][T11698] Uninit was stored to memory at: [ 812.407587][T11698] __get_compat_msghdr+0x514/0x750 [ 812.412999][T11698] get_compat_msghdr+0x8c/0x1c0 [ 812.418056][T11698] ___sys_recvmsg+0x19d/0x890 [ 812.422989][T11698] do_recvmmsg+0x63a/0x10a0 [ 812.427641][T11698] __sys_recvmmsg+0x113/0x450 [ 812.432556][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 812.438986][T11698] __do_fast_syscall_32+0x87/0xe0 [ 812.444283][T11698] do_fast_syscall_32+0x33/0x70 [ 812.449299][T11698] do_SYSENTER_32+0x1b/0x20 [ 812.454059][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 812.460616][T11698] [ 812.463118][T11698] Uninit was stored to memory at: [ 812.468372][T11698] __get_compat_msghdr+0x514/0x750 [ 812.473792][T11698] get_compat_msghdr+0x8c/0x1c0 [ 812.478851][T11698] ___sys_recvmsg+0x19d/0x890 [ 812.483802][T11698] do_recvmmsg+0x63a/0x10a0 [ 812.488494][T11698] __sys_recvmmsg+0x113/0x450 [ 812.493430][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 812.499852][T11698] __do_fast_syscall_32+0x87/0xe0 [ 812.505154][T11698] do_fast_syscall_32+0x33/0x70 [ 812.510168][T11698] do_SYSENTER_32+0x1b/0x20 [ 812.514933][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 812.521500][T11698] [ 812.524032][T11698] Uninit was stored to memory at: [ 812.529300][T11698] __get_compat_msghdr+0x514/0x750 [ 812.534734][T11698] get_compat_msghdr+0x8c/0x1c0 [ 812.539803][T11698] ___sys_recvmsg+0x19d/0x890 [ 812.544735][T11698] do_recvmmsg+0x63a/0x10a0 [ 812.549392][T11698] __sys_recvmmsg+0x113/0x450 [ 812.554320][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 812.560737][T11698] __do_fast_syscall_32+0x87/0xe0 [ 812.566021][T11698] do_fast_syscall_32+0x33/0x70 [ 812.571023][T11698] do_SYSENTER_32+0x1b/0x20 [ 812.575767][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 812.582428][T11698] [ 812.584838][T11698] Uninit was stored to memory at: [ 812.590086][T11698] __get_compat_msghdr+0x514/0x750 [ 812.595506][T11698] get_compat_msghdr+0x8c/0x1c0 [ 812.600567][T11698] ___sys_recvmsg+0x19d/0x890 [ 812.605591][T11698] do_recvmmsg+0x63a/0x10a0 [ 812.610247][T11698] __sys_recvmmsg+0x113/0x450 [ 812.615178][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 812.621607][T11698] __do_fast_syscall_32+0x87/0xe0 [ 812.626992][T11698] do_fast_syscall_32+0x33/0x70 [ 812.632166][T11698] do_SYSENTER_32+0x1b/0x20 [ 812.636838][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 812.643571][T11698] [ 812.645984][T11698] Uninit was stored to memory at: [ 812.651317][T11698] __get_compat_msghdr+0x514/0x750 [ 812.656809][T11698] get_compat_msghdr+0x8c/0x1c0 [ 812.661951][T11698] ___sys_recvmsg+0x19d/0x890 [ 812.666785][T11698] do_recvmmsg+0x63a/0x10a0 [ 812.671448][T11698] __sys_recvmmsg+0x113/0x450 [ 812.676447][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 812.682973][T11698] __do_fast_syscall_32+0x87/0xe0 [ 812.688164][T11698] do_fast_syscall_32+0x33/0x70 [ 812.693270][T11698] do_SYSENTER_32+0x1b/0x20 [ 812.697927][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 812.704694][T11698] [ 812.707106][T11698] Uninit was stored to memory at: [ 812.712505][T11698] __get_compat_msghdr+0x514/0x750 [ 812.717827][T11698] get_compat_msghdr+0x8c/0x1c0 [ 812.723037][T11698] ___sys_recvmsg+0x19d/0x890 [ 812.727871][T11698] do_recvmmsg+0x63a/0x10a0 [ 812.732661][T11698] __sys_recvmmsg+0x113/0x450 [ 812.737500][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 812.744096][T11698] __do_fast_syscall_32+0x87/0xe0 [ 812.749299][T11698] do_fast_syscall_32+0x33/0x70 [ 812.754479][T11698] do_SYSENTER_32+0x1b/0x20 [ 812.759143][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 812.765866][T11698] [ 812.768275][T11698] Local variable msg_sys created at: [ 812.773826][T11698] do_recvmmsg+0x5f/0x10a0 [ 812.778501][T11698] __sys_recvmmsg+0x113/0x450 [ 814.018585][T11698] not chained 120000 origins [ 814.024397][T11698] CPU: 0 PID: 11698 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 814.035110][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 814.045314][T11698] Call Trace: [ 814.048696][T11698] [ 814.051737][T11698] dump_stack_lvl+0x1c8/0x256 [ 814.056632][T11698] dump_stack+0x1a/0x1c [ 814.060999][T11698] kmsan_internal_chain_origin+0x78/0x120 [ 814.066916][T11698] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 814.073192][T11698] ? kmsan_get_metadata+0x33/0x220 [ 814.078500][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 814.084949][T11698] ? kmsan_get_metadata+0x33/0x220 [ 814.090249][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 814.096259][T11698] ? kmsan_get_metadata+0x33/0x220 [ 814.101580][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 814.107594][T11698] ? __get_compat_msghdr+0x5b/0x750 [ 814.113022][T11698] ? kmsan_get_metadata+0x33/0x220 [ 814.118320][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 814.124338][T11698] ? should_fail+0x3f/0x810 [ 814.129023][T11698] ? __stack_depot_save+0x21/0x4b0 [ 814.134321][T11698] ? kmsan_get_metadata+0x33/0x220 [ 814.139621][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 814.146074][T11698] ? kmsan_get_metadata+0x33/0x220 [ 814.151367][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 814.157372][T11698] __msan_chain_origin+0xbd/0x140 [ 814.162574][T11698] __get_compat_msghdr+0x514/0x750 [ 814.167935][T11698] get_compat_msghdr+0x8c/0x1c0 [ 814.172997][T11698] ? ___sys_recvmsg+0xa9/0x890 [ 814.177923][T11698] ? do_recvmmsg+0x63a/0x10a0 [ 814.182773][T11698] ___sys_recvmsg+0x19d/0x890 [ 814.187627][T11698] ? __schedule+0x1609/0x21d0 [ 814.192506][T11698] ? kmsan_get_metadata+0x33/0x220 [ 814.197807][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 814.203808][T11698] ? kmsan_get_metadata+0x33/0x220 [ 814.209101][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 814.215117][T11698] do_recvmmsg+0x63a/0x10a0 [ 814.219811][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 814.226257][T11698] ? __sys_recvmmsg+0x52/0x450 [ 814.231176][T11698] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 814.237794][T11698] __sys_recvmmsg+0x113/0x450 [ 814.242634][T11698] ? kmsan_get_metadata+0x33/0x220 [ 814.247957][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 814.254406][T11698] __do_fast_syscall_32+0x87/0xe0 [ 814.259607][T11698] ? exit_to_user_mode_prepare+0x119/0x220 [ 814.265616][T11698] do_fast_syscall_32+0x33/0x70 [ 814.270645][T11698] do_SYSENTER_32+0x1b/0x20 [ 814.275332][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 814.282089][T11698] RIP: 0023:0xf7f30549 [ 814.286286][T11698] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 814.306099][T11698] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 814.314687][T11698] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 814.322815][T11698] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 814.330929][T11698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 814.339040][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.347154][T11698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 814.355291][T11698] [ 814.358610][T11698] Uninit was stored to memory at: [ 814.363977][T11698] __get_compat_msghdr+0x514/0x750 [ 814.369291][T11698] get_compat_msghdr+0x8c/0x1c0 [ 814.374491][T11698] ___sys_recvmsg+0x19d/0x890 [ 814.379328][T11698] do_recvmmsg+0x63a/0x10a0 [ 814.384115][T11698] __sys_recvmmsg+0x113/0x450 [ 814.388945][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 814.395675][T11698] __do_fast_syscall_32+0x87/0xe0 [ 814.400891][T11698] do_fast_syscall_32+0x33/0x70 [ 814.406035][T11698] do_SYSENTER_32+0x1b/0x20 [ 814.410696][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 814.417403][T11698] [ 814.419811][T11698] Uninit was stored to memory at: [ 814.425175][T11698] __get_compat_msghdr+0x514/0x750 [ 814.430491][T11698] get_compat_msghdr+0x8c/0x1c0 [ 814.435714][T11698] ___sys_recvmsg+0x19d/0x890 [ 814.440554][T11698] do_recvmmsg+0x63a/0x10a0 [ 814.445346][T11698] __sys_recvmmsg+0x113/0x450 [ 814.450179][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 814.456735][T11698] __do_fast_syscall_32+0x87/0xe0 [ 814.462043][T11698] do_fast_syscall_32+0x33/0x70 [ 814.467056][T11698] do_SYSENTER_32+0x1b/0x20 [ 814.471839][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 814.478392][T11698] [ 814.480797][T11698] Uninit was stored to memory at: [ 814.486186][T11698] __get_compat_msghdr+0x514/0x750 [ 814.491498][T11698] get_compat_msghdr+0x8c/0x1c0 [ 814.496706][T11698] ___sys_recvmsg+0x19d/0x890 [ 814.501540][T11698] do_recvmmsg+0x63a/0x10a0 [ 814.506328][T11698] __sys_recvmmsg+0x113/0x450 [ 814.511165][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 814.517717][T11698] __do_fast_syscall_32+0x87/0xe0 [ 814.523021][T11698] do_fast_syscall_32+0x33/0x70 [ 814.528028][T11698] do_SYSENTER_32+0x1b/0x20 [ 814.532810][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 814.539364][T11698] [ 814.541885][T11698] Uninit was stored to memory at: [ 814.547135][T11698] __get_compat_msghdr+0x514/0x750 [ 814.552576][T11698] get_compat_msghdr+0x8c/0x1c0 [ 814.557636][T11698] ___sys_recvmsg+0x19d/0x890 [ 814.562588][T11698] do_recvmmsg+0x63a/0x10a0 [ 814.567250][T11698] __sys_recvmmsg+0x113/0x450 [ 814.572196][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 814.578615][T11698] __do_fast_syscall_32+0x87/0xe0 [ 814.583929][T11698] do_fast_syscall_32+0x33/0x70 [ 814.589057][T11698] do_SYSENTER_32+0x1b/0x20 [ 814.593830][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 814.600385][T11698] [ 814.602907][T11698] Uninit was stored to memory at: [ 814.608153][T11698] __get_compat_msghdr+0x514/0x750 [ 814.613581][T11698] get_compat_msghdr+0x8c/0x1c0 [ 814.618637][T11698] ___sys_recvmsg+0x19d/0x890 [ 814.623587][T11698] do_recvmmsg+0x63a/0x10a0 [ 814.628251][T11698] __sys_recvmmsg+0x113/0x450 [ 814.633199][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 814.639615][T11698] __do_fast_syscall_32+0x87/0xe0 [ 814.644935][T11698] do_fast_syscall_32+0x33/0x70 [ 814.649941][T11698] do_SYSENTER_32+0x1b/0x20 [ 814.654728][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 814.661290][T11698] [ 814.663824][T11698] Uninit was stored to memory at: [ 814.669071][T11698] __get_compat_msghdr+0x514/0x750 [ 814.674512][T11698] get_compat_msghdr+0x8c/0x1c0 [ 814.679573][T11698] ___sys_recvmsg+0x19d/0x890 [ 814.684550][T11698] do_recvmmsg+0x63a/0x10a0 [ 814.689207][T11698] __sys_recvmmsg+0x113/0x450 [ 814.694166][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 814.700593][T11698] __do_fast_syscall_32+0x87/0xe0 [ 814.705924][T11698] do_fast_syscall_32+0x33/0x70 [ 814.710936][T11698] do_SYSENTER_32+0x1b/0x20 [ 814.715728][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 814.722407][T11698] [ 814.724810][T11698] Uninit was stored to memory at: [ 814.730055][T11698] __get_compat_msghdr+0x514/0x750 [ 814.735504][T11698] get_compat_msghdr+0x8c/0x1c0 [ 814.740564][T11698] ___sys_recvmsg+0x19d/0x890 [ 814.745524][T11698] do_recvmmsg+0x63a/0x10a0 [ 814.750175][T11698] __sys_recvmmsg+0x113/0x450 [ 814.755127][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 814.761547][T11698] __do_fast_syscall_32+0x87/0xe0 [ 814.766874][T11698] do_fast_syscall_32+0x33/0x70 [ 814.772002][T11698] do_SYSENTER_32+0x1b/0x20 [ 814.776661][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 814.783443][T11698] [ 814.785853][T11698] Local variable msg_sys created at: [ 814.791229][T11698] do_recvmmsg+0x5f/0x10a0 [ 814.796005][T11698] __sys_recvmmsg+0x113/0x450 [ 815.929753][T11698] not chained 130000 origins [ 815.936047][T11698] CPU: 1 PID: 11698 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 815.946741][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 815.956952][T11698] Call Trace: [ 815.960333][T11698] [ 815.963362][T11698] dump_stack_lvl+0x1c8/0x256 [ 815.968260][T11698] dump_stack+0x1a/0x1c [ 815.972611][T11698] kmsan_internal_chain_origin+0x78/0x120 [ 815.978519][T11698] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 815.984785][T11698] ? kmsan_get_metadata+0x33/0x220 [ 815.990059][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 815.996503][T11698] ? kmsan_get_metadata+0x33/0x220 [ 816.001789][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 816.007781][T11698] ? kmsan_get_metadata+0x33/0x220 [ 816.013070][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 816.019061][T11698] ? __get_compat_msghdr+0x5b/0x750 [ 816.024468][T11698] ? kmsan_get_metadata+0x33/0x220 [ 816.029769][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 816.035783][T11698] ? should_fail+0x3f/0x810 [ 816.040474][T11698] ? __stack_depot_save+0x21/0x4b0 [ 816.045779][T11698] ? kmsan_get_metadata+0x33/0x220 [ 816.051086][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 816.057530][T11698] ? kmsan_get_metadata+0x33/0x220 [ 816.062831][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 816.068840][T11698] __msan_chain_origin+0xbd/0x140 [ 816.074047][T11698] __get_compat_msghdr+0x514/0x750 [ 816.079399][T11698] get_compat_msghdr+0x8c/0x1c0 [ 816.084463][T11698] ? ___sys_recvmsg+0xa9/0x890 [ 816.089391][T11698] ? do_recvmmsg+0x63a/0x10a0 [ 816.094231][T11698] ___sys_recvmsg+0x19d/0x890 [ 816.099090][T11698] ? __schedule+0x1609/0x21d0 [ 816.103940][T11698] ? kmsan_get_metadata+0x33/0x220 [ 816.109234][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 816.115244][T11698] ? kmsan_get_metadata+0x33/0x220 [ 816.120537][T11698] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 816.126555][T11698] do_recvmmsg+0x63a/0x10a0 [ 816.131265][T11698] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 816.137719][T11698] ? __sys_recvmmsg+0x52/0x450 [ 816.142649][T11698] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 816.149261][T11698] __sys_recvmmsg+0x113/0x450 [ 816.154092][T11698] ? kmsan_get_metadata+0x33/0x220 [ 816.159394][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 816.165836][T11698] __do_fast_syscall_32+0x87/0xe0 [ 816.171019][T11698] ? exit_to_user_mode_prepare+0x119/0x220 [ 816.177009][T11698] do_fast_syscall_32+0x33/0x70 [ 816.182030][T11698] do_SYSENTER_32+0x1b/0x20 [ 816.186696][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 816.193338][T11698] RIP: 0023:0xf7f30549 [ 816.197532][T11698] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 816.217338][T11698] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 816.225929][T11698] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 816.234052][T11698] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 816.242157][T11698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 816.250262][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.258402][T11698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 816.266552][T11698] [ 816.273241][T11698] Uninit was stored to memory at: [ 816.278511][T11698] __get_compat_msghdr+0x514/0x750 [ 816.285417][T11698] get_compat_msghdr+0x8c/0x1c0 [ 816.290492][T11698] ___sys_recvmsg+0x19d/0x890 [ 816.295432][T11698] do_recvmmsg+0x63a/0x10a0 [ 816.300092][T11698] __sys_recvmmsg+0x113/0x450 [ 816.305032][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 816.311460][T11698] __do_fast_syscall_32+0x87/0xe0 [ 816.316751][T11698] do_fast_syscall_32+0x33/0x70 [ 816.321886][T11698] do_SYSENTER_32+0x1b/0x20 [ 816.326538][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 816.333194][T11698] [ 816.335599][T11698] Uninit was stored to memory at: [ 816.340852][T11698] __get_compat_msghdr+0x514/0x750 [ 816.346265][T11698] get_compat_msghdr+0x8c/0x1c0 [ 816.351352][T11698] ___sys_recvmsg+0x19d/0x890 [ 816.356367][T11698] do_recvmmsg+0x63a/0x10a0 [ 816.361062][T11698] __sys_recvmmsg+0x113/0x450 [ 816.366163][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 816.372741][T11698] __do_fast_syscall_32+0x87/0xe0 [ 816.377932][T11698] do_fast_syscall_32+0x33/0x70 [ 816.383093][T11698] do_SYSENTER_32+0x1b/0x20 [ 816.387758][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 816.394469][T11698] [ 816.396853][T11698] Uninit was stored to memory at: [ 816.402199][T11698] __get_compat_msghdr+0x514/0x750 [ 816.407516][T11698] get_compat_msghdr+0x8c/0x1c0 [ 816.412733][T11698] ___sys_recvmsg+0x19d/0x890 [ 816.417547][T11698] do_recvmmsg+0x63a/0x10a0 [ 816.422304][T11698] __sys_recvmmsg+0x113/0x450 [ 816.427138][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 816.433725][T11698] __do_fast_syscall_32+0x87/0xe0 [ 816.438920][T11698] do_fast_syscall_32+0x33/0x70 [ 816.444095][T11698] do_SYSENTER_32+0x1b/0x20 [ 816.448821][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 816.455466][T11698] [ 816.457913][T11698] Uninit was stored to memory at: [ 816.463293][T11698] __get_compat_msghdr+0x514/0x750 [ 816.468601][T11698] get_compat_msghdr+0x8c/0x1c0 [ 816.473759][T11698] ___sys_recvmsg+0x19d/0x890 [ 816.478596][T11698] do_recvmmsg+0x63a/0x10a0 [ 816.483417][T11698] __sys_recvmmsg+0x113/0x450 [ 816.488249][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 816.494838][T11698] __do_fast_syscall_32+0x87/0xe0 [ 816.500027][T11698] do_fast_syscall_32+0x33/0x70 [ 816.505190][T11698] do_SYSENTER_32+0x1b/0x20 [ 816.509826][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 816.516479][T11698] [ 816.518883][T11698] Uninit was stored to memory at: [ 816.524287][T11698] __get_compat_msghdr+0x514/0x750 [ 816.529578][T11698] get_compat_msghdr+0x8c/0x1c0 [ 816.534732][T11698] ___sys_recvmsg+0x19d/0x890 [ 816.539544][T11698] do_recvmmsg+0x63a/0x10a0 [ 816.544297][T11698] __sys_recvmmsg+0x113/0x450 [ 816.549131][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 816.555711][T11698] __do_fast_syscall_32+0x87/0xe0 [ 816.560873][T11698] do_fast_syscall_32+0x33/0x70 [ 816.565972][T11698] do_SYSENTER_32+0x1b/0x20 [ 816.570717][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 816.577442][T11698] [ 816.579846][T11698] Uninit was stored to memory at: [ 816.585285][T11698] __get_compat_msghdr+0x514/0x750 [ 816.590576][T11698] get_compat_msghdr+0x8c/0x1c0 [ 816.595734][T11698] ___sys_recvmsg+0x19d/0x890 [ 816.600570][T11698] do_recvmmsg+0x63a/0x10a0 [ 816.605391][T11698] __sys_recvmmsg+0x113/0x450 [ 816.610226][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 816.616766][T11698] __do_fast_syscall_32+0x87/0xe0 [ 816.622039][T11698] do_fast_syscall_32+0x33/0x70 [ 816.627037][T11698] do_SYSENTER_32+0x1b/0x20 [ 816.631666][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 816.638314][T11698] [ 816.640672][T11698] Uninit was stored to memory at: [ 816.646068][T11698] __get_compat_msghdr+0x514/0x750 [ 816.651363][T11698] get_compat_msghdr+0x8c/0x1c0 [ 816.656518][T11698] ___sys_recvmsg+0x19d/0x890 [ 816.661333][T11698] do_recvmmsg+0x63a/0x10a0 [ 816.666099][T11698] __sys_recvmmsg+0x113/0x450 [ 816.670949][T11698] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 816.677492][T11698] __do_fast_syscall_32+0x87/0xe0 [ 816.682773][T11698] do_fast_syscall_32+0x33/0x70 [ 816.687780][T11698] do_SYSENTER_32+0x1b/0x20 [ 816.692586][T11698] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 816.699124][T11698] [ 816.701481][T11698] Local variable msg_sys created at: [ 816.706980][T11698] do_recvmmsg+0x5f/0x10a0 [ 816.711680][T11698] __sys_recvmmsg+0x113/0x450 16:08:16 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={0x0}}, 0x44044001) 16:08:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000fef000/0xe000)=nil, 0x930, 0x0, 0x11, r1, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[], 0x1270}}, 0x0) 16:08:16 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x4, 0xfffa}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b61e64c21a6e2f79aa0f8d729cdf362c1802c02103b6740236be"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 16:08:16 executing program 5: syz_usb_connect(0x2, 0x0, 0x0, 0x0) 16:08:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[], 0x1270}}, 0x40) 16:08:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f00000043c0)={0x10}, 0x10}], 0x1, &(0x7f0000004340)=[@rights={{0x10, 0x1, 0x5}}], 0x10}, 0x0) 16:08:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8970, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) 16:08:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e00}], 0x1, 0x1400, 0x0, 0x3) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev2(r2, 0x0, 0x0, 0x7, 0xffffffff, 0x8) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4003fa) ioctl$TUNSETLINK(r2, 0x400454cd, 0x304) r5 = open(&(0x7f0000000140)='./bus\x00', 0x163042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000080)={0x6, r2, 0x0, 0x0, 0x32813}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 16:08:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x1, &(0x7f0000000000)=@raw=[@generic={0x30}], &(0x7f0000000040)='GPL\x00', 0x1, 0xe1, &(0x7f0000000080)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:08:17 executing program 2: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x3, 0x0, 0x0) 16:08:17 executing program 5: syz_usb_connect(0x2, 0x0, 0x0, 0x0) 16:08:17 executing program 4: setfsuid(0xee01) openat$bsg(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 16:08:18 executing program 0: r0 = socket(0x2, 0x3, 0x1) accept4$tipc(r0, 0x0, 0x0, 0x0) 16:08:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xc, 0x4, 0x4, 0xffffffff}, 0x48) 16:08:18 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x4, 0xfffa}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b61e64c21a6e2f79aa0f8d729cdf362c1802c02103b6740236be"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) [ 818.219280][ T24] audit: type=1800 audit(1659542898.286:11): pid=11757 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1171 res=0 errno=0 16:08:18 executing program 4: r0 = socket(0x2c, 0x3, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) 16:08:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x123, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0xe80}}, 0x0) 16:08:18 executing program 2: r0 = socket(0xa, 0x3, 0x2a) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa}, 0x18, &(0x7f0000000080)={0x0, 0x3000000}}, 0x0) 16:08:18 executing program 5: syz_usb_connect(0x2, 0x0, 0x0, 0x0) [ 820.794973][T11756] not chained 140000 origins [ 820.799796][T11756] CPU: 1 PID: 11756 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 820.810478][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 820.820691][T11756] Call Trace: [ 820.824251][T11756] [ 820.827281][T11756] dump_stack_lvl+0x1c8/0x256 [ 820.832184][T11756] dump_stack+0x1a/0x1c [ 820.836538][T11756] kmsan_internal_chain_origin+0x78/0x120 [ 820.842447][T11756] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 820.848707][T11756] ? kmsan_get_metadata+0x33/0x220 [ 820.853999][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 820.860459][T11756] ? kmsan_get_metadata+0x33/0x220 [ 820.865755][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 820.871755][T11756] ? kmsan_get_metadata+0x33/0x220 [ 820.877047][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 820.883049][T11756] ? __get_compat_msghdr+0x5b/0x750 [ 820.888475][T11756] ? kmsan_get_metadata+0x33/0x220 [ 820.893780][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 820.899803][T11756] ? should_fail+0x3f/0x810 [ 820.904515][T11756] ? __stack_depot_save+0x21/0x4b0 [ 820.905336][T11765] syz-executor.3 (11765) used greatest stack depth: 5040 bytes left [ 820.909781][T11756] ? kmsan_get_metadata+0x33/0x220 [ 820.909901][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 820.929462][T11756] ? kmsan_get_metadata+0x33/0x220 [ 820.934770][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 820.940773][T11756] __msan_chain_origin+0xbd/0x140 [ 820.945971][T11756] __get_compat_msghdr+0x514/0x750 [ 820.951328][T11756] get_compat_msghdr+0x8c/0x1c0 [ 820.956389][T11756] ? ___sys_recvmsg+0xa9/0x890 [ 820.961331][T11756] ? do_recvmmsg+0x63a/0x10a0 [ 820.966171][T11756] ___sys_recvmsg+0x19d/0x890 [ 820.971024][T11756] ? __schedule+0x1609/0x21d0 [ 820.975883][T11756] ? kmsan_get_metadata+0x33/0x220 [ 820.981185][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 820.981301][ T24] audit: type=1800 audit(1659542900.976:12): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=1171 res=0 errno=0 [ 820.987129][T11756] ? kmsan_get_metadata+0x33/0x220 [ 820.987244][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 820.987373][T11756] do_recvmmsg+0x63a/0x10a0 [ 820.987497][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 821.029413][T11756] ? __sys_recvmmsg+0x52/0x450 [ 821.034296][T11756] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 821.040930][T11756] __sys_recvmmsg+0x113/0x450 [ 821.045799][T11756] ? kmsan_get_metadata+0x33/0x220 [ 821.051121][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 821.057516][T11756] __do_fast_syscall_32+0x87/0xe0 [ 821.062695][T11756] ? exit_to_user_mode_prepare+0x119/0x220 [ 821.068716][T11756] do_fast_syscall_32+0x33/0x70 [ 821.073752][T11756] do_SYSENTER_32+0x1b/0x20 [ 821.078431][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 821.085012][T11756] RIP: 0023:0xf7fc5549 [ 821.089220][T11756] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 821.109024][T11756] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 821.117562][T11756] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 821.125814][T11756] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 821.134012][T11756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 821.142122][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.150223][T11756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 821.158357][T11756] [ 821.164971][T11756] Uninit was stored to memory at: [ 821.174415][T11756] __get_compat_msghdr+0x514/0x750 [ 821.179743][T11756] get_compat_msghdr+0x8c/0x1c0 [ 821.185218][T11756] ___sys_recvmsg+0x19d/0x890 [ 821.190148][T11756] do_recvmmsg+0x63a/0x10a0 [ 821.194905][T11756] __sys_recvmmsg+0x113/0x450 [ 821.199756][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 821.206376][T11756] __do_fast_syscall_32+0x87/0xe0 [ 821.211571][T11756] do_fast_syscall_32+0x33/0x70 [ 821.216750][T11756] do_SYSENTER_32+0x1b/0x20 [ 821.221408][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 821.228160][T11756] [ 821.230548][T11756] Uninit was stored to memory at: [ 821.235933][T11756] __get_compat_msghdr+0x514/0x750 [ 821.241232][T11756] get_compat_msghdr+0x8c/0x1c0 [ 821.246390][T11756] ___sys_recvmsg+0x19d/0x890 [ 821.251263][T11756] do_recvmmsg+0x63a/0x10a0 [ 821.256056][T11756] __sys_recvmmsg+0x113/0x450 [ 821.260908][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 821.267498][T11756] __do_fast_syscall_32+0x87/0xe0 [ 821.272784][T11756] do_fast_syscall_32+0x33/0x70 [ 821.277799][T11756] do_SYSENTER_32+0x1b/0x20 [ 821.282611][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 821.289172][T11756] [ 821.291585][T11756] Uninit was stored to memory at: [ 821.296952][T11756] __get_compat_msghdr+0x514/0x750 [ 821.302363][T11756] get_compat_msghdr+0x8c/0x1c0 [ 821.307416][T11756] ___sys_recvmsg+0x19d/0x890 [ 821.312390][T11756] do_recvmmsg+0x63a/0x10a0 [ 821.317045][T11756] __sys_recvmmsg+0x113/0x450 [ 821.321999][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 821.328407][T11756] __do_fast_syscall_32+0x87/0xe0 [ 821.333697][T11756] do_fast_syscall_32+0x33/0x70 [ 821.338733][T11756] do_SYSENTER_32+0x1b/0x20 [ 821.343490][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 821.350052][T11756] [ 821.352598][T11756] Uninit was stored to memory at: [ 821.357795][T11756] __get_compat_msghdr+0x514/0x750 [ 821.363222][T11756] get_compat_msghdr+0x8c/0x1c0 [ 821.368276][T11756] ___sys_recvmsg+0x19d/0x890 [ 821.373255][T11756] do_recvmmsg+0x63a/0x10a0 [ 821.377909][T11756] __sys_recvmmsg+0x113/0x450 [ 821.382845][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 821.389266][T11756] __do_fast_syscall_32+0x87/0xe0 [ 821.394604][T11756] do_fast_syscall_32+0x33/0x70 [ 821.399591][T11756] do_SYSENTER_32+0x1b/0x20 [ 821.404345][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 821.410877][T11756] [ 821.413396][T11756] Uninit was stored to memory at: [ 821.418649][T11756] __get_compat_msghdr+0x514/0x750 [ 821.424133][T11756] get_compat_msghdr+0x8c/0x1c0 [ 821.429200][T11756] ___sys_recvmsg+0x19d/0x890 [ 821.434228][T11756] do_recvmmsg+0x63a/0x10a0 [ 821.438915][T11756] __sys_recvmmsg+0x113/0x450 [ 821.443911][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 821.450320][T11756] __do_fast_syscall_32+0x87/0xe0 [ 821.455577][T11756] do_fast_syscall_32+0x33/0x70 [ 821.460575][T11756] do_SYSENTER_32+0x1b/0x20 [ 821.465355][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 821.472001][T11756] [ 821.474408][T11756] Uninit was stored to memory at: [ 821.479650][T11756] __get_compat_msghdr+0x514/0x750 [ 821.485123][T11756] get_compat_msghdr+0x8c/0x1c0 [ 821.490196][T11756] ___sys_recvmsg+0x19d/0x890 [ 821.495222][T11756] do_recvmmsg+0x63a/0x10a0 [ 821.499862][T11756] __sys_recvmmsg+0x113/0x450 [ 821.504817][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 821.511377][T11756] __do_fast_syscall_32+0x87/0xe0 [ 821.516741][T11756] do_fast_syscall_32+0x33/0x70 [ 821.521852][T11756] do_SYSENTER_32+0x1b/0x20 [ 821.526519][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 821.533243][T11756] [ 821.535653][T11756] Uninit was stored to memory at: [ 821.540916][T11756] __get_compat_msghdr+0x514/0x750 [ 821.546431][T11756] get_compat_msghdr+0x8c/0x1c0 [ 821.551460][T11756] ___sys_recvmsg+0x19d/0x890 [ 821.556368][T11756] do_recvmmsg+0x63a/0x10a0 [ 821.561106][T11756] __sys_recvmmsg+0x113/0x450 [ 821.566332][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 821.572885][T11756] __do_fast_syscall_32+0x87/0xe0 [ 821.578045][T11756] do_fast_syscall_32+0x33/0x70 [ 821.583130][T11756] do_SYSENTER_32+0x1b/0x20 [ 821.587789][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 821.594502][T11756] [ 821.596907][T11756] Local variable msg_sys created at: [ 821.602378][T11756] do_recvmmsg+0x5f/0x10a0 [ 821.606949][T11756] __sys_recvmmsg+0x113/0x450 [ 821.827569][T11756] not chained 150000 origins [ 821.832456][T11756] CPU: 1 PID: 11756 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 821.843135][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 821.853331][T11756] Call Trace: [ 821.856707][T11756] [ 821.859734][T11756] dump_stack_lvl+0x1c8/0x256 [ 821.864638][T11756] dump_stack+0x1a/0x1c [ 821.868967][T11756] kmsan_internal_chain_origin+0x78/0x120 [ 821.874820][T11756] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 821.881078][T11756] ? kmsan_get_metadata+0x33/0x220 [ 821.886286][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 821.892660][T11756] ? kmsan_get_metadata+0x33/0x220 [ 821.897977][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 821.903976][T11756] ? kmsan_get_metadata+0x33/0x220 [ 821.909238][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 821.915170][T11756] ? __get_compat_msghdr+0x5b/0x750 [ 821.920580][T11756] ? kmsan_get_metadata+0x33/0x220 [ 821.925874][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 821.931888][T11756] ? should_fail+0x3f/0x810 [ 821.936743][T11756] ? __stack_depot_save+0x21/0x4b0 [ 821.941999][T11756] ? kmsan_get_metadata+0x33/0x220 [ 821.947281][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 821.953716][T11756] ? kmsan_get_metadata+0x33/0x220 [ 821.958988][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 821.964923][T11756] __msan_chain_origin+0xbd/0x140 [ 821.970123][T11756] __get_compat_msghdr+0x514/0x750 [ 821.975404][T11756] get_compat_msghdr+0x8c/0x1c0 [ 821.980459][T11756] ? ___sys_recvmsg+0xa9/0x890 [ 821.985376][T11756] ? do_recvmmsg+0x63a/0x10a0 [ 821.990165][T11756] ___sys_recvmsg+0x19d/0x890 [ 821.995019][T11756] ? __schedule+0x1609/0x21d0 [ 821.999873][T11756] ? kmsan_get_metadata+0x33/0x220 [ 822.005152][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 822.011080][T11756] ? kmsan_get_metadata+0x33/0x220 [ 822.016310][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 822.022595][T11756] do_recvmmsg+0x63a/0x10a0 [ 822.027472][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 822.033915][T11756] ? __sys_recvmmsg+0x52/0x450 [ 822.038836][T11756] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 822.045433][T11756] __sys_recvmmsg+0x113/0x450 [ 822.050205][T11756] ? kmsan_get_metadata+0x33/0x220 [ 822.055547][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 822.062080][T11756] __do_fast_syscall_32+0x87/0xe0 [ 822.067250][T11756] ? exit_to_user_mode_prepare+0x119/0x220 [ 822.073183][T11756] do_fast_syscall_32+0x33/0x70 [ 822.078196][T11756] do_SYSENTER_32+0x1b/0x20 [ 822.082852][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 822.089388][T11756] RIP: 0023:0xf7fc5549 [ 822.093737][T11756] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 822.113554][T11756] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 822.122142][T11756] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 822.130246][T11756] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 822.138340][T11756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 822.146461][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.154574][T11756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 822.162711][T11756] [ 822.185796][T11756] Uninit was stored to memory at: [ 822.191096][T11756] __get_compat_msghdr+0x514/0x750 [ 822.205205][T11756] get_compat_msghdr+0x8c/0x1c0 [ 822.210287][T11756] ___sys_recvmsg+0x19d/0x890 [ 822.215592][T11756] do_recvmmsg+0x63a/0x10a0 [ 822.220261][T11756] __sys_recvmmsg+0x113/0x450 [ 822.225188][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 822.231611][T11756] __do_fast_syscall_32+0x87/0xe0 [ 822.236910][T11756] do_fast_syscall_32+0x33/0x70 [ 822.242006][T11756] do_SYSENTER_32+0x1b/0x20 [ 822.246660][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 822.253313][T11756] [ 822.255719][T11756] Uninit was stored to memory at: [ 822.260974][T11756] __get_compat_msghdr+0x514/0x750 [ 822.266402][T11756] get_compat_msghdr+0x8c/0x1c0 [ 822.271439][T11756] ___sys_recvmsg+0x19d/0x890 [ 822.276363][T11756] do_recvmmsg+0x63a/0x10a0 [ 822.281032][T11756] __sys_recvmmsg+0x113/0x450 [ 822.285915][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 822.292413][T11756] __do_fast_syscall_32+0x87/0xe0 [ 822.297612][T11756] do_fast_syscall_32+0x33/0x70 [ 822.302706][T11756] do_SYSENTER_32+0x1b/0x20 [ 822.307356][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 822.314074][T11756] [ 822.316488][T11756] Uninit was stored to memory at: [ 822.321679][T11756] __get_compat_msghdr+0x514/0x750 [ 822.327116][T11756] get_compat_msghdr+0x8c/0x1c0 [ 822.332348][T11756] ___sys_recvmsg+0x19d/0x890 [ 822.337164][T11756] do_recvmmsg+0x63a/0x10a0 [ 822.341957][T11756] __sys_recvmmsg+0x113/0x450 [ 822.346787][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 822.353365][T11756] __do_fast_syscall_32+0x87/0xe0 [ 822.358547][T11756] do_fast_syscall_32+0x33/0x70 [ 822.363659][T11756] do_SYSENTER_32+0x1b/0x20 [ 822.368312][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 822.375019][T11756] [ 822.377401][T11756] Uninit was stored to memory at: [ 822.382765][T11756] __get_compat_msghdr+0x514/0x750 [ 822.388082][T11756] get_compat_msghdr+0x8c/0x1c0 [ 822.393292][T11756] ___sys_recvmsg+0x19d/0x890 [ 822.398104][T11756] do_recvmmsg+0x63a/0x10a0 [ 822.402867][T11756] __sys_recvmmsg+0x113/0x450 [ 822.407704][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 822.414284][T11756] __do_fast_syscall_32+0x87/0xe0 [ 822.419478][T11756] do_fast_syscall_32+0x33/0x70 [ 822.424644][T11756] do_SYSENTER_32+0x1b/0x20 [ 822.429282][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 822.435930][T11756] [ 822.438337][T11756] Uninit was stored to memory at: [ 822.443743][T11756] __get_compat_msghdr+0x514/0x750 [ 822.449058][T11756] get_compat_msghdr+0x8c/0x1c0 [ 822.454201][T11756] ___sys_recvmsg+0x19d/0x890 [ 822.459035][T11756] do_recvmmsg+0x63a/0x10a0 [ 822.463839][T11756] __sys_recvmmsg+0x113/0x450 [ 822.468767][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 822.475325][T11756] __do_fast_syscall_32+0x87/0xe0 [ 822.480510][T11756] do_fast_syscall_32+0x33/0x70 [ 822.485678][T11756] do_SYSENTER_32+0x1b/0x20 [ 822.490338][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 822.497007][T11756] [ 822.499396][T11756] Uninit was stored to memory at: [ 822.504789][T11756] __get_compat_msghdr+0x514/0x750 [ 822.510115][T11756] get_compat_msghdr+0x8c/0x1c0 [ 822.515339][T11756] ___sys_recvmsg+0x19d/0x890 [ 822.520178][T11756] do_recvmmsg+0x63a/0x10a0 [ 822.524957][T11756] __sys_recvmmsg+0x113/0x450 [ 822.529765][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 822.536278][T11756] __do_fast_syscall_32+0x87/0xe0 [ 822.541481][T11756] do_fast_syscall_32+0x33/0x70 [ 822.546604][T11756] do_SYSENTER_32+0x1b/0x20 [ 822.551239][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 822.557896][T11756] [ 822.560282][T11756] Uninit was stored to memory at: [ 822.565664][T11756] __get_compat_msghdr+0x514/0x750 [ 822.570960][T11756] get_compat_msghdr+0x8c/0x1c0 [ 822.576111][T11756] ___sys_recvmsg+0x19d/0x890 [ 822.580948][T11756] do_recvmmsg+0x63a/0x10a0 [ 822.585753][T11756] __sys_recvmmsg+0x113/0x450 [ 822.590598][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 822.597151][T11756] __do_fast_syscall_32+0x87/0xe0 [ 822.602473][T11756] do_fast_syscall_32+0x33/0x70 [ 822.607485][T11756] do_SYSENTER_32+0x1b/0x20 [ 822.612292][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 822.618865][T11756] [ 822.621359][T11756] Local variable msg_sys created at: [ 822.626897][T11756] do_recvmmsg+0x5f/0x10a0 [ 822.631456][T11756] __sys_recvmmsg+0x113/0x450 [ 822.851187][T11756] not chained 160000 origins [ 822.856090][T11756] CPU: 1 PID: 11756 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 822.866765][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 822.876957][T11756] Call Trace: [ 822.880284][T11756] [ 822.883281][T11756] dump_stack_lvl+0x1c8/0x256 [ 822.888145][T11756] dump_stack+0x1a/0x1c [ 822.892433][T11756] kmsan_internal_chain_origin+0x78/0x120 [ 822.898329][T11756] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 822.904541][T11756] ? kmsan_get_metadata+0x33/0x220 [ 822.909809][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 822.916187][T11756] ? kmsan_get_metadata+0x33/0x220 [ 822.921481][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 822.927480][T11756] ? kmsan_get_metadata+0x33/0x220 [ 822.932771][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 822.938747][T11756] ? __get_compat_msghdr+0x5b/0x750 [ 822.944090][T11756] ? kmsan_get_metadata+0x33/0x220 [ 822.949380][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 822.955316][T11756] ? should_fail+0x3f/0x810 [ 822.959992][T11756] ? __stack_depot_save+0x21/0x4b0 [ 822.965237][T11756] ? kmsan_get_metadata+0x33/0x220 [ 822.970520][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 822.976912][T11756] ? kmsan_get_metadata+0x33/0x220 [ 822.982218][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 822.988219][T11756] __msan_chain_origin+0xbd/0x140 [ 822.993373][T11756] __get_compat_msghdr+0x514/0x750 [ 822.998712][T11756] get_compat_msghdr+0x8c/0x1c0 [ 823.003723][T11756] ? ___sys_recvmsg+0xa9/0x890 [ 823.008633][T11756] ? do_recvmmsg+0x63a/0x10a0 [ 823.013434][T11756] ___sys_recvmsg+0x19d/0x890 [ 823.018288][T11756] ? __schedule+0x1609/0x21d0 [ 823.023145][T11756] ? kmsan_get_metadata+0x33/0x220 [ 823.028438][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 823.034435][T11756] ? kmsan_get_metadata+0x33/0x220 [ 823.039705][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 823.045659][T11756] do_recvmmsg+0x63a/0x10a0 [ 823.050317][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 823.056670][T11756] ? __sys_recvmmsg+0x52/0x450 [ 823.061542][T11756] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 823.068086][T11756] __sys_recvmmsg+0x113/0x450 [ 823.072919][T11756] ? kmsan_get_metadata+0x33/0x220 [ 823.078192][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 823.084829][T11756] __do_fast_syscall_32+0x87/0xe0 [ 823.090065][T11756] ? exit_to_user_mode_prepare+0x119/0x220 [ 823.095982][T11756] do_fast_syscall_32+0x33/0x70 [ 823.100915][T11756] do_SYSENTER_32+0x1b/0x20 [ 823.105517][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 823.112080][T11756] RIP: 0023:0xf7fc5549 [ 823.116268][T11756] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 823.136445][T11756] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 823.145023][T11756] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 823.153139][T11756] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 823.161254][T11756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 823.169396][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.177473][T11756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 823.185609][T11756] [ 823.192015][T11756] Uninit was stored to memory at: [ 823.197385][T11756] __get_compat_msghdr+0x514/0x750 [ 823.203148][T11756] get_compat_msghdr+0x8c/0x1c0 [ 823.208208][T11756] ___sys_recvmsg+0x19d/0x890 [ 823.213143][T11756] do_recvmmsg+0x63a/0x10a0 [ 823.217814][T11756] __sys_recvmmsg+0x113/0x450 [ 823.222824][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 823.229247][T11756] __do_fast_syscall_32+0x87/0xe0 [ 823.234534][T11756] do_fast_syscall_32+0x33/0x70 [ 823.239549][T11756] do_SYSENTER_32+0x1b/0x20 [ 823.244296][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 823.250881][T11756] [ 823.253382][T11756] Uninit was stored to memory at: [ 823.258629][T11756] __get_compat_msghdr+0x514/0x750 [ 823.264092][T11756] get_compat_msghdr+0x8c/0x1c0 [ 823.269124][T11756] ___sys_recvmsg+0x19d/0x890 [ 823.274058][T11756] do_recvmmsg+0x63a/0x10a0 [ 823.278722][T11756] __sys_recvmmsg+0x113/0x450 [ 823.283707][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 823.290129][T11756] __do_fast_syscall_32+0x87/0xe0 [ 823.295488][T11756] do_fast_syscall_32+0x33/0x70 [ 823.300479][T11756] do_SYSENTER_32+0x1b/0x20 [ 823.305271][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 823.312002][T11756] [ 823.314411][T11756] Uninit was stored to memory at: [ 823.319669][T11756] __get_compat_msghdr+0x514/0x750 [ 823.325141][T11756] get_compat_msghdr+0x8c/0x1c0 [ 823.330194][T11756] ___sys_recvmsg+0x19d/0x890 [ 823.335121][T11756] do_recvmmsg+0x63a/0x10a0 [ 823.339783][T11756] __sys_recvmmsg+0x113/0x450 [ 823.344715][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 823.351138][T11756] __do_fast_syscall_32+0x87/0xe0 [ 823.356427][T11756] do_fast_syscall_32+0x33/0x70 [ 823.361437][T11756] do_SYSENTER_32+0x1b/0x20 [ 823.366184][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 823.372888][T11756] [ 823.375290][T11756] Uninit was stored to memory at: [ 823.380535][T11756] __get_compat_msghdr+0x514/0x750 [ 823.385934][T11756] get_compat_msghdr+0x8c/0x1c0 [ 823.390980][T11756] ___sys_recvmsg+0x19d/0x890 [ 823.395904][T11756] do_recvmmsg+0x63a/0x10a0 [ 823.400564][T11756] __sys_recvmmsg+0x113/0x450 [ 823.405493][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 823.411991][T11756] __do_fast_syscall_32+0x87/0xe0 [ 823.417176][T11756] do_fast_syscall_32+0x33/0x70 [ 823.422262][T11756] do_SYSENTER_32+0x1b/0x20 [ 823.426911][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 823.433544][T11756] [ 823.435944][T11756] Uninit was stored to memory at: [ 823.441184][T11756] __get_compat_msghdr+0x514/0x750 [ 823.446578][T11756] get_compat_msghdr+0x8c/0x1c0 [ 823.451628][T11756] ___sys_recvmsg+0x19d/0x890 [ 823.456551][T11756] do_recvmmsg+0x63a/0x10a0 [ 823.461205][T11756] __sys_recvmmsg+0x113/0x450 [ 823.466119][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 823.472620][T11756] __do_fast_syscall_32+0x87/0xe0 [ 823.477810][T11756] do_fast_syscall_32+0x33/0x70 [ 823.482907][T11756] do_SYSENTER_32+0x1b/0x20 [ 823.487557][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 823.494196][T11756] [ 823.496595][T11756] Uninit was stored to memory at: [ 823.501936][T11756] __get_compat_msghdr+0x514/0x750 [ 823.507245][T11756] get_compat_msghdr+0x8c/0x1c0 [ 823.512384][T11756] ___sys_recvmsg+0x19d/0x890 [ 823.517215][T11756] do_recvmmsg+0x63a/0x10a0 [ 823.521945][T11756] __sys_recvmmsg+0x113/0x450 [ 823.526768][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 823.533280][T11756] __do_fast_syscall_32+0x87/0xe0 [ 823.538550][T11756] do_fast_syscall_32+0x33/0x70 [ 823.543665][T11756] do_SYSENTER_32+0x1b/0x20 [ 823.548328][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 823.554975][T11756] [ 823.557375][T11756] Uninit was stored to memory at: [ 823.562715][T11756] __get_compat_msghdr+0x514/0x750 [ 823.568025][T11756] get_compat_msghdr+0x8c/0x1c0 [ 823.573167][T11756] ___sys_recvmsg+0x19d/0x890 [ 823.577997][T11756] do_recvmmsg+0x63a/0x10a0 [ 823.582738][T11756] __sys_recvmmsg+0x113/0x450 [ 823.587562][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 823.594076][T11756] __do_fast_syscall_32+0x87/0xe0 [ 823.599260][T11756] do_fast_syscall_32+0x33/0x70 [ 823.604359][T11756] do_SYSENTER_32+0x1b/0x20 [ 823.609012][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 823.615666][T11756] [ 823.618078][T11756] Local variable msg_sys created at: [ 823.623613][T11756] do_recvmmsg+0x5f/0x10a0 [ 823.628188][T11756] __sys_recvmmsg+0x113/0x450 [ 823.992151][T11756] not chained 170000 origins [ 823.996862][T11756] CPU: 0 PID: 11756 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 824.007469][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 824.017604][T11756] Call Trace: [ 824.020931][T11756] [ 824.023913][T11756] dump_stack_lvl+0x1c8/0x256 [ 824.028719][T11756] dump_stack+0x1a/0x1c [ 824.032992][T11756] kmsan_internal_chain_origin+0x78/0x120 [ 824.038930][T11756] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 824.044941][T11756] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 824.051295][T11756] ? __get_compat_msghdr+0x5b/0x750 [ 824.056622][T11756] ? kmsan_get_metadata+0x100/0x220 [ 824.061920][T11756] ? kmsan_get_metadata+0x33/0x220 [ 824.067134][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 824.073045][T11756] ? __get_compat_msghdr+0x5b/0x750 [ 824.078362][T11756] ? kmsan_get_metadata+0x33/0x220 [ 824.083568][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 824.089491][T11756] ? should_fail+0x3f/0x810 [ 824.094117][T11756] ? __stack_depot_save+0x21/0x4b0 [ 824.099409][T11756] ? kmsan_get_metadata+0x33/0x220 [ 824.104700][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 824.111158][T11756] ? kmsan_get_metadata+0x33/0x220 [ 824.116459][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 824.122474][T11756] __msan_chain_origin+0xbd/0x140 [ 824.127616][T11756] __get_compat_msghdr+0x514/0x750 [ 824.132874][T11756] get_compat_msghdr+0x8c/0x1c0 [ 824.137840][T11756] ? ___sys_recvmsg+0xa9/0x890 [ 824.142738][T11756] ? do_recvmmsg+0x63a/0x10a0 [ 824.147577][T11756] ___sys_recvmsg+0x19d/0x890 [ 824.152401][T11756] ? __schedule+0x1609/0x21d0 [ 824.157165][T11756] ? kmsan_get_metadata+0x33/0x220 [ 824.162370][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 824.168285][T11756] ? kmsan_get_metadata+0x33/0x220 [ 824.173487][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 824.179406][T11756] do_recvmmsg+0x63a/0x10a0 [ 824.184006][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 824.190435][T11756] ? __sys_recvmmsg+0x52/0x450 [ 824.195296][T11756] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 824.201889][T11756] __sys_recvmmsg+0x113/0x450 [ 824.206679][T11756] ? kmsan_get_metadata+0x33/0x220 [ 824.211905][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 824.218247][T11756] __do_fast_syscall_32+0x87/0xe0 [ 824.223364][T11756] ? exit_to_user_mode_prepare+0x119/0x220 [ 824.229292][T11756] do_fast_syscall_32+0x33/0x70 [ 824.234256][T11756] do_SYSENTER_32+0x1b/0x20 [ 824.238849][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 824.245341][T11756] RIP: 0023:0xf7fc5549 [ 824.249537][T11756] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 824.269316][T11756] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 824.277834][T11756] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 824.285879][T11756] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 824.293938][T11756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 824.302014][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.310045][T11756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 824.318093][T11756] [ 824.326112][T11756] Uninit was stored to memory at: [ 824.331382][T11756] __get_compat_msghdr+0x514/0x750 [ 824.337285][T11756] get_compat_msghdr+0x8c/0x1c0 [ 824.342466][T11756] ___sys_recvmsg+0x19d/0x890 [ 824.347320][T11756] do_recvmmsg+0x63a/0x10a0 [ 824.352097][T11756] __sys_recvmmsg+0x113/0x450 [ 824.356931][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 824.363471][T11756] __do_fast_syscall_32+0x87/0xe0 [ 824.368648][T11756] do_fast_syscall_32+0x33/0x70 [ 824.373773][T11756] do_SYSENTER_32+0x1b/0x20 [ 824.378439][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 824.385117][T11756] [ 824.387522][T11756] Uninit was stored to memory at: [ 824.392900][T11756] __get_compat_msghdr+0x514/0x750 [ 824.398213][T11756] get_compat_msghdr+0x8c/0x1c0 [ 824.403394][T11756] ___sys_recvmsg+0x19d/0x890 [ 824.408228][T11756] do_recvmmsg+0x63a/0x10a0 [ 824.413014][T11756] __sys_recvmmsg+0x113/0x450 [ 824.417867][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 824.424436][T11756] __do_fast_syscall_32+0x87/0xe0 [ 824.429638][T11756] do_fast_syscall_32+0x33/0x70 [ 824.434770][T11756] do_SYSENTER_32+0x1b/0x20 [ 824.439399][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 824.446033][T11756] [ 824.448430][T11756] Uninit was stored to memory at: [ 824.453817][T11756] __get_compat_msghdr+0x514/0x750 [ 824.459106][T11756] get_compat_msghdr+0x8c/0x1c0 [ 824.464266][T11756] ___sys_recvmsg+0x19d/0x890 [ 824.469075][T11756] do_recvmmsg+0x63a/0x10a0 [ 824.473821][T11756] __sys_recvmmsg+0x113/0x450 [ 824.478628][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 824.485203][T11756] __do_fast_syscall_32+0x87/0xe0 [ 824.490393][T11756] do_fast_syscall_32+0x33/0x70 [ 824.495612][T11756] do_SYSENTER_32+0x1b/0x20 [ 824.500258][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 824.506902][T11756] [ 824.509289][T11756] Uninit was stored to memory at: [ 824.514691][T11756] __get_compat_msghdr+0x514/0x750 [ 824.519984][T11756] get_compat_msghdr+0x8c/0x1c0 [ 824.525112][T11756] ___sys_recvmsg+0x19d/0x890 [ 824.529919][T11756] do_recvmmsg+0x63a/0x10a0 [ 824.534658][T11756] __sys_recvmmsg+0x113/0x450 [ 824.539470][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 824.546040][T11756] __do_fast_syscall_32+0x87/0xe0 [ 824.551235][T11756] do_fast_syscall_32+0x33/0x70 [ 824.556401][T11756] do_SYSENTER_32+0x1b/0x20 [ 824.561047][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 824.567668][T11756] [ 824.570058][T11756] Uninit was stored to memory at: [ 824.575474][T11756] __get_compat_msghdr+0x514/0x750 [ 824.580834][T11756] get_compat_msghdr+0x8c/0x1c0 [ 824.586036][T11756] ___sys_recvmsg+0x19d/0x890 [ 824.590852][T11756] do_recvmmsg+0x63a/0x10a0 [ 824.595612][T11756] __sys_recvmmsg+0x113/0x450 [ 824.600420][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 824.607004][T11756] __do_fast_syscall_32+0x87/0xe0 [ 824.612306][T11756] do_fast_syscall_32+0x33/0x70 [ 824.617289][T11756] do_SYSENTER_32+0x1b/0x20 [ 824.622068][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 824.628605][T11756] [ 824.630975][T11756] Uninit was stored to memory at: [ 824.636341][T11756] __get_compat_msghdr+0x514/0x750 [ 824.641640][T11756] get_compat_msghdr+0x8c/0x1c0 [ 824.646828][T11756] ___sys_recvmsg+0x19d/0x890 [ 824.651655][T11756] do_recvmmsg+0x63a/0x10a0 [ 824.656499][T11756] __sys_recvmmsg+0x113/0x450 [ 824.661311][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 824.667806][T11756] __do_fast_syscall_32+0x87/0xe0 [ 824.673104][T11756] do_fast_syscall_32+0x33/0x70 [ 824.678129][T11756] do_SYSENTER_32+0x1b/0x20 [ 824.682911][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 824.689439][T11756] [ 824.691972][T11756] Uninit was stored to memory at: [ 824.697216][T11756] __get_compat_msghdr+0x514/0x750 [ 824.702658][T11756] get_compat_msghdr+0x8c/0x1c0 [ 824.707686][T11756] ___sys_recvmsg+0x19d/0x890 [ 824.712641][T11756] do_recvmmsg+0x63a/0x10a0 [ 824.717285][T11756] __sys_recvmmsg+0x113/0x450 [ 824.722217][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 824.728639][T11756] __do_fast_syscall_32+0x87/0xe0 [ 824.733964][T11756] do_fast_syscall_32+0x33/0x70 [ 824.738967][T11756] do_SYSENTER_32+0x1b/0x20 [ 824.743701][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 824.750321][T11756] [ 824.752886][T11756] Local variable msg_sys created at: [ 824.758263][T11756] do_recvmmsg+0x5f/0x10a0 [ 824.762957][T11756] __sys_recvmmsg+0x113/0x450 [ 824.991472][T11756] not chained 180000 origins [ 824.996351][T11756] CPU: 0 PID: 11756 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 825.006995][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 825.017183][T11756] Call Trace: [ 825.020515][T11756] [ 825.023488][T11756] dump_stack_lvl+0x1c8/0x256 [ 825.028294][T11756] dump_stack+0x1a/0x1c [ 825.032549][T11756] kmsan_internal_chain_origin+0x78/0x120 [ 825.038364][T11756] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 825.044523][T11756] ? kmsan_get_metadata+0x33/0x220 [ 825.049725][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 825.056115][T11756] ? kmsan_get_metadata+0x33/0x220 [ 825.061407][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 825.067419][T11756] ? kmsan_get_metadata+0x33/0x220 [ 825.072693][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 825.078600][T11756] ? __get_compat_msghdr+0x5b/0x750 [ 825.083911][T11756] ? kmsan_get_metadata+0x33/0x220 [ 825.089109][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 825.095014][T11756] ? should_fail+0x3f/0x810 [ 825.099626][T11756] ? __stack_depot_save+0x21/0x4b0 [ 825.104853][T11756] ? kmsan_get_metadata+0x33/0x220 [ 825.110120][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 825.116476][T11756] ? kmsan_get_metadata+0x33/0x220 [ 825.121675][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 825.127636][T11756] __msan_chain_origin+0xbd/0x140 [ 825.132777][T11756] __get_compat_msghdr+0x514/0x750 [ 825.138068][T11756] get_compat_msghdr+0x8c/0x1c0 [ 825.143048][T11756] ? ___sys_recvmsg+0xa9/0x890 [ 825.147907][T11756] ? do_recvmmsg+0x63a/0x10a0 [ 825.152689][T11756] ___sys_recvmsg+0x19d/0x890 [ 825.157538][T11756] ? __schedule+0x1609/0x21d0 [ 825.162354][T11756] ? kmsan_get_metadata+0x33/0x220 [ 825.167588][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 825.173512][T11756] ? kmsan_get_metadata+0x33/0x220 [ 825.178732][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 825.184676][T11756] do_recvmmsg+0x63a/0x10a0 [ 825.189301][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 825.195660][T11756] ? __sys_recvmmsg+0x52/0x450 [ 825.200511][T11756] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 825.207059][T11756] __sys_recvmmsg+0x113/0x450 [ 825.211898][T11756] ? kmsan_get_metadata+0x33/0x220 [ 825.217175][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 825.223526][T11756] __do_fast_syscall_32+0x87/0xe0 [ 825.228722][T11756] ? exit_to_user_mode_prepare+0x119/0x220 [ 825.234634][T11756] do_fast_syscall_32+0x33/0x70 [ 825.239586][T11756] do_SYSENTER_32+0x1b/0x20 [ 825.244166][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 825.250624][T11756] RIP: 0023:0xf7fc5549 [ 825.254785][T11756] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 825.274570][T11756] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 825.283073][T11756] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 825.291112][T11756] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 825.299146][T11756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 825.307213][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.315297][T11756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 825.323348][T11756] [ 825.331054][T11756] Uninit was stored to memory at: [ 825.336824][T11756] __get_compat_msghdr+0x514/0x750 [ 825.342271][T11756] get_compat_msghdr+0x8c/0x1c0 [ 825.347326][T11756] ___sys_recvmsg+0x19d/0x890 [ 825.352276][T11756] do_recvmmsg+0x63a/0x10a0 [ 825.357010][T11756] __sys_recvmmsg+0x113/0x450 [ 825.362053][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 825.368487][T11756] __do_fast_syscall_32+0x87/0xe0 [ 825.373809][T11756] do_fast_syscall_32+0x33/0x70 [ 825.378834][T11756] do_SYSENTER_32+0x1b/0x20 [ 825.383624][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 825.390190][T11756] [ 825.392746][T11756] Uninit was stored to memory at: [ 825.397926][T11756] __get_compat_msghdr+0x514/0x750 [ 825.403344][T11756] get_compat_msghdr+0x8c/0x1c0 [ 825.408371][T11756] ___sys_recvmsg+0x19d/0x890 [ 825.413328][T11756] do_recvmmsg+0x63a/0x10a0 [ 825.417981][T11756] __sys_recvmmsg+0x113/0x450 [ 825.422935][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 825.429329][T11756] __do_fast_syscall_32+0x87/0xe0 [ 825.434630][T11756] do_fast_syscall_32+0x33/0x70 [ 825.439705][T11756] do_SYSENTER_32+0x1b/0x20 [ 825.444482][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 825.451014][T11756] [ 825.453557][T11756] Uninit was stored to memory at: [ 825.458761][T11756] __get_compat_msghdr+0x514/0x750 [ 825.464173][T11756] get_compat_msghdr+0x8c/0x1c0 [ 825.469218][T11756] ___sys_recvmsg+0x19d/0x890 [ 825.474162][T11756] do_recvmmsg+0x63a/0x10a0 [ 825.478819][T11756] __sys_recvmmsg+0x113/0x450 [ 825.483826][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 825.490222][T11756] __do_fast_syscall_32+0x87/0xe0 [ 825.495480][T11756] do_fast_syscall_32+0x33/0x70 [ 825.500461][T11756] do_SYSENTER_32+0x1b/0x20 [ 825.505238][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 825.512154][T11756] [ 825.514555][T11756] Uninit was stored to memory at: [ 825.519730][T11756] __get_compat_msghdr+0x514/0x750 [ 825.525086][T11756] get_compat_msghdr+0x8c/0x1c0 [ 825.530117][T11756] ___sys_recvmsg+0x19d/0x890 [ 825.535014][T11756] do_recvmmsg+0x63a/0x10a0 [ 825.539641][T11756] __sys_recvmmsg+0x113/0x450 [ 825.544590][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 825.550988][T11756] __do_fast_syscall_32+0x87/0xe0 [ 825.556244][T11756] do_fast_syscall_32+0x33/0x70 [ 825.561232][T11756] do_SYSENTER_32+0x1b/0x20 [ 825.565955][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 825.572620][T11756] [ 825.575026][T11756] Uninit was stored to memory at: [ 825.580264][T11756] __get_compat_msghdr+0x514/0x750 [ 825.585744][T11756] get_compat_msghdr+0x8c/0x1c0 [ 825.590782][T11756] ___sys_recvmsg+0x19d/0x890 [ 825.595687][T11756] do_recvmmsg+0x63a/0x10a0 [ 825.600326][T11756] __sys_recvmmsg+0x113/0x450 [ 825.605291][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 825.611698][T11756] __do_fast_syscall_32+0x87/0xe0 [ 825.617042][T11756] do_fast_syscall_32+0x33/0x70 [ 825.622178][T11756] do_SYSENTER_32+0x1b/0x20 [ 825.626807][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 825.633478][T11756] [ 825.635861][T11756] Uninit was stored to memory at: [ 825.641096][T11756] __get_compat_msghdr+0x514/0x750 [ 825.646543][T11756] get_compat_msghdr+0x8c/0x1c0 [ 825.651585][T11756] ___sys_recvmsg+0x19d/0x890 [ 825.656531][T11756] do_recvmmsg+0x63a/0x10a0 [ 825.661161][T11756] __sys_recvmmsg+0x113/0x450 [ 825.666139][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 825.672700][T11756] __do_fast_syscall_32+0x87/0xe0 [ 825.677881][T11756] do_fast_syscall_32+0x33/0x70 [ 825.683080][T11756] do_SYSENTER_32+0x1b/0x20 [ 825.687723][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 825.694402][T11756] [ 825.696802][T11756] Uninit was stored to memory at: [ 825.702167][T11756] __get_compat_msghdr+0x514/0x750 [ 825.707476][T11756] get_compat_msghdr+0x8c/0x1c0 [ 825.712655][T11756] ___sys_recvmsg+0x19d/0x890 [ 825.717463][T11756] do_recvmmsg+0x63a/0x10a0 [ 825.722248][T11756] __sys_recvmmsg+0x113/0x450 [ 825.727057][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 825.733602][T11756] __do_fast_syscall_32+0x87/0xe0 [ 825.738791][T11756] do_fast_syscall_32+0x33/0x70 [ 825.743931][T11756] do_SYSENTER_32+0x1b/0x20 [ 825.748565][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 825.755206][T11756] [ 825.757610][T11756] Local variable msg_sys created at: [ 825.763160][T11756] do_recvmmsg+0x5f/0x10a0 [ 825.767725][T11756] __sys_recvmmsg+0x113/0x450 [ 826.020884][T11756] not chained 190000 origins [ 826.025684][T11756] CPU: 1 PID: 11756 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 826.036332][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 826.046496][T11756] Call Trace: [ 826.049824][T11756] [ 826.052800][T11756] dump_stack_lvl+0x1c8/0x256 [ 826.057605][T11756] dump_stack+0x1a/0x1c [ 826.061878][T11756] kmsan_internal_chain_origin+0x78/0x120 [ 826.067778][T11756] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 826.073940][T11756] ? kmsan_get_metadata+0x33/0x220 [ 826.079143][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 826.085511][T11756] ? kmsan_get_metadata+0x33/0x220 [ 826.090824][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 826.096799][T11756] ? kmsan_get_metadata+0x33/0x220 [ 826.102037][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 826.107982][T11756] ? __get_compat_msghdr+0x5b/0x750 [ 826.113317][T11756] ? kmsan_get_metadata+0x33/0x220 [ 826.118608][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 826.124612][T11756] ? should_fail+0x3f/0x810 [ 826.129557][T11756] ? __stack_depot_save+0x21/0x4b0 [ 826.134819][T11756] ? kmsan_get_metadata+0x33/0x220 [ 826.140026][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 826.146370][T11756] ? kmsan_get_metadata+0x33/0x220 [ 826.151573][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 826.157507][T11756] __msan_chain_origin+0xbd/0x140 [ 826.162652][T11756] __get_compat_msghdr+0x514/0x750 [ 826.167905][T11756] get_compat_msghdr+0x8c/0x1c0 [ 826.172868][T11756] ? ___sys_recvmsg+0xa9/0x890 [ 826.177713][T11756] ? do_recvmmsg+0x63a/0x10a0 [ 826.182491][T11756] ___sys_recvmsg+0x19d/0x890 [ 826.187260][T11756] ? __schedule+0x1609/0x21d0 [ 826.192160][T11756] ? kmsan_get_metadata+0x33/0x220 [ 826.197430][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 826.203337][T11756] ? kmsan_get_metadata+0x33/0x220 [ 826.208538][T11756] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 826.214461][T11756] do_recvmmsg+0x63a/0x10a0 [ 826.219061][T11756] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 826.225437][T11756] ? __sys_recvmmsg+0x52/0x450 [ 826.230336][T11756] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 826.236890][T11756] __sys_recvmmsg+0x113/0x450 [ 826.241703][T11756] ? kmsan_get_metadata+0x33/0x220 [ 826.246971][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 826.253322][T11756] __do_fast_syscall_32+0x87/0xe0 [ 826.258431][T11756] ? exit_to_user_mode_prepare+0x119/0x220 [ 826.264333][T11756] do_fast_syscall_32+0x33/0x70 [ 826.269268][T11756] do_SYSENTER_32+0x1b/0x20 [ 826.273861][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 826.280319][T11756] RIP: 0023:0xf7fc5549 [ 826.284445][T11756] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 826.304164][T11756] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 826.312681][T11756] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 826.320724][T11756] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 826.328762][T11756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 826.336832][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.344933][T11756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 826.353064][T11756] [ 826.363933][T11756] Uninit was stored to memory at: [ 826.369208][T11756] __get_compat_msghdr+0x514/0x750 [ 826.375919][T11756] get_compat_msghdr+0x8c/0x1c0 [ 826.380977][T11756] ___sys_recvmsg+0x19d/0x890 [ 826.385946][T11756] do_recvmmsg+0x63a/0x10a0 [ 826.390599][T11756] __sys_recvmmsg+0x113/0x450 [ 826.395522][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 826.402027][T11756] __do_fast_syscall_32+0x87/0xe0 [ 826.407212][T11756] do_fast_syscall_32+0x33/0x70 [ 826.412306][T11756] do_SYSENTER_32+0x1b/0x20 [ 826.416958][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 826.423706][T11756] [ 826.426106][T11756] Uninit was stored to memory at: [ 826.431253][T11756] __get_compat_msghdr+0x514/0x750 [ 826.436654][T11756] get_compat_msghdr+0x8c/0x1c0 [ 826.441684][T11756] ___sys_recvmsg+0x19d/0x890 [ 826.446638][T11756] do_recvmmsg+0x63a/0x10a0 [ 826.451285][T11756] __sys_recvmmsg+0x113/0x450 [ 826.456254][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 826.462766][T11756] __do_fast_syscall_32+0x87/0xe0 [ 826.467957][T11756] do_fast_syscall_32+0x33/0x70 [ 826.473092][T11756] do_SYSENTER_32+0x1b/0x20 [ 826.477743][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 826.484341][T11756] [ 826.486719][T11756] Uninit was stored to memory at: [ 826.492061][T11756] __get_compat_msghdr+0x514/0x750 [ 826.497377][T11756] get_compat_msghdr+0x8c/0x1c0 [ 826.502570][T11756] ___sys_recvmsg+0x19d/0x890 [ 826.507488][T11756] do_recvmmsg+0x63a/0x10a0 [ 826.512289][T11756] __sys_recvmmsg+0x113/0x450 [ 826.517099][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 826.523605][T11756] __do_fast_syscall_32+0x87/0xe0 [ 826.528785][T11756] do_fast_syscall_32+0x33/0x70 [ 826.533930][T11756] do_SYSENTER_32+0x1b/0x20 [ 826.538559][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 826.545189][T11756] [ 826.547593][T11756] Uninit was stored to memory at: [ 826.552994][T11756] __get_compat_msghdr+0x514/0x750 [ 826.558300][T11756] get_compat_msghdr+0x8c/0x1c0 [ 826.563441][T11756] ___sys_recvmsg+0x19d/0x890 [ 826.568270][T11756] do_recvmmsg+0x63a/0x10a0 [ 826.573076][T11756] __sys_recvmmsg+0x113/0x450 [ 826.577906][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 826.584483][T11756] __do_fast_syscall_32+0x87/0xe0 [ 826.589809][T11756] do_fast_syscall_32+0x33/0x70 [ 826.594964][T11756] do_SYSENTER_32+0x1b/0x20 [ 826.599616][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 826.606674][T11756] [ 826.609074][T11756] Uninit was stored to memory at: [ 826.614470][T11756] __get_compat_msghdr+0x514/0x750 [ 826.619762][T11756] get_compat_msghdr+0x8c/0x1c0 [ 826.624912][T11756] ___sys_recvmsg+0x19d/0x890 [ 826.629717][T11756] do_recvmmsg+0x63a/0x10a0 [ 826.634481][T11756] __sys_recvmmsg+0x113/0x450 [ 826.639320][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 826.645849][T11756] __do_fast_syscall_32+0x87/0xe0 [ 826.651006][T11756] do_fast_syscall_32+0x33/0x70 [ 826.656070][T11756] do_SYSENTER_32+0x1b/0x20 [ 826.660701][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 826.667336][T11756] [ 826.669734][T11756] Uninit was stored to memory at: [ 826.675083][T11756] __get_compat_msghdr+0x514/0x750 [ 826.680386][T11756] get_compat_msghdr+0x8c/0x1c0 [ 826.685514][T11756] ___sys_recvmsg+0x19d/0x890 [ 826.690324][T11756] do_recvmmsg+0x63a/0x10a0 [ 826.695078][T11756] __sys_recvmmsg+0x113/0x450 [ 826.699912][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 826.706481][T11756] __do_fast_syscall_32+0x87/0xe0 [ 826.711663][T11756] do_fast_syscall_32+0x33/0x70 [ 826.716824][T11756] do_SYSENTER_32+0x1b/0x20 [ 826.721456][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 826.728042][T11756] [ 826.730425][T11756] Uninit was stored to memory at: [ 826.735794][T11756] __get_compat_msghdr+0x514/0x750 [ 826.741094][T11756] get_compat_msghdr+0x8c/0x1c0 [ 826.746186][T11756] ___sys_recvmsg+0x19d/0x890 [ 826.750992][T11756] do_recvmmsg+0x63a/0x10a0 [ 826.755743][T11756] __sys_recvmmsg+0x113/0x450 [ 826.760556][T11756] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 826.767021][T11756] __do_fast_syscall_32+0x87/0xe0 [ 826.772288][T11756] do_fast_syscall_32+0x33/0x70 [ 826.777289][T11756] do_SYSENTER_32+0x1b/0x20 [ 826.782084][T11756] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 826.788635][T11756] [ 826.791014][T11756] Local variable msg_sys created at: [ 826.796520][T11756] do_recvmmsg+0x5f/0x10a0 [ 826.801080][T11756] __sys_recvmmsg+0x113/0x450 16:08:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @empty}}) 16:08:27 executing program 4: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x23097cef9c792c1e) 16:08:27 executing program 3: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x44}}, 0x0) 16:08:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x21, 0x0, &(0x7f0000000280)) 16:08:27 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0x8f, 0x47, 0xa, 0x0, 0x572, 0xc689, 0x4f0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xaf, 0x6b, 0xc5, 0x0, [], [{}]}}]}}]}}, 0x0) 16:08:27 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x4, 0xfffa}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b61e64c21a6e2f79aa0f8d729cdf362c1802c02103b6740236be"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 16:08:27 executing program 0: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x21, 0x0, 0x0) 16:08:27 executing program 4: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x48, 0x0, 0x0) [ 827.452039][ T3595] usb 6-1: new full-speed USB device number 12 using dummy_hcd 16:08:27 executing program 2: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x4b, 0x0, 0x4) [ 827.652468][ T3595] usb 6-1: device descriptor read/64, error 18 [ 827.932283][ T3595] usb 6-1: new full-speed USB device number 13 using dummy_hcd 16:08:28 executing program 4: capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000100)) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) chdir(&(0x7f0000000540)='./bus\x00') [ 828.132164][ T3595] usb 6-1: device descriptor read/64, error 18 16:08:28 executing program 0: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x46, 0x0, 0x0) [ 828.252619][ T3595] usb usb6-port1: attempt power cycle 16:08:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4, 0x5}]}]}, 0x24}}, 0x0) 16:08:28 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) [ 828.682663][ T3595] usb 6-1: new full-speed USB device number 14 using dummy_hcd 16:08:28 executing program 4: capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000100)) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) chdir(&(0x7f0000000540)='./bus\x00') 16:08:28 executing program 3: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x4e, 0x0, 0x4) [ 828.784841][ T3595] usb 6-1: Invalid ep0 maxpacket: 0 [ 828.942295][ T3595] usb 6-1: new full-speed USB device number 15 using dummy_hcd 16:08:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) [ 829.032381][ T3595] usb 6-1: Invalid ep0 maxpacket: 0 [ 829.039190][ T3595] usb usb6-port1: unable to enumerate USB device 16:08:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc) 16:08:30 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x0) 16:08:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x90, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x74, 0xe, {@with_ht={{{0x0, 0x3}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}]}, 0x90}}, 0x0) 16:08:30 executing program 3: socketpair(0x2, 0x0, 0x400, &(0x7f0000000000)) 16:08:30 executing program 0: r0 = socket(0x1d, 0x3, 0x1) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 16:08:30 executing program 4: capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000100)) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) chdir(&(0x7f0000000540)='./bus\x00') 16:08:30 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0x8f, 0x47, 0xa, 0x0, 0x572, 0xc689, 0x4f0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xaf, 0x6b, 0xc5, 0x0, [], [{}]}}]}}]}}, 0x0) 16:08:30 executing program 4: capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000100)) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) chdir(&(0x7f0000000540)='./bus\x00') 16:08:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0xfff, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 16:08:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1006) 16:08:30 executing program 3: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x32, 0x0, 0x0) 16:08:30 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x123000) read$char_usb(r0, 0x0, 0x0) [ 830.973859][ T3595] usb 6-1: new full-speed USB device number 16 using dummy_hcd 16:08:31 executing program 4: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty}}) 16:08:31 executing program 3: sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x3d}, 0x0) r0 = socket(0xa, 0x3, 0x2a) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa}, 0x18, &(0x7f0000000080)={0x0}}, 0x0) 16:08:31 executing program 1: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000080), 0x8) write$khugepaged_scan(r0, &(0x7f00000000c0), 0x8) [ 831.192156][ T3595] usb 6-1: device descriptor read/64, error 18 [ 831.473585][ T3595] usb 6-1: new full-speed USB device number 17 using dummy_hcd 16:08:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = open(&(0x7f0000000200)='./file0\x00', 0x881ff, 0x0) flock(r4, 0x3) syz_clone3(&(0x7f0000000800)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0), {0x1f}, &(0x7f0000000a80)=""/210, 0xd2, &(0x7f0000000b80)=""/233, &(0x7f0000000180)=[0x0, r3, 0x0, 0x0, r3, r0, r3, 0x0, 0x0, 0x0, 0x0, 0x0], 0xc, {r4}}, 0x58) prlimit64(0x0, 0x9, 0x0, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff29, 0x5, &(0x7f00000008c0)=[{0x0, 0x0, 0x1}, {&(0x7f00000004c0)="7b5f4f365f0763bf4fbea211b4567fcf56fb9e7e58f3b4cb7f7354d490f9cd9ba76c25f7a551278645af720b9e5e57c3c784477084ab737eeec97a9f7f8fc602739f06550aacdac0620be93430343c48f2519eb0e3812bda419e86cca530f04ac7476f705b0faec269ea2c1e024a6fc44f20b397df40116a8a0c55307c0f69f0e638f2586b25f43fa1277f03d2441664b51bfc058df15329d1da9ea8875df230a7426261d22f295fea70a9301d3b6f6949a97dd2f74888d1", 0xb8, 0x1ff}, {&(0x7f00000005c0), 0x0, 0x7f}, {&(0x7f0000000640)="535da8b3ce7bfe0b9148197c9e2f34c460c8d2bd87e09a34467fddbd72566d22db957c4ffafbbbe6e2b4e9cabb78757df3dd2ab4a2842164ac4083cfe4eabdd09f868e46729a1f17eb46930b6984ff4a7844c581bc1ce16239a41b2226dcb7253e3e2c77f2184b0bb8f15c500aaee410f7342ea31f6dc77847f2f9a459519e8019fd112c75572cac5067668142040e8a9d5c1ecd28ed0cafca0bd668", 0x9c, 0x10001}, {&(0x7f0000000700), 0x0, 0x200}], 0x2000, &(0x7f0000000d00)=ANY=[@ANYRES8]) [ 831.663739][ T3595] usb 6-1: device descriptor read/64, error 18 16:08:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x90, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x74, 0x6, {@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}]}, 0x90}}, 0x0) [ 831.783934][ T3595] usb usb6-port1: attempt power cycle 16:08:32 executing program 1: r0 = socket(0xa, 0x3, 0x2a) socketpair(0x8, 0x80000, 0x80d, &(0x7f0000000140)) geteuid() r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f0000001c80)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r2, 0x0) geteuid() geteuid() accept4$tipc(r0, &(0x7f00000086c0)=@name, &(0x7f0000008700)=0x10, 0x80800) socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa}, 0x18, &(0x7f0000000080)={0x0}}, 0x0) [ 832.242769][ T3595] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 832.343493][ T3595] usb 6-1: Invalid ep0 maxpacket: 0 [ 832.408774][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 832.415564][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 [ 832.512511][ T3595] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 832.564394][T11855] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 832.623219][ T3595] usb 6-1: Invalid ep0 maxpacket: 0 [ 832.629457][ T3595] usb usb6-port1: unable to enumerate USB device [ 833.393511][T11862] loop3: detected capacity change from 0 to 264192 16:08:33 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0x8f, 0x47, 0xa, 0x0, 0x572, 0xc689, 0x4f0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xaf, 0x6b, 0xc5, 0x0, [], [{}]}}]}}]}}, 0x0) 16:08:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f00000043c0)={0x10}, 0x10}], 0x1, &(0x7f0000004340)=ANY=[@ANYBLOB="1c"], 0x30}, 0x0) 16:08:33 executing program 4: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x39, 0x0, 0x0) 16:08:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x14, 0x0, &(0x7f0000000280)) 16:08:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0x0) [ 833.885341][T11857] not chained 200000 origins [ 833.890202][T11857] CPU: 0 PID: 11857 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 833.900895][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 833.911108][T11857] Call Trace: [ 833.914494][T11857] [ 833.917530][T11857] dump_stack_lvl+0x1c8/0x256 [ 833.922438][T11857] dump_stack+0x1a/0x1c [ 833.926812][T11857] kmsan_internal_chain_origin+0x78/0x120 16:08:34 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)={0x420, 0x3e9}, 0x420}}, 0x0) [ 833.932728][T11857] ? up_read+0x36/0x1c0 [ 833.937110][T11857] ? do_user_addr_fault+0xfef/0x1710 [ 833.942634][T11857] ? exc_page_fault+0x6d/0x140 [ 833.947590][T11857] ? asm_exc_page_fault+0x27/0x30 [ 833.952821][T11857] ? kmsan_get_metadata+0x33/0x220 [ 833.958124][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 833.964676][T11857] ? kmsan_get_metadata+0x33/0x220 [ 833.969984][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 833.975993][T11857] __msan_chain_origin+0xbd/0x140 16:08:34 executing program 1: capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000100)) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) [ 833.981215][T11857] __get_compat_msghdr+0x514/0x750 [ 833.986576][T11857] get_compat_msghdr+0x8c/0x1c0 [ 833.991655][T11857] ? ___sys_recvmsg+0xa9/0x890 [ 833.996585][T11857] ? do_recvmmsg+0x63a/0x10a0 [ 834.001447][T11857] ___sys_recvmsg+0x19d/0x890 [ 834.006305][T11857] ? __schedule+0x1609/0x21d0 [ 834.011194][T11857] ? kmsan_get_metadata+0x33/0x220 [ 834.016512][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 834.022550][T11857] ? __cond_resched+0x1f/0x40 [ 834.027413][T11857] do_recvmmsg+0x63a/0x10a0 [ 834.032129][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 834.038595][T11857] ? __sys_recvmmsg+0x52/0x450 [ 834.043541][T11857] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 834.050169][T11857] __sys_recvmmsg+0x113/0x450 [ 834.055019][T11857] ? kmsan_get_metadata+0x33/0x220 [ 834.060333][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 834.066770][T11857] __do_fast_syscall_32+0x87/0xe0 [ 834.071972][T11857] ? exit_to_user_mode_prepare+0x119/0x220 [ 834.077952][T11857] do_fast_syscall_32+0x33/0x70 [ 834.082956][T11857] do_SYSENTER_32+0x1b/0x20 [ 834.087598][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 834.094137][T11857] RIP: 0023:0xf7fc5549 [ 834.098319][T11857] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 834.118099][T11857] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 834.126661][T11857] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 834.134757][T11857] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 834.142845][T11857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 834.150941][T11857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.159030][T11857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 834.167147][T11857] [ 834.179747][T11857] Uninit was stored to memory at: 16:08:34 executing program 4: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x4a, 0x0, 0x0) [ 834.186298][T11857] __get_compat_msghdr+0x514/0x750 [ 834.191640][T11857] get_compat_msghdr+0x8c/0x1c0 [ 834.196907][T11857] ___sys_recvmsg+0x19d/0x890 [ 834.201886][T11857] do_recvmmsg+0x63a/0x10a0 [ 834.206561][T11857] __sys_recvmmsg+0x113/0x450 [ 834.211403][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 834.218004][T11857] __do_fast_syscall_32+0x87/0xe0 [ 834.223344][T11857] do_fast_syscall_32+0x33/0x70 [ 834.228364][T11857] do_SYSENTER_32+0x1b/0x20 [ 834.233152][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 834.239723][T11857] [ 834.242250][T11857] Uninit was stored to memory at: [ 834.247503][T11857] __get_compat_msghdr+0x514/0x750 [ 834.252961][T11857] get_compat_msghdr+0x8c/0x1c0 [ 834.258025][T11857] ___sys_recvmsg+0x19d/0x890 [ 834.262995][T11857] do_recvmmsg+0x63a/0x10a0 [ 834.267651][T11857] __sys_recvmmsg+0x113/0x450 [ 834.272609][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 834.279047][T11857] __do_fast_syscall_32+0x87/0xe0 [ 834.284365][T11857] do_fast_syscall_32+0x33/0x70 [ 834.289372][T11857] do_SYSENTER_32+0x1b/0x20 [ 834.294147][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 834.300704][T11857] [ 834.303230][T11857] Uninit was stored to memory at: [ 834.308497][T11857] __get_compat_msghdr+0x514/0x750 [ 834.313940][T11857] get_compat_msghdr+0x8c/0x1c0 [ 834.318991][T11857] ___sys_recvmsg+0x19d/0x890 [ 834.323974][T11857] do_recvmmsg+0x63a/0x10a0 [ 834.328623][T11857] __sys_recvmmsg+0x113/0x450 [ 834.333580][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 834.339999][T11857] __do_fast_syscall_32+0x87/0xe0 [ 834.345364][T11857] do_fast_syscall_32+0x33/0x70 [ 834.350370][T11857] do_SYSENTER_32+0x1b/0x20 [ 834.355245][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 834.361959][T11857] [ 834.364357][T11857] Uninit was stored to memory at: [ 834.369599][T11857] __get_compat_msghdr+0x514/0x750 [ 834.375101][T11857] get_compat_msghdr+0x8c/0x1c0 [ 834.380154][T11857] ___sys_recvmsg+0x19d/0x890 [ 834.385164][T11857] do_recvmmsg+0x63a/0x10a0 [ 834.389843][T11857] __sys_recvmmsg+0x113/0x450 [ 834.394873][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 834.401295][T11857] __do_fast_syscall_32+0x87/0xe0 [ 834.406682][T11857] do_fast_syscall_32+0x33/0x70 [ 834.411704][T11857] do_SYSENTER_32+0x1b/0x20 [ 834.416517][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 834.423200][T11857] [ 834.425601][T11857] Uninit was stored to memory at: [ 834.430863][T11857] __get_compat_msghdr+0x514/0x750 [ 834.436373][T11857] get_compat_msghdr+0x8c/0x1c0 [ 834.441462][T11857] ___sys_recvmsg+0x19d/0x890 [ 834.446497][T11857] do_recvmmsg+0x63a/0x10a0 [ 834.451153][T11857] __sys_recvmmsg+0x113/0x450 [ 834.456171][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 834.462729][T11857] __do_fast_syscall_32+0x87/0xe0 [ 834.467937][T11857] do_fast_syscall_32+0x33/0x70 [ 834.473129][T11857] do_SYSENTER_32+0x1b/0x20 [ 834.477787][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 834.484549][T11857] [ 834.486967][T11857] Uninit was stored to memory at: [ 834.492352][T11857] __get_compat_msghdr+0x514/0x750 [ 834.497684][T11857] get_compat_msghdr+0x8c/0x1c0 [ 834.502903][T11857] ___sys_recvmsg+0x19d/0x890 [ 834.507765][T11857] do_recvmmsg+0x63a/0x10a0 [ 834.512618][T11857] __sys_recvmmsg+0x113/0x450 [ 834.517451][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 834.524065][T11857] __do_fast_syscall_32+0x87/0xe0 [ 834.529269][T11857] do_fast_syscall_32+0x33/0x70 [ 834.534464][T11857] do_SYSENTER_32+0x1b/0x20 [ 834.539120][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 834.545806][T11857] [ 834.548205][T11857] Uninit was stored to memory at: [ 834.553646][T11857] __get_compat_msghdr+0x514/0x750 [ 834.558991][T11857] get_compat_msghdr+0x8c/0x1c0 [ 834.564253][T11857] ___sys_recvmsg+0x19d/0x890 [ 834.569091][T11857] do_recvmmsg+0x63a/0x10a0 [ 834.574051][T11857] __sys_recvmmsg+0x113/0x450 [ 834.578904][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 834.585469][T11857] __do_fast_syscall_32+0x87/0xe0 [ 834.590660][T11857] do_fast_syscall_32+0x33/0x70 [ 834.595845][T11857] do_SYSENTER_32+0x1b/0x20 [ 834.600507][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 834.607266][T11857] [ 834.609681][T11857] Local variable msg_sys created at: [ 834.615252][T11857] do_recvmmsg+0x5f/0x10a0 [ 834.619823][T11857] __sys_recvmmsg+0x113/0x450 16:08:34 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x37, 0x0, 0x1}, 0x0) [ 835.543039][ T3549] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 835.732571][ T3549] usb 6-1: device descriptor read/64, error 18 [ 836.013522][ T3549] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 836.092609][T11857] not chained 210000 origins [ 836.097424][T11857] CPU: 0 PID: 11857 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 836.108104][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 836.118307][T11857] Call Trace: [ 836.121679][T11857] [ 836.124713][T11857] dump_stack_lvl+0x1c8/0x256 [ 836.129614][T11857] dump_stack+0x1a/0x1c [ 836.133970][T11857] kmsan_internal_chain_origin+0x78/0x120 [ 836.139868][T11857] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 836.146137][T11857] ? kmsan_get_metadata+0x33/0x220 [ 836.151438][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 836.157887][T11857] ? kmsan_get_metadata+0x33/0x220 [ 836.163186][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 836.169179][T11857] ? kmsan_get_metadata+0x33/0x220 [ 836.174484][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 836.180485][T11857] ? __get_compat_msghdr+0x5b/0x750 [ 836.185909][T11857] ? kmsan_get_metadata+0x33/0x220 [ 836.191197][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 836.197206][T11857] ? should_fail+0x3f/0x810 [ 836.201889][T11857] ? __stack_depot_save+0x21/0x4b0 [ 836.207168][T11857] ? kmsan_get_metadata+0x33/0x220 [ 836.212462][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 836.218896][T11857] ? kmsan_get_metadata+0x33/0x220 [ 836.224181][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 836.230202][T11857] __msan_chain_origin+0xbd/0x140 [ 836.235416][T11857] __get_compat_msghdr+0x514/0x750 [ 836.240767][T11857] get_compat_msghdr+0x8c/0x1c0 [ 836.245820][T11857] ? ___sys_recvmsg+0xa9/0x890 [ 836.250778][T11857] ? do_recvmmsg+0x63a/0x10a0 [ 836.255731][T11857] ___sys_recvmsg+0x19d/0x890 [ 836.260573][T11857] ? __schedule+0x1609/0x21d0 [ 836.265416][T11857] ? kmsan_get_metadata+0x33/0x220 [ 836.270710][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 836.276708][T11857] ? kmsan_get_metadata+0x33/0x220 [ 836.282007][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 836.288011][T11857] do_recvmmsg+0x63a/0x10a0 [ 836.292712][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 836.299150][T11857] ? __sys_recvmmsg+0x52/0x450 [ 836.304514][T11857] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 836.311118][T11857] __sys_recvmmsg+0x113/0x450 [ 836.315951][T11857] ? kmsan_get_metadata+0x33/0x220 [ 836.321255][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 836.327697][T11857] __do_fast_syscall_32+0x87/0xe0 [ 836.332882][T11857] ? exit_to_user_mode_prepare+0x119/0x220 [ 836.338874][T11857] do_fast_syscall_32+0x33/0x70 [ 836.343889][T11857] do_SYSENTER_32+0x1b/0x20 [ 836.348546][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 836.355190][T11857] RIP: 0023:0xf7fc5549 [ 836.359384][T11857] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 836.379187][T11857] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 836.387785][T11857] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 836.395920][T11857] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 836.404031][T11857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 836.412130][T11857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.420233][T11857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 836.428459][T11857] [ 836.439566][T11857] Uninit was stored to memory at: [ 836.454432][T11857] __get_compat_msghdr+0x514/0x750 [ 836.459778][T11857] get_compat_msghdr+0x8c/0x1c0 [ 836.464993][T11857] ___sys_recvmsg+0x19d/0x890 [ 836.469836][T11857] do_recvmmsg+0x63a/0x10a0 [ 836.474635][T11857] __sys_recvmmsg+0x113/0x450 [ 836.479481][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 836.486046][T11857] __do_fast_syscall_32+0x87/0xe0 [ 836.491244][T11857] do_fast_syscall_32+0x33/0x70 [ 836.496402][T11857] do_SYSENTER_32+0x1b/0x20 [ 836.501081][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 836.507781][T11857] [ 836.510183][T11857] Uninit was stored to memory at: [ 836.515565][T11857] __get_compat_msghdr+0x514/0x750 [ 836.520881][T11857] get_compat_msghdr+0x8c/0x1c0 [ 836.526122][T11857] ___sys_recvmsg+0x19d/0x890 [ 836.530985][T11857] do_recvmmsg+0x63a/0x10a0 [ 836.535824][T11857] __sys_recvmmsg+0x113/0x450 [ 836.540659][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 836.547266][T11857] __do_fast_syscall_32+0x87/0xe0 [ 836.552581][T11857] do_fast_syscall_32+0x33/0x70 [ 836.557590][T11857] do_SYSENTER_32+0x1b/0x20 [ 836.562423][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 836.568976][T11857] [ 836.571380][T11857] Uninit was stored to memory at: [ 836.576829][T11857] __get_compat_msghdr+0x514/0x750 [ 836.582267][T11857] get_compat_msghdr+0x8c/0x1c0 [ 836.587330][T11857] ___sys_recvmsg+0x19d/0x890 [ 836.592376][T11857] do_recvmmsg+0x63a/0x10a0 [ 836.597031][T11857] __sys_recvmmsg+0x113/0x450 [ 836.601976][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 836.608399][T11857] __do_fast_syscall_32+0x87/0xe0 [ 836.613770][T11857] do_fast_syscall_32+0x33/0x70 [ 836.618776][T11857] do_SYSENTER_32+0x1b/0x20 [ 836.623617][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 836.630173][T11857] [ 836.632757][T11857] Uninit was stored to memory at: [ 836.638007][T11857] __get_compat_msghdr+0x514/0x750 [ 836.643596][T11857] get_compat_msghdr+0x8c/0x1c0 [ 836.648644][T11857] ___sys_recvmsg+0x19d/0x890 [ 836.653696][T11857] do_recvmmsg+0x63a/0x10a0 [ 836.658347][T11857] __sys_recvmmsg+0x113/0x450 [ 836.663317][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 836.669740][T11857] __do_fast_syscall_32+0x87/0xe0 [ 836.675106][T11857] do_fast_syscall_32+0x33/0x70 [ 836.680110][T11857] do_SYSENTER_32+0x1b/0x20 [ 836.684965][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 836.691546][T11857] [ 836.694137][T11857] Uninit was stored to memory at: [ 836.699409][T11857] __get_compat_msghdr+0x514/0x750 [ 836.704924][T11857] get_compat_msghdr+0x8c/0x1c0 [ 836.709981][T11857] ___sys_recvmsg+0x19d/0x890 [ 836.715026][T11857] do_recvmmsg+0x63a/0x10a0 [ 836.719688][T11857] __sys_recvmmsg+0x113/0x450 [ 836.724716][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 836.731143][T11857] __do_fast_syscall_32+0x87/0xe0 [ 836.736563][T11857] do_fast_syscall_32+0x33/0x70 [ 836.741575][T11857] do_SYSENTER_32+0x1b/0x20 [ 836.746432][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 836.753117][T11857] [ 836.755556][T11857] Uninit was stored to memory at: [ 836.760808][T11857] __get_compat_msghdr+0x514/0x750 [ 836.766312][T11857] get_compat_msghdr+0x8c/0x1c0 [ 836.771363][T11857] ___sys_recvmsg+0x19d/0x890 [ 836.776379][T11857] do_recvmmsg+0x63a/0x10a0 [ 836.781084][T11857] __sys_recvmmsg+0x113/0x450 [ 836.786106][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 836.792655][T11857] __do_fast_syscall_32+0x87/0xe0 [ 836.797838][T11857] do_fast_syscall_32+0x33/0x70 [ 836.803015][T11857] do_SYSENTER_32+0x1b/0x20 [ 836.807668][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 836.814417][T11857] [ 836.816823][T11857] Uninit was stored to memory at: [ 836.822249][T11857] __get_compat_msghdr+0x514/0x750 [ 836.827566][T11857] get_compat_msghdr+0x8c/0x1c0 [ 836.832735][T11857] ___sys_recvmsg+0x19d/0x890 [ 836.837570][T11857] do_recvmmsg+0x63a/0x10a0 [ 836.842411][T11857] __sys_recvmmsg+0x113/0x450 [ 836.847264][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 836.853891][T11857] __do_fast_syscall_32+0x87/0xe0 [ 836.859080][T11857] do_fast_syscall_32+0x33/0x70 [ 836.864219][T11857] do_SYSENTER_32+0x1b/0x20 [ 836.868882][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 836.875637][T11857] [ 836.878051][T11857] Local variable msg_sys created at: [ 836.883618][T11857] do_recvmmsg+0x5f/0x10a0 [ 836.888189][T11857] __sys_recvmmsg+0x113/0x450 [ 836.972057][ T3549] usb 6-1: device descriptor read/64, error 18 [ 837.092522][ T3549] usb usb6-port1: attempt power cycle [ 837.288275][T11857] not chained 220000 origins [ 837.293140][T11857] CPU: 0 PID: 11857 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 837.303818][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 837.314005][T11857] Call Trace: [ 837.317379][T11857] [ 837.320405][T11857] dump_stack_lvl+0x1c8/0x256 [ 837.325306][T11857] dump_stack+0x1a/0x1c [ 837.329659][T11857] kmsan_internal_chain_origin+0x78/0x120 [ 837.335575][T11857] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 837.341834][T11857] ? kmsan_get_metadata+0x33/0x220 [ 837.347126][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 837.353570][T11857] ? kmsan_get_metadata+0x33/0x220 [ 837.358866][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 837.364862][T11857] ? kmsan_get_metadata+0x33/0x220 [ 837.370150][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 837.376144][T11857] ? __get_compat_msghdr+0x5b/0x750 [ 837.381555][T11857] ? kmsan_get_metadata+0x33/0x220 [ 837.386852][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 837.392857][T11857] ? should_fail+0x3f/0x810 [ 837.397540][T11857] ? __stack_depot_save+0x21/0x4b0 [ 837.402928][T11857] ? kmsan_get_metadata+0x33/0x220 [ 837.408237][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 837.414683][T11857] ? kmsan_get_metadata+0x33/0x220 [ 837.419990][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 837.425915][T11857] __msan_chain_origin+0xbd/0x140 [ 837.431041][T11857] __get_compat_msghdr+0x514/0x750 [ 837.436328][T11857] get_compat_msghdr+0x8c/0x1c0 [ 837.441314][T11857] ? ___sys_recvmsg+0xa9/0x890 [ 837.446162][T11857] ? do_recvmmsg+0x63a/0x10a0 [ 837.450924][T11857] ___sys_recvmsg+0x19d/0x890 [ 837.455727][T11857] ? __schedule+0x1609/0x21d0 [ 837.460582][T11857] ? kmsan_get_metadata+0x33/0x220 [ 837.465863][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 837.471799][T11857] ? kmsan_get_metadata+0x33/0x220 [ 837.477031][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 837.482946][T11857] do_recvmmsg+0x63a/0x10a0 [ 837.487551][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 837.493906][T11857] ? __sys_recvmmsg+0x52/0x450 [ 837.498822][T11857] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 837.505436][T11857] __sys_recvmmsg+0x113/0x450 [ 837.510362][T11857] ? kmsan_get_metadata+0x33/0x220 [ 837.515667][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 837.522103][T11857] __do_fast_syscall_32+0x87/0xe0 [ 837.527222][T11857] ? exit_to_user_mode_prepare+0x119/0x220 [ 837.533222][T11857] do_fast_syscall_32+0x33/0x70 [ 837.538167][T11857] do_SYSENTER_32+0x1b/0x20 [ 837.542775][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 837.549251][T11857] RIP: 0023:0xf7fc5549 [ 837.553433][T11857] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 837.573255][T11857] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 837.581854][T11857] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 837.589952][T11857] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 837.598000][T11857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 837.606066][T11857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.614161][T11857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 837.622224][T11857] [ 837.636953][T11857] Uninit was stored to memory at: [ 837.643618][T11857] __get_compat_msghdr+0x514/0x750 [ 837.648961][T11857] get_compat_msghdr+0x8c/0x1c0 [ 837.654164][T11857] ___sys_recvmsg+0x19d/0x890 [ 837.659027][T11857] do_recvmmsg+0x63a/0x10a0 [ 837.663807][T11857] __sys_recvmmsg+0x113/0x450 [ 837.668638][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 837.675356][T11857] __do_fast_syscall_32+0x87/0xe0 [ 837.680553][T11857] do_fast_syscall_32+0x33/0x70 [ 837.685687][T11857] do_SYSENTER_32+0x1b/0x20 [ 837.690351][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 837.697124][T11857] [ 837.699526][T11857] Uninit was stored to memory at: [ 837.704906][T11857] __get_compat_msghdr+0x514/0x750 [ 837.710217][T11857] get_compat_msghdr+0x8c/0x1c0 [ 837.715395][T11857] ___sys_recvmsg+0x19d/0x890 [ 837.720223][T11857] do_recvmmsg+0x63a/0x10a0 [ 837.725006][T11857] __sys_recvmmsg+0x113/0x450 [ 837.729841][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 837.736479][T11857] __do_fast_syscall_32+0x87/0xe0 [ 837.741677][T11857] do_fast_syscall_32+0x33/0x70 [ 837.746891][T11857] do_SYSENTER_32+0x1b/0x20 [ 837.751541][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 837.758285][T11857] [ 837.760687][T11857] Uninit was stored to memory at: [ 837.766126][T11857] __get_compat_msghdr+0x514/0x750 [ 837.771445][T11857] get_compat_msghdr+0x8c/0x1c0 [ 837.776773][T11857] ___sys_recvmsg+0x19d/0x890 [ 837.781603][T11857] do_recvmmsg+0x63a/0x10a0 [ 837.786456][T11857] __sys_recvmmsg+0x113/0x450 [ 837.791284][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 837.797903][T11857] __do_fast_syscall_32+0x87/0xe0 [ 837.803229][T11857] do_fast_syscall_32+0x33/0x70 [ 837.808240][T11857] do_SYSENTER_32+0x1b/0x20 [ 837.813072][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 837.819655][T11857] [ 837.822196][T11857] Uninit was stored to memory at: [ 837.827442][T11857] __get_compat_msghdr+0x514/0x750 [ 837.832948][T11857] get_compat_msghdr+0x8c/0x1c0 [ 837.837989][T11857] ___sys_recvmsg+0x19d/0x890 [ 837.842997][T11857] do_recvmmsg+0x63a/0x10a0 [ 837.847643][T11857] __sys_recvmmsg+0x113/0x450 [ 837.852597][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 837.859024][T11857] __do_fast_syscall_32+0x87/0xe0 [ 837.864388][T11857] do_fast_syscall_32+0x33/0x70 [ 837.869398][T11857] do_SYSENTER_32+0x1b/0x20 [ 837.874247][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 837.880792][T11857] [ 837.883319][T11857] Uninit was stored to memory at: [ 837.888515][T11857] __get_compat_msghdr+0x514/0x750 [ 837.893900][T11857] get_compat_msghdr+0x8c/0x1c0 [ 837.898938][T11857] ___sys_recvmsg+0x19d/0x890 [ 837.903909][T11857] do_recvmmsg+0x63a/0x10a0 [ 837.908562][T11857] __sys_recvmmsg+0x113/0x450 [ 837.913521][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 837.920097][T11857] __do_fast_syscall_32+0x87/0xe0 [ 837.925423][T11857] do_fast_syscall_32+0x33/0x70 [ 837.930451][T11857] do_SYSENTER_32+0x1b/0x20 [ 837.935308][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 837.941963][T11857] [ 837.944331][T11857] Uninit was stored to memory at: [ 837.949510][T11857] __get_compat_msghdr+0x514/0x750 [ 837.954939][T11857] get_compat_msghdr+0x8c/0x1c0 [ 837.959997][T11857] ___sys_recvmsg+0x19d/0x890 [ 837.965013][T11857] do_recvmmsg+0x63a/0x10a0 [ 837.969675][T11857] __sys_recvmmsg+0x113/0x450 [ 837.974649][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 837.981051][T11857] __do_fast_syscall_32+0x87/0xe0 [ 837.986405][T11857] do_fast_syscall_32+0x33/0x70 [ 837.991416][T11857] do_SYSENTER_32+0x1b/0x20 [ 837.996256][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 838.002956][T11857] [ 838.005360][T11857] Uninit was stored to memory at: [ 838.010609][T11857] __get_compat_msghdr+0x514/0x750 [ 838.016118][T11857] get_compat_msghdr+0x8c/0x1c0 [ 838.021171][T11857] ___sys_recvmsg+0x19d/0x890 [ 838.026189][T11857] do_recvmmsg+0x63a/0x10a0 [ 838.030825][T11857] __sys_recvmmsg+0x113/0x450 [ 838.035849][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 838.042403][T11857] __do_fast_syscall_32+0x87/0xe0 [ 838.047571][T11857] do_fast_syscall_32+0x33/0x70 [ 838.052726][T11857] do_SYSENTER_32+0x1b/0x20 [ 838.057367][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 838.064046][T11857] [ 838.066454][T11857] Local variable msg_sys created at: [ 838.072023][T11857] do_recvmmsg+0x5f/0x10a0 [ 838.076592][T11857] __sys_recvmmsg+0x113/0x450 [ 838.162964][ T3549] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 838.412383][ T3549] usb 6-1: device not accepting address 22, error -71 [ 838.495933][T11857] not chained 230000 origins [ 838.500662][T11857] CPU: 0 PID: 11857 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 838.511249][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 838.521383][T11857] Call Trace: [ 838.524709][T11857] [ 838.527684][T11857] dump_stack_lvl+0x1c8/0x256 [ 838.532481][T11857] dump_stack+0x1a/0x1c [ 838.536737][T11857] kmsan_internal_chain_origin+0x78/0x120 [ 838.542641][T11857] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 838.548804][T11857] ? kmsan_get_metadata+0x33/0x220 [ 838.554034][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 838.560483][T11857] ? kmsan_get_metadata+0x33/0x220 [ 838.565766][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 838.571690][T11857] ? kmsan_get_metadata+0x33/0x220 [ 838.576932][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 838.582864][T11857] ? __get_compat_msghdr+0x5b/0x750 [ 838.588217][T11857] ? kmsan_get_metadata+0x33/0x220 [ 838.593422][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 838.599345][T11857] ? should_fail+0x3f/0x810 [ 838.603973][T11857] ? __stack_depot_save+0x21/0x4b0 [ 838.609268][T11857] ? kmsan_get_metadata+0x33/0x220 [ 838.614541][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 838.620890][T11857] ? kmsan_get_metadata+0x33/0x220 [ 838.626132][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 838.632089][T11857] __msan_chain_origin+0xbd/0x140 [ 838.637244][T11857] __get_compat_msghdr+0x514/0x750 [ 838.642508][T11857] get_compat_msghdr+0x8c/0x1c0 [ 838.647508][T11857] ? ___sys_recvmsg+0xa9/0x890 [ 838.652403][T11857] ? do_recvmmsg+0x63a/0x10a0 [ 838.657254][T11857] ___sys_recvmsg+0x19d/0x890 [ 838.662092][T11857] ? __schedule+0x1609/0x21d0 [ 838.666864][T11857] ? kmsan_get_metadata+0x33/0x220 [ 838.672157][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 838.678082][T11857] ? kmsan_get_metadata+0x33/0x220 [ 838.683328][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 838.689327][T11857] do_recvmmsg+0x63a/0x10a0 [ 838.693936][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 838.700281][T11857] ? __sys_recvmmsg+0x52/0x450 [ 838.705147][T11857] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 838.711758][T11857] __sys_recvmmsg+0x113/0x450 [ 838.716569][T11857] ? kmsan_get_metadata+0x33/0x220 [ 838.721810][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 838.728180][T11857] __do_fast_syscall_32+0x87/0xe0 [ 838.733301][T11857] ? exit_to_user_mode_prepare+0x119/0x220 [ 838.739214][T11857] do_fast_syscall_32+0x33/0x70 [ 838.744152][T11857] do_SYSENTER_32+0x1b/0x20 [ 838.748745][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 838.755229][T11857] RIP: 0023:0xf7fc5549 [ 838.759402][T11857] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 838.779115][T11857] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 838.787625][T11857] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 838.795675][T11857] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 838.803770][T11857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 838.811917][T11857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.820083][T11857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 838.828140][T11857] [ 838.836327][T11857] Uninit was stored to memory at: [ 838.841617][T11857] __get_compat_msghdr+0x514/0x750 [ 838.847522][T11857] get_compat_msghdr+0x8c/0x1c0 [ 838.852734][T11857] ___sys_recvmsg+0x19d/0x890 [ 838.857567][T11857] do_recvmmsg+0x63a/0x10a0 [ 838.862362][T11857] __sys_recvmmsg+0x113/0x450 [ 838.867196][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 838.873798][T11857] __do_fast_syscall_32+0x87/0xe0 [ 838.878995][T11857] do_fast_syscall_32+0x33/0x70 [ 838.884151][T11857] do_SYSENTER_32+0x1b/0x20 [ 838.888826][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 838.895621][T11857] [ 838.897998][T11857] Uninit was stored to memory at: [ 838.903408][T11857] __get_compat_msghdr+0x514/0x750 [ 838.908694][T11857] get_compat_msghdr+0x8c/0x1c0 [ 838.913877][T11857] ___sys_recvmsg+0x19d/0x890 [ 838.918690][T11857] do_recvmmsg+0x63a/0x10a0 [ 838.923447][T11857] __sys_recvmmsg+0x113/0x450 [ 838.928250][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 838.934814][T11857] __do_fast_syscall_32+0x87/0xe0 [ 838.939983][T11857] do_fast_syscall_32+0x33/0x70 [ 838.945133][T11857] do_SYSENTER_32+0x1b/0x20 [ 838.949777][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 838.956454][T11857] [ 838.958852][T11857] Uninit was stored to memory at: [ 838.964325][T11857] __get_compat_msghdr+0x514/0x750 [ 838.969640][T11857] get_compat_msghdr+0x8c/0x1c0 [ 838.974842][T11857] ___sys_recvmsg+0x19d/0x890 [ 838.979650][T11857] do_recvmmsg+0x63a/0x10a0 [ 838.984399][T11857] __sys_recvmmsg+0x113/0x450 [ 838.989229][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 838.995854][T11857] __do_fast_syscall_32+0x87/0xe0 [ 839.001030][T11857] do_fast_syscall_32+0x33/0x70 [ 839.006121][T11857] do_SYSENTER_32+0x1b/0x20 [ 839.010755][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 839.017549][T11857] [ 839.020011][T11857] Uninit was stored to memory at: [ 839.025556][T11857] __get_compat_msghdr+0x514/0x750 [ 839.030855][T11857] get_compat_msghdr+0x8c/0x1c0 [ 839.036006][T11857] ___sys_recvmsg+0x19d/0x890 [ 839.040818][T11857] do_recvmmsg+0x63a/0x10a0 [ 839.045635][T11857] __sys_recvmmsg+0x113/0x450 [ 839.050479][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 839.057105][T11857] __do_fast_syscall_32+0x87/0xe0 [ 839.062425][T11857] do_fast_syscall_32+0x33/0x70 [ 839.067430][T11857] do_SYSENTER_32+0x1b/0x20 [ 839.072256][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 839.078794][T11857] [ 839.081149][T11857] Uninit was stored to memory at: [ 839.086504][T11857] __get_compat_msghdr+0x514/0x750 [ 839.091938][T11857] get_compat_msghdr+0x8c/0x1c0 [ 839.096989][T11857] ___sys_recvmsg+0x19d/0x890 [ 839.101989][T11857] do_recvmmsg+0x63a/0x10a0 [ 839.106625][T11857] __sys_recvmmsg+0x113/0x450 [ 839.111378][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 839.117927][T11857] __do_fast_syscall_32+0x87/0xe0 [ 839.123249][T11857] do_fast_syscall_32+0x33/0x70 [ 839.128263][T11857] do_SYSENTER_32+0x1b/0x20 [ 839.133129][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 839.139685][T11857] [ 839.142303][T11857] Uninit was stored to memory at: [ 839.147487][T11857] __get_compat_msghdr+0x514/0x750 [ 839.152870][T11857] get_compat_msghdr+0x8c/0x1c0 [ 839.157904][T11857] ___sys_recvmsg+0x19d/0x890 [ 839.162874][T11857] do_recvmmsg+0x63a/0x10a0 [ 839.167527][T11857] __sys_recvmmsg+0x113/0x450 [ 839.172519][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 839.179176][T11857] __do_fast_syscall_32+0x87/0xe0 [ 839.184495][T11857] do_fast_syscall_32+0x33/0x70 [ 839.189484][T11857] do_SYSENTER_32+0x1b/0x20 [ 839.194275][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 839.200826][T11857] [ 839.203427][T11857] Uninit was stored to memory at: [ 839.208677][T11857] __get_compat_msghdr+0x514/0x750 [ 839.214125][T11857] get_compat_msghdr+0x8c/0x1c0 [ 839.219176][T11857] ___sys_recvmsg+0x19d/0x890 [ 839.224152][T11857] do_recvmmsg+0x63a/0x10a0 [ 839.228792][T11857] __sys_recvmmsg+0x113/0x450 [ 839.233852][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 839.240300][T11857] __do_fast_syscall_32+0x87/0xe0 [ 839.245594][T11857] do_fast_syscall_32+0x33/0x70 [ 839.250579][T11857] do_SYSENTER_32+0x1b/0x20 [ 839.255417][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 839.262111][T11857] [ 839.264522][T11857] Local variable msg_sys created at: [ 839.269887][T11857] do_recvmmsg+0x5f/0x10a0 [ 839.274611][T11857] __sys_recvmmsg+0x113/0x450 [ 839.523927][T11857] not chained 240000 origins [ 839.528656][T11857] CPU: 0 PID: 11857 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 839.539305][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 839.549427][T11857] Call Trace: [ 839.552765][T11857] [ 839.555736][T11857] dump_stack_lvl+0x1c8/0x256 [ 839.560534][T11857] dump_stack+0x1a/0x1c [ 839.564792][T11857] kmsan_internal_chain_origin+0x78/0x120 [ 839.570606][T11857] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 839.576768][T11857] ? kmsan_get_metadata+0x33/0x220 [ 839.581999][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 839.588433][T11857] ? kmsan_get_metadata+0x33/0x220 [ 839.593707][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 839.599619][T11857] ? kmsan_get_metadata+0x33/0x220 [ 839.604844][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 839.610831][T11857] ? __get_compat_msghdr+0x5b/0x750 [ 839.616143][T11857] ? kmsan_get_metadata+0x33/0x220 [ 839.621357][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 839.627265][T11857] ? should_fail+0x3f/0x810 [ 839.631909][T11857] ? __stack_depot_save+0x21/0x4b0 [ 839.637205][T11857] ? kmsan_get_metadata+0x33/0x220 [ 839.642507][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 839.648917][T11857] ? kmsan_get_metadata+0x33/0x220 [ 839.654123][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 839.660030][T11857] __msan_chain_origin+0xbd/0x140 [ 839.665160][T11857] __get_compat_msghdr+0x514/0x750 [ 839.670410][T11857] get_compat_msghdr+0x8c/0x1c0 [ 839.675371][T11857] ? ___sys_recvmsg+0xa9/0x890 [ 839.680236][T11857] ? do_recvmmsg+0x63a/0x10a0 [ 839.685055][T11857] ___sys_recvmsg+0x19d/0x890 [ 839.689915][T11857] ? __schedule+0x1609/0x21d0 [ 839.694839][T11857] ? kmsan_get_metadata+0x33/0x220 [ 839.700131][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 839.706093][T11857] ? kmsan_get_metadata+0x33/0x220 [ 839.711396][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 839.717351][T11857] do_recvmmsg+0x63a/0x10a0 [ 839.721967][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 839.728315][T11857] ? __sys_recvmmsg+0x52/0x450 [ 839.733182][T11857] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 839.739790][T11857] __sys_recvmmsg+0x113/0x450 [ 839.744608][T11857] ? kmsan_get_metadata+0x33/0x220 [ 839.749832][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 839.756197][T11857] __do_fast_syscall_32+0x87/0xe0 [ 839.761308][T11857] ? exit_to_user_mode_prepare+0x119/0x220 [ 839.767214][T11857] do_fast_syscall_32+0x33/0x70 [ 839.772158][T11857] do_SYSENTER_32+0x1b/0x20 [ 839.776753][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 839.783232][T11857] RIP: 0023:0xf7fc5549 [ 839.787425][T11857] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 839.807403][T11857] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 839.815973][T11857] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 839.824017][T11857] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 839.832069][T11857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 839.840138][T11857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.848171][T11857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 839.856224][T11857] [ 839.864293][T11857] Uninit was stored to memory at: [ 839.869573][T11857] __get_compat_msghdr+0x514/0x750 [ 839.875373][T11857] get_compat_msghdr+0x8c/0x1c0 [ 839.880446][T11857] ___sys_recvmsg+0x19d/0x890 [ 839.885417][T11857] do_recvmmsg+0x63a/0x10a0 [ 839.890073][T11857] __sys_recvmmsg+0x113/0x450 [ 839.895034][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 839.901457][T11857] __do_fast_syscall_32+0x87/0xe0 [ 839.906785][T11857] do_fast_syscall_32+0x33/0x70 [ 839.911936][T11857] do_SYSENTER_32+0x1b/0x20 [ 839.916599][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 839.923288][T11857] [ 839.925689][T11857] Uninit was stored to memory at: [ 839.930884][T11857] __get_compat_msghdr+0x514/0x750 [ 839.936275][T11857] get_compat_msghdr+0x8c/0x1c0 [ 839.941323][T11857] ___sys_recvmsg+0x19d/0x890 [ 839.946307][T11857] do_recvmmsg+0x63a/0x10a0 [ 839.950954][T11857] __sys_recvmmsg+0x113/0x450 [ 839.955883][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 839.962427][T11857] __do_fast_syscall_32+0x87/0xe0 [ 839.967591][T11857] do_fast_syscall_32+0x33/0x70 [ 839.972734][T11857] do_SYSENTER_32+0x1b/0x20 [ 839.977393][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 839.984011][T11857] [ 839.986393][T11857] Uninit was stored to memory at: [ 839.991543][T11857] __get_compat_msghdr+0x514/0x750 [ 839.996945][T11857] get_compat_msghdr+0x8c/0x1c0 [ 840.002117][T11857] ___sys_recvmsg+0x19d/0x890 [ 840.007035][T11857] do_recvmmsg+0x63a/0x10a0 [ 840.011685][T11857] __sys_recvmmsg+0x113/0x450 [ 840.016729][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 840.023406][T11857] __do_fast_syscall_32+0x87/0xe0 [ 840.028601][T11857] do_fast_syscall_32+0x33/0x70 [ 840.033778][T11857] do_SYSENTER_32+0x1b/0x20 [ 840.038444][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 840.045263][T11857] [ 840.047658][T11857] Uninit was stored to memory at: [ 840.053098][T11857] __get_compat_msghdr+0x514/0x750 [ 840.058518][T11857] get_compat_msghdr+0x8c/0x1c0 [ 840.063729][T11857] ___sys_recvmsg+0x19d/0x890 [ 840.068568][T11857] do_recvmmsg+0x63a/0x10a0 [ 840.073486][T11857] __sys_recvmmsg+0x113/0x450 [ 840.078298][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 840.084860][T11857] __do_fast_syscall_32+0x87/0xe0 [ 840.090053][T11857] do_fast_syscall_32+0x33/0x70 [ 840.095254][T11857] do_SYSENTER_32+0x1b/0x20 [ 840.099907][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 840.106683][T11857] [ 840.109118][T11857] Uninit was stored to memory at: [ 840.114578][T11857] __get_compat_msghdr+0x514/0x750 [ 840.119902][T11857] get_compat_msghdr+0x8c/0x1c0 [ 840.125117][T11857] ___sys_recvmsg+0x19d/0x890 [ 840.129952][T11857] do_recvmmsg+0x63a/0x10a0 [ 840.134780][T11857] __sys_recvmmsg+0x113/0x450 [ 840.139599][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 840.146160][T11857] __do_fast_syscall_32+0x87/0xe0 [ 840.151317][T11857] do_fast_syscall_32+0x33/0x70 [ 840.156416][T11857] do_SYSENTER_32+0x1b/0x20 [ 840.161055][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 840.167815][T11857] [ 840.170221][T11857] Uninit was stored to memory at: [ 840.175668][T11857] __get_compat_msghdr+0x514/0x750 [ 840.180988][T11857] get_compat_msghdr+0x8c/0x1c0 [ 840.186307][T11857] ___sys_recvmsg+0x19d/0x890 [ 840.191118][T11857] do_recvmmsg+0x63a/0x10a0 [ 840.195886][T11857] __sys_recvmmsg+0x113/0x450 [ 840.200692][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 840.207198][T11857] __do_fast_syscall_32+0x87/0xe0 [ 840.212498][T11857] do_fast_syscall_32+0x33/0x70 [ 840.217592][T11857] do_SYSENTER_32+0x1b/0x20 [ 840.222528][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 840.229069][T11857] [ 840.231423][T11857] Uninit was stored to memory at: [ 840.236852][T11857] __get_compat_msghdr+0x514/0x750 [ 840.242290][T11857] get_compat_msghdr+0x8c/0x1c0 [ 840.247352][T11857] ___sys_recvmsg+0x19d/0x890 [ 840.252395][T11857] do_recvmmsg+0x63a/0x10a0 [ 840.257062][T11857] __sys_recvmmsg+0x113/0x450 [ 840.262085][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 840.268508][T11857] __do_fast_syscall_32+0x87/0xe0 [ 840.273925][T11857] do_fast_syscall_32+0x33/0x70 [ 840.278915][T11857] do_SYSENTER_32+0x1b/0x20 [ 840.283734][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 840.290268][T11857] [ 840.292844][T11857] Local variable msg_sys created at: [ 840.298306][T11857] do_recvmmsg+0x5f/0x10a0 [ 840.303026][T11857] __sys_recvmmsg+0x113/0x450 [ 840.586994][T11857] not chained 250000 origins [ 840.592028][T11857] CPU: 1 PID: 11857 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 840.602800][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 840.612991][T11857] Call Trace: [ 840.616378][T11857] [ 840.619419][T11857] dump_stack_lvl+0x1c8/0x256 [ 840.624320][T11857] dump_stack+0x1a/0x1c [ 840.628658][T11857] kmsan_internal_chain_origin+0x78/0x120 [ 840.634562][T11857] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 840.640819][T11857] ? kmsan_get_metadata+0x33/0x220 [ 840.646108][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 840.652546][T11857] ? kmsan_get_metadata+0x33/0x220 [ 840.657833][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 840.663831][T11857] ? kmsan_get_metadata+0x33/0x220 [ 840.669114][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 840.675107][T11857] ? __get_compat_msghdr+0x5b/0x750 [ 840.680529][T11857] ? kmsan_get_metadata+0x33/0x220 [ 840.685816][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 840.691812][T11857] ? should_fail+0x3f/0x810 [ 840.696510][T11857] ? __stack_depot_save+0x21/0x4b0 [ 840.701791][T11857] ? kmsan_get_metadata+0x33/0x220 [ 840.707076][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 840.713509][T11857] ? kmsan_get_metadata+0x33/0x220 [ 840.718796][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 840.724792][T11857] __msan_chain_origin+0xbd/0x140 [ 840.729998][T11857] __get_compat_msghdr+0x514/0x750 [ 840.735358][T11857] get_compat_msghdr+0x8c/0x1c0 [ 840.740452][T11857] ? ___sys_recvmsg+0xa9/0x890 [ 840.745367][T11857] ? do_recvmmsg+0x63a/0x10a0 [ 840.750206][T11857] ___sys_recvmsg+0x19d/0x890 [ 840.755142][T11857] ? __schedule+0x1609/0x21d0 [ 840.759995][T11857] ? kmsan_get_metadata+0x33/0x220 [ 840.765295][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 840.771296][T11857] ? kmsan_get_metadata+0x33/0x220 [ 840.776585][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 840.782624][T11857] do_recvmmsg+0x63a/0x10a0 [ 840.787340][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 840.793780][T11857] ? __sys_recvmmsg+0x52/0x450 [ 840.798705][T11857] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 840.805314][T11857] __sys_recvmmsg+0x113/0x450 [ 840.810153][T11857] ? kmsan_get_metadata+0x33/0x220 [ 840.815637][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 840.822086][T11857] __do_fast_syscall_32+0x87/0xe0 [ 840.827301][T11857] ? exit_to_user_mode_prepare+0x119/0x220 [ 840.833378][T11857] do_fast_syscall_32+0x33/0x70 [ 840.838399][T11857] do_SYSENTER_32+0x1b/0x20 [ 840.843068][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 840.849647][T11857] RIP: 0023:0xf7fc5549 [ 840.853838][T11857] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 840.873665][T11857] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 840.882260][T11857] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 840.890398][T11857] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 840.898506][T11857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 840.906613][T11857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.914712][T11857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 840.922849][T11857] [ 840.933934][T11857] Uninit was stored to memory at: [ 840.939209][T11857] __get_compat_msghdr+0x514/0x750 [ 840.947326][T11857] get_compat_msghdr+0x8c/0x1c0 [ 840.952659][T11857] ___sys_recvmsg+0x19d/0x890 [ 840.957511][T11857] do_recvmmsg+0x63a/0x10a0 [ 840.962263][T11857] __sys_recvmmsg+0x113/0x450 [ 840.967183][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 840.973784][T11857] __do_fast_syscall_32+0x87/0xe0 [ 840.979054][T11857] do_fast_syscall_32+0x33/0x70 [ 840.984155][T11857] do_SYSENTER_32+0x1b/0x20 [ 840.988809][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 840.995481][T11857] [ 840.997887][T11857] Uninit was stored to memory at: [ 841.003288][T11857] __get_compat_msghdr+0x514/0x750 [ 841.008615][T11857] get_compat_msghdr+0x8c/0x1c0 [ 841.013806][T11857] ___sys_recvmsg+0x19d/0x890 [ 841.018644][T11857] do_recvmmsg+0x63a/0x10a0 [ 841.023439][T11857] __sys_recvmmsg+0x113/0x450 [ 841.028277][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 841.034796][T11857] __do_fast_syscall_32+0x87/0xe0 [ 841.040010][T11857] do_fast_syscall_32+0x33/0x70 [ 841.045112][T11857] do_SYSENTER_32+0x1b/0x20 [ 841.049769][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 841.056420][T11857] [ 841.058837][T11857] Uninit was stored to memory at: [ 841.064184][T11857] __get_compat_msghdr+0x514/0x750 [ 841.069493][T11857] get_compat_msghdr+0x8c/0x1c0 [ 841.074631][T11857] ___sys_recvmsg+0x19d/0x890 [ 841.079460][T11857] do_recvmmsg+0x63a/0x10a0 [ 841.084209][T11857] __sys_recvmmsg+0x113/0x450 [ 841.089032][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 841.095534][T11857] __do_fast_syscall_32+0x87/0xe0 [ 841.100716][T11857] do_fast_syscall_32+0x33/0x70 [ 841.105809][T11857] do_SYSENTER_32+0x1b/0x20 [ 841.110465][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 841.117132][T11857] [ 841.119534][T11857] Uninit was stored to memory at: [ 841.124881][T11857] __get_compat_msghdr+0x514/0x750 [ 841.130190][T11857] get_compat_msghdr+0x8c/0x1c0 [ 841.135334][T11857] ___sys_recvmsg+0x19d/0x890 [ 841.140168][T11857] do_recvmmsg+0x63a/0x10a0 [ 841.144921][T11857] __sys_recvmmsg+0x113/0x450 [ 841.149747][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 841.156270][T11857] __do_fast_syscall_32+0x87/0xe0 [ 841.161462][T11857] do_fast_syscall_32+0x33/0x70 [ 841.166550][T11857] do_SYSENTER_32+0x1b/0x20 [ 841.171201][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 841.177875][T11857] [ 841.180291][T11857] Uninit was stored to memory at: [ 841.185706][T11857] __get_compat_msghdr+0x514/0x750 [ 841.191029][T11857] get_compat_msghdr+0x8c/0x1c0 [ 841.196236][T11857] ___sys_recvmsg+0x19d/0x890 [ 841.201067][T11857] do_recvmmsg+0x63a/0x10a0 [ 841.205901][T11857] __sys_recvmmsg+0x113/0x450 [ 841.210737][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 841.217334][T11857] __do_fast_syscall_32+0x87/0xe0 [ 841.222622][T11857] do_fast_syscall_32+0x33/0x70 [ 841.227630][T11857] do_SYSENTER_32+0x1b/0x20 [ 841.232441][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 841.239002][T11857] [ 841.241406][T11857] Uninit was stored to memory at: [ 841.246826][T11857] __get_compat_msghdr+0x514/0x750 [ 841.252247][T11857] get_compat_msghdr+0x8c/0x1c0 [ 841.257301][T11857] ___sys_recvmsg+0x19d/0x890 [ 841.262286][T11857] do_recvmmsg+0x63a/0x10a0 [ 841.266937][T11857] __sys_recvmmsg+0x113/0x450 [ 841.271874][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 841.278291][T11857] __do_fast_syscall_32+0x87/0xe0 [ 841.283641][T11857] do_fast_syscall_32+0x33/0x70 [ 841.288646][T11857] do_SYSENTER_32+0x1b/0x20 [ 841.293465][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 841.300020][T11857] [ 841.302578][T11857] Uninit was stored to memory at: [ 841.307826][T11857] __get_compat_msghdr+0x514/0x750 [ 841.313296][T11857] get_compat_msghdr+0x8c/0x1c0 [ 841.318350][T11857] ___sys_recvmsg+0x19d/0x890 [ 841.323346][T11857] do_recvmmsg+0x63a/0x10a0 [ 841.328004][T11857] __sys_recvmmsg+0x113/0x450 [ 841.332997][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 841.339417][T11857] __do_fast_syscall_32+0x87/0xe0 [ 841.344759][T11857] do_fast_syscall_32+0x33/0x70 [ 841.349849][T11857] do_SYSENTER_32+0x1b/0x20 [ 841.354659][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 841.361218][T11857] [ 841.363778][T11857] Local variable msg_sys created at: [ 841.369159][T11857] do_recvmmsg+0x5f/0x10a0 [ 841.373954][T11857] __sys_recvmmsg+0x113/0x450 [ 841.780128][T11857] not chained 260000 origins [ 841.785091][T11857] CPU: 1 PID: 11857 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 841.795767][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 841.805962][T11857] Call Trace: [ 841.809338][T11857] [ 841.812362][T11857] dump_stack_lvl+0x1c8/0x256 [ 841.817252][T11857] dump_stack+0x1a/0x1c [ 841.821589][T11857] kmsan_internal_chain_origin+0x78/0x120 [ 841.827493][T11857] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 841.833749][T11857] ? kmsan_get_metadata+0x33/0x220 [ 841.839060][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 841.845523][T11857] ? kmsan_get_metadata+0x33/0x220 [ 841.850909][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 841.856916][T11857] ? kmsan_get_metadata+0x33/0x220 [ 841.862215][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 841.868223][T11857] ? __get_compat_msghdr+0x5b/0x750 [ 841.873634][T11857] ? kmsan_get_metadata+0x33/0x220 [ 841.878924][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 841.884922][T11857] ? should_fail+0x3f/0x810 [ 841.889599][T11857] ? __stack_depot_save+0x21/0x4b0 [ 841.894883][T11857] ? kmsan_get_metadata+0x33/0x220 [ 841.900176][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 841.906611][T11857] ? kmsan_get_metadata+0x33/0x220 [ 841.911894][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 841.917887][T11857] __msan_chain_origin+0xbd/0x140 [ 841.923090][T11857] __get_compat_msghdr+0x514/0x750 [ 841.928617][T11857] get_compat_msghdr+0x8c/0x1c0 [ 841.933671][T11857] ? ___sys_recvmsg+0xa9/0x890 [ 841.938590][T11857] ? do_recvmmsg+0x63a/0x10a0 [ 841.943426][T11857] ___sys_recvmsg+0x19d/0x890 [ 841.948276][T11857] ? __schedule+0x1609/0x21d0 [ 841.953120][T11857] ? kmsan_get_metadata+0x33/0x220 [ 841.958415][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 841.964416][T11857] ? kmsan_get_metadata+0x33/0x220 [ 841.969705][T11857] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 841.975712][T11857] do_recvmmsg+0x63a/0x10a0 [ 841.980402][T11857] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 841.986842][T11857] ? __sys_recvmmsg+0x52/0x450 [ 841.991757][T11857] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 841.998354][T11857] __sys_recvmmsg+0x113/0x450 [ 842.003187][T11857] ? kmsan_get_metadata+0x33/0x220 [ 842.008497][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 842.014936][T11857] __do_fast_syscall_32+0x87/0xe0 [ 842.020123][T11857] ? exit_to_user_mode_prepare+0x119/0x220 [ 842.026117][T11857] do_fast_syscall_32+0x33/0x70 [ 842.031152][T11857] do_SYSENTER_32+0x1b/0x20 [ 842.035916][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 842.042485][T11857] RIP: 0023:0xf7fc5549 [ 842.046681][T11857] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 842.066489][T11857] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 842.075076][T11857] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 842.083187][T11857] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 842.091302][T11857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 842.099408][T11857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.107560][T11857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 842.115705][T11857] [ 842.122227][T11857] Uninit was stored to memory at: [ 842.127841][T11857] __get_compat_msghdr+0x514/0x750 [ 842.133285][T11857] get_compat_msghdr+0x8c/0x1c0 [ 842.138341][T11857] ___sys_recvmsg+0x19d/0x890 [ 842.143280][T11857] do_recvmmsg+0x63a/0x10a0 [ 842.147935][T11857] __sys_recvmmsg+0x113/0x450 [ 842.152855][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 842.159363][T11857] __do_fast_syscall_32+0x87/0xe0 [ 842.164648][T11857] do_fast_syscall_32+0x33/0x70 [ 842.169661][T11857] do_SYSENTER_32+0x1b/0x20 [ 842.174436][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 842.181087][T11857] [ 842.183600][T11857] Uninit was stored to memory at: [ 842.188867][T11857] __get_compat_msghdr+0x514/0x750 [ 842.194303][T11857] get_compat_msghdr+0x8c/0x1c0 [ 842.199358][T11857] ___sys_recvmsg+0x19d/0x890 [ 842.204287][T11857] do_recvmmsg+0x63a/0x10a0 [ 842.208942][T11857] __sys_recvmmsg+0x113/0x450 [ 842.213870][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 842.220294][T11857] __do_fast_syscall_32+0x87/0xe0 [ 842.225645][T11857] do_fast_syscall_32+0x33/0x70 [ 842.230670][T11857] do_SYSENTER_32+0x1b/0x20 [ 842.235498][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 842.242160][T11857] [ 842.244593][T11857] Uninit was stored to memory at: [ 842.249841][T11857] __get_compat_msghdr+0x514/0x750 [ 842.255333][T11857] get_compat_msghdr+0x8c/0x1c0 [ 842.260394][T11857] ___sys_recvmsg+0x19d/0x890 [ 842.265415][T11857] do_recvmmsg+0x63a/0x10a0 [ 842.270081][T11857] __sys_recvmmsg+0x113/0x450 [ 842.275085][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 842.281512][T11857] __do_fast_syscall_32+0x87/0xe0 [ 842.286867][T11857] do_fast_syscall_32+0x33/0x70 [ 842.291966][T11857] do_SYSENTER_32+0x1b/0x20 [ 842.296627][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 842.303342][T11857] [ 842.305748][T11857] Uninit was stored to memory at: [ 842.310999][T11857] __get_compat_msghdr+0x514/0x750 [ 842.316420][T11857] get_compat_msghdr+0x8c/0x1c0 [ 842.321487][T11857] ___sys_recvmsg+0x19d/0x890 [ 842.326424][T11857] do_recvmmsg+0x63a/0x10a0 [ 842.331083][T11857] __sys_recvmmsg+0x113/0x450 [ 842.336000][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 842.342512][T11857] __do_fast_syscall_32+0x87/0xe0 [ 842.347697][T11857] do_fast_syscall_32+0x33/0x70 [ 842.352818][T11857] do_SYSENTER_32+0x1b/0x20 [ 842.357485][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 842.364142][T11857] [ 842.366544][T11857] Uninit was stored to memory at: [ 842.371886][T11857] __get_compat_msghdr+0x514/0x750 [ 842.377211][T11857] get_compat_msghdr+0x8c/0x1c0 [ 842.382382][T11857] ___sys_recvmsg+0x19d/0x890 [ 842.387218][T11857] do_recvmmsg+0x63a/0x10a0 [ 842.391969][T11857] __sys_recvmmsg+0x113/0x450 [ 842.396804][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 842.403388][T11857] __do_fast_syscall_32+0x87/0xe0 [ 842.408575][T11857] do_fast_syscall_32+0x33/0x70 [ 842.413695][T11857] do_SYSENTER_32+0x1b/0x20 [ 842.418346][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 842.425074][T11857] [ 842.427489][T11857] Uninit was stored to memory at: [ 842.432903][T11857] __get_compat_msghdr+0x514/0x750 [ 842.438221][T11857] get_compat_msghdr+0x8c/0x1c0 [ 842.443446][T11857] ___sys_recvmsg+0x19d/0x890 [ 842.448291][T11857] do_recvmmsg+0x63a/0x10a0 [ 842.453124][T11857] __sys_recvmmsg+0x113/0x450 [ 842.457963][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 842.464564][T11857] __do_fast_syscall_32+0x87/0xe0 [ 842.469747][T11857] do_fast_syscall_32+0x33/0x70 [ 842.474918][T11857] do_SYSENTER_32+0x1b/0x20 [ 842.479583][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 842.486314][T11857] [ 842.488726][T11857] Uninit was stored to memory at: [ 842.494130][T11857] __get_compat_msghdr+0x514/0x750 [ 842.499444][T11857] get_compat_msghdr+0x8c/0x1c0 [ 842.504661][T11857] ___sys_recvmsg+0x19d/0x890 [ 842.509535][T11857] do_recvmmsg+0x63a/0x10a0 [ 842.514357][T11857] __sys_recvmmsg+0x113/0x450 [ 842.519199][T11857] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 842.525775][T11857] __do_fast_syscall_32+0x87/0xe0 [ 842.530956][T11857] do_fast_syscall_32+0x33/0x70 [ 842.536124][T11857] do_SYSENTER_32+0x1b/0x20 [ 842.540786][T11857] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 842.547517][T11857] [ 842.549923][T11857] Local variable msg_sys created at: [ 842.555405][T11857] do_recvmmsg+0x5f/0x10a0 [ 842.559972][T11857] __sys_recvmmsg+0x113/0x450 16:08:42 executing program 3: r0 = socket(0xa, 0x3, 0x2a) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 16:08:42 executing program 1: r0 = socket(0xa, 0x3, 0x2a) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa}, 0x18, &(0x7f0000000080)={0x0, 0x4000}}, 0x0) 16:08:42 executing program 0: clock_getres(0x3ef8a7fe821a2e53, 0x0) 16:08:42 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, 0x0) 16:08:42 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 16:08:42 executing program 5: syz_usb_connect(0x2, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0x8f, 0x47, 0xa, 0x10, 0x572, 0xc689, 0x4f0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaf, 0x6b, 0xc5}}]}}]}}, 0x0) 16:08:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 16:08:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x141c02) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c08, 0x0) 16:08:43 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x3, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @cb_func], &(0x7f0000000040)='GPL\x00', 0x1, 0xe1, &(0x7f0000000080)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 843.432389][ T3551] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 843.440545][ T3541] usb 3-1: new high-speed USB device number 11 using dummy_hcd 16:08:43 executing program 3: r0 = socket(0xa, 0x3, 0x2a) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000680), 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="0000000471fdbd857c94129e0f66c20e45779ed584cb370a45b944f7f4098706138c43fb0b40d8623325ae50bcd8939e617574da54e0074df415f49754de554b33e7f8909fe784d05ad7234c5d59bd2a5c2e7c682bfc7bd62934fe5bf060f729495f12b741670fcf85e01d89908e7bf08e8a15c3554b86d9072de18a4e28a2af09b14e38a8de107761d427181e92aab6a606ed6abfbcbd58721cdc782bad3a56056237b76a4dccf7bfad3ecbc317d4ee32138c9b510346c586", @ANYRES16, @ANYBLOB="200025bd7000fbdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x24048010) [ 843.682887][ T3541] usb 3-1: Using ep0 maxpacket: 8 [ 843.811096][ T3541] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 843.820624][ T3541] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 843.829537][ T3541] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 843.839009][ T3541] usb 3-1: config 250 has no interface number 0 [ 843.845708][ T3541] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 16:08:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x141c02) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c08, 0x0) [ 843.857750][ T3541] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 843.868689][ T3541] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 843.879567][ T3541] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 843.893490][ T3541] usb 3-1: config 250 interface 228 has no altsetting 0 16:08:44 executing program 0: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x1e, 0x0, 0x4) [ 844.035049][ T3551] usb 6-1: New USB device found, idVendor=0572, idProduct=c689, bcdDevice=4f.0a [ 844.044655][ T3551] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.053590][ T3551] usb 6-1: Product: syz [ 844.057997][ T3551] usb 6-1: Manufacturer: syz [ 844.062969][ T3551] usb 6-1: SerialNumber: syz [ 844.161657][ T3551] usb 6-1: config 0 descriptor?? [ 844.216497][ T3551] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 844.262928][ T3551] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 844.269545][ T3551] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 844.342692][ T3541] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 844.352390][ T3541] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 844.360904][ T3541] usb 3-1: Product: syz [ 844.365469][ T3541] usb 3-1: SerialNumber: syz 16:08:44 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000002180)={0x0, 0x0, 0x20}, 0x10) [ 844.392182][ T3551] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 844.398803][ T3551] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 16:08:44 executing program 4: r0 = socket(0xa, 0x3, 0x2a) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa}, 0x18, &(0x7f0000000080)={0x0}}, 0xffd8) [ 844.472817][ T3551] usb 6-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230C' in warm state [ 844.513363][T11894] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 16:08:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f00000043c0)={0x10}, 0x10}], 0x1, &(0x7f0000004340)=ANY=[@ANYRES32], 0x30}, 0x0) [ 844.557334][ T3551] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 844.571743][T11894] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 844.642842][ T3541] hub 3-1:250.228: bad descriptor, ignoring hub [ 844.649353][ T3541] hub: probe of 3-1:250.228 failed with error -5 [ 844.684565][ T3551] usb 6-1: USB disconnect, device number 24 16:08:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x141c02) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c08, 0x0) [ 845.601465][ T3541] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 845.693211][ T3541] usb 3-1: USB disconnect, device number 11 [ 845.714496][ T3541] usblp0: removed [ 846.172082][ T3541] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 846.422672][ T3541] usb 3-1: Using ep0 maxpacket: 8 [ 846.543700][ T3541] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 846.552436][ T3541] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 846.561120][ T3541] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 846.570599][ T3541] usb 3-1: config 250 has no interface number 0 [ 846.577186][ T3541] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 846.589238][ T3541] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 846.599992][ T3541] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 846.610781][ T3541] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 846.624585][ T3541] usb 3-1: config 250 interface 228 has no altsetting 0 [ 846.752551][ T3541] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 846.762059][ T3541] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 846.775218][ T3541] usb 3-1: Product: syz [ 846.779612][ T3541] usb 3-1: SerialNumber: syz 16:08:46 executing program 2: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}) 16:08:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x141c02) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c08, 0x0) 16:08:46 executing program 5: syz_usb_connect(0x2, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0x8f, 0x47, 0xa, 0x10, 0x572, 0xc689, 0x4f0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaf, 0x6b, 0xc5}}]}}]}}, 0x0) 16:08:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000280)) 16:08:46 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0xa}, 0x0) 16:08:46 executing program 0: r0 = socket(0xa, 0x3, 0x2a) bind$tipc(r0, &(0x7f0000000000)=@name, 0x10) [ 846.842787][ T3541] usb 3-1: can't set config #250, error -71 [ 846.901652][ T3541] usb 3-1: USB disconnect, device number 12 16:08:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x6}, @void}}}, 0x1c}}, 0x0) 16:08:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)={0xe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0xb0, 0xe, {@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @val={0x5, 0x3a, {0x0, 0x0, 0x0, "5424c91a0ed16adc0eda5199795d6abde29f8e9d59bdf9fee0b67b19c4239ab7fb7720580daa7c6087789e98c930d7262139ce413e753d"}}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val, @val={0x71, 0x7}, @val={0x76, 0x6}}}]}, 0xe0}}, 0x0) 16:08:47 executing program 0: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x1a, 0x0, 0x0) 16:08:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) [ 847.313531][ T3595] usb 6-1: new full-speed USB device number 25 using dummy_hcd 16:08:47 executing program 1: syz_clone(0x9e088400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 847.853533][ T3595] usb 6-1: New USB device found, idVendor=0572, idProduct=c689, bcdDevice=4f.0a [ 847.863107][ T3595] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.871370][ T3595] usb 6-1: Product: syz [ 847.875932][ T3595] usb 6-1: Manufacturer: syz [ 847.880751][ T3595] usb 6-1: SerialNumber: syz 16:08:48 executing program 4: syz_clone(0x0, &(0x7f0000001d00)="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", 0x140, &(0x7f0000002d00), 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 848.072484][ T3595] usb 6-1: config 0 descriptor?? [ 848.143120][ T3595] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 848.192510][ T3595] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 848.199236][ T3595] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 848.323478][ T3595] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 848.330229][ T3595] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 848.433900][ T3595] usb 6-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230C' in warm state 16:08:48 executing program 2: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x3e, 0x0, 0x0) 16:08:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x3}]}, @NL80211_ATTR_BEACON_HEAD={0x74, 0xe, {@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}]}, 0x98}}, 0x0) [ 848.491220][ T3595] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 848.664973][ T3595] usb 6-1: USB disconnect, device number 25 16:08:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) flock(r4, 0x3) syz_clone3(&(0x7f0000000800)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0), {0x1f}, &(0x7f0000000a80)=""/210, 0xd2, &(0x7f0000000b80)=""/233, &(0x7f0000000180)=[0x0, r2, 0x0, 0x0, r2, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0], 0xc, {r4}}, 0x58) prlimit64(0x0, 0x9, 0x0, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff29, 0x5, &(0x7f00000008c0)=[{0x0, 0x0, 0x1}, {&(0x7f00000004c0)="7b5f4f365f0763bf4fbea211b4567fcf56fb9e7e58f3b4cb7f7354d490f9cd9ba76c25f7a551278645af720b9e5e57c3c784477084ab737eeec97a9f7f8fc602739f06550aacdac0620be93430343c48f2519eb0e3812bda419e86cca530f04ac7476f705b0faec269ea2c1e024a6fc44f20b397df40116a8a0c55307c0f69f0e638f2586b25f43fa1277f03d2441664b51bfc058df15329d1da9ea8875df230a7426261d22f295fea70a9301d3b6f6949a97dd2f74888d19aae", 0xba, 0x1ff}, {&(0x7f00000005c0), 0x0, 0x7f}, {&(0x7f0000000640)="535da8b3ce7bfe0b9148197c9e2f34c460c8d2bd87e09a34467fddbd72566d22db957c4ffafbbbe6e2b4e9cabb78757df3dd2ab4a2842164ac4083cfe4eabdd09f868e46729a1f17eb46930b6984ff4a7844c581bc1ce16239a41b2226dcb7253e3e2c77f2184b0bb8f15c500aaee410f7342ea31f6dc77847f2f9a459519e8019fd112c75572cac5067668142040e8a9d5c1ecd28ed0cafca0bd6685ef3", 0x9e, 0x10001}, {&(0x7f0000000700), 0x0, 0x200}], 0x2000, &(0x7f0000000d00)=ANY=[@ANYRES8]) 16:08:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4) 16:08:49 executing program 1: r0 = socket(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={0x0}}, 0x0) 16:08:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)={0x11c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x107, 0xf, [@perr={0x84, 0x101, {0x0, 0xf, [@ext={{}, @device_a, 0x0, @broadcast}, @ext={{}, @device_a, 0x0, @broadcast}, @not_ext={{}, @device_b}, @ext={{}, @broadcast}, @not_ext={{}, @broadcast}, @ext, @ext, @not_ext={{}, @device_b}, @ext={{}, @device_b}, @not_ext, @not_ext, @ext={{}, @device_b}, @ext, @ext={{}, @device_b, 0x0, @broadcast}, @ext={{}, @broadcast}]}}]}]}, 0x11c}}, 0x0) 16:08:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xb}, @void}}}, 0x1c}}, 0x0) 16:08:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x18}, {&(0x7f00000008c0)={0x10}, 0x10}], 0x2}, 0x0) 16:08:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1a, 0x0, &(0x7f0000000280)) 16:08:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf256c00000008"], 0x78}}, 0x0) 16:08:50 executing program 2: gettid() waitid(0x0, 0x0, 0x0, 0x20000006, 0x0) [ 850.344421][T11981] loop3: detected capacity change from 0 to 264192 16:08:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8) 16:08:50 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000800)='io.pressure\x00', 0x2, 0x0) 16:08:50 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x1, 0xe1, &(0x7f0000000080)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1800}, 0x80) [ 850.567218][T11983] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.5'. [ 851.785867][T11964] not chained 270000 origins [ 851.793637][T11964] CPU: 1 PID: 11964 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 851.804333][T11964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 851.814539][T11964] Call Trace: [ 851.817925][T11964] [ 851.820959][T11964] dump_stack_lvl+0x1c8/0x256 [ 851.825866][T11964] dump_stack+0x1a/0x1c [ 851.830239][T11964] kmsan_internal_chain_origin+0x78/0x120 [ 851.836157][T11964] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 851.842431][T11964] ? kmsan_get_metadata+0x33/0x220 [ 851.847732][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 851.854182][T11964] ? kmsan_get_metadata+0x33/0x220 [ 851.859491][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 851.865491][T11964] ? kmsan_get_metadata+0x33/0x220 [ 851.870797][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 851.876803][T11964] ? __get_compat_msghdr+0x5b/0x750 [ 851.882220][T11964] ? kmsan_get_metadata+0x33/0x220 [ 851.887534][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 851.893564][T11964] ? should_fail+0x3f/0x810 [ 851.898272][T11964] ? __stack_depot_save+0x21/0x4b0 [ 851.903561][T11964] ? kmsan_get_metadata+0x33/0x220 [ 851.908854][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 851.915281][T11964] ? kmsan_get_metadata+0x33/0x220 [ 851.920585][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 851.926583][T11964] __msan_chain_origin+0xbd/0x140 [ 851.931779][T11964] __get_compat_msghdr+0x514/0x750 [ 851.937151][T11964] get_compat_msghdr+0x8c/0x1c0 [ 851.942210][T11964] ? ___sys_recvmsg+0xa9/0x890 [ 851.947131][T11964] ? do_recvmmsg+0x63a/0x10a0 [ 851.951971][T11964] ___sys_recvmsg+0x19d/0x890 [ 851.956815][T11964] ? __schedule+0x1609/0x21d0 [ 851.961664][T11964] ? kmsan_get_metadata+0x33/0x220 [ 851.966957][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 851.972952][T11964] ? kmsan_get_metadata+0x33/0x220 [ 851.978238][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 851.984244][T11964] do_recvmmsg+0x63a/0x10a0 [ 851.988937][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 851.995374][T11964] ? __sys_recvmmsg+0x52/0x450 [ 852.000298][T11964] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 852.006900][T11964] __sys_recvmmsg+0x113/0x450 [ 852.011726][T11964] ? kmsan_get_metadata+0x33/0x220 [ 852.017053][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 852.023537][T11964] __do_fast_syscall_32+0x87/0xe0 [ 852.028729][T11964] do_fast_syscall_32+0x33/0x70 [ 852.033790][T11964] do_SYSENTER_32+0x1b/0x20 [ 852.038464][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 852.045031][T11964] RIP: 0023:0xf7fc5549 [ 852.049246][T11964] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 852.069063][T11964] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 852.077753][T11964] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 852.085879][T11964] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 852.093985][T11964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 852.102077][T11964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.110164][T11964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 852.118295][T11964] [ 852.122336][T11964] Uninit was stored to memory at: [ 852.128159][T11964] __get_compat_msghdr+0x514/0x750 [ 852.133603][T11964] get_compat_msghdr+0x8c/0x1c0 [ 852.138653][T11964] ___sys_recvmsg+0x19d/0x890 [ 852.143593][T11964] do_recvmmsg+0x63a/0x10a0 [ 852.148255][T11964] __sys_recvmmsg+0x113/0x450 [ 852.153202][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 852.159641][T11964] __do_fast_syscall_32+0x87/0xe0 [ 852.164938][T11964] do_fast_syscall_32+0x33/0x70 [ 852.169952][T11964] do_SYSENTER_32+0x1b/0x20 [ 852.174730][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 852.181299][T11964] [ 852.183809][T11964] Uninit was stored to memory at: [ 852.189050][T11964] __get_compat_msghdr+0x514/0x750 [ 852.194481][T11964] get_compat_msghdr+0x8c/0x1c0 [ 852.199539][T11964] ___sys_recvmsg+0x19d/0x890 [ 852.204513][T11964] do_recvmmsg+0x63a/0x10a0 [ 852.209164][T11964] __sys_recvmmsg+0x113/0x450 [ 852.214118][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 852.220553][T11964] __do_fast_syscall_32+0x87/0xe0 [ 852.225853][T11964] do_fast_syscall_32+0x33/0x70 [ 852.230866][T11964] do_SYSENTER_32+0x1b/0x20 [ 852.235628][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 852.242290][T11964] [ 852.244702][T11964] Uninit was stored to memory at: [ 852.249952][T11964] __get_compat_msghdr+0x514/0x750 [ 852.255369][T11964] get_compat_msghdr+0x8c/0x1c0 [ 852.260415][T11964] ___sys_recvmsg+0x19d/0x890 [ 852.265363][T11964] do_recvmmsg+0x63a/0x10a0 [ 852.270014][T11964] __sys_recvmmsg+0x113/0x450 [ 852.274946][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 852.281365][T11964] __do_fast_syscall_32+0x87/0xe0 [ 852.286658][T11964] do_fast_syscall_32+0x33/0x70 [ 852.291665][T11964] do_SYSENTER_32+0x1b/0x20 [ 852.296407][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 852.303088][T11964] [ 852.305505][T11964] Uninit was stored to memory at: [ 852.310755][T11964] __get_compat_msghdr+0x514/0x750 [ 852.316180][T11964] get_compat_msghdr+0x8c/0x1c0 [ 852.321257][T11964] ___sys_recvmsg+0x19d/0x890 [ 852.326198][T11964] do_recvmmsg+0x63a/0x10a0 [ 852.330953][T11964] __sys_recvmmsg+0x113/0x450 [ 852.335894][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 852.342419][T11964] __do_fast_syscall_32+0x87/0xe0 [ 852.347617][T11964] do_fast_syscall_32+0x33/0x70 [ 852.352728][T11964] do_SYSENTER_32+0x1b/0x20 [ 852.357381][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 852.364037][T11964] [ 852.366444][T11964] Uninit was stored to memory at: [ 852.371696][T11964] __get_compat_msghdr+0x514/0x750 [ 852.377119][T11964] get_compat_msghdr+0x8c/0x1c0 [ 852.382289][T11964] ___sys_recvmsg+0x19d/0x890 [ 852.387125][T11964] do_recvmmsg+0x63a/0x10a0 [ 852.391864][T11964] __sys_recvmmsg+0x113/0x450 [ 852.396691][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 852.403213][T11964] __do_fast_syscall_32+0x87/0xe0 [ 852.408403][T11964] do_fast_syscall_32+0x33/0x70 [ 852.413521][T11964] do_SYSENTER_32+0x1b/0x20 [ 852.418188][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 852.424855][T11964] [ 852.427265][T11964] Uninit was stored to memory at: [ 852.432620][T11964] __get_compat_msghdr+0x514/0x750 [ 852.437932][T11964] get_compat_msghdr+0x8c/0x1c0 [ 852.443092][T11964] ___sys_recvmsg+0x19d/0x890 [ 852.447936][T11964] do_recvmmsg+0x63a/0x10a0 [ 852.452701][T11964] __sys_recvmmsg+0x113/0x450 [ 852.457534][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 852.464062][T11964] __do_fast_syscall_32+0x87/0xe0 [ 852.469254][T11964] do_fast_syscall_32+0x33/0x70 [ 852.474365][T11964] do_SYSENTER_32+0x1b/0x20 [ 852.479015][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 852.485679][T11964] [ 852.488087][T11964] Uninit was stored to memory at: [ 852.493444][T11964] __get_compat_msghdr+0x514/0x750 [ 852.498766][T11964] get_compat_msghdr+0x8c/0x1c0 [ 852.503927][T11964] ___sys_recvmsg+0x19d/0x890 [ 852.508767][T11964] do_recvmmsg+0x63a/0x10a0 [ 852.513524][T11964] __sys_recvmmsg+0x113/0x450 [ 852.518356][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 852.524882][T11964] __do_fast_syscall_32+0x87/0xe0 [ 852.530084][T11964] do_fast_syscall_32+0x33/0x70 [ 852.535207][T11964] do_SYSENTER_32+0x1b/0x20 [ 852.539953][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 852.546601][T11964] [ 852.549007][T11964] Local variable msg_sys created at: [ 852.554491][T11964] do_recvmmsg+0x5f/0x10a0 [ 852.559062][T11964] __sys_recvmmsg+0x113/0x450 [ 853.926249][T11964] not chained 280000 origins [ 853.930986][T11964] CPU: 1 PID: 11964 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 853.941661][T11964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 853.951854][T11964] Call Trace: [ 853.955224][T11964] [ 853.958259][T11964] dump_stack_lvl+0x1c8/0x256 [ 853.963160][T11964] dump_stack+0x1a/0x1c [ 853.967598][T11964] kmsan_internal_chain_origin+0x78/0x120 [ 853.973500][T11964] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 853.979752][T11964] ? kmsan_get_metadata+0x33/0x220 [ 853.985038][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 853.991471][T11964] ? kmsan_get_metadata+0x33/0x220 [ 853.996759][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 854.002761][T11964] ? kmsan_get_metadata+0x33/0x220 [ 854.008052][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 854.014058][T11964] ? __get_compat_msghdr+0x5b/0x750 [ 854.019474][T11964] ? kmsan_get_metadata+0x33/0x220 [ 854.024767][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 854.030767][T11964] ? should_fail+0x3f/0x810 [ 854.035453][T11964] ? __stack_depot_save+0x21/0x4b0 [ 854.040739][T11964] ? kmsan_get_metadata+0x33/0x220 [ 854.046041][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 854.052479][T11964] ? kmsan_get_metadata+0x33/0x220 [ 854.057768][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 854.063868][T11964] __msan_chain_origin+0xbd/0x140 [ 854.069080][T11964] __get_compat_msghdr+0x514/0x750 [ 854.074437][T11964] get_compat_msghdr+0x8c/0x1c0 [ 854.079501][T11964] ? ___sys_recvmsg+0xa9/0x890 [ 854.084424][T11964] ? do_recvmmsg+0x63a/0x10a0 [ 854.089259][T11964] ___sys_recvmsg+0x19d/0x890 [ 854.094111][T11964] ? __schedule+0x1609/0x21d0 [ 854.098964][T11964] ? kmsan_get_metadata+0x33/0x220 [ 854.104257][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 854.110254][T11964] ? kmsan_get_metadata+0x33/0x220 [ 854.115546][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 854.121555][T11964] do_recvmmsg+0x63a/0x10a0 [ 854.126243][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 854.132691][T11964] ? __sys_recvmmsg+0x52/0x450 [ 854.137626][T11964] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 854.144230][T11964] __sys_recvmmsg+0x113/0x450 [ 854.149068][T11964] ? kmsan_get_metadata+0x33/0x220 [ 854.154381][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 854.160822][T11964] __do_fast_syscall_32+0x87/0xe0 [ 854.166021][T11964] do_fast_syscall_32+0x33/0x70 [ 854.171033][T11964] do_SYSENTER_32+0x1b/0x20 [ 854.175688][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 854.182246][T11964] RIP: 0023:0xf7fc5549 [ 854.186445][T11964] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 854.206425][T11964] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 854.215012][T11964] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 854.223299][T11964] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 854.231406][T11964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 854.239515][T11964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.247655][T11964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 854.255792][T11964] [ 854.262544][T11964] Uninit was stored to memory at: [ 854.267811][T11964] __get_compat_msghdr+0x514/0x750 [ 854.273458][T11964] get_compat_msghdr+0x8c/0x1c0 [ 854.278519][T11964] ___sys_recvmsg+0x19d/0x890 [ 854.283455][T11964] do_recvmmsg+0x63a/0x10a0 [ 854.288107][T11964] __sys_recvmmsg+0x113/0x450 [ 854.293022][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 854.299461][T11964] __do_fast_syscall_32+0x87/0xe0 [ 854.304740][T11964] do_fast_syscall_32+0x33/0x70 [ 854.309742][T11964] do_SYSENTER_32+0x1b/0x20 [ 854.314506][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 854.321063][T11964] [ 854.323571][T11964] Uninit was stored to memory at: [ 854.328815][T11964] __get_compat_msghdr+0x514/0x750 [ 854.334220][T11964] get_compat_msghdr+0x8c/0x1c0 [ 854.339276][T11964] ___sys_recvmsg+0x19d/0x890 [ 854.344238][T11964] do_recvmmsg+0x63a/0x10a0 [ 854.348926][T11964] __sys_recvmmsg+0x113/0x450 [ 854.353859][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 854.360280][T11964] __do_fast_syscall_32+0x87/0xe0 [ 854.365569][T11964] do_fast_syscall_32+0x33/0x70 [ 854.370578][T11964] do_SYSENTER_32+0x1b/0x20 [ 854.375323][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 854.381970][T11964] [ 854.384375][T11964] Uninit was stored to memory at: [ 854.389631][T11964] __get_compat_msghdr+0x514/0x750 [ 854.395054][T11964] get_compat_msghdr+0x8c/0x1c0 [ 854.400110][T11964] ___sys_recvmsg+0x19d/0x890 [ 854.405041][T11964] do_recvmmsg+0x63a/0x10a0 [ 854.409702][T11964] __sys_recvmmsg+0x113/0x450 [ 854.414631][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 854.421056][T11964] __do_fast_syscall_32+0x87/0xe0 [ 854.426351][T11964] do_fast_syscall_32+0x33/0x70 [ 854.431363][T11964] do_SYSENTER_32+0x1b/0x20 [ 854.436116][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 854.442779][T11964] [ 854.445189][T11964] Uninit was stored to memory at: [ 854.450447][T11964] __get_compat_msghdr+0x514/0x750 [ 854.455866][T11964] get_compat_msghdr+0x8c/0x1c0 [ 854.460933][T11964] ___sys_recvmsg+0x19d/0x890 [ 854.465979][T11964] do_recvmmsg+0x63a/0x10a0 [ 854.470640][T11964] __sys_recvmmsg+0x113/0x450 [ 854.475647][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 854.482167][T11964] __do_fast_syscall_32+0x87/0xe0 [ 854.487368][T11964] do_fast_syscall_32+0x33/0x70 [ 854.492551][T11964] do_SYSENTER_32+0x1b/0x20 [ 854.497211][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 854.503935][T11964] [ 854.506339][T11964] Uninit was stored to memory at: [ 854.511580][T11964] __get_compat_msghdr+0x514/0x750 [ 854.517030][T11964] get_compat_msghdr+0x8c/0x1c0 [ 854.522172][T11964] ___sys_recvmsg+0x19d/0x890 [ 854.527037][T11964] do_recvmmsg+0x63a/0x10a0 [ 854.531690][T11964] __sys_recvmmsg+0x113/0x450 [ 854.536659][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 854.543168][T11964] __do_fast_syscall_32+0x87/0xe0 [ 854.548364][T11964] do_fast_syscall_32+0x33/0x70 [ 854.553515][T11964] do_SYSENTER_32+0x1b/0x20 [ 854.558178][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 854.564903][T11964] [ 854.567315][T11964] Uninit was stored to memory at: [ 854.572657][T11964] __get_compat_msghdr+0x514/0x750 [ 854.577967][T11964] get_compat_msghdr+0x8c/0x1c0 [ 854.583162][T11964] ___sys_recvmsg+0x19d/0x890 [ 854.587998][T11964] do_recvmmsg+0x63a/0x10a0 [ 854.592812][T11964] __sys_recvmmsg+0x113/0x450 [ 854.597644][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 854.604231][T11964] __do_fast_syscall_32+0x87/0xe0 [ 854.609421][T11964] do_fast_syscall_32+0x33/0x70 [ 854.614515][T11964] do_SYSENTER_32+0x1b/0x20 [ 854.619169][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 854.625877][T11964] [ 854.628283][T11964] Uninit was stored to memory at: [ 854.633626][T11964] __get_compat_msghdr+0x514/0x750 [ 854.638938][T11964] get_compat_msghdr+0x8c/0x1c0 [ 854.644160][T11964] ___sys_recvmsg+0x19d/0x890 [ 854.649001][T11964] do_recvmmsg+0x63a/0x10a0 [ 854.653804][T11964] __sys_recvmmsg+0x113/0x450 [ 854.658635][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 854.665151][T11964] __do_fast_syscall_32+0x87/0xe0 [ 854.670346][T11964] do_fast_syscall_32+0x33/0x70 [ 854.675442][T11964] do_SYSENTER_32+0x1b/0x20 [ 854.680104][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 854.686825][T11964] [ 854.689236][T11964] Local variable msg_sys created at: [ 854.694775][T11964] do_recvmmsg+0x5f/0x10a0 [ 854.699341][T11964] __sys_recvmmsg+0x113/0x450 [ 854.956966][T11964] not chained 290000 origins [ 854.961702][T11964] CPU: 1 PID: 11964 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 854.972375][T11964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 854.982564][T11964] Call Trace: [ 854.985936][T11964] [ 854.988955][T11964] dump_stack_lvl+0x1c8/0x256 [ 854.993849][T11964] dump_stack+0x1a/0x1c [ 854.998187][T11964] kmsan_internal_chain_origin+0x78/0x120 [ 855.004095][T11964] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 855.010352][T11964] ? kmsan_get_metadata+0x33/0x220 [ 855.015640][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 855.022086][T11964] ? kmsan_get_metadata+0x33/0x220 [ 855.027387][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 855.033395][T11964] ? kmsan_get_metadata+0x33/0x220 [ 855.038690][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 855.044690][T11964] ? __get_compat_msghdr+0x5b/0x750 [ 855.050100][T11964] ? kmsan_get_metadata+0x33/0x220 [ 855.055394][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 855.061474][T11964] ? should_fail+0x3f/0x810 [ 855.066191][T11964] ? __stack_depot_save+0x21/0x4b0 [ 855.071503][T11964] ? kmsan_get_metadata+0x33/0x220 [ 855.076797][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 855.083245][T11964] ? kmsan_get_metadata+0x33/0x220 [ 855.088551][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 855.094569][T11964] __msan_chain_origin+0xbd/0x140 [ 855.099788][T11964] __get_compat_msghdr+0x514/0x750 [ 855.105145][T11964] get_compat_msghdr+0x8c/0x1c0 [ 855.110202][T11964] ? ___sys_recvmsg+0xa9/0x890 [ 855.115121][T11964] ? do_recvmmsg+0x63a/0x10a0 [ 855.119959][T11964] ___sys_recvmsg+0x19d/0x890 [ 855.124811][T11964] ? __schedule+0x1609/0x21d0 [ 855.129678][T11964] ? kmsan_get_metadata+0x33/0x220 [ 855.135005][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 855.141012][T11964] ? kmsan_get_metadata+0x33/0x220 [ 855.146315][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 855.152337][T11964] do_recvmmsg+0x63a/0x10a0 [ 855.157041][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 855.163506][T11964] ? __sys_recvmmsg+0x52/0x450 [ 855.168727][T11964] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 855.175350][T11964] __sys_recvmmsg+0x113/0x450 [ 855.180193][T11964] ? kmsan_get_metadata+0x33/0x220 [ 855.185514][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 855.191952][T11964] __do_fast_syscall_32+0x87/0xe0 [ 855.197146][T11964] do_fast_syscall_32+0x33/0x70 [ 855.202183][T11964] do_SYSENTER_32+0x1b/0x20 [ 855.206843][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 855.213399][T11964] RIP: 0023:0xf7fc5549 [ 855.217592][T11964] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 855.237665][T11964] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 855.246258][T11964] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 855.254377][T11964] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 855.262483][T11964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 855.270586][T11964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.278694][T11964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 855.286826][T11964] [ 855.293319][T11964] Uninit was stored to memory at: [ 855.298589][T11964] __get_compat_msghdr+0x514/0x750 [ 855.304244][T11964] get_compat_msghdr+0x8c/0x1c0 [ 855.309314][T11964] ___sys_recvmsg+0x19d/0x890 [ 855.314347][T11964] do_recvmmsg+0x63a/0x10a0 [ 855.319009][T11964] __sys_recvmmsg+0x113/0x450 [ 855.323933][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 855.330352][T11964] __do_fast_syscall_32+0x87/0xe0 [ 855.335639][T11964] do_fast_syscall_32+0x33/0x70 [ 855.340732][T11964] do_SYSENTER_32+0x1b/0x20 [ 855.345543][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 855.352191][T11964] [ 855.354596][T11964] Uninit was stored to memory at: [ 855.359840][T11964] __get_compat_msghdr+0x514/0x750 [ 855.365309][T11964] get_compat_msghdr+0x8c/0x1c0 [ 855.370356][T11964] ___sys_recvmsg+0x19d/0x890 [ 855.375348][T11964] do_recvmmsg+0x63a/0x10a0 [ 855.380004][T11964] __sys_recvmmsg+0x113/0x450 [ 855.384997][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 855.391416][T11964] __do_fast_syscall_32+0x87/0xe0 [ 855.396754][T11964] do_fast_syscall_32+0x33/0x70 [ 855.401844][T11964] do_SYSENTER_32+0x1b/0x20 [ 855.406494][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 855.413187][T11964] [ 855.415587][T11964] Uninit was stored to memory at: [ 855.420820][T11964] __get_compat_msghdr+0x514/0x750 [ 855.426275][T11964] get_compat_msghdr+0x8c/0x1c0 [ 855.431321][T11964] ___sys_recvmsg+0x19d/0x890 [ 855.436287][T11964] do_recvmmsg+0x63a/0x10a0 [ 855.440955][T11964] __sys_recvmmsg+0x113/0x450 [ 855.445936][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 855.452435][T11964] __do_fast_syscall_32+0x87/0xe0 [ 855.457615][T11964] do_fast_syscall_32+0x33/0x70 [ 855.462750][T11964] do_SYSENTER_32+0x1b/0x20 [ 855.467397][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 855.474031][T11964] [ 855.476429][T11964] Uninit was stored to memory at: [ 855.481690][T11964] __get_compat_msghdr+0x514/0x750 [ 855.487146][T11964] get_compat_msghdr+0x8c/0x1c0 [ 855.492344][T11964] ___sys_recvmsg+0x19d/0x890 [ 855.497173][T11964] do_recvmmsg+0x63a/0x10a0 [ 855.501970][T11964] __sys_recvmmsg+0x113/0x450 [ 855.506799][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 855.513373][T11964] __do_fast_syscall_32+0x87/0xe0 [ 855.518565][T11964] do_fast_syscall_32+0x33/0x70 [ 855.523713][T11964] do_SYSENTER_32+0x1b/0x20 [ 855.528365][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 855.535024][T11964] [ 855.537431][T11964] Uninit was stored to memory at: [ 855.542820][T11964] __get_compat_msghdr+0x514/0x750 [ 855.548139][T11964] get_compat_msghdr+0x8c/0x1c0 [ 855.553299][T11964] ___sys_recvmsg+0x19d/0x890 [ 855.558128][T11964] do_recvmmsg+0x63a/0x10a0 [ 855.562943][T11964] __sys_recvmmsg+0x113/0x450 [ 855.567776][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 855.574386][T11964] __do_fast_syscall_32+0x87/0xe0 [ 855.579569][T11964] do_fast_syscall_32+0x33/0x70 [ 855.584728][T11964] do_SYSENTER_32+0x1b/0x20 [ 855.589387][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 855.596100][T11964] [ 855.598518][T11964] Uninit was stored to memory at: [ 855.603915][T11964] __get_compat_msghdr+0x514/0x750 [ 855.609224][T11964] get_compat_msghdr+0x8c/0x1c0 [ 855.614383][T11964] ___sys_recvmsg+0x19d/0x890 [ 855.619214][T11964] do_recvmmsg+0x63a/0x10a0 [ 855.624039][T11964] __sys_recvmmsg+0x113/0x450 [ 855.628873][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 855.635453][T11964] __do_fast_syscall_32+0x87/0xe0 [ 855.640637][T11964] do_fast_syscall_32+0x33/0x70 [ 855.645803][T11964] do_SYSENTER_32+0x1b/0x20 [ 855.650458][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 855.657167][T11964] [ 855.659569][T11964] Uninit was stored to memory at: [ 855.664913][T11964] __get_compat_msghdr+0x514/0x750 [ 855.670225][T11964] get_compat_msghdr+0x8c/0x1c0 [ 855.675460][T11964] ___sys_recvmsg+0x19d/0x890 [ 855.680301][T11964] do_recvmmsg+0x63a/0x10a0 [ 855.685120][T11964] __sys_recvmmsg+0x113/0x450 [ 855.689958][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 855.696489][T11964] __do_fast_syscall_32+0x87/0xe0 [ 855.701679][T11964] do_fast_syscall_32+0x33/0x70 [ 855.706830][T11964] do_SYSENTER_32+0x1b/0x20 [ 855.711579][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 855.718400][T11964] [ 855.720802][T11964] Local variable msg_sys created at: [ 855.726339][T11964] do_recvmmsg+0x5f/0x10a0 [ 855.730905][T11964] __sys_recvmmsg+0x113/0x450 [ 856.430313][T11964] not chained 300000 origins [ 856.435392][T11964] CPU: 0 PID: 11964 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 856.446070][T11964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 856.456259][T11964] Call Trace: [ 856.459634][T11964] [ 856.462656][T11964] dump_stack_lvl+0x1c8/0x256 [ 856.467555][T11964] dump_stack+0x1a/0x1c [ 856.471887][T11964] kmsan_internal_chain_origin+0x78/0x120 [ 856.477797][T11964] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 856.484046][T11964] ? kmsan_get_metadata+0x33/0x220 [ 856.489351][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 856.495791][T11964] ? kmsan_get_metadata+0x33/0x220 [ 856.501080][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 856.507083][T11964] ? kmsan_get_metadata+0x33/0x220 [ 856.512372][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 856.518364][T11964] ? __get_compat_msghdr+0x5b/0x750 [ 856.523764][T11964] ? kmsan_get_metadata+0x33/0x220 [ 856.529053][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 856.535052][T11964] ? should_fail+0x3f/0x810 [ 856.539727][T11964] ? __stack_depot_save+0x21/0x4b0 [ 856.545012][T11964] ? kmsan_get_metadata+0x33/0x220 [ 856.550299][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 856.556744][T11964] ? kmsan_get_metadata+0x33/0x220 [ 856.562026][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 856.568019][T11964] __msan_chain_origin+0xbd/0x140 [ 856.573219][T11964] __get_compat_msghdr+0x514/0x750 [ 856.578575][T11964] get_compat_msghdr+0x8c/0x1c0 [ 856.583645][T11964] ? ___sys_recvmsg+0xa9/0x890 [ 856.588564][T11964] ? do_recvmmsg+0x63a/0x10a0 [ 856.593407][T11964] ___sys_recvmsg+0x19d/0x890 [ 856.598257][T11964] ? __schedule+0x1609/0x21d0 [ 856.603108][T11964] ? kmsan_get_metadata+0x33/0x220 [ 856.608400][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 856.614400][T11964] ? kmsan_get_metadata+0x33/0x220 [ 856.619685][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 856.625685][T11964] do_recvmmsg+0x63a/0x10a0 [ 856.630380][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 856.636825][T11964] ? __sys_recvmmsg+0x52/0x450 [ 856.641911][T11964] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 856.648510][T11964] __sys_recvmmsg+0x113/0x450 [ 856.653349][T11964] ? kmsan_get_metadata+0x33/0x220 [ 856.658656][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 856.665093][T11964] __do_fast_syscall_32+0x87/0xe0 [ 856.670291][T11964] do_fast_syscall_32+0x33/0x70 [ 856.675394][T11964] do_SYSENTER_32+0x1b/0x20 [ 856.680050][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 856.686605][T11964] RIP: 0023:0xf7fc5549 [ 856.690789][T11964] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 856.710597][T11964] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 856.719181][T11964] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 856.727292][T11964] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 856.735399][T11964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 856.743506][T11964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.751606][T11964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 856.759737][T11964] [ 856.767564][T11964] Uninit was stored to memory at: [ 856.773289][T11964] __get_compat_msghdr+0x514/0x750 [ 856.778610][T11964] get_compat_msghdr+0x8c/0x1c0 [ 856.783780][T11964] ___sys_recvmsg+0x19d/0x890 [ 856.788618][T11964] do_recvmmsg+0x63a/0x10a0 [ 856.793393][T11964] __sys_recvmmsg+0x113/0x450 [ 856.798222][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 856.804791][T11964] __do_fast_syscall_32+0x87/0xe0 [ 856.810002][T11964] do_fast_syscall_32+0x33/0x70 [ 856.815152][T11964] do_SYSENTER_32+0x1b/0x20 [ 856.819815][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 856.826505][T11964] [ 856.828912][T11964] Uninit was stored to memory at: [ 856.834285][T11964] __get_compat_msghdr+0x514/0x750 [ 856.839604][T11964] get_compat_msghdr+0x8c/0x1c0 [ 856.844777][T11964] ___sys_recvmsg+0x19d/0x890 [ 856.849603][T11964] do_recvmmsg+0x63a/0x10a0 [ 856.854384][T11964] __sys_recvmmsg+0x113/0x450 [ 856.859221][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 856.865792][T11964] __do_fast_syscall_32+0x87/0xe0 [ 856.871073][T11964] do_fast_syscall_32+0x33/0x70 [ 856.876215][T11964] do_SYSENTER_32+0x1b/0x20 [ 856.880879][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 856.887568][T11964] [ 856.889969][T11964] Uninit was stored to memory at: [ 856.895369][T11964] __get_compat_msghdr+0x514/0x750 [ 856.900687][T11964] get_compat_msghdr+0x8c/0x1c0 [ 856.905853][T11964] ___sys_recvmsg+0x19d/0x890 [ 856.910684][T11964] do_recvmmsg+0x63a/0x10a0 [ 856.915475][T11964] __sys_recvmmsg+0x113/0x450 [ 856.920307][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 856.927025][T11964] __do_fast_syscall_32+0x87/0xe0 [ 856.932330][T11964] do_fast_syscall_32+0x33/0x70 [ 856.937431][T11964] do_SYSENTER_32+0x1b/0x20 [ 856.942209][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 856.948778][T11964] [ 856.951190][T11964] Uninit was stored to memory at: [ 856.956598][T11964] __get_compat_msghdr+0x514/0x750 [ 856.962034][T11964] get_compat_msghdr+0x8c/0x1c0 [ 856.967096][T11964] ___sys_recvmsg+0x19d/0x890 [ 856.972057][T11964] do_recvmmsg+0x63a/0x10a0 [ 856.976708][T11964] __sys_recvmmsg+0x113/0x450 [ 856.981541][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 856.988109][T11964] __do_fast_syscall_32+0x87/0xe0 [ 856.993423][T11964] do_fast_syscall_32+0x33/0x70 [ 856.998436][T11964] do_SYSENTER_32+0x1b/0x20 [ 857.003294][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 857.009870][T11964] [ 857.012421][T11964] Uninit was stored to memory at: [ 857.017679][T11964] __get_compat_msghdr+0x514/0x750 [ 857.023122][T11964] get_compat_msghdr+0x8c/0x1c0 [ 857.028173][T11964] ___sys_recvmsg+0x19d/0x890 [ 857.033145][T11964] do_recvmmsg+0x63a/0x10a0 [ 857.037806][T11964] __sys_recvmmsg+0x113/0x450 [ 857.042783][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 857.049195][T11964] __do_fast_syscall_32+0x87/0xe0 [ 857.054500][T11964] do_fast_syscall_32+0x33/0x70 [ 857.059506][T11964] do_SYSENTER_32+0x1b/0x20 [ 857.064314][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 857.070894][T11964] [ 857.073420][T11964] Uninit was stored to memory at: [ 857.078664][T11964] __get_compat_msghdr+0x514/0x750 [ 857.084105][T11964] get_compat_msghdr+0x8c/0x1c0 [ 857.089161][T11964] ___sys_recvmsg+0x19d/0x890 [ 857.094133][T11964] do_recvmmsg+0x63a/0x10a0 [ 857.098795][T11964] __sys_recvmmsg+0x113/0x450 [ 857.103750][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 857.110167][T11964] __do_fast_syscall_32+0x87/0xe0 [ 857.115480][T11964] do_fast_syscall_32+0x33/0x70 [ 857.120484][T11964] do_SYSENTER_32+0x1b/0x20 [ 857.125258][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 857.131947][T11964] [ 857.134351][T11964] Uninit was stored to memory at: [ 857.139596][T11964] __get_compat_msghdr+0x514/0x750 [ 857.145047][T11964] get_compat_msghdr+0x8c/0x1c0 [ 857.150112][T11964] ___sys_recvmsg+0x19d/0x890 [ 857.155170][T11964] do_recvmmsg+0x63a/0x10a0 [ 857.159834][T11964] __sys_recvmmsg+0x113/0x450 [ 857.164800][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 857.171220][T11964] __do_fast_syscall_32+0x87/0xe0 [ 857.176551][T11964] do_fast_syscall_32+0x33/0x70 [ 857.181557][T11964] do_SYSENTER_32+0x1b/0x20 [ 857.186346][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 857.193048][T11964] [ 857.195454][T11964] Local variable msg_sys created at: [ 857.200832][T11964] do_recvmmsg+0x5f/0x10a0 [ 857.205616][T11964] __sys_recvmmsg+0x113/0x450 [ 857.600573][T11964] not chained 310000 origins [ 857.605544][T11964] CPU: 1 PID: 11964 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 857.616225][T11964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 857.626415][T11964] Call Trace: [ 857.629799][T11964] [ 857.632828][T11964] dump_stack_lvl+0x1c8/0x256 [ 857.637719][T11964] dump_stack+0x1a/0x1c [ 857.642063][T11964] kmsan_internal_chain_origin+0x78/0x120 [ 857.647958][T11964] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 857.654214][T11964] ? kmsan_get_metadata+0x33/0x220 [ 857.659501][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 857.665929][T11964] ? kmsan_get_metadata+0x33/0x220 [ 857.671212][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 857.677204][T11964] ? kmsan_get_metadata+0x33/0x220 [ 857.682496][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 857.688487][T11964] ? __get_compat_msghdr+0x5b/0x750 [ 857.693890][T11964] ? kmsan_get_metadata+0x33/0x220 [ 857.699178][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 857.705207][T11964] ? should_fail+0x3f/0x810 [ 857.709970][T11964] ? __stack_depot_save+0x21/0x4b0 [ 857.715251][T11964] ? kmsan_get_metadata+0x33/0x220 [ 857.720586][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 857.727039][T11964] ? kmsan_get_metadata+0x33/0x220 [ 857.732331][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 857.738336][T11964] __msan_chain_origin+0xbd/0x140 [ 857.743550][T11964] __get_compat_msghdr+0x514/0x750 [ 857.748900][T11964] get_compat_msghdr+0x8c/0x1c0 [ 857.753955][T11964] ? ___sys_recvmsg+0xa9/0x890 [ 857.758876][T11964] ? do_recvmmsg+0x63a/0x10a0 [ 857.763717][T11964] ___sys_recvmsg+0x19d/0x890 [ 857.768572][T11964] ? __schedule+0x1609/0x21d0 [ 857.773417][T11964] ? kmsan_get_metadata+0x33/0x220 [ 857.778705][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 857.784705][T11964] ? kmsan_get_metadata+0x33/0x220 [ 857.789996][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 857.795999][T11964] do_recvmmsg+0x63a/0x10a0 [ 857.800687][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 857.807130][T11964] ? __sys_recvmmsg+0x52/0x450 [ 857.812068][T11964] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 857.818672][T11964] __sys_recvmmsg+0x113/0x450 [ 857.823510][T11964] ? kmsan_get_metadata+0x33/0x220 [ 857.828816][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 857.835252][T11964] __do_fast_syscall_32+0x87/0xe0 [ 857.840470][T11964] do_fast_syscall_32+0x33/0x70 [ 857.845499][T11964] do_SYSENTER_32+0x1b/0x20 [ 857.850163][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 857.856735][T11964] RIP: 0023:0xf7fc5549 [ 857.860926][T11964] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 857.880711][T11964] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 857.889233][T11964] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 857.897309][T11964] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 857.905408][T11964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 857.913609][T11964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.921771][T11964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 857.929872][T11964] [ 857.940675][T11964] Uninit was stored to memory at: [ 857.947299][T11964] __get_compat_msghdr+0x514/0x750 [ 857.952719][T11964] get_compat_msghdr+0x8c/0x1c0 [ 857.957788][T11964] ___sys_recvmsg+0x19d/0x890 [ 857.962719][T11964] do_recvmmsg+0x63a/0x10a0 [ 857.967467][T11964] __sys_recvmmsg+0x113/0x450 [ 857.972470][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 857.978894][T11964] __do_fast_syscall_32+0x87/0xe0 [ 857.984170][T11964] do_fast_syscall_32+0x33/0x70 [ 857.989179][T11964] do_SYSENTER_32+0x1b/0x20 [ 857.993930][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 858.000489][T11964] [ 858.002983][T11964] Uninit was stored to memory at: [ 858.008230][T11964] __get_compat_msghdr+0x514/0x750 [ 858.013652][T11964] get_compat_msghdr+0x8c/0x1c0 [ 858.018711][T11964] ___sys_recvmsg+0x19d/0x890 [ 858.023641][T11964] do_recvmmsg+0x63a/0x10a0 [ 858.028355][T11964] __sys_recvmmsg+0x113/0x450 [ 858.033425][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.039889][T11964] __do_fast_syscall_32+0x87/0xe0 [ 858.045277][T11964] do_fast_syscall_32+0x33/0x70 [ 858.050288][T11964] do_SYSENTER_32+0x1b/0x20 [ 858.055024][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 858.061576][T11964] [ 858.064065][T11964] Uninit was stored to memory at: [ 858.069305][T11964] __get_compat_msghdr+0x514/0x750 [ 858.074821][T11964] get_compat_msghdr+0x8c/0x1c0 [ 858.079888][T11964] ___sys_recvmsg+0x19d/0x890 [ 858.084922][T11964] do_recvmmsg+0x63a/0x10a0 [ 858.089619][T11964] __sys_recvmmsg+0x113/0x450 [ 858.094628][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.101061][T11964] __do_fast_syscall_32+0x87/0xe0 [ 858.106416][T11964] do_fast_syscall_32+0x33/0x70 [ 858.111420][T11964] do_SYSENTER_32+0x1b/0x20 [ 858.116241][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 858.122912][T11964] [ 858.125317][T11964] Uninit was stored to memory at: [ 858.130563][T11964] __get_compat_msghdr+0x514/0x750 [ 858.136036][T11964] get_compat_msghdr+0x8c/0x1c0 [ 858.141095][T11964] ___sys_recvmsg+0x19d/0x890 [ 858.146022][T11964] do_recvmmsg+0x63a/0x10a0 [ 858.150712][T11964] __sys_recvmmsg+0x113/0x450 [ 858.155714][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.162245][T11964] __do_fast_syscall_32+0x87/0xe0 [ 858.167441][T11964] do_fast_syscall_32+0x33/0x70 [ 858.172594][T11964] do_SYSENTER_32+0x1b/0x20 [ 858.177251][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 858.183906][T11964] [ 858.186316][T11964] Uninit was stored to memory at: [ 858.191566][T11964] __get_compat_msghdr+0x514/0x750 [ 858.197050][T11964] get_compat_msghdr+0x8c/0x1c0 [ 858.202260][T11964] ___sys_recvmsg+0x19d/0x890 [ 858.207104][T11964] do_recvmmsg+0x63a/0x10a0 [ 858.211860][T11964] __sys_recvmmsg+0x113/0x450 [ 858.222136][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.228568][T11964] __do_fast_syscall_32+0x87/0xe0 [ 858.233926][T11964] do_fast_syscall_32+0x33/0x70 [ 858.238936][T11964] do_SYSENTER_32+0x1b/0x20 [ 858.243690][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 858.250242][T11964] [ 858.252768][T11964] Uninit was stored to memory at: [ 858.258035][T11964] __get_compat_msghdr+0x514/0x750 [ 858.263522][T11964] get_compat_msghdr+0x8c/0x1c0 [ 858.268587][T11964] ___sys_recvmsg+0x19d/0x890 [ 858.273576][T11964] do_recvmmsg+0x63a/0x10a0 [ 858.278238][T11964] __sys_recvmmsg+0x113/0x450 [ 858.283247][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.289685][T11964] __do_fast_syscall_32+0x87/0xe0 [ 858.294941][T11964] do_fast_syscall_32+0x33/0x70 [ 858.299948][T11964] do_SYSENTER_32+0x1b/0x20 [ 858.304718][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 858.311248][T11964] [ 858.313784][T11964] Uninit was stored to memory at: [ 858.319073][T11964] __get_compat_msghdr+0x514/0x750 [ 858.324557][T11964] get_compat_msghdr+0x8c/0x1c0 [ 858.329613][T11964] ___sys_recvmsg+0x19d/0x890 [ 858.334556][T11964] do_recvmmsg+0x63a/0x10a0 [ 858.339218][T11964] __sys_recvmmsg+0x113/0x450 [ 858.344198][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.350717][T11964] __do_fast_syscall_32+0x87/0xe0 [ 858.356057][T11964] do_fast_syscall_32+0x33/0x70 [ 858.361073][T11964] do_SYSENTER_32+0x1b/0x20 [ 858.365990][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 858.372726][T11964] [ 858.375131][T11964] Local variable msg_sys created at: [ 858.380510][T11964] do_recvmmsg+0x5f/0x10a0 [ 858.385187][T11964] __sys_recvmmsg+0x113/0x450 [ 858.617098][T11964] not chained 320000 origins [ 858.622098][T11964] CPU: 0 PID: 11964 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 858.632932][T11964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 858.643057][T11964] Call Trace: [ 858.646389][T11964] [ 858.649646][T11964] dump_stack_lvl+0x1c8/0x256 [ 858.654525][T11964] dump_stack+0x1a/0x1c [ 858.658792][T11964] kmsan_internal_chain_origin+0x78/0x120 [ 858.664610][T11964] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 858.670783][T11964] ? kmsan_get_metadata+0x33/0x220 [ 858.676017][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 858.682431][T11964] ? kmsan_get_metadata+0x33/0x220 [ 858.687640][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 858.693546][T11964] ? kmsan_get_metadata+0x33/0x220 [ 858.698757][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 858.704667][T11964] ? __get_compat_msghdr+0x5b/0x750 [ 858.709993][T11964] ? kmsan_get_metadata+0x33/0x220 [ 858.715192][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 858.721121][T11964] ? should_fail+0x3f/0x810 [ 858.725747][T11964] ? __stack_depot_save+0x21/0x4b0 [ 858.731041][T11964] ? kmsan_get_metadata+0x33/0x220 [ 858.736308][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 858.742654][T11964] ? kmsan_get_metadata+0x33/0x220 [ 858.747874][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 858.753818][T11964] __msan_chain_origin+0xbd/0x140 [ 858.759002][T11964] __get_compat_msghdr+0x514/0x750 [ 858.764247][T11964] get_compat_msghdr+0x8c/0x1c0 [ 858.769206][T11964] ? ___sys_recvmsg+0xa9/0x890 [ 858.774070][T11964] ? do_recvmmsg+0x63a/0x10a0 [ 858.778911][T11964] ___sys_recvmsg+0x19d/0x890 [ 858.783730][T11964] ? __schedule+0x1609/0x21d0 [ 858.788503][T11964] ? kmsan_get_metadata+0x33/0x220 [ 858.793708][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 858.799618][T11964] ? kmsan_get_metadata+0x33/0x220 [ 858.804826][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 858.810740][T11964] do_recvmmsg+0x63a/0x10a0 [ 858.815362][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 858.821711][T11964] ? __sys_recvmmsg+0x52/0x450 [ 858.826627][T11964] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.833237][T11964] __sys_recvmmsg+0x113/0x450 [ 858.838000][T11964] ? kmsan_get_metadata+0x33/0x220 [ 858.843217][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.849565][T11964] __do_fast_syscall_32+0x87/0xe0 [ 858.854704][T11964] do_fast_syscall_32+0x33/0x70 [ 858.859702][T11964] do_SYSENTER_32+0x1b/0x20 [ 858.864292][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 858.870745][T11964] RIP: 0023:0xf7fc5549 [ 858.874907][T11964] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 858.894718][T11964] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 858.903223][T11964] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 858.911270][T11964] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 858.919320][T11964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 858.927644][T11964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.935815][T11964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 858.944306][T11964] [ 858.952349][T11964] Uninit was stored to memory at: [ 858.962664][T11964] __get_compat_msghdr+0x514/0x750 [ 858.967999][T11964] get_compat_msghdr+0x8c/0x1c0 [ 858.973590][T11964] ___sys_recvmsg+0x19d/0x890 [ 858.978420][T11964] do_recvmmsg+0x63a/0x10a0 [ 858.983215][T11964] __sys_recvmmsg+0x113/0x450 [ 858.988052][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.994617][T11964] __do_fast_syscall_32+0x87/0xe0 [ 858.999830][T11964] do_fast_syscall_32+0x33/0x70 [ 859.004997][T11964] do_SYSENTER_32+0x1b/0x20 [ 859.009671][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 859.016379][T11964] [ 859.018846][T11964] Uninit was stored to memory at: [ 859.024257][T11964] __get_compat_msghdr+0x514/0x750 [ 859.029549][T11964] get_compat_msghdr+0x8c/0x1c0 [ 859.034736][T11964] ___sys_recvmsg+0x19d/0x890 [ 859.039559][T11964] do_recvmmsg+0x63a/0x10a0 [ 859.044319][T11964] __sys_recvmmsg+0x113/0x450 [ 859.049135][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.055687][T11964] __do_fast_syscall_32+0x87/0xe0 [ 859.060915][T11964] do_fast_syscall_32+0x33/0x70 [ 859.066064][T11964] do_SYSENTER_32+0x1b/0x20 [ 859.070696][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 859.077320][T11964] [ 859.079709][T11964] Uninit was stored to memory at: [ 859.085122][T11964] __get_compat_msghdr+0x514/0x750 [ 859.090414][T11964] get_compat_msghdr+0x8c/0x1c0 [ 859.095540][T11964] ___sys_recvmsg+0x19d/0x890 [ 859.100716][T11964] do_recvmmsg+0x63a/0x10a0 [ 859.105496][T11964] __sys_recvmmsg+0x113/0x450 [ 859.110304][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.116863][T11964] __do_fast_syscall_32+0x87/0xe0 [ 859.122196][T11964] do_fast_syscall_32+0x33/0x70 [ 859.127279][T11964] do_SYSENTER_32+0x1b/0x20 [ 859.132174][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 859.138724][T11964] [ 859.141082][T11964] Uninit was stored to memory at: [ 859.146524][T11964] __get_compat_msghdr+0x514/0x750 [ 859.151953][T11964] get_compat_msghdr+0x8c/0x1c0 [ 859.157002][T11964] ___sys_recvmsg+0x19d/0x890 [ 859.162007][T11964] do_recvmmsg+0x63a/0x10a0 [ 859.166649][T11964] __sys_recvmmsg+0x113/0x450 [ 859.171412][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.177920][T11964] __do_fast_syscall_32+0x87/0xe0 [ 859.183238][T11964] do_fast_syscall_32+0x33/0x70 [ 859.188253][T11964] do_SYSENTER_32+0x1b/0x20 [ 859.193041][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 859.199577][T11964] [ 859.202150][T11964] Uninit was stored to memory at: [ 859.207338][T11964] __get_compat_msghdr+0x514/0x750 [ 859.212781][T11964] get_compat_msghdr+0x8c/0x1c0 [ 859.217834][T11964] ___sys_recvmsg+0x19d/0x890 [ 859.222860][T11964] do_recvmmsg+0x63a/0x10a0 [ 859.227501][T11964] __sys_recvmmsg+0x113/0x450 [ 859.232417][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.238845][T11964] __do_fast_syscall_32+0x87/0xe0 [ 859.244176][T11964] do_fast_syscall_32+0x33/0x70 [ 859.249189][T11964] do_SYSENTER_32+0x1b/0x20 [ 859.253983][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 859.260519][T11964] [ 859.263088][T11964] Uninit was stored to memory at: [ 859.268341][T11964] __get_compat_msghdr+0x514/0x750 [ 859.273945][T11964] get_compat_msghdr+0x8c/0x1c0 [ 859.279004][T11964] ___sys_recvmsg+0x19d/0x890 [ 859.284032][T11964] do_recvmmsg+0x63a/0x10a0 [ 859.288685][T11964] __sys_recvmmsg+0x113/0x450 [ 859.293645][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.300056][T11964] __do_fast_syscall_32+0x87/0xe0 [ 859.305388][T11964] do_fast_syscall_32+0x33/0x70 [ 859.310383][T11964] do_SYSENTER_32+0x1b/0x20 [ 859.315141][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 859.321679][T11964] [ 859.324244][T11964] Uninit was stored to memory at: [ 859.329518][T11964] __get_compat_msghdr+0x514/0x750 [ 859.334979][T11964] get_compat_msghdr+0x8c/0x1c0 [ 859.340006][T11964] ___sys_recvmsg+0x19d/0x890 [ 859.344977][T11964] do_recvmmsg+0x63a/0x10a0 [ 859.349617][T11964] __sys_recvmmsg+0x113/0x450 [ 859.354592][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.360987][T11964] __do_fast_syscall_32+0x87/0xe0 [ 859.366301][T11964] do_fast_syscall_32+0x33/0x70 [ 859.371384][T11964] do_SYSENTER_32+0x1b/0x20 [ 859.376143][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 859.382816][T11964] [ 859.385221][T11964] Local variable msg_sys created at: [ 859.390570][T11964] do_recvmmsg+0x5f/0x10a0 [ 859.395221][T11964] __sys_recvmmsg+0x113/0x450 [ 859.628542][T11964] not chained 330000 origins [ 859.633394][T11964] CPU: 1 PID: 11964 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 859.644074][T11964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 859.654269][T11964] Call Trace: [ 859.657643][T11964] [ 859.660670][T11964] dump_stack_lvl+0x1c8/0x256 [ 859.665539][T11964] dump_stack+0x1a/0x1c [ 859.669796][T11964] kmsan_internal_chain_origin+0x78/0x120 [ 859.675641][T11964] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 859.681901][T11964] ? kmsan_get_metadata+0x33/0x220 [ 859.687190][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 859.693567][T11964] ? kmsan_get_metadata+0x33/0x220 [ 859.698847][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 859.704784][T11964] ? kmsan_get_metadata+0x33/0x220 [ 859.710055][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 859.715961][T11964] ? __get_compat_msghdr+0x5b/0x750 [ 859.721318][T11964] ? kmsan_get_metadata+0x33/0x220 [ 859.726556][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 859.732567][T11964] ? should_fail+0x3f/0x810 [ 859.737252][T11964] ? __stack_depot_save+0x21/0x4b0 [ 859.742539][T11964] ? kmsan_get_metadata+0x33/0x220 [ 859.747829][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 859.754213][T11964] ? kmsan_get_metadata+0x33/0x220 [ 859.759504][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 859.765503][T11964] __msan_chain_origin+0xbd/0x140 [ 859.770681][T11964] __get_compat_msghdr+0x514/0x750 [ 859.775975][T11964] get_compat_msghdr+0x8c/0x1c0 [ 859.781031][T11964] ? ___sys_recvmsg+0xa9/0x890 [ 859.785953][T11964] ? do_recvmmsg+0x63a/0x10a0 [ 859.790791][T11964] ___sys_recvmsg+0x19d/0x890 [ 859.795565][T11964] ? __schedule+0x1609/0x21d0 [ 859.800327][T11964] ? kmsan_get_metadata+0x33/0x220 [ 859.805558][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 859.811530][T11964] ? kmsan_get_metadata+0x33/0x220 [ 859.816763][T11964] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 859.822705][T11964] do_recvmmsg+0x63a/0x10a0 [ 859.827389][T11964] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 859.833814][T11964] ? __sys_recvmmsg+0x52/0x450 [ 859.838659][T11964] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.845199][T11964] __sys_recvmmsg+0x113/0x450 [ 859.850031][T11964] ? kmsan_get_metadata+0x33/0x220 [ 859.855332][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.861858][T11964] __do_fast_syscall_32+0x87/0xe0 [ 859.867054][T11964] do_fast_syscall_32+0x33/0x70 [ 859.872062][T11964] do_SYSENTER_32+0x1b/0x20 [ 859.876719][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 859.883281][T11964] RIP: 0023:0xf7fc5549 [ 859.887471][T11964] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 859.907248][T11964] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 859.915776][T11964] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 859.923899][T11964] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 859.932001][T11964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 859.940084][T11964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.948130][T11964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 859.956228][T11964] [ 859.962600][T11964] Uninit was stored to memory at: [ 859.967888][T11964] __get_compat_msghdr+0x514/0x750 [ 859.973671][T11964] get_compat_msghdr+0x8c/0x1c0 [ 859.978741][T11964] ___sys_recvmsg+0x19d/0x890 [ 859.983661][T11964] do_recvmmsg+0x63a/0x10a0 [ 859.988323][T11964] __sys_recvmmsg+0x113/0x450 [ 859.993242][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.999663][T11964] __do_fast_syscall_32+0x87/0xe0 [ 860.004953][T11964] do_fast_syscall_32+0x33/0x70 [ 860.009965][T11964] do_SYSENTER_32+0x1b/0x20 [ 860.014735][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 860.021318][T11964] [ 860.023923][T11964] Uninit was stored to memory at: [ 860.029195][T11964] __get_compat_msghdr+0x514/0x750 [ 860.034624][T11964] get_compat_msghdr+0x8c/0x1c0 [ 860.039703][T11964] ___sys_recvmsg+0x19d/0x890 [ 860.044718][T11964] do_recvmmsg+0x63a/0x10a0 [ 860.049380][T11964] __sys_recvmmsg+0x113/0x450 [ 860.054338][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 860.060751][T11964] __do_fast_syscall_32+0x87/0xe0 [ 860.066088][T11964] do_fast_syscall_32+0x33/0x70 [ 860.071113][T11964] do_SYSENTER_32+0x1b/0x20 [ 860.075956][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 860.082619][T11964] [ 860.085024][T11964] Uninit was stored to memory at: [ 860.090278][T11964] __get_compat_msghdr+0x514/0x750 [ 860.095761][T11964] get_compat_msghdr+0x8c/0x1c0 [ 860.100826][T11964] ___sys_recvmsg+0x19d/0x890 [ 860.105827][T11964] do_recvmmsg+0x63a/0x10a0 [ 860.110475][T11964] __sys_recvmmsg+0x113/0x450 [ 860.115418][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 860.121949][T11964] __do_fast_syscall_32+0x87/0xe0 [ 860.127215][T11964] do_fast_syscall_32+0x33/0x70 [ 860.132379][T11964] do_SYSENTER_32+0x1b/0x20 [ 860.137051][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 860.143770][T11964] [ 860.146187][T11964] Uninit was stored to memory at: [ 860.151370][T11964] __get_compat_msghdr+0x514/0x750 [ 860.156750][T11964] get_compat_msghdr+0x8c/0x1c0 [ 860.161924][T11964] ___sys_recvmsg+0x19d/0x890 [ 860.166736][T11964] do_recvmmsg+0x63a/0x10a0 [ 860.171341][T11964] __sys_recvmmsg+0x113/0x450 [ 860.176288][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 860.182821][T11964] __do_fast_syscall_32+0x87/0xe0 [ 860.188017][T11964] do_fast_syscall_32+0x33/0x70 [ 860.193170][T11964] do_SYSENTER_32+0x1b/0x20 [ 860.197838][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 860.204557][T11964] [ 860.206948][T11964] Uninit was stored to memory at: [ 860.212301][T11964] __get_compat_msghdr+0x514/0x750 [ 860.217640][T11964] get_compat_msghdr+0x8c/0x1c0 [ 860.222861][T11964] ___sys_recvmsg+0x19d/0x890 [ 860.227866][T11964] do_recvmmsg+0x63a/0x10a0 [ 860.232624][T11964] __sys_recvmmsg+0x113/0x450 [ 860.237544][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 860.244131][T11964] __do_fast_syscall_32+0x87/0xe0 [ 860.249295][T11964] do_fast_syscall_32+0x33/0x70 [ 860.254410][T11964] do_SYSENTER_32+0x1b/0x20 [ 860.259045][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 860.265675][T11964] [ 860.268078][T11964] Uninit was stored to memory at: [ 860.273451][T11964] __get_compat_msghdr+0x514/0x750 [ 860.278747][T11964] get_compat_msghdr+0x8c/0x1c0 [ 860.283885][T11964] ___sys_recvmsg+0x19d/0x890 [ 860.288716][T11964] do_recvmmsg+0x63a/0x10a0 [ 860.293457][T11964] __sys_recvmmsg+0x113/0x450 [ 860.298291][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 860.304868][T11964] __do_fast_syscall_32+0x87/0xe0 [ 860.310055][T11964] do_fast_syscall_32+0x33/0x70 [ 860.315168][T11964] do_SYSENTER_32+0x1b/0x20 [ 860.319804][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 860.326448][T11964] [ 860.328865][T11964] Uninit was stored to memory at: [ 860.334277][T11964] __get_compat_msghdr+0x514/0x750 [ 860.339575][T11964] get_compat_msghdr+0x8c/0x1c0 [ 860.344720][T11964] ___sys_recvmsg+0x19d/0x890 [ 860.349560][T11964] do_recvmmsg+0x63a/0x10a0 [ 860.354374][T11964] __sys_recvmmsg+0x113/0x450 [ 860.359187][T11964] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 860.365793][T11964] __do_fast_syscall_32+0x87/0xe0 [ 860.370965][T11964] do_fast_syscall_32+0x33/0x70 [ 860.376036][T11964] do_SYSENTER_32+0x1b/0x20 [ 860.380667][T11964] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 860.387261][T11964] [ 860.389672][T11964] Local variable msg_sys created at: [ 860.395210][T11964] do_recvmmsg+0x5f/0x10a0 [ 860.399784][T11964] __sys_recvmmsg+0x113/0x450 16:09:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x593, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) 16:09:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf256c00000008"], 0x78}}, 0x0) 16:09:00 executing program 2: r0 = socket(0xa, 0x3, 0x2a) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, 0xfc}, 0x18, &(0x7f0000000080)={0x0}}, 0x0) 16:09:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0xf0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) 16:09:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r0) 16:09:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x15, 0x0, &(0x7f0000000280)) [ 860.709966][T12003] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.5'. 16:09:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 16:09:00 executing program 2: syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000140), 0x0, 0x0, 0x0}, 0x58) 16:09:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf256c00000008"], 0x78}}, 0x0) 16:09:01 executing program 1: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="98", 0x1, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000500)='Y', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000180), 0x0, 0x0, 0x0, r0) 16:09:01 executing program 0: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty, 0x0, 0x0, 0x81}}) 16:09:01 executing program 3: r0 = socket(0x2, 0x3, 0x1) getsockname$netlink(r0, 0x0, &(0x7f0000000040)) [ 861.453596][T12014] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.5'. 16:09:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f00000043c0)={0x10}, 0x10}], 0x1, &(0x7f0000004340)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x10}}], 0xf}, 0x0) 16:09:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf256c00000008"], 0x78}}, 0x0) 16:09:01 executing program 4: waitid(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000002280)) 16:09:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) flock(r3, 0x3) syz_clone3(&(0x7f0000000800)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0), {0x1f}, &(0x7f0000000a80)=""/210, 0xd2, &(0x7f0000000b80)=""/233, &(0x7f0000000180)=[0x0, r2, 0x0, 0x0, r2, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0], 0xc, {r3}}, 0x58) prlimit64(0x0, 0x9, 0x0, &(0x7f00000001c0)) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff29, 0x4, &(0x7f00000008c0)=[{0x0, 0x0, 0x1}, {&(0x7f00000004c0)="7b5f4f365f0763bf4fbea211b4567fcf56fb9e7e58f3b4cb7f7354d490f9cd9ba76c25f7a551278645af720b9e5e57c3c784477084ab737eeec97a9f7f8fc602739f06550aacdac0620be93430343c48f2519eb0e3812bda419e86cca530f04ac7476f705b0faec269ea2c1e024a6fc44f20b397df40116a8a0c55307c0f69f0e638f2586b25f43fa1277f03d2441664b51bfc058df15329d1da9ea8875df230a7426261d22f295fea70a9301d3b6f6949a97dd2f74888d19aae", 0xba, 0x1ff}, {&(0x7f00000005c0), 0x0, 0x7f}, {&(0x7f0000000700), 0x0, 0x200}], 0x2000, &(0x7f0000000d00)=ANY=[@ANYRES8]) 16:09:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x7c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x74, 0xe, {@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}]}, 0x98}}, 0x0) [ 862.225944][T12027] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.5'. 16:09:02 executing program 2: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x2c, 0x0, 0x0) 16:09:02 executing program 4: r0 = socket(0xa, 0x3, 0x2a) getpeername$packet(r0, 0x0, 0x0) 16:09:02 executing program 5: r0 = socket(0xa, 0x3, 0x2a) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa}, 0x18, &(0x7f0000000080)={0x0}, 0x6}, 0x0) 16:09:02 executing program 3: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x49, 0x0, 0x0) 16:09:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) flock(0xffffffffffffffff, 0x0) r2 = getpid() syz_clone3(&(0x7f0000000800)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0), {0x1f}, &(0x7f0000000a80)=""/210, 0xd2, &(0x7f0000000b80)=""/233, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0], 0xb}, 0x58) 16:09:03 executing program 2: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x300, 0x0, 0x0) 16:09:03 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x300}, 0x0) 16:09:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) [ 863.256092][T12045] loop1: detected capacity change from 0 to 264192 16:09:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0xa}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4, 0x300}]}, @NL80211_ATTR_BEACON_HEAD={0x74, 0xe, {@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}]}, 0x98}}, 0x0) 16:09:03 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x2d, &(0x7f0000000700)={0x5, 0xf, 0x2d, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}]}}) [ 864.003453][T12056] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 864.804758][ T3541] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 865.052596][ T3541] usb 3-1: Using ep0 maxpacket: 32 [ 865.413670][ T3541] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 865.423221][ T3541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.431461][ T3541] usb 3-1: Product: syz [ 865.436100][ T3541] usb 3-1: Manufacturer: syz [ 865.440921][ T3541] usb 3-1: SerialNumber: syz [ 865.553331][T12032] not chained 340000 origins [ 865.558092][T12032] CPU: 0 PID: 12032 Comm: syz-executor.1 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 865.568770][T12032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 865.579037][T12032] Call Trace: [ 865.582406][T12032] [ 865.585421][T12032] dump_stack_lvl+0x1c8/0x256 [ 865.590300][T12032] dump_stack+0x1a/0x1c [ 865.594629][T12032] kmsan_internal_chain_origin+0x78/0x120 [ 865.600523][T12032] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 865.606768][T12032] ? kmsan_get_metadata+0x33/0x220 [ 865.612053][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 865.618486][T12032] ? kmsan_get_metadata+0x33/0x220 [ 865.623772][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 865.629762][T12032] ? kmsan_get_metadata+0x33/0x220 [ 865.635037][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 865.641019][T12032] ? __get_compat_msghdr+0x5b/0x750 [ 865.646413][T12032] ? kmsan_get_metadata+0x33/0x220 [ 865.651699][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 865.657695][T12032] ? should_fail+0x3f/0x810 [ 865.662366][T12032] ? __stack_depot_save+0x21/0x4b0 [ 865.667639][T12032] ? kmsan_get_metadata+0x33/0x220 [ 865.672919][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 865.679337][T12032] ? kmsan_get_metadata+0x33/0x220 [ 865.684615][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 865.690624][T12032] __msan_chain_origin+0xbd/0x140 [ 865.695822][T12032] __get_compat_msghdr+0x514/0x750 [ 865.701158][T12032] get_compat_msghdr+0x8c/0x1c0 [ 865.706199][T12032] ? ___sys_recvmsg+0xa9/0x890 [ 865.711105][T12032] ? do_recvmmsg+0x63a/0x10a0 [ 865.715940][T12032] ___sys_recvmsg+0x19d/0x890 [ 865.720777][T12032] ? __schedule+0x1609/0x21d0 [ 865.725792][T12032] ? kmsan_get_metadata+0x33/0x220 [ 865.731068][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 865.737050][T12032] ? kmsan_get_metadata+0x33/0x220 [ 865.742326][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 865.748317][T12032] do_recvmmsg+0x63a/0x10a0 [ 865.752993][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 865.759421][T12032] ? __sys_recvmmsg+0x52/0x450 [ 865.764329][T12032] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 865.770919][T12032] __sys_recvmmsg+0x113/0x450 [ 865.775749][T12032] ? kmsan_get_metadata+0x33/0x220 [ 865.781038][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 865.787550][T12032] __do_fast_syscall_32+0x87/0xe0 [ 865.792725][T12032] ? exit_to_user_mode_prepare+0x119/0x220 [ 865.798705][T12032] do_fast_syscall_32+0x33/0x70 [ 865.803710][T12032] do_SYSENTER_32+0x1b/0x20 [ 865.808363][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 865.814899][T12032] RIP: 0023:0xf7f36549 [ 865.819076][T12032] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 865.838867][T12032] RSP: 002b:00000000f7f105cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 865.847435][T12032] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 865.855547][T12032] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 865.863642][T12032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 865.871744][T12032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.879836][T12032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 865.887952][T12032] [ 865.899326][T12032] Uninit was stored to memory at: [ 865.905861][T12032] __get_compat_msghdr+0x514/0x750 [ 865.911202][T12032] get_compat_msghdr+0x8c/0x1c0 [ 865.916387][T12032] ___sys_recvmsg+0x19d/0x890 [ 865.921347][T12032] do_recvmmsg+0x63a/0x10a0 [ 865.926151][T12032] __sys_recvmmsg+0x113/0x450 [ 865.930995][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 865.937562][T12032] __do_fast_syscall_32+0x87/0xe0 [ 865.942896][T12032] do_fast_syscall_32+0x33/0x70 [ 865.947919][T12032] do_SYSENTER_32+0x1b/0x20 [ 865.952715][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 865.959301][T12032] [ 865.961847][T12032] Uninit was stored to memory at: [ 865.967103][T12032] __get_compat_msghdr+0x514/0x750 [ 865.972561][T12032] get_compat_msghdr+0x8c/0x1c0 [ 865.977647][T12032] ___sys_recvmsg+0x19d/0x890 [ 865.982631][T12032] do_recvmmsg+0x63a/0x10a0 [ 865.987319][T12032] __sys_recvmmsg+0x113/0x450 [ 865.992284][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 865.999004][T12032] __do_fast_syscall_32+0x87/0xe0 [ 866.004324][T12032] do_fast_syscall_32+0x33/0x70 [ 866.009376][T12032] do_SYSENTER_32+0x1b/0x20 [ 866.014176][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 866.020764][T12032] [ 866.023296][T12032] Uninit was stored to memory at: [ 866.028549][T12032] __get_compat_msghdr+0x514/0x750 [ 866.034023][T12032] get_compat_msghdr+0x8c/0x1c0 [ 866.039080][T12032] ___sys_recvmsg+0x19d/0x890 [ 866.044050][T12032] do_recvmmsg+0x63a/0x10a0 [ 866.048716][T12032] __sys_recvmmsg+0x113/0x450 [ 866.053704][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 866.060425][T12032] __do_fast_syscall_32+0x87/0xe0 [ 866.065735][T12032] do_fast_syscall_32+0x33/0x70 [ 866.070754][T12032] do_SYSENTER_32+0x1b/0x20 [ 866.075538][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 866.082230][T12032] [ 866.084634][T12032] Uninit was stored to memory at: [ 866.089890][T12032] __get_compat_msghdr+0x514/0x750 [ 866.095334][T12032] get_compat_msghdr+0x8c/0x1c0 [ 866.100388][T12032] ___sys_recvmsg+0x19d/0x890 [ 866.105355][T12032] do_recvmmsg+0x63a/0x10a0 [ 866.110031][T12032] __sys_recvmmsg+0x113/0x450 [ 866.114990][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 866.121414][T12032] __do_fast_syscall_32+0x87/0xe0 [ 866.126732][T12032] do_fast_syscall_32+0x33/0x70 [ 866.131878][T12032] do_SYSENTER_32+0x1b/0x20 [ 866.136538][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 866.143217][T12032] [ 866.145628][T12032] Uninit was stored to memory at: [ 866.150884][T12032] __get_compat_msghdr+0x514/0x750 [ 866.156325][T12032] get_compat_msghdr+0x8c/0x1c0 [ 866.161397][T12032] ___sys_recvmsg+0x19d/0x890 [ 866.166360][T12032] do_recvmmsg+0x63a/0x10a0 [ 866.171013][T12032] __sys_recvmmsg+0x113/0x450 [ 866.175967][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 866.182525][T12032] __do_fast_syscall_32+0x87/0xe0 [ 866.187713][T12032] do_fast_syscall_32+0x33/0x70 [ 866.192850][T12032] do_SYSENTER_32+0x1b/0x20 [ 866.197516][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 866.204213][T12032] [ 866.206620][T12032] Uninit was stored to memory at: [ 866.211992][T12032] __get_compat_msghdr+0x514/0x750 [ 866.217305][T12032] get_compat_msghdr+0x8c/0x1c0 [ 866.222464][T12032] ___sys_recvmsg+0x19d/0x890 [ 866.227315][T12032] do_recvmmsg+0x63a/0x10a0 [ 866.232103][T12032] __sys_recvmmsg+0x113/0x450 [ 866.236942][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 866.243466][T12032] __do_fast_syscall_32+0x87/0xe0 [ 866.248805][T12032] do_fast_syscall_32+0x33/0x70 [ 866.254010][T12032] do_SYSENTER_32+0x1b/0x20 [ 866.258673][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 866.265357][T12032] [ 866.267767][T12032] Uninit was stored to memory at: [ 866.273132][T12032] __get_compat_msghdr+0x514/0x750 [ 866.278451][T12032] get_compat_msghdr+0x8c/0x1c0 [ 866.283672][T12032] ___sys_recvmsg+0x19d/0x890 [ 866.288519][T12032] do_recvmmsg+0x63a/0x10a0 [ 866.293301][T12032] __sys_recvmmsg+0x113/0x450 [ 866.298129][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 866.304676][T12032] __do_fast_syscall_32+0x87/0xe0 [ 866.309874][T12032] do_fast_syscall_32+0x33/0x70 [ 866.315013][T12032] do_SYSENTER_32+0x1b/0x20 [ 866.319676][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 866.326382][T12032] [ 866.328875][T12032] Local variable msg_sys created at: [ 866.334457][T12032] do_recvmmsg+0x5f/0x10a0 [ 866.339040][T12032] __sys_recvmmsg+0x113/0x450 [ 866.693305][ T3541] usb 3-1: USB disconnect, device number 13 [ 867.333241][T12032] not chained 350000 origins [ 867.337977][T12032] CPU: 1 PID: 12032 Comm: syz-executor.1 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 867.348658][T12032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 867.358866][T12032] Call Trace: [ 867.362253][T12032] [ 867.365280][T12032] dump_stack_lvl+0x1c8/0x256 [ 867.370190][T12032] dump_stack+0x1a/0x1c [ 867.374547][T12032] kmsan_internal_chain_origin+0x78/0x120 [ 867.380463][T12032] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 867.386728][T12032] ? kmsan_get_metadata+0x33/0x220 [ 867.392034][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 867.398481][T12032] ? kmsan_get_metadata+0x33/0x220 [ 867.403781][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 867.409784][T12032] ? kmsan_get_metadata+0x33/0x220 [ 867.415071][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 867.421068][T12032] ? __get_compat_msghdr+0x5b/0x750 [ 867.426478][T12032] ? kmsan_get_metadata+0x33/0x220 [ 867.431769][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 867.437778][T12032] ? should_fail+0x3f/0x810 [ 867.442455][T12032] ? __stack_depot_save+0x21/0x4b0 [ 867.447752][T12032] ? kmsan_get_metadata+0x33/0x220 [ 867.453042][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 867.459474][T12032] ? kmsan_get_metadata+0x33/0x220 [ 867.464771][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 867.470772][T12032] __msan_chain_origin+0xbd/0x140 [ 867.475977][T12032] __get_compat_msghdr+0x514/0x750 [ 867.481333][T12032] get_compat_msghdr+0x8c/0x1c0 [ 867.486389][T12032] ? ___sys_recvmsg+0xa9/0x890 [ 867.491309][T12032] ? do_recvmmsg+0x63a/0x10a0 [ 867.496148][T12032] ___sys_recvmsg+0x19d/0x890 [ 867.501001][T12032] ? __schedule+0x1609/0x21d0 [ 867.505852][T12032] ? kmsan_get_metadata+0x33/0x220 [ 867.511147][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 867.517145][T12032] ? kmsan_get_metadata+0x33/0x220 [ 867.522438][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 867.528443][T12032] do_recvmmsg+0x63a/0x10a0 [ 867.533132][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 867.539579][T12032] ? __sys_recvmmsg+0x52/0x450 [ 867.544503][T12032] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 867.551107][T12032] __sys_recvmmsg+0x113/0x450 [ 867.555941][T12032] ? kmsan_get_metadata+0x33/0x220 [ 867.561266][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 867.567719][T12032] __do_fast_syscall_32+0x87/0xe0 [ 867.572919][T12032] ? exit_to_user_mode_prepare+0x119/0x220 [ 867.578994][T12032] do_fast_syscall_32+0x33/0x70 [ 867.584013][T12032] do_SYSENTER_32+0x1b/0x20 [ 867.588672][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 867.595234][T12032] RIP: 0023:0xf7f36549 [ 867.599870][T12032] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 867.619677][T12032] RSP: 002b:00000000f7f105cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 867.628264][T12032] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 867.636378][T12032] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 867.644514][T12032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 867.652705][T12032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.660810][T12032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 867.668940][T12032] [ 867.675589][T12032] Uninit was stored to memory at: [ 867.680855][T12032] __get_compat_msghdr+0x514/0x750 [ 867.686467][T12032] get_compat_msghdr+0x8c/0x1c0 [ 867.691523][T12032] ___sys_recvmsg+0x19d/0x890 [ 867.696457][T12032] do_recvmmsg+0x63a/0x10a0 [ 867.701121][T12032] __sys_recvmmsg+0x113/0x450 [ 867.706041][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 867.712547][T12032] __do_fast_syscall_32+0x87/0xe0 [ 867.717735][T12032] do_fast_syscall_32+0x33/0x70 [ 867.722828][T12032] do_SYSENTER_32+0x1b/0x20 [ 867.727483][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 867.734128][T12032] [ 867.736529][T12032] Uninit was stored to memory at: [ 867.741867][T12032] __get_compat_msghdr+0x514/0x750 [ 867.747179][T12032] get_compat_msghdr+0x8c/0x1c0 [ 867.752314][T12032] ___sys_recvmsg+0x19d/0x890 [ 867.757152][T12032] do_recvmmsg+0x63a/0x10a0 [ 867.761888][T12032] __sys_recvmmsg+0x113/0x450 [ 867.766722][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 867.773231][T12032] __do_fast_syscall_32+0x87/0xe0 [ 867.778413][T12032] do_fast_syscall_32+0x33/0x70 [ 867.783498][T12032] do_SYSENTER_32+0x1b/0x20 [ 867.788154][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 867.794805][T12032] [ 867.797575][T12032] Uninit was stored to memory at: [ 867.802917][T12032] __get_compat_msghdr+0x514/0x750 [ 867.808230][T12032] get_compat_msghdr+0x8c/0x1c0 [ 867.813371][T12032] ___sys_recvmsg+0x19d/0x890 [ 867.818205][T12032] do_recvmmsg+0x63a/0x10a0 [ 867.822956][T12032] __sys_recvmmsg+0x113/0x450 [ 867.827798][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 867.834308][T12032] __do_fast_syscall_32+0x87/0xe0 [ 867.839501][T12032] do_fast_syscall_32+0x33/0x70 [ 867.844594][T12032] do_SYSENTER_32+0x1b/0x20 [ 867.849252][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 867.855904][T12032] [ 867.858316][T12032] Uninit was stored to memory at: [ 867.863656][T12032] __get_compat_msghdr+0x514/0x750 [ 867.869004][T12032] get_compat_msghdr+0x8c/0x1c0 [ 867.874150][T12032] ___sys_recvmsg+0x19d/0x890 [ 867.878986][T12032] do_recvmmsg+0x63a/0x10a0 [ 867.883743][T12032] __sys_recvmmsg+0x113/0x450 [ 867.888584][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 867.895182][T12032] __do_fast_syscall_32+0x87/0xe0 [ 867.900388][T12032] do_fast_syscall_32+0x33/0x70 [ 867.905591][T12032] do_SYSENTER_32+0x1b/0x20 [ 867.910269][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 867.916995][T12032] [ 867.919405][T12032] Uninit was stored to memory at: [ 867.924853][T12032] __get_compat_msghdr+0x514/0x750 [ 867.930178][T12032] get_compat_msghdr+0x8c/0x1c0 [ 867.935415][T12032] ___sys_recvmsg+0x19d/0x890 [ 867.940258][T12032] do_recvmmsg+0x63a/0x10a0 [ 867.945086][T12032] __sys_recvmmsg+0x113/0x450 [ 867.950040][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 867.956686][T12032] __do_fast_syscall_32+0x87/0xe0 [ 867.962021][T12032] do_fast_syscall_32+0x33/0x70 [ 867.967142][T12032] do_SYSENTER_32+0x1b/0x20 [ 867.972067][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 867.978632][T12032] [ 867.981036][T12032] Uninit was stored to memory at: [ 867.986466][T12032] __get_compat_msghdr+0x514/0x750 [ 867.991888][T12032] get_compat_msghdr+0x8c/0x1c0 [ 867.996947][T12032] ___sys_recvmsg+0x19d/0x890 [ 868.001941][T12032] do_recvmmsg+0x63a/0x10a0 [ 868.006596][T12032] __sys_recvmmsg+0x113/0x450 [ 868.011432][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 868.018125][T12032] __do_fast_syscall_32+0x87/0xe0 [ 868.023410][T12032] do_fast_syscall_32+0x33/0x70 [ 868.028430][T12032] do_SYSENTER_32+0x1b/0x20 [ 868.033240][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 868.039812][T12032] [ 868.042359][T12032] Uninit was stored to memory at: [ 868.047615][T12032] __get_compat_msghdr+0x514/0x750 [ 868.053073][T12032] get_compat_msghdr+0x8c/0x1c0 [ 868.058123][T12032] ___sys_recvmsg+0x19d/0x890 [ 868.063138][T12032] do_recvmmsg+0x63a/0x10a0 [ 868.067980][T12032] __sys_recvmmsg+0x113/0x450 [ 868.072947][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 868.079376][T12032] __do_fast_syscall_32+0x87/0xe0 [ 868.084714][T12032] do_fast_syscall_32+0x33/0x70 [ 868.089824][T12032] do_SYSENTER_32+0x1b/0x20 [ 868.094639][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 868.101223][T12032] [ 868.103789][T12032] Local variable msg_sys created at: [ 868.109169][T12032] do_recvmmsg+0x5f/0x10a0 [ 868.113880][T12032] __sys_recvmmsg+0x113/0x450 [ 868.368389][T12032] not chained 360000 origins [ 868.373217][T12032] CPU: 1 PID: 12032 Comm: syz-executor.1 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 868.383901][T12032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 868.394102][T12032] Call Trace: [ 868.397481][T12032] [ 868.400506][T12032] dump_stack_lvl+0x1c8/0x256 [ 868.405749][T12032] dump_stack+0x1a/0x1c [ 868.410096][T12032] kmsan_internal_chain_origin+0x78/0x120 [ 868.416031][T12032] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 868.422289][T12032] ? kmsan_get_metadata+0x33/0x220 [ 868.427616][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 868.434060][T12032] ? kmsan_get_metadata+0x33/0x220 [ 868.439348][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 868.445349][T12032] ? kmsan_get_metadata+0x33/0x220 [ 868.450674][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 868.456855][T12032] ? __get_compat_msghdr+0x5b/0x750 [ 868.462275][T12032] ? kmsan_get_metadata+0x33/0x220 [ 868.467565][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 868.473842][T12032] ? should_fail+0x3f/0x810 [ 868.478525][T12032] ? __stack_depot_save+0x21/0x4b0 [ 868.483821][T12032] ? kmsan_get_metadata+0x33/0x220 [ 868.489117][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 868.495558][T12032] ? kmsan_get_metadata+0x33/0x220 [ 868.500854][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 868.506860][T12032] __msan_chain_origin+0xbd/0x140 [ 868.512160][T12032] __get_compat_msghdr+0x514/0x750 [ 868.517512][T12032] get_compat_msghdr+0x8c/0x1c0 [ 868.522773][T12032] ? ___sys_recvmsg+0xa9/0x890 [ 868.527691][T12032] ? do_recvmmsg+0x63a/0x10a0 [ 868.532547][T12032] ___sys_recvmsg+0x19d/0x890 [ 868.537393][T12032] ? __schedule+0x1609/0x21d0 [ 868.542248][T12032] ? kmsan_get_metadata+0x33/0x220 [ 868.547541][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 868.553536][T12032] ? kmsan_get_metadata+0x33/0x220 [ 868.558832][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 868.564839][T12032] do_recvmmsg+0x63a/0x10a0 [ 868.569529][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 868.575977][T12032] ? __sys_recvmmsg+0x52/0x450 [ 868.580894][T12032] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 868.587499][T12032] __sys_recvmmsg+0x113/0x450 [ 868.592342][T12032] ? kmsan_get_metadata+0x33/0x220 [ 868.597743][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 868.604191][T12032] __do_fast_syscall_32+0x87/0xe0 [ 868.609376][T12032] ? exit_to_user_mode_prepare+0x119/0x220 [ 868.615363][T12032] do_fast_syscall_32+0x33/0x70 [ 868.620375][T12032] do_SYSENTER_32+0x1b/0x20 [ 868.625036][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 868.631602][T12032] RIP: 0023:0xf7f36549 [ 868.635803][T12032] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 868.655789][T12032] RSP: 002b:00000000f7f105cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 868.664373][T12032] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 868.672490][T12032] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 868.680593][T12032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 868.688724][T12032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.696838][T12032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 868.704990][T12032] [ 868.711470][T12032] Uninit was stored to memory at: [ 868.722206][T12032] __get_compat_msghdr+0x514/0x750 [ 868.727538][T12032] get_compat_msghdr+0x8c/0x1c0 [ 868.732694][T12032] ___sys_recvmsg+0x19d/0x890 [ 868.737537][T12032] do_recvmmsg+0x63a/0x10a0 [ 868.742272][T12032] __sys_recvmmsg+0x113/0x450 [ 868.747104][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 868.753625][T12032] __do_fast_syscall_32+0x87/0xe0 [ 868.758813][T12032] do_fast_syscall_32+0x33/0x70 [ 868.763916][T12032] do_SYSENTER_32+0x1b/0x20 [ 868.768573][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 868.775232][T12032] [ 868.777630][T12032] Uninit was stored to memory at: [ 868.782968][T12032] __get_compat_msghdr+0x514/0x750 [ 868.788306][T12032] get_compat_msghdr+0x8c/0x1c0 [ 868.793502][T12032] ___sys_recvmsg+0x19d/0x890 [ 868.798344][T12032] do_recvmmsg+0x63a/0x10a0 [ 868.803162][T12032] __sys_recvmmsg+0x113/0x450 [ 868.808000][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 868.814584][T12032] __do_fast_syscall_32+0x87/0xe0 [ 868.819771][T12032] do_fast_syscall_32+0x33/0x70 [ 868.824947][T12032] do_SYSENTER_32+0x1b/0x20 [ 868.829606][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 868.836324][T12032] [ 868.838728][T12032] Uninit was stored to memory at: [ 868.844132][T12032] __get_compat_msghdr+0x514/0x750 [ 868.849463][T12032] get_compat_msghdr+0x8c/0x1c0 [ 868.854701][T12032] ___sys_recvmsg+0x19d/0x890 [ 868.859544][T12032] do_recvmmsg+0x63a/0x10a0 [ 868.864366][T12032] __sys_recvmmsg+0x113/0x450 [ 868.869204][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 868.875784][T12032] __do_fast_syscall_32+0x87/0xe0 [ 868.880972][T12032] do_fast_syscall_32+0x33/0x70 [ 868.886127][T12032] do_SYSENTER_32+0x1b/0x20 [ 868.890786][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 868.897588][T12032] [ 868.899990][T12032] Uninit was stored to memory at: [ 868.905431][T12032] __get_compat_msghdr+0x514/0x750 [ 868.910749][T12032] get_compat_msghdr+0x8c/0x1c0 [ 868.915948][T12032] ___sys_recvmsg+0x19d/0x890 [ 868.920783][T12032] do_recvmmsg+0x63a/0x10a0 [ 868.925594][T12032] __sys_recvmmsg+0x113/0x450 [ 868.930429][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 868.937004][T12032] __do_fast_syscall_32+0x87/0xe0 [ 868.942280][T12032] do_fast_syscall_32+0x33/0x70 [ 868.947279][T12032] do_SYSENTER_32+0x1b/0x20 [ 868.952003][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 868.958876][T12032] [ 868.961259][T12032] Uninit was stored to memory at: [ 868.966632][T12032] __get_compat_msghdr+0x514/0x750 [ 868.972081][T12032] get_compat_msghdr+0x8c/0x1c0 [ 868.977133][T12032] ___sys_recvmsg+0x19d/0x890 [ 868.982116][T12032] do_recvmmsg+0x63a/0x10a0 [ 868.986796][T12032] __sys_recvmmsg+0x113/0x450 [ 868.991626][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 868.998244][T12032] __do_fast_syscall_32+0x87/0xe0 [ 869.003599][T12032] do_fast_syscall_32+0x33/0x70 [ 869.008641][T12032] do_SYSENTER_32+0x1b/0x20 [ 869.013444][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 869.020024][T12032] [ 869.022506][T12032] Uninit was stored to memory at: [ 869.027757][T12032] __get_compat_msghdr+0x514/0x750 [ 869.033218][T12032] get_compat_msghdr+0x8c/0x1c0 [ 869.038275][T12032] ___sys_recvmsg+0x19d/0x890 [ 869.043350][T12032] do_recvmmsg+0x63a/0x10a0 [ 869.048185][T12032] __sys_recvmmsg+0x113/0x450 [ 869.053122][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 869.059552][T12032] __do_fast_syscall_32+0x87/0xe0 [ 869.064905][T12032] do_fast_syscall_32+0x33/0x70 [ 869.069927][T12032] do_SYSENTER_32+0x1b/0x20 [ 869.074748][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 869.081318][T12032] [ 869.083883][T12032] Uninit was stored to memory at: [ 869.089134][T12032] __get_compat_msghdr+0x514/0x750 [ 869.094612][T12032] get_compat_msghdr+0x8c/0x1c0 [ 869.099678][T12032] ___sys_recvmsg+0x19d/0x890 [ 869.104670][T12032] do_recvmmsg+0x63a/0x10a0 [ 869.109339][T12032] __sys_recvmmsg+0x113/0x450 [ 869.114329][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 869.120758][T12032] __do_fast_syscall_32+0x87/0xe0 [ 869.126114][T12032] do_fast_syscall_32+0x33/0x70 [ 869.131140][T12032] do_SYSENTER_32+0x1b/0x20 [ 869.135958][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 869.142621][T12032] [ 869.145032][T12032] Local variable msg_sys created at: [ 869.150413][T12032] do_recvmmsg+0x5f/0x10a0 [ 869.155141][T12032] __sys_recvmmsg+0x113/0x450 [ 869.427077][T12032] not chained 370000 origins [ 869.432729][T12032] CPU: 1 PID: 12032 Comm: syz-executor.1 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 869.443410][T12032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 869.453633][T12032] Call Trace: [ 869.456985][T12032] [ 869.459957][T12032] dump_stack_lvl+0x1c8/0x256 [ 869.464787][T12032] dump_stack+0x1a/0x1c [ 869.469122][T12032] kmsan_internal_chain_origin+0x78/0x120 [ 869.474967][T12032] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 869.481201][T12032] ? kmsan_get_metadata+0x33/0x220 [ 869.486439][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 869.492880][T12032] ? kmsan_get_metadata+0x33/0x220 [ 869.498171][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 869.504114][T12032] ? kmsan_get_metadata+0x33/0x220 [ 869.509425][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 869.515462][T12032] ? __get_compat_msghdr+0x5b/0x750 [ 869.520857][T12032] ? kmsan_get_metadata+0x33/0x220 [ 869.526071][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 869.532016][T12032] ? should_fail+0x3f/0x810 [ 869.536690][T12032] ? __stack_depot_save+0x21/0x4b0 [ 869.541979][T12032] ? kmsan_get_metadata+0x33/0x220 [ 869.547276][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 869.553713][T12032] ? kmsan_get_metadata+0x33/0x220 [ 869.558988][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 869.564902][T12032] __msan_chain_origin+0xbd/0x140 [ 869.570049][T12032] __get_compat_msghdr+0x514/0x750 [ 869.575339][T12032] get_compat_msghdr+0x8c/0x1c0 [ 869.580377][T12032] ? ___sys_recvmsg+0xa9/0x890 [ 869.585248][T12032] ? do_recvmmsg+0x63a/0x10a0 [ 869.590076][T12032] ___sys_recvmsg+0x19d/0x890 [ 869.594879][T12032] ? __schedule+0x1609/0x21d0 [ 869.599731][T12032] ? kmsan_get_metadata+0x33/0x220 [ 869.605066][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 869.611064][T12032] ? kmsan_get_metadata+0x33/0x220 [ 869.616363][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 869.622401][T12032] do_recvmmsg+0x63a/0x10a0 [ 869.627058][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 869.633444][T12032] ? __sys_recvmmsg+0x52/0x450 [ 869.638342][T12032] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 869.645001][T12032] __sys_recvmmsg+0x113/0x450 [ 869.649843][T12032] ? kmsan_get_metadata+0x33/0x220 [ 869.655109][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 869.661526][T12032] __do_fast_syscall_32+0x87/0xe0 [ 869.666648][T12032] ? exit_to_user_mode_prepare+0x119/0x220 [ 869.672583][T12032] do_fast_syscall_32+0x33/0x70 [ 869.677580][T12032] do_SYSENTER_32+0x1b/0x20 [ 869.682191][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 869.688758][T12032] RIP: 0023:0xf7f36549 [ 869.692964][T12032] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 869.712782][T12032] RSP: 002b:00000000f7f105cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 869.721443][T12032] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 869.729503][T12032] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 869.737585][T12032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 869.745675][T12032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.753744][T12032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 869.761879][T12032] [ 869.768143][T12032] Uninit was stored to memory at: [ 869.773850][T12032] __get_compat_msghdr+0x514/0x750 [ 869.779189][T12032] get_compat_msghdr+0x8c/0x1c0 [ 869.784360][T12032] ___sys_recvmsg+0x19d/0x890 [ 869.789231][T12032] do_recvmmsg+0x63a/0x10a0 [ 869.793997][T12032] __sys_recvmmsg+0x113/0x450 [ 869.798835][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 869.805357][T12032] __do_fast_syscall_32+0x87/0xe0 [ 869.810573][T12032] do_fast_syscall_32+0x33/0x70 [ 869.815692][T12032] do_SYSENTER_32+0x1b/0x20 [ 869.820355][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 869.827026][T12032] [ 869.829429][T12032] Uninit was stored to memory at: [ 869.834779][T12032] __get_compat_msghdr+0x514/0x750 [ 869.840094][T12032] get_compat_msghdr+0x8c/0x1c0 [ 869.845264][T12032] ___sys_recvmsg+0x19d/0x890 [ 869.850104][T12032] do_recvmmsg+0x63a/0x10a0 [ 869.854925][T12032] __sys_recvmmsg+0x113/0x450 [ 869.859779][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 869.866369][T12032] __do_fast_syscall_32+0x87/0xe0 [ 869.871568][T12032] do_fast_syscall_32+0x33/0x70 [ 869.876763][T12032] do_SYSENTER_32+0x1b/0x20 [ 869.881432][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 869.888145][T12032] [ 869.890548][T12032] Uninit was stored to memory at: [ 869.895970][T12032] __get_compat_msghdr+0x514/0x750 [ 869.901296][T12032] get_compat_msghdr+0x8c/0x1c0 [ 869.906501][T12032] ___sys_recvmsg+0x19d/0x890 [ 869.911315][T12032] do_recvmmsg+0x63a/0x10a0 [ 869.916081][T12032] __sys_recvmmsg+0x113/0x450 [ 869.920923][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 869.927519][T12032] __do_fast_syscall_32+0x87/0xe0 [ 869.932821][T12032] do_fast_syscall_32+0x33/0x70 [ 869.937836][T12032] do_SYSENTER_32+0x1b/0x20 [ 869.942637][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 869.949181][T12032] [ 869.951540][T12032] Uninit was stored to memory at: [ 869.956924][T12032] __get_compat_msghdr+0x514/0x750 [ 869.962329][T12032] get_compat_msghdr+0x8c/0x1c0 [ 869.967301][T12032] ___sys_recvmsg+0x19d/0x890 [ 869.972294][T12032] do_recvmmsg+0x63a/0x10a0 [ 869.976946][T12032] __sys_recvmmsg+0x113/0x450 [ 869.981940][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 869.988362][T12032] __do_fast_syscall_32+0x87/0xe0 [ 869.993690][T12032] do_fast_syscall_32+0x33/0x70 [ 869.998712][T12032] do_SYSENTER_32+0x1b/0x20 [ 870.003553][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 870.010104][T12032] [ 870.012656][T12032] Uninit was stored to memory at: [ 870.017920][T12032] __get_compat_msghdr+0x514/0x750 [ 870.023421][T12032] get_compat_msghdr+0x8c/0x1c0 [ 870.028490][T12032] ___sys_recvmsg+0x19d/0x890 [ 870.033650][T12032] do_recvmmsg+0x63a/0x10a0 [ 870.038318][T12032] __sys_recvmmsg+0x113/0x450 [ 870.043308][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 870.049712][T12032] __do_fast_syscall_32+0x87/0xe0 [ 870.055009][T12032] do_fast_syscall_32+0x33/0x70 [ 870.060038][T12032] do_SYSENTER_32+0x1b/0x20 [ 870.064865][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 870.071408][T12032] [ 870.073953][T12032] Uninit was stored to memory at: [ 870.079139][T12032] __get_compat_msghdr+0x514/0x750 [ 870.084536][T12032] get_compat_msghdr+0x8c/0x1c0 [ 870.089625][T12032] ___sys_recvmsg+0x19d/0x890 [ 870.094624][T12032] do_recvmmsg+0x63a/0x10a0 [ 870.099285][T12032] __sys_recvmmsg+0x113/0x450 [ 870.104355][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 870.110841][T12032] __do_fast_syscall_32+0x87/0xe0 [ 870.116086][T12032] do_fast_syscall_32+0x33/0x70 [ 870.121097][T12032] do_SYSENTER_32+0x1b/0x20 [ 870.125928][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 870.132590][T12032] [ 870.134999][T12032] Uninit was stored to memory at: [ 870.140180][T12032] __get_compat_msghdr+0x514/0x750 [ 870.145587][T12032] get_compat_msghdr+0x8c/0x1c0 [ 870.150646][T12032] ___sys_recvmsg+0x19d/0x890 [ 870.155643][T12032] do_recvmmsg+0x63a/0x10a0 [ 870.160281][T12032] __sys_recvmmsg+0x113/0x450 [ 870.165201][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 870.171630][T12032] __do_fast_syscall_32+0x87/0xe0 [ 870.176935][T12032] do_fast_syscall_32+0x33/0x70 [ 870.182090][T12032] do_SYSENTER_32+0x1b/0x20 [ 870.186727][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 870.193357][T12032] [ 870.195767][T12032] Local variable msg_sys created at: [ 870.201502][T12032] do_recvmmsg+0x5f/0x10a0 [ 870.206257][T12032] __sys_recvmmsg+0x113/0x450 [ 870.548855][T12032] not chained 380000 origins [ 870.553822][T12032] CPU: 1 PID: 12032 Comm: syz-executor.1 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 870.564507][T12032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 870.574747][T12032] Call Trace: [ 870.578124][T12032] [ 870.581154][T12032] dump_stack_lvl+0x1c8/0x256 [ 870.586059][T12032] dump_stack+0x1a/0x1c [ 870.590408][T12032] kmsan_internal_chain_origin+0x78/0x120 [ 870.596317][T12032] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 870.602612][T12032] ? kmsan_get_metadata+0x33/0x220 [ 870.607911][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 870.614349][T12032] ? kmsan_get_metadata+0x33/0x220 [ 870.619644][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 870.625641][T12032] ? kmsan_get_metadata+0x33/0x220 [ 870.630938][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 870.636938][T12032] ? __get_compat_msghdr+0x5b/0x750 [ 870.642353][T12032] ? kmsan_get_metadata+0x33/0x220 [ 870.647655][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 870.653636][T12032] ? should_fail+0x3f/0x810 [ 870.658249][T12032] ? __stack_depot_save+0x21/0x4b0 [ 870.663497][T12032] ? kmsan_get_metadata+0x33/0x220 [ 870.668765][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 870.675137][T12032] ? kmsan_get_metadata+0x33/0x220 [ 870.680426][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 870.686434][T12032] __msan_chain_origin+0xbd/0x140 [ 870.691619][T12032] __get_compat_msghdr+0x514/0x750 [ 870.696892][T12032] get_compat_msghdr+0x8c/0x1c0 [ 870.701891][T12032] ? ___sys_recvmsg+0xa9/0x890 [ 870.706806][T12032] ? do_recvmmsg+0x63a/0x10a0 [ 870.711647][T12032] ___sys_recvmsg+0x19d/0x890 [ 870.716430][T12032] ? __schedule+0x1609/0x21d0 [ 870.721217][T12032] ? kmsan_get_metadata+0x33/0x220 [ 870.726458][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 870.732466][T12032] ? kmsan_get_metadata+0x33/0x220 [ 870.737762][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 870.743773][T12032] do_recvmmsg+0x63a/0x10a0 [ 870.748466][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 870.754915][T12032] ? __sys_recvmmsg+0x52/0x450 [ 870.759790][T12032] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 870.766334][T12032] __sys_recvmmsg+0x113/0x450 [ 870.771152][T12032] ? kmsan_get_metadata+0x33/0x220 [ 870.776373][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 870.782772][T12032] __do_fast_syscall_32+0x87/0xe0 [ 870.787971][T12032] ? exit_to_user_mode_prepare+0x119/0x220 [ 870.793971][T12032] do_fast_syscall_32+0x33/0x70 [ 870.798989][T12032] do_SYSENTER_32+0x1b/0x20 [ 870.803666][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 870.810208][T12032] RIP: 0023:0xf7f36549 [ 870.814361][T12032] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 870.834183][T12032] RSP: 002b:00000000f7f105cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 870.842774][T12032] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 870.850898][T12032] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 870.859008][T12032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 870.867155][T12032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.875309][T12032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 870.883452][T12032] [ 870.894344][T12032] Uninit was stored to memory at: [ 870.899630][T12032] __get_compat_msghdr+0x514/0x750 [ 870.906387][T12032] get_compat_msghdr+0x8c/0x1c0 [ 870.911451][T12032] ___sys_recvmsg+0x19d/0x890 [ 870.916398][T12032] do_recvmmsg+0x63a/0x10a0 [ 870.921077][T12032] __sys_recvmmsg+0x113/0x450 [ 870.926010][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 870.932526][T12032] __do_fast_syscall_32+0x87/0xe0 [ 870.937739][T12032] do_fast_syscall_32+0x33/0x70 [ 870.942854][T12032] do_SYSENTER_32+0x1b/0x20 [ 870.947509][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 870.954166][T12032] [ 870.956573][T12032] Uninit was stored to memory at: [ 870.961976][T12032] __get_compat_msghdr+0x514/0x750 [ 870.967288][T12032] get_compat_msghdr+0x8c/0x1c0 [ 870.972458][T12032] ___sys_recvmsg+0x19d/0x890 [ 870.977306][T12032] do_recvmmsg+0x63a/0x10a0 [ 870.982058][T12032] __sys_recvmmsg+0x113/0x450 [ 870.986887][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 870.993396][T12032] __do_fast_syscall_32+0x87/0xe0 [ 870.998590][T12032] do_fast_syscall_32+0x33/0x70 [ 871.003744][T12032] do_SYSENTER_32+0x1b/0x20 [ 871.008413][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 871.015125][T12032] [ 871.017533][T12032] Uninit was stored to memory at: [ 871.022940][T12032] __get_compat_msghdr+0x514/0x750 [ 871.028264][T12032] get_compat_msghdr+0x8c/0x1c0 [ 871.033514][T12032] ___sys_recvmsg+0x19d/0x890 [ 871.038372][T12032] do_recvmmsg+0x63a/0x10a0 [ 871.043179][T12032] __sys_recvmmsg+0x113/0x450 [ 871.048027][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 871.054634][T12032] __do_fast_syscall_32+0x87/0xe0 [ 871.060002][T12032] do_fast_syscall_32+0x33/0x70 [ 871.065183][T12032] do_SYSENTER_32+0x1b/0x20 [ 871.069847][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 871.076583][T12032] [ 871.078992][T12032] Uninit was stored to memory at: [ 871.084428][T12032] __get_compat_msghdr+0x514/0x750 [ 871.089729][T12032] get_compat_msghdr+0x8c/0x1c0 [ 871.094885][T12032] ___sys_recvmsg+0x19d/0x890 [ 871.099735][T12032] do_recvmmsg+0x63a/0x10a0 [ 871.104508][T12032] __sys_recvmmsg+0x113/0x450 [ 871.109325][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 871.115856][T12032] __do_fast_syscall_32+0x87/0xe0 [ 871.121021][T12032] do_fast_syscall_32+0x33/0x70 [ 871.126135][T12032] do_SYSENTER_32+0x1b/0x20 [ 871.130800][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 871.137598][T12032] [ 871.140009][T12032] Uninit was stored to memory at: [ 871.145439][T12032] __get_compat_msghdr+0x514/0x750 [ 871.150778][T12032] get_compat_msghdr+0x8c/0x1c0 [ 871.156009][T12032] ___sys_recvmsg+0x19d/0x890 [ 871.160845][T12032] do_recvmmsg+0x63a/0x10a0 [ 871.165636][T12032] __sys_recvmmsg+0x113/0x450 [ 871.170463][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 871.177020][T12032] __do_fast_syscall_32+0x87/0xe0 [ 871.182308][T12032] do_fast_syscall_32+0x33/0x70 [ 871.187318][T12032] do_SYSENTER_32+0x1b/0x20 [ 871.192109][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 871.198639][T12032] [ 871.201008][T12032] Uninit was stored to memory at: [ 871.206349][T12032] __get_compat_msghdr+0x514/0x750 [ 871.211673][T12032] get_compat_msghdr+0x8c/0x1c0 [ 871.217010][T12032] ___sys_recvmsg+0x19d/0x890 [ 871.221938][T12032] do_recvmmsg+0x63a/0x10a0 [ 871.226577][T12032] __sys_recvmmsg+0x113/0x450 [ 871.231336][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 871.237869][T12032] __do_fast_syscall_32+0x87/0xe0 [ 871.243150][T12032] do_fast_syscall_32+0x33/0x70 [ 871.248158][T12032] do_SYSENTER_32+0x1b/0x20 [ 871.253009][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 871.259595][T12032] [ 871.262227][T12032] Uninit was stored to memory at: [ 871.267412][T12032] __get_compat_msghdr+0x514/0x750 [ 871.272806][T12032] get_compat_msghdr+0x8c/0x1c0 [ 871.277877][T12032] ___sys_recvmsg+0x19d/0x890 [ 871.282858][T12032] do_recvmmsg+0x63a/0x10a0 [ 871.287534][T12032] __sys_recvmmsg+0x113/0x450 [ 871.292510][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 871.298937][T12032] __do_fast_syscall_32+0x87/0xe0 [ 871.304277][T12032] do_fast_syscall_32+0x33/0x70 [ 871.309267][T12032] do_SYSENTER_32+0x1b/0x20 [ 871.314034][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 871.320577][T12032] [ 871.323117][T12032] Local variable msg_sys created at: [ 871.328476][T12032] do_recvmmsg+0x5f/0x10a0 [ 871.333148][T12032] __sys_recvmmsg+0x113/0x450 [ 871.571323][T12032] not chained 390000 origins [ 871.576360][T12032] CPU: 1 PID: 12032 Comm: syz-executor.1 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 871.587587][T12032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 871.597760][T12032] Call Trace: [ 871.601098][T12032] [ 871.604100][T12032] dump_stack_lvl+0x1c8/0x256 [ 871.608995][T12032] dump_stack+0x1a/0x1c [ 871.613339][T12032] kmsan_internal_chain_origin+0x78/0x120 [ 871.619244][T12032] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 871.625509][T12032] ? kmsan_get_metadata+0x33/0x220 [ 871.630963][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 871.637316][T12032] ? kmsan_get_metadata+0x33/0x220 [ 871.642551][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 871.648544][T12032] ? kmsan_get_metadata+0x33/0x220 [ 871.653778][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 871.659789][T12032] ? __get_compat_msghdr+0x5b/0x750 [ 871.665223][T12032] ? kmsan_get_metadata+0x33/0x220 [ 871.670494][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 871.676411][T12032] ? should_fail+0x3f/0x810 [ 871.681048][T12032] ? __stack_depot_save+0x21/0x4b0 [ 871.686274][T12032] ? kmsan_get_metadata+0x33/0x220 [ 871.691582][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 871.698008][T12032] ? kmsan_get_metadata+0x33/0x220 [ 871.703239][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 871.709212][T12032] __msan_chain_origin+0xbd/0x140 [ 871.714352][T12032] __get_compat_msghdr+0x514/0x750 [ 871.719685][T12032] get_compat_msghdr+0x8c/0x1c0 [ 871.724677][T12032] ? ___sys_recvmsg+0xa9/0x890 [ 871.729602][T12032] ? do_recvmmsg+0x63a/0x10a0 [ 871.734441][T12032] ___sys_recvmsg+0x19d/0x890 [ 871.739217][T12032] ? __schedule+0x1609/0x21d0 [ 871.744100][T12032] ? kmsan_get_metadata+0x33/0x220 [ 871.749375][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 871.755285][T12032] ? kmsan_get_metadata+0x33/0x220 [ 871.760645][T12032] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 871.766662][T12032] do_recvmmsg+0x63a/0x10a0 [ 871.771348][T12032] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 871.777747][T12032] ? __sys_recvmmsg+0x52/0x450 [ 871.782619][T12032] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 871.789286][T12032] __sys_recvmmsg+0x113/0x450 [ 871.794070][T12032] ? kmsan_get_metadata+0x33/0x220 [ 871.799357][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 871.805739][T12032] __do_fast_syscall_32+0x87/0xe0 [ 871.810934][T12032] ? exit_to_user_mode_prepare+0x119/0x220 [ 871.816896][T12032] do_fast_syscall_32+0x33/0x70 [ 871.821859][T12032] do_SYSENTER_32+0x1b/0x20 [ 871.826514][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 871.833073][T12032] RIP: 0023:0xf7f36549 [ 871.837266][T12032] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 871.857043][T12032] RSP: 002b:00000000f7f105cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 871.865578][T12032] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 871.873695][T12032] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 871.881804][T12032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 871.889914][T12032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.897957][T12032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 871.906064][T12032] [ 871.912320][T12032] Uninit was stored to memory at: [ 871.917603][T12032] __get_compat_msghdr+0x514/0x750 [ 871.923262][T12032] get_compat_msghdr+0x8c/0x1c0 [ 871.928336][T12032] ___sys_recvmsg+0x19d/0x890 [ 871.933276][T12032] do_recvmmsg+0x63a/0x10a0 [ 871.938021][T12032] __sys_recvmmsg+0x113/0x450 [ 871.942969][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 871.949394][T12032] __do_fast_syscall_32+0x87/0xe0 [ 871.954676][T12032] do_fast_syscall_32+0x33/0x70 [ 871.959691][T12032] do_SYSENTER_32+0x1b/0x20 [ 871.964444][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 871.971087][T12032] [ 871.973584][T12032] Uninit was stored to memory at: [ 871.978832][T12032] __get_compat_msghdr+0x514/0x750 [ 871.984259][T12032] get_compat_msghdr+0x8c/0x1c0 [ 871.989339][T12032] ___sys_recvmsg+0x19d/0x890 [ 871.994303][T12032] do_recvmmsg+0x63a/0x10a0 [ 871.998966][T12032] __sys_recvmmsg+0x113/0x450 [ 872.003903][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 872.010331][T12032] __do_fast_syscall_32+0x87/0xe0 [ 872.015687][T12032] do_fast_syscall_32+0x33/0x70 [ 872.020679][T12032] do_SYSENTER_32+0x1b/0x20 [ 872.025454][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 872.032194][T12032] [ 872.034600][T12032] Uninit was stored to memory at: [ 872.039866][T12032] __get_compat_msghdr+0x514/0x750 [ 872.045307][T12032] get_compat_msghdr+0x8c/0x1c0 [ 872.050378][T12032] ___sys_recvmsg+0x19d/0x890 [ 872.055400][T12032] do_recvmmsg+0x63a/0x10a0 [ 872.060091][T12032] __sys_recvmmsg+0x113/0x450 [ 872.065094][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 872.071535][T12032] __do_fast_syscall_32+0x87/0xe0 [ 872.076894][T12032] do_fast_syscall_32+0x33/0x70 [ 872.082008][T12032] do_SYSENTER_32+0x1b/0x20 [ 872.086670][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 872.093401][T12032] [ 872.095804][T12032] Uninit was stored to memory at: [ 872.101074][T12032] __get_compat_msghdr+0x514/0x750 [ 872.106561][T12032] get_compat_msghdr+0x8c/0x1c0 [ 872.111610][T12032] ___sys_recvmsg+0x19d/0x890 [ 872.116560][T12032] do_recvmmsg+0x63a/0x10a0 [ 872.121199][T12032] __sys_recvmmsg+0x113/0x450 [ 872.126153][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 872.132687][T12032] __do_fast_syscall_32+0x87/0xe0 [ 872.137900][T12032] do_fast_syscall_32+0x33/0x70 [ 872.143069][T12032] do_SYSENTER_32+0x1b/0x20 [ 872.147735][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 872.154473][T12032] [ 872.157041][T12032] Uninit was stored to memory at: [ 872.162399][T12032] __get_compat_msghdr+0x514/0x750 [ 872.167715][T12032] get_compat_msghdr+0x8c/0x1c0 [ 872.172942][T12032] ___sys_recvmsg+0x19d/0x890 [ 872.177793][T12032] do_recvmmsg+0x63a/0x10a0 [ 872.182604][T12032] __sys_recvmmsg+0x113/0x450 [ 872.187446][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 872.194044][T12032] __do_fast_syscall_32+0x87/0xe0 [ 872.199215][T12032] do_fast_syscall_32+0x33/0x70 [ 872.204339][T12032] do_SYSENTER_32+0x1b/0x20 [ 872.208997][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 872.215684][T12032] [ 872.218076][T12032] Uninit was stored to memory at: [ 872.223457][T12032] __get_compat_msghdr+0x514/0x750 [ 872.228763][T12032] get_compat_msghdr+0x8c/0x1c0 [ 872.233918][T12032] ___sys_recvmsg+0x19d/0x890 [ 872.238763][T12032] do_recvmmsg+0x63a/0x10a0 [ 872.243578][T12032] __sys_recvmmsg+0x113/0x450 [ 872.248397][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 872.254926][T12032] __do_fast_syscall_32+0x87/0xe0 [ 872.260095][T12032] do_fast_syscall_32+0x33/0x70 [ 872.265200][T12032] do_SYSENTER_32+0x1b/0x20 [ 872.269857][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 872.276597][T12032] [ 872.279004][T12032] Uninit was stored to memory at: [ 872.284426][T12032] __get_compat_msghdr+0x514/0x750 [ 872.289749][T12032] get_compat_msghdr+0x8c/0x1c0 [ 872.294927][T12032] ___sys_recvmsg+0x19d/0x890 [ 872.299738][T12032] do_recvmmsg+0x63a/0x10a0 [ 872.304510][T12032] __sys_recvmmsg+0x113/0x450 [ 872.309324][T12032] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 872.315861][T12032] __do_fast_syscall_32+0x87/0xe0 [ 872.321051][T12032] do_fast_syscall_32+0x33/0x70 [ 872.326179][T12032] do_SYSENTER_32+0x1b/0x20 [ 872.330818][T12032] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 872.337440][T12032] [ 872.339830][T12032] Local variable msg_sys created at: [ 872.345341][T12032] do_recvmmsg+0x5f/0x10a0 [ 872.349918][T12032] __sys_recvmmsg+0x113/0x450 16:09:12 executing program 1: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x1d, 0x0, 0x0) 16:09:12 executing program 5: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x4a, 0x0, 0x4) 16:09:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@bloom_filter={0x1e, 0x0, 0x3f, 0x2, 0x8, 0x1}, 0x48) 16:09:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x180, 0x180, 0xffffffff, 0xa8, 0x0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast1, @icmp_id, @icmp_id}}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0\x00', 'macvlan0\x00', {}, {}, 0x0, 0x5}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @private, @multicast1, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @private, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 16:09:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5}]}]}, 0x2c}}, 0x0) 16:09:12 executing program 2: r0 = socket(0xa, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0xb, 0x0, 0x4) 16:09:13 executing program 2: r0 = socket(0xa, 0x3, 0x2a) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) 16:09:13 executing program 3: r0 = socket(0x2, 0x3, 0x2a) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) 16:09:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x80108906, 0x0) 16:09:13 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0x63}}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x2, 0x0) 16:09:13 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 16:09:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:09:13 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) preadv(r0, 0x0, 0x0, 0x0, 0x0) 16:09:13 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000240)='syzkaller\x00', 0x5, 0xcb, &(0x7f0000000040)=""/203, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:09:13 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000c80)={&(0x7f0000000b00), 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0x13, r0, 0x1}, 0x14}}, 0x0) 16:09:13 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) getpeername$llc(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$IMGETVERSION(r0, 0x2, &(0x7f00000000c0)) 16:09:14 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) 16:09:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:09:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x1c}}, 0x0) 16:09:14 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000240), 0x10) 16:09:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast2, {[@end]}}}}}) 16:09:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x7000000) 16:09:14 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x29, 0x48, 0x0, 0x0) 16:09:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) 16:09:15 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x2122, 0x0, 0x0) 16:09:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x21}, 0xe) 16:09:15 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000001c0)) 16:09:15 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 16:09:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x2c}}, 0x0) 16:09:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x32, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x180, 0x180, 0xffffffff, 0xa8, 0x0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast1, @icmp_id, @icmp_id}}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @private, @multicast1, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @private, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 16:09:15 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000c80)=@raw=[@ldst], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 16:09:15 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000000080)) 16:09:15 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x6, &(0x7f0000000040)={&(0x7f0000000000)='ext4_mballoc_prealloc\x00'}, 0xfe1) 16:09:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x8927, &(0x7f00000000c0)={'sit0\x00', 0x0}) 16:09:16 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x2600}, 0x20) 16:09:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000480)={'veth0_vlan\x00', @ifru_flags=0x1}) 16:09:16 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, 0x0, 0x2e}, 0x20) 16:09:16 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='cachefiles_ondemand_fd_write\x00', r0}, 0x10) 16:09:16 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89ed, &(0x7f0000000080)) 16:09:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000002400)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 16:09:16 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2, 0x0, 0x0) 16:09:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}}, 0x0) 16:09:16 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x29, 0x4c, 0x0, 0x0) 16:09:17 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x40049409, 0x0) 16:09:17 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) pselect6(0x40, &(0x7f0000000000)={0x4}, &(0x7f00000001c0)={0x8}, &(0x7f0000000080), &(0x7f0000000100), 0x0) 16:09:17 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x21, 0x0, 0x0) 16:09:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f0000000340)) 16:09:17 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={0x0, 0x0, 0x1, "19"}, 0x9) 16:09:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 16:09:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x0, 0xa08}, 0x48) 16:09:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x14}, 0x48) 16:09:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}}, 0x0) 16:09:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000002340)={&(0x7f00000001c0), 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 16:09:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x29, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x180, 0x180, 0xffffffff, 0xa8, 0x0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast1, @icmp_id, @icmp_id}}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @private, @multicast1, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @private, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 16:09:18 executing program 5: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xfffffffe}, 0x8) 16:09:18 executing program 0: bpf$LINK_GET_FD_BY_ID(0x19, 0x0, 0x0) 16:09:18 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5421, &(0x7f0000000380)={'vcan0\x00'}) 16:09:18 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000006080)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x0) 16:09:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @broadcast}, 0x80) 16:09:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_sco(r0, 0x0, 0x0) 16:09:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:09:19 executing program 0: socket(0x25, 0x1, 0x5dc) 16:09:19 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000005a80)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000009}, 0x10, 0x0, 0x0, &(0x7f0000005d00)=ANY=[], 0xf}}], 0x1, 0x0) 16:09:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x4, &(0x7f0000000100)=@framed={{}, [@ldst]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:09:19 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x14, r0, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) 16:09:19 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x0, 0x10}, 0x48) 16:09:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 16:09:19 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x401c5820, 0x0) 16:09:19 executing program 2: clock_gettime(0x225ad57031408948, 0x0) 16:09:20 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xf, 0x0, 0x0) 16:09:20 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)) 16:09:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x6b, 0x0, 0x0) 16:09:20 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89b0, &(0x7f0000000380)={'vcan0\x00'}) 16:09:20 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000005a80)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000005d00)=ANY=[], 0xf}}], 0x1, 0x4) 16:09:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 16:09:20 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x68}]}}}], 0x18}}], 0x1, 0x0) 16:09:20 executing program 4: syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), 0xffffffffffffffff) 16:09:20 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x8902, &(0x7f0000000080)) 16:09:20 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f00000000c0)) 16:09:20 executing program 2: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x2, &(0x7f00000000c0)) 16:09:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x541b, &(0x7f00000000c0)={'sit0\x00', 0x0}) 16:09:21 executing program 3: bpf$BPF_PROG_QUERY(0x4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) 16:09:21 executing program 4: bpf$BPF_PROG_QUERY(0x7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) 16:09:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 16:09:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x8953, 0x0) 16:09:21 executing program 2: r0 = socket(0x1, 0x3, 0x0) bind$xdp(r0, &(0x7f00000000c0), 0x10) 16:09:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x6, &(0x7f0000000040)={&(0x7f0000000000)='ext4_mballoc_prealloc\x00'}, 0xfe1) 16:09:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 16:09:21 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8982, 0x0) 16:09:21 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) 16:09:22 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x20) 16:09:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', 0x0}) 16:09:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001540)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001580)={0x1d, r2, 0x3, {0x0, 0xf0}}, 0x18) 16:09:22 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_proto_private(r0, 0xc0189436, &(0x7f0000000080)) 16:09:22 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8904, &(0x7f0000000380)={'vcan0\x00'}) 16:09:22 executing program 1: bpf$LINK_GET_FD_BY_ID(0xd, &(0x7f0000003e00)=0xffffffffffffffff, 0x4) 16:09:22 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x9, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}]}, 0x20}}, 0x0) 16:09:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0xffffff02, 0x4) 16:09:22 executing program 0: unshare(0x40500) 16:09:22 executing program 3: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000840)={'tunl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}) 16:09:23 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000006080)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000006280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}], 0xf}}], 0x1, 0x0) 16:09:23 executing program 1: getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0) 16:09:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x8915, &(0x7f00000000c0)={'sit0\x00', 0x0}) 16:09:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18}], 0x18}, 0x0) 16:09:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0xc, 0x0, 0x0) 16:09:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 16:09:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x24, 0x0, 0x0) 16:09:23 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="b3eaeeba2f3008fdfa5947d6cf3f726e", 0x10}], 0x1}}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001340)="e9", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x40000000000016e, 0x0) 16:09:23 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38810a10e511272b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:09:23 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8905, &(0x7f0000000380)={'vcan0\x00'}) 16:09:23 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000000)) 16:09:24 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 16:09:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x21, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x180, 0x180, 0xffffffff, 0xa8, 0x0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast1, @icmp_id, @icmp_id}}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @private, @multicast1, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @private, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 16:09:24 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0xe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xb}, @sadb_spirange={0x2}]}, 0x30}}, 0x0) 16:09:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8906, 0x0) 16:09:24 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x29, 0x0, 0x0) 16:09:24 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x1404, 0xffff}, 0x10}}, 0x0) 16:09:24 executing program 4: socketpair(0x2, 0x3, 0x1, &(0x7f0000000280)) 16:09:24 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x3a) 16:09:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x19, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x180, 0x180, 0xffffffff, 0xa8, 0x0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast1, @icmp_id, @icmp_id}}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @private, @multicast1, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @private, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 16:09:25 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'gretap0\x00', 0x0}) 16:09:25 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x45}]}}, &(0x7f0000000100)=""/210, 0x2a, 0xd2, 0x1}, 0x20) 16:09:25 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x24, 0x0, 0x0) 16:09:25 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8970, &(0x7f0000000380)={'vcan0\x00'}) 16:09:25 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0xc0}, 0x10}}, 0x0) 16:09:25 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0x63}}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0xf, 0x0}}], 0x2, 0x0) 16:09:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 16:09:25 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8918, &(0x7f0000000280)={'vxcan1\x00'}) 16:09:25 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3ff}], &(0x7f0000000080)='syzkaller\x00', 0xa85d, 0x52, &(0x7f00000000c0)=""/82, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x3, 0x1, 0x5}, 0x10}, 0x80) 16:09:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x890b, &(0x7f0000000280)={'veth0_to_bridge\x00', @ifru_ivalue}) 16:09:26 executing program 3: r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, r0) 16:09:26 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0xc020660b, 0x0) 16:09:26 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0x8f, 0x47, 0xa, 0x10, 0x572, 0xc689, 0x4f0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xaf, 0x6b, 0xc5, 0x0, [], [{}]}}]}}]}}, 0x0) 16:09:26 executing program 5: socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:26 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:26 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:26 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) [ 886.674339][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 886.714019][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:09:26 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:27 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f0000000700)=ANY=[], 0x7fffffff) [ 886.992270][ T3595] usb 3-1: new high-speed USB device number 14 using dummy_hcd 16:09:27 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 887.045124][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 887.232072][ T3595] usb 3-1: Using ep0 maxpacket: 16 16:09:27 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) [ 887.260717][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 16:09:27 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 887.363094][ T3595] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 16:09:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 887.555043][ T3595] usb 3-1: New USB device found, idVendor=0572, idProduct=c689, bcdDevice=4f.0a [ 887.564639][ T3595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.573044][ T3595] usb 3-1: Product: syz [ 887.577417][ T3595] usb 3-1: Manufacturer: syz [ 887.582333][ T3595] usb 3-1: SerialNumber: syz [ 887.650401][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 887.703368][ T3595] usb 3-1: config 0 descriptor?? [ 887.755247][ T3595] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 16:09:27 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) [ 887.805141][ T3595] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 887.812308][ T3595] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 887.942741][ T3595] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 887.949462][ T3595] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 888.022758][ T3595] usb 3-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230C' in warm state [ 888.047900][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 888.077325][ T3595] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 888.089073][ T3595] dvbdev: DVB: registering new adapter (MyGica Mini DVB-(T/T2/C) USB Stick T230C) [ 888.098721][ T3595] usb 3-1: media controller created [ 888.272473][ T3595] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. 16:09:28 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) 16:09:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0xe, 0x8, "1639290b5239a7e101662d2bbf9e5e26937ebf82366f3952dcadd5df7575f7c136d82333dcfcfc59dc59e3e48b651d2d9525516b2402ffefb16bc22c116e6cec", "9062ae7f6ebfe21f82670119627c4980ed9d4fafe58f483e932357a9f542b4427a7e42051679b89bf6c9b315bbc4d0d90b0a26d9635bb24f0eba9167d9084b99", "fdad8d44f3635c68ccab46cc4f699a98120ae68ed596d8474bbca5a88ae98a33", [0x7f]}}) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) 16:09:28 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0xe, 0x8, "1639290b5239a7e101662d2bbf9e5e26937ebf82366f3952dcadd5df7575f7c136d82333dcfcfc59dc59e3e48b651d2d9525516b2402ffefb16bc22c116e6cec", "9062ae7f6ebfe21f82670119627c4980ed9d4fafe58f483e932357a9f542b4427a7e42051679b89bf6c9b315bbc4d0d90b0a26d9635bb24f0eba9167d9084b99", "fdad8d44f3635c68ccab46cc4f699a98120ae68ed596d8474bbca5a88ae98a33", [0x7f]}}) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) 16:09:28 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 888.773411][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:09:29 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) (fail_nth: 1) [ 889.047643][T12367] loop7: detected capacity change from 0 to 1036 [ 889.143540][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 889.243890][ C0] blk_print_req_error: 6 callbacks suppressed [ 889.243966][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 889.261444][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 889.271062][ C1] buffer_io_error: 6 callbacks suppressed [ 889.271122][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 889.543207][ T3595] usb 3-1: USB disconnect, device number 14 [ 889.601512][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 889.762870][T12378] FAULT_INJECTION: forcing a failure. [ 889.762870][T12378] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 889.777060][T12378] CPU: 1 PID: 12378 Comm: syz-executor.5 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 889.787860][T12378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 889.798154][T12378] Call Trace: [ 889.801604][T12378] [ 889.804710][T12378] dump_stack_lvl+0x1c8/0x256 [ 889.809720][T12378] dump_stack+0x1a/0x1c [ 889.814173][T12378] should_fail+0x757/0x810 [ 889.818896][T12378] should_fail_usercopy+0x2a/0x30 [ 889.824213][T12378] _copy_from_user+0x2f/0x160 [ 889.829228][T12378] __get_compat_msghdr+0x77/0x750 [ 889.834562][T12378] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 889.841112][T12378] ? get_compat_msghdr+0x65/0x1c0 [ 889.846444][T12378] get_compat_msghdr+0x8c/0x1c0 [ 889.851594][T12378] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 889.857705][T12378] ___sys_sendmsg+0x19b/0x350 [ 889.862669][T12378] ? __rcu_read_unlock+0x76/0xd0 [ 889.867946][T12378] ? __fget_files+0x4a8/0x510 [ 889.872920][T12378] ? kmsan_get_metadata+0x33/0x220 [ 889.878297][T12378] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 889.884402][T12378] __sys_sendmsg+0x258/0x440 [ 889.889258][T12378] ? kmsan_get_metadata+0x33/0x220 [ 889.894647][T12378] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 889.900766][T12378] __ia32_compat_sys_sendmsg+0x99/0xe0 [ 889.906511][T12378] __do_fast_syscall_32+0x87/0xe0 [ 889.911802][T12378] do_fast_syscall_32+0x33/0x70 [ 889.916902][T12378] do_SYSENTER_32+0x1b/0x20 [ 889.921661][T12378] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 889.928324][T12378] RIP: 0023:0xf7fdd549 [ 889.932637][T12378] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 889.952544][T12378] RSP: 002b:00000000f7f965cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 889.961258][T12378] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 889.969465][T12378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 889.977695][T12378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 889.985902][T12378] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 889.994102][T12378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 890.002325][T12378] [ 890.521670][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 890.531367][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 890.540521][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 890.550238][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 890.572706][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 890.582439][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 890.598808][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 890.608547][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 890.619456][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 890.629152][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 890.640310][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 890.650012][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 890.670495][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 890.680196][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 890.718226][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 890.728015][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 890.737079][ T2848] ldm_validate_partition_table(): Disk read failed. [ 890.746828][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 890.764614][ T2848] Dev loop7: unable to read RDB block 0 [ 890.776676][ T2848] loop7: unable to read partition table 16:09:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) (fail_nth: 1) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:09:31 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) 16:09:31 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (fail_nth: 1) 16:09:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0xe, 0x8, "1639290b5239a7e101662d2bbf9e5e26937ebf82366f3952dcadd5df7575f7c136d82333dcfcfc59dc59e3e48b651d2d9525516b2402ffefb16bc22c116e6cec", "9062ae7f6ebfe21f82670119627c4980ed9d4fafe58f483e932357a9f542b4427a7e42051679b89bf6c9b315bbc4d0d90b0a26d9635bb24f0eba9167d9084b99", "fdad8d44f3635c68ccab46cc4f699a98120ae68ed596d8474bbca5a88ae98a33", [0x7f]}}) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) 16:09:31 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:31 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) (fail_nth: 2) [ 891.429605][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:09:31 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) 16:09:31 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (fail_nth: 2) 16:09:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0xe, 0x8, "1639290b5239a7e101662d2bbf9e5e26937ebf82366f3952dcadd5df7575f7c136d82333dcfcfc59dc59e3e48b651d2d9525516b2402ffefb16bc22c116e6cec", "9062ae7f6ebfe21f82670119627c4980ed9d4fafe58f483e932357a9f542b4427a7e42051679b89bf6c9b315bbc4d0d90b0a26d9635bb24f0eba9167d9084b99", "fdad8d44f3635c68ccab46cc4f699a98120ae68ed596d8474bbca5a88ae98a33", [0x7f]}}) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) 16:09:31 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:32 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) (fail_nth: 3) [ 891.914478][T12394] ERROR: Out of memory at tomoyo_realpath_from_path. 16:09:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) (fail_nth: 2) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:09:32 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) 16:09:32 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (fail_nth: 3) [ 892.369193][T12402] __nla_validate_parse: 1 callbacks suppressed [ 892.369263][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 892.393334][T12404] loop7: detected capacity change from 0 to 1036 [ 892.506934][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 892.692585][ T2848] ldm_validate_partition_table(): Disk read failed. [ 892.739289][ T2848] Dev loop7: unable to read RDB block 0 [ 892.773995][ T2848] loop7: unable to read partition table [ 892.777388][T12413] FAULT_INJECTION: forcing a failure. [ 892.777388][T12413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.793865][T12413] CPU: 0 PID: 12413 Comm: syz-executor.1 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 892.804650][T12413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 892.814930][T12413] Call Trace: [ 892.818391][T12413] [ 892.821493][T12413] dump_stack_lvl+0x1c8/0x256 [ 892.826495][T12413] dump_stack+0x1a/0x1c [ 892.830954][T12413] should_fail+0x757/0x810 16:09:32 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) [ 892.835687][T12413] should_fail_usercopy+0x2a/0x30 [ 892.841004][T12413] _copy_from_user+0x2f/0x160 [ 892.845964][T12413] kstrtouint_from_user+0x7f/0x160 [ 892.851371][T12413] ? fsnotify_perm+0xa1/0x8f0 [ 892.856424][T12413] ? vfs_write+0x588/0x1810 [ 892.861267][T12413] proc_fail_nth_write+0x6b/0x310 [ 892.866609][T12413] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 892.872717][T12413] ? proc_fail_nth_read+0x2f0/0x2f0 [ 892.878236][T12413] vfs_write+0x588/0x1810 [ 892.882878][T12413] ? kmsan_internal_set_shadow_origin+0x62/0xe0 16:09:32 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (fail_nth: 4) [ 892.889417][T12413] ? kmsan_get_metadata+0x33/0x220 [ 892.894830][T12413] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 892.900977][T12413] ksys_write+0x21b/0x4e0 [ 892.905620][T12413] __ia32_sys_write+0x8d/0xd0 [ 892.910692][T12413] __do_fast_syscall_32+0x87/0xe0 [ 892.916012][T12413] do_fast_syscall_32+0x33/0x70 [ 892.921135][T12413] do_SYSENTER_32+0x1b/0x20 [ 892.925913][T12413] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 892.932572][T12413] RIP: 0023:0xf7f36549 [ 892.936886][T12413] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 892.956789][T12413] RSP: 002b:00000000f7f31600 EFLAGS: 00000282 ORIG_RAX: 0000000000000004 [ 892.965511][T12413] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f7f31690 [ 892.973719][T12413] RDX: 0000000000000001 RSI: 00000000f6f37000 RDI: 0000000000000000 [ 892.981923][T12413] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 892.990100][T12413] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 892.998275][T12413] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 893.006481][T12413] 16:09:33 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:33 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) (fail_nth: 4) 16:09:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:09:33 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201100362e2ee929219560abe9f38feda4890e07e8f68e688033c3888830990c046b2f1b2c1425e12b945133cebb0c63c88f660a18bf06f929ddd9adb3ec1385d28bcdd362aeb44ad4e17d1ddfcac75ca40658c15cf090b09236e1144d441c85fc259fca38fe147d62574f6a5eee44c0b1b5ee234efa8e5608b5acf"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x57, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x8, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "e8b790240f64"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0x5f6, 0x6}, [@acm={0x4, 0x24, 0x2, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x81, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x3f, 0x4, 0x7, 0x8, 0x2}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x801}}, {0x9a, &(0x7f00000001c0)=@string={0x9a, 0x3, "79200a2595426025d7d0800d4eb22eac7328e49310bfcf12f0fc8faed37da371b4bccda2fb22ef42220beb9254a3e75b5da770b98db4f490f6bf03e530b96df4d469c4aae0a86f12bb1b32bce2070c356c56bd61bb54c6533a179fd0bab03e436e623c0279ef5daffa8d0b8e789440673e72f6faddf18a81616ab05268b09c5865e05dd9be2932ef1af5f2e5c103060d3ea6fa59da53c96b"}}, {0x2c, &(0x7f0000000280)=@string={0x2c, 0x3, "dcc738809e716151fd9757e3494f029aa958cab0492fedb60a64155c167f8ca5be5060ad91a896892010"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x500a}}]}) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8001, 0x5500}) 16:09:33 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (fail_nth: 5) 16:09:33 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) [ 893.770782][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 893.849938][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 893.856802][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 [ 893.898211][T12431] FAULT_INJECTION: forcing a failure. [ 893.898211][T12431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.907505][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 893.911965][T12431] CPU: 0 PID: 12431 Comm: syz-executor.5 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 893.931660][T12431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 893.941934][T12431] Call Trace: [ 893.945377][T12431] [ 893.948481][T12431] dump_stack_lvl+0x1c8/0x256 [ 893.953471][T12431] dump_stack+0x1a/0x1c [ 893.957907][T12431] should_fail+0x757/0x810 [ 893.962722][T12431] should_fail_usercopy+0x2a/0x30 [ 893.968028][T12431] _copy_from_iter+0x34a/0x1e60 [ 893.973232][T12431] ? kmsan_get_metadata+0x33/0x220 [ 893.978693][T12431] netlink_sendmsg+0xed8/0x1440 [ 893.983880][T12431] ? netlink_getsockopt+0xcd0/0xcd0 [ 893.989408][T12431] ____sys_sendmsg+0xabc/0xe90 [ 893.994450][T12431] ___sys_sendmsg+0x2a5/0x350 [ 893.999486][T12431] ? __fget_files+0x4a8/0x510 [ 894.004439][T12431] ? kmsan_get_metadata+0x33/0x220 [ 894.009812][T12431] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 894.015896][T12431] __sys_sendmsg+0x258/0x440 [ 894.020757][T12431] __ia32_compat_sys_sendmsg+0x99/0xe0 [ 894.026477][T12431] __do_fast_syscall_32+0x87/0xe0 [ 894.031777][T12431] do_fast_syscall_32+0x33/0x70 [ 894.036881][T12431] do_SYSENTER_32+0x1b/0x20 [ 894.041627][T12431] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 894.048272][T12431] RIP: 0023:0xf7fdd549 [ 894.052547][T12431] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 894.072523][T12431] RSP: 002b:00000000f7f965cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 894.081211][T12431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 894.089387][T12431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 894.097554][T12431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 894.105723][T12431] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 894.113891][T12431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 894.122090][T12431] [ 894.213136][ T3595] usb 5-1: new high-speed USB device number 10 using dummy_hcd 16:09:34 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:34 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) (fail_nth: 5) [ 894.423171][ T3595] usb 5-1: device descriptor read/64, error 18 16:09:34 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (fail_nth: 6) 16:09:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x2, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:09:34 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 894.692245][ T3595] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 894.892486][ T3595] usb 5-1: device descriptor read/64, error 18 16:09:35 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:35 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (fail_nth: 7) [ 895.032804][ T3595] usb usb5-port1: attempt power cycle 16:09:35 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 16:09:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x10, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 895.389080][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 895.458531][ T3595] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 895.552541][ T3595] usb 5-1: Invalid ep0 maxpacket: 146 [ 895.712938][ T3595] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 895.813300][ T3595] usb 5-1: Invalid ep0 maxpacket: 146 [ 895.823445][ T3595] usb usb5-port1: unable to enumerate USB device 16:09:36 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201100362e2ee929219560abe9f38feda4890e07e8f68e688033c3888830990c046b2f1b2c1425e12b945133cebb0c63c88f660a18bf06f929ddd9adb3ec1385d28bcdd362aeb44ad4e17d1ddfcac75ca40658c15cf090b09236e1144d441c85fc259fca38fe147d62574f6a5eee44c0b1b5ee234efa8e5608b5acf"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x57, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x8, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "e8b790240f64"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0x5f6, 0x6}, [@acm={0x4, 0x24, 0x2, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x81, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x3f, 0x4, 0x7, 0x8, 0x2}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x801}}, {0x9a, &(0x7f00000001c0)=@string={0x9a, 0x3, "79200a2595426025d7d0800d4eb22eac7328e49310bfcf12f0fc8faed37da371b4bccda2fb22ef42220beb9254a3e75b5da770b98db4f490f6bf03e530b96df4d469c4aae0a86f12bb1b32bce2070c356c56bd61bb54c6533a179fd0bab03e436e623c0279ef5daffa8d0b8e789440673e72f6faddf18a81616ab05268b09c5865e05dd9be2932ef1af5f2e5c103060d3ea6fa59da53c96b"}}, {0x2c, &(0x7f0000000280)=@string={0x2c, 0x3, "dcc738809e716151fd9757e3494f029aa958cab0492fedb60a64155c167f8ca5be5060ad91a896892010"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x500a}}]}) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8001, 0x5500}) 16:09:36 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (fail_nth: 8) 16:09:36 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x301, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:09:36 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 16:09:36 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) (fail_nth: 6) [ 896.955622][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 897.031125][T12467] FAULT_INJECTION: forcing a failure. [ 897.031125][T12467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 897.044910][T12467] CPU: 0 PID: 12467 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 897.055697][T12467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 897.065986][T12467] Call Trace: [ 897.069445][T12467] [ 897.072544][T12467] dump_stack_lvl+0x1c8/0x256 [ 897.077541][T12467] dump_stack+0x1a/0x1c [ 897.081991][T12467] should_fail+0x757/0x810 [ 897.086725][T12467] should_fail_usercopy+0x2a/0x30 [ 897.092053][T12467] _copy_to_user+0x30/0x100 [ 897.096827][T12467] simple_read_from_buffer+0x195/0x330 [ 897.102693][T12467] proc_fail_nth_read+0x1f3/0x2f0 [ 897.108043][T12467] ? proc_fault_inject_write+0x4c0/0x4c0 [ 897.113993][T12467] vfs_read+0x3a9/0x11b0 [ 897.118524][T12467] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 897.125057][T12467] ? kmsan_get_metadata+0x33/0x220 [ 897.130433][T12467] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 897.136549][T12467] ksys_read+0x21b/0x4e0 [ 897.141102][T12467] __ia32_sys_read+0x8d/0xd0 [ 897.145991][T12467] __do_fast_syscall_32+0x87/0xe0 [ 897.151284][T12467] do_fast_syscall_32+0x33/0x70 [ 897.156405][T12467] do_SYSENTER_32+0x1b/0x20 [ 897.161180][T12467] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 897.167848][T12467] RIP: 0023:0xf7f30549 16:09:37 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 897.172131][T12467] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 897.192202][T12467] RSP: 002b:00000000f7f2b600 EFLAGS: 00000282 ORIG_RAX: 0000000000000003 [ 897.200917][T12467] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f7f2b690 [ 897.209123][T12467] RDX: 000000000000000f RSI: 00000000f6f37000 RDI: 0000000000000000 [ 897.217321][T12467] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 16:09:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x125d, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 897.225514][T12467] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 897.233797][T12467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 897.242014][T12467] 16:09:37 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 16:09:37 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) (fail_nth: 7) 16:09:37 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 897.688032][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x125e, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 897.862209][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 898.065145][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 898.083371][ T25] usb 5-1: device descriptor read/64, error 18 [ 898.362044][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 898.575498][ T25] usb 5-1: device descriptor read/64, error 18 [ 898.702983][ T25] usb usb5-port1: attempt power cycle [ 899.152025][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 899.282636][ T25] usb 5-1: Invalid ep0 maxpacket: 146 [ 899.472214][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 899.572511][ T25] usb 5-1: Invalid ep0 maxpacket: 146 [ 899.578856][ T25] usb usb5-port1: unable to enumerate USB device 16:09:40 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201100362e2ee929219560abe9f38feda4890e07e8f68e688033c3888830990c046b2f1b2c1425e12b945133cebb0c63c88f660a18bf06f929ddd9adb3ec1385d28bcdd362aeb44ad4e17d1ddfcac75ca40658c15cf090b09236e1144d441c85fc259fca38fe147d62574f6a5eee44c0b1b5ee234efa8e5608b5acf"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x1, 0x57, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x8, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "e8b790240f64"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0x5f6, 0x6}, [@acm={0x4, 0x24, 0x2, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x81, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x3f, 0x4, 0x7, 0x8, 0x2}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x801}}, {0x9a, &(0x7f00000001c0)=@string={0x9a, 0x3, "79200a2595426025d7d0800d4eb22eac7328e49310bfcf12f0fc8faed37da371b4bccda2fb22ef42220beb9254a3e75b5da770b98db4f490f6bf03e530b96df4d469c4aae0a86f12bb1b32bce2070c356c56bd61bb54c6533a179fd0bab03e436e623c0279ef5daffa8d0b8e789440673e72f6faddf18a81616ab05268b09c5865e05dd9be2932ef1af5f2e5c103060d3ea6fa59da53c96b"}}, {0x2c, &(0x7f0000000280)=@string={0x2c, 0x3, "dcc738809e716151fd9757e3494f029aa958cab0492fedb60a64155c167f8ca5be5060ad91a896892010"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x500a}}]}) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8001, 0x5500}) 16:09:40 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:40 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 16:09:40 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0x1fffff, 0x0, 0x31, 0xffffffffffffffff, 0x0) 16:09:40 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) (fail_nth: 8) 16:09:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x125f, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 900.744321][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 900.864071][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:41 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e002, 0x0, 0x31, 0xffffffffffffffff, 0x0) 16:09:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x1260, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:09:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x890b, 0x0) 16:09:41 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:41 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) (fail_nth: 9) [ 901.602786][ T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd 16:09:41 executing program 3: socketpair$nbd(0x1, 0x1, 0x300, &(0x7f0000000240)) [ 901.687802][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 901.793428][ T25] usb 5-1: device descriptor read/64, error 18 [ 901.990843][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 902.076451][ T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 902.275298][ T25] usb 5-1: device descriptor read/64, error 18 [ 902.418262][ T25] usb usb5-port1: attempt power cycle [ 902.889392][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 903.002868][ T25] usb 5-1: Invalid ep0 maxpacket: 146 [ 903.172138][ T25] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 903.282421][ T25] usb 5-1: Invalid ep0 maxpacket: 146 [ 903.288774][ T25] usb usb5-port1: unable to enumerate USB device 16:09:44 executing program 4: socketpair(0x11, 0x2, 0x40, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) 16:09:44 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e003, 0x0, 0x31, 0xffffffffffffffff, 0x0) 16:09:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x1261, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:09:44 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:44 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891e, &(0x7f0000000380)={'vcan0\x00'}) 16:09:44 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) (fail_nth: 10) [ 904.477402][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:09:44 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e004, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 904.593659][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x1262, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:09:44 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x2, &(0x7f0000000380)={'vcan0\x00'}) 16:09:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {0x28}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}}, 0x0) 16:09:45 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) (fail_nth: 11) 16:09:45 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e0fe, 0x0, 0x31, 0xffffffffffffffff, 0x0) 16:09:45 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x890d, 0x0) 16:09:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x1263, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:09:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) [ 905.559317][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 905.881329][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:46 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xdfffe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 16:09:46 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89a0, 0x0) 16:09:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x1264, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:09:46 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@remote, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "2ab6ef", 0x10, 0x0, 0x0, @local, @remote, {[@dstopts={0x2c}, @hopopts]}}}}}, 0x0) 16:09:46 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) (fail_nth: 12) 16:09:46 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:46 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xffffe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 16:09:46 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) 16:09:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x1265, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 906.704228][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:09:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @private0}}]}, 0x30}}, 0x0) [ 906.858055][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:47 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) (fail_nth: 13) 16:09:47 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 16:09:47 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x40cd898, 0x0, 0x0) 16:09:47 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) 16:09:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x1267, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:09:47 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) [ 907.810093][T12589] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:09:48 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:48 executing program 3: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001b40), 0x0, 0x0) 16:09:48 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 16:09:48 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000780), 0x290100, 0x0) 16:09:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x1268, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:09:48 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) (fail_nth: 14) 16:09:48 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) 16:09:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) getrlimit(0x3, &(0x7f00000030c0)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd261740002800100064011eb04f801", 0x17}], 0x0, &(0x7f0000000180)) 16:09:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 16:09:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x1269, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 908.728116][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:09:48 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:49 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) (fail_nth: 15) [ 909.181037][T12616] not chained 400000 origins [ 909.186723][T12616] CPU: 1 PID: 12616 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 909.197412][T12616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 909.207611][T12616] Call Trace: [ 909.210986][T12616] [ 909.214016][T12616] dump_stack_lvl+0x1c8/0x256 [ 909.218933][T12616] dump_stack+0x1a/0x1c [ 909.223296][T12616] kmsan_internal_chain_origin+0x78/0x120 [ 909.229216][T12616] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 909.235483][T12616] ? kmsan_get_metadata+0x33/0x220 [ 909.240950][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 909.247391][T12616] ? kmsan_get_metadata+0x33/0x220 [ 909.252693][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 909.258705][T12616] ? kmsan_get_metadata+0x33/0x220 [ 909.264009][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 909.270019][T12616] ? __get_compat_msghdr+0x5b/0x750 [ 909.275445][T12616] ? kmsan_get_metadata+0x33/0x220 [ 909.280761][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 909.286784][T12616] ? should_fail+0x3f/0x810 [ 909.291484][T12616] ? __stack_depot_save+0x21/0x4b0 [ 909.296785][T12616] ? kmsan_get_metadata+0x33/0x220 [ 909.302094][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 909.308542][T12616] ? kmsan_get_metadata+0x33/0x220 [ 909.313852][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 909.319868][T12616] __msan_chain_origin+0xbd/0x140 [ 909.325085][T12616] __get_compat_msghdr+0x514/0x750 [ 909.330457][T12616] get_compat_msghdr+0x8c/0x1c0 [ 909.335525][T12616] ? ___sys_recvmsg+0xa9/0x890 [ 909.340456][T12616] ? do_recvmmsg+0x63a/0x10a0 [ 909.345305][T12616] ___sys_recvmsg+0x19d/0x890 [ 909.350155][T12616] ? __rcu_read_unlock+0x76/0xd0 [ 909.355312][T12616] ? kmsan_get_metadata+0x33/0x220 [ 909.360611][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 909.366620][T12616] do_recvmmsg+0x63a/0x10a0 [ 909.371318][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 909.377766][T12616] ? __sys_recvmmsg+0x52/0x450 [ 909.382699][T12616] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 909.389321][T12616] __sys_recvmmsg+0x113/0x450 [ 909.394161][T12616] ? kmsan_get_metadata+0x33/0x220 [ 909.399489][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 909.405932][T12616] __do_fast_syscall_32+0x87/0xe0 [ 909.411128][T12616] ? exit_to_user_mode_prepare+0x119/0x220 [ 909.417117][T12616] do_fast_syscall_32+0x33/0x70 [ 909.422139][T12616] do_SYSENTER_32+0x1b/0x20 [ 909.426800][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 909.433369][T12616] RIP: 0023:0xf7fc5549 [ 909.437565][T12616] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 909.457414][T12616] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 909.466017][T12616] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 909.474146][T12616] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 909.482288][T12616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 909.490401][T12616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.498518][T12616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 909.506663][T12616] [ 909.510010][T12616] Uninit was stored to memory at: [ 909.515397][T12616] __get_compat_msghdr+0x514/0x750 [ 909.520724][T12616] get_compat_msghdr+0x8c/0x1c0 [ 909.525901][T12616] ___sys_recvmsg+0x19d/0x890 [ 909.530741][T12616] do_recvmmsg+0x63a/0x10a0 [ 909.535503][T12616] __sys_recvmmsg+0x113/0x450 [ 909.540337][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 909.546882][T12616] __do_fast_syscall_32+0x87/0xe0 [ 909.552221][T12616] do_fast_syscall_32+0x33/0x70 [ 909.557235][T12616] do_SYSENTER_32+0x1b/0x20 [ 909.561996][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 909.568551][T12616] [ 909.570961][T12616] Uninit was stored to memory at: [ 909.576310][T12616] __get_compat_msghdr+0x514/0x750 [ 909.581637][T12616] get_compat_msghdr+0x8c/0x1c0 [ 909.586876][T12616] ___sys_recvmsg+0x19d/0x890 [ 909.591823][T12616] do_recvmmsg+0x63a/0x10a0 [ 909.596494][T12616] __sys_recvmmsg+0x113/0x450 [ 909.601328][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 909.607887][T12616] __do_fast_syscall_32+0x87/0xe0 [ 909.613182][T12616] do_fast_syscall_32+0x33/0x70 [ 909.618187][T12616] do_SYSENTER_32+0x1b/0x20 [ 909.622962][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 909.629541][T12616] 16:09:49 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:49 executing program 4: r0 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0xfffffffffffffffd) [ 909.632045][T12616] Uninit was stored to memory at: [ 909.637310][T12616] __get_compat_msghdr+0x514/0x750 [ 909.642724][T12616] get_compat_msghdr+0x8c/0x1c0 [ 909.647786][T12616] ___sys_recvmsg+0x19d/0x890 [ 909.652718][T12616] do_recvmmsg+0x63a/0x10a0 [ 909.657403][T12616] __sys_recvmmsg+0x113/0x450 [ 909.662340][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 909.668773][T12616] __do_fast_syscall_32+0x87/0xe0 [ 909.674062][T12616] do_fast_syscall_32+0x33/0x70 [ 909.679069][T12616] do_SYSENTER_32+0x1b/0x20 [ 909.683842][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 909.690404][T12616] [ 909.692912][T12616] Uninit was stored to memory at: [ 909.698159][T12616] __get_compat_msghdr+0x514/0x750 [ 909.703575][T12616] get_compat_msghdr+0x8c/0x1c0 [ 909.708631][T12616] ___sys_recvmsg+0x19d/0x890 [ 909.713561][T12616] do_recvmmsg+0x63a/0x10a0 [ 909.718215][T12616] __sys_recvmmsg+0x113/0x450 [ 909.723141][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 909.729561][T12616] __do_fast_syscall_32+0x87/0xe0 [ 909.734849][T12616] do_fast_syscall_32+0x33/0x70 [ 909.739872][T12616] do_SYSENTER_32+0x1b/0x20 [ 909.744624][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 909.751190][T12616] [ 909.753696][T12616] Uninit was stored to memory at: [ 909.758955][T12616] __get_compat_msghdr+0x514/0x750 [ 909.764368][T12616] get_compat_msghdr+0x8c/0x1c0 [ 909.769420][T12616] ___sys_recvmsg+0x19d/0x890 [ 909.774354][T12616] do_recvmmsg+0x63a/0x10a0 [ 909.779013][T12616] __sys_recvmmsg+0x113/0x450 [ 909.783952][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 909.790382][T12616] __do_fast_syscall_32+0x87/0xe0 [ 909.795679][T12616] do_fast_syscall_32+0x33/0x70 [ 909.800695][T12616] do_SYSENTER_32+0x1b/0x20 [ 909.805464][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 909.812119][T12616] [ 909.814520][T12616] Uninit was stored to memory at: [ 909.819770][T12616] __get_compat_msghdr+0x514/0x750 [ 909.825187][T12616] get_compat_msghdr+0x8c/0x1c0 [ 909.830254][T12616] ___sys_recvmsg+0x19d/0x890 [ 909.835178][T12616] do_recvmmsg+0x63a/0x10a0 [ 909.839837][T12616] __sys_recvmmsg+0x113/0x450 [ 909.844761][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 909.851189][T12616] __do_fast_syscall_32+0x87/0xe0 [ 909.856472][T12616] do_fast_syscall_32+0x33/0x70 [ 909.861521][T12616] do_SYSENTER_32+0x1b/0x20 [ 909.866274][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 909.872989][T12616] [ 909.875455][T12616] Uninit was stored to memory at: 16:09:50 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfe, 0x31, 0xffffffffffffffff, 0x0) [ 909.880710][T12616] __get_compat_msghdr+0x514/0x750 [ 909.886192][T12616] get_compat_msghdr+0x8c/0x1c0 [ 909.891278][T12616] ___sys_recvmsg+0x19d/0x890 [ 909.896257][T12616] do_recvmmsg+0x63a/0x10a0 [ 909.900918][T12616] __sys_recvmmsg+0x113/0x450 [ 909.905911][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 909.912519][T12616] __do_fast_syscall_32+0x87/0xe0 [ 909.917715][T12616] do_fast_syscall_32+0x33/0x70 [ 909.922879][T12616] do_SYSENTER_32+0x1b/0x20 [ 909.927531][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 909.934233][T12616] [ 909.936662][T12616] Local variable msg_sys created at: [ 909.942242][T12616] do_recvmmsg+0x5f/0x10a0 [ 909.946818][T12616] __sys_recvmmsg+0x113/0x450 16:09:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x1274, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 910.374258][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 910.546189][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:09:50 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x204, 0x31, 0xffffffffffffffff, 0x0) 16:09:50 executing program 4: mq_notify(0xffffffffffffffff, &(0x7f0000000600)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) 16:09:50 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 911.114834][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 911.479000][T12616] not chained 410000 origins [ 911.484191][T12616] CPU: 0 PID: 12616 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 911.494881][T12616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 911.505075][T12616] Call Trace: [ 911.508456][T12616] [ 911.511484][T12616] dump_stack_lvl+0x1c8/0x256 [ 911.516385][T12616] dump_stack+0x1a/0x1c [ 911.520758][T12616] kmsan_internal_chain_origin+0x78/0x120 [ 911.526664][T12616] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 911.532921][T12616] ? kmsan_get_metadata+0x33/0x220 [ 911.538211][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 911.544653][T12616] ? kmsan_get_metadata+0x33/0x220 [ 911.549948][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 911.555942][T12616] ? kmsan_get_metadata+0x33/0x220 [ 911.561226][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 911.567227][T12616] ? __get_compat_msghdr+0x5b/0x750 [ 911.572637][T12616] ? kmsan_get_metadata+0x33/0x220 [ 911.577935][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 911.583962][T12616] ? should_fail+0x3f/0x810 [ 911.588650][T12616] ? __stack_depot_save+0x21/0x4b0 [ 911.593943][T12616] ? kmsan_get_metadata+0x33/0x220 [ 911.599238][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 911.605764][T12616] ? kmsan_get_metadata+0x33/0x220 [ 911.611076][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 911.617077][T12616] __msan_chain_origin+0xbd/0x140 [ 911.622285][T12616] __get_compat_msghdr+0x514/0x750 [ 911.627651][T12616] get_compat_msghdr+0x8c/0x1c0 [ 911.632711][T12616] ? ___sys_recvmsg+0xa9/0x890 [ 911.637636][T12616] ? do_recvmmsg+0x63a/0x10a0 [ 911.642483][T12616] ___sys_recvmsg+0x19d/0x890 [ 911.647340][T12616] ? __schedule+0x1609/0x21d0 [ 911.652197][T12616] ? kmsan_get_metadata+0x33/0x220 [ 911.657496][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 911.663499][T12616] ? kmsan_get_metadata+0x33/0x220 [ 911.668799][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 911.674810][T12616] do_recvmmsg+0x63a/0x10a0 [ 911.679509][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 911.685953][T12616] ? __sys_recvmmsg+0x52/0x450 [ 911.690877][T12616] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 911.697487][T12616] __sys_recvmmsg+0x113/0x450 [ 911.702322][T12616] ? kmsan_get_metadata+0x33/0x220 [ 911.707629][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 911.714067][T12616] __do_fast_syscall_32+0x87/0xe0 [ 911.719259][T12616] ? exit_to_user_mode_prepare+0x119/0x220 [ 911.725249][T12616] do_fast_syscall_32+0x33/0x70 [ 911.730266][T12616] do_SYSENTER_32+0x1b/0x20 [ 911.734925][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 911.741489][T12616] RIP: 0023:0xf7fc5549 [ 911.745683][T12616] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 911.765492][T12616] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 911.774080][T12616] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 911.782229][T12616] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 911.790429][T12616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 911.798546][T12616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.806659][T12616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 911.814800][T12616] [ 911.826198][T12616] Uninit was stored to memory at: [ 911.831482][T12616] __get_compat_msghdr+0x514/0x750 [ 911.838117][T12616] get_compat_msghdr+0x8c/0x1c0 [ 911.843326][T12616] ___sys_recvmsg+0x19d/0x890 [ 911.848171][T12616] do_recvmmsg+0x63a/0x10a0 [ 911.853094][T12616] __sys_recvmmsg+0x113/0x450 [ 911.857960][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 911.864523][T12616] __do_fast_syscall_32+0x87/0xe0 [ 911.869724][T12616] do_fast_syscall_32+0x33/0x70 [ 911.874880][T12616] do_SYSENTER_32+0x1b/0x20 [ 911.879543][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 911.886252][T12616] [ 911.888661][T12616] Uninit was stored to memory at: [ 911.894050][T12616] __get_compat_msghdr+0x514/0x750 [ 911.899393][T12616] get_compat_msghdr+0x8c/0x1c0 [ 911.904576][T12616] ___sys_recvmsg+0x19d/0x890 [ 911.909418][T12616] do_recvmmsg+0x63a/0x10a0 [ 911.914224][T12616] __sys_recvmmsg+0x113/0x450 [ 911.919064][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 911.925636][T12616] __do_fast_syscall_32+0x87/0xe0 [ 911.930838][T12616] do_fast_syscall_32+0x33/0x70 [ 911.935989][T12616] do_SYSENTER_32+0x1b/0x20 [ 911.940674][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 911.947371][T12616] [ 911.949784][T12616] Uninit was stored to memory at: [ 911.955176][T12616] __get_compat_msghdr+0x514/0x750 [ 911.960504][T12616] get_compat_msghdr+0x8c/0x1c0 [ 911.965711][T12616] ___sys_recvmsg+0x19d/0x890 [ 911.970555][T12616] do_recvmmsg+0x63a/0x10a0 [ 911.975333][T12616] __sys_recvmmsg+0x113/0x450 [ 911.980175][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 911.986743][T12616] __do_fast_syscall_32+0x87/0xe0 [ 911.992074][T12616] do_fast_syscall_32+0x33/0x70 [ 911.997177][T12616] do_SYSENTER_32+0x1b/0x20 [ 912.001964][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 912.008524][T12616] [ 912.010932][T12616] Uninit was stored to memory at: [ 912.016329][T12616] __get_compat_msghdr+0x514/0x750 [ 912.021665][T12616] get_compat_msghdr+0x8c/0x1c0 [ 912.026851][T12616] ___sys_recvmsg+0x19d/0x890 [ 912.031860][T12616] do_recvmmsg+0x63a/0x10a0 [ 912.036546][T12616] __sys_recvmmsg+0x113/0x450 [ 912.041381][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 912.048042][T12616] __do_fast_syscall_32+0x87/0xe0 [ 912.053381][T12616] do_fast_syscall_32+0x33/0x70 [ 912.058403][T12616] do_SYSENTER_32+0x1b/0x20 [ 912.063196][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 912.069764][T12616] [ 912.072309][T12616] Uninit was stored to memory at: [ 912.077570][T12616] __get_compat_msghdr+0x514/0x750 [ 912.083018][T12616] get_compat_msghdr+0x8c/0x1c0 [ 912.088074][T12616] ___sys_recvmsg+0x19d/0x890 [ 912.093129][T12616] do_recvmmsg+0x63a/0x10a0 [ 912.097786][T12616] __sys_recvmmsg+0x113/0x450 [ 912.102745][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 912.109180][T12616] __do_fast_syscall_32+0x87/0xe0 [ 912.114497][T12616] do_fast_syscall_32+0x33/0x70 [ 912.119536][T12616] do_SYSENTER_32+0x1b/0x20 [ 912.124396][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 912.130961][T12616] [ 912.133557][T12616] Uninit was stored to memory at: [ 912.138837][T12616] __get_compat_msghdr+0x514/0x750 [ 912.144358][T12616] get_compat_msghdr+0x8c/0x1c0 [ 912.149416][T12616] ___sys_recvmsg+0x19d/0x890 [ 912.154450][T12616] do_recvmmsg+0x63a/0x10a0 [ 912.159115][T12616] __sys_recvmmsg+0x113/0x450 [ 912.164148][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 912.170658][T12616] __do_fast_syscall_32+0x87/0xe0 [ 912.176093][T12616] do_fast_syscall_32+0x33/0x70 [ 912.181109][T12616] do_SYSENTER_32+0x1b/0x20 [ 912.185967][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 912.192659][T12616] [ 912.195065][T12616] Uninit was stored to memory at: [ 912.200318][T12616] __get_compat_msghdr+0x514/0x750 [ 912.205815][T12616] get_compat_msghdr+0x8c/0x1c0 [ 912.210873][T12616] ___sys_recvmsg+0x19d/0x890 [ 912.215908][T12616] do_recvmmsg+0x63a/0x10a0 [ 912.220573][T12616] __sys_recvmmsg+0x113/0x450 [ 912.225598][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 912.232148][T12616] __do_fast_syscall_32+0x87/0xe0 [ 912.237340][T12616] do_fast_syscall_32+0x33/0x70 [ 912.242538][T12616] do_SYSENTER_32+0x1b/0x20 [ 912.247197][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 912.253922][T12616] [ 912.256327][T12616] Local variable msg_sys created at: [ 912.261707][T12616] do_recvmmsg+0x5f/0x10a0 [ 912.266453][T12616] __sys_recvmmsg+0x113/0x450 [ 913.250976][T12616] not chained 420000 origins [ 913.256837][T12616] CPU: 1 PID: 12616 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 913.267523][T12616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 913.277725][T12616] Call Trace: [ 913.281105][T12616] [ 913.284133][T12616] dump_stack_lvl+0x1c8/0x256 [ 913.289031][T12616] dump_stack+0x1a/0x1c [ 913.293380][T12616] kmsan_internal_chain_origin+0x78/0x120 [ 913.299286][T12616] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 913.305551][T12616] ? kmsan_get_metadata+0x33/0x220 [ 913.310854][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 913.317382][T12616] ? kmsan_get_metadata+0x33/0x220 [ 913.322677][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 913.328686][T12616] ? kmsan_get_metadata+0x33/0x220 [ 913.333989][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 913.339988][T12616] ? __get_compat_msghdr+0x5b/0x750 [ 913.345400][T12616] ? kmsan_get_metadata+0x33/0x220 [ 913.350690][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 913.356687][T12616] ? should_fail+0x3f/0x810 [ 913.361376][T12616] ? __stack_depot_save+0x21/0x4b0 [ 913.366669][T12616] ? kmsan_get_metadata+0x33/0x220 [ 913.371967][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 913.378406][T12616] ? kmsan_get_metadata+0x33/0x220 [ 913.383725][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 913.389754][T12616] __msan_chain_origin+0xbd/0x140 [ 913.394971][T12616] __get_compat_msghdr+0x514/0x750 [ 913.400421][T12616] get_compat_msghdr+0x8c/0x1c0 [ 913.405493][T12616] ? ___sys_recvmsg+0xa9/0x890 [ 913.410419][T12616] ? do_recvmmsg+0x63a/0x10a0 [ 913.415266][T12616] ___sys_recvmsg+0x19d/0x890 [ 913.420126][T12616] ? __schedule+0x1609/0x21d0 [ 913.424984][T12616] ? kmsan_get_metadata+0x33/0x220 [ 913.430365][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 913.436392][T12616] ? kmsan_get_metadata+0x33/0x220 [ 913.441688][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 913.447693][T12616] do_recvmmsg+0x63a/0x10a0 [ 913.452411][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 913.458861][T12616] ? __sys_recvmmsg+0x52/0x450 [ 913.463793][T12616] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 913.470403][T12616] __sys_recvmmsg+0x113/0x450 [ 913.475238][T12616] ? kmsan_get_metadata+0x33/0x220 [ 913.480545][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 913.486991][T12616] __do_fast_syscall_32+0x87/0xe0 [ 913.492181][T12616] ? exit_to_user_mode_prepare+0x119/0x220 [ 913.498168][T12616] do_fast_syscall_32+0x33/0x70 [ 913.503190][T12616] do_SYSENTER_32+0x1b/0x20 [ 913.507852][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 913.514414][T12616] RIP: 0023:0xf7fc5549 [ 913.518607][T12616] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 913.538422][T12616] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 913.547034][T12616] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 913.555165][T12616] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 913.563286][T12616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 913.571398][T12616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 913.579522][T12616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 913.587682][T12616] [ 913.591061][T12616] Uninit was stored to memory at: [ 913.596416][T12616] __get_compat_msghdr+0x514/0x750 [ 913.601841][T12616] get_compat_msghdr+0x8c/0x1c0 [ 913.606889][T12616] ___sys_recvmsg+0x19d/0x890 [ 913.611831][T12616] do_recvmmsg+0x63a/0x10a0 [ 913.616504][T12616] __sys_recvmmsg+0x113/0x450 [ 913.621341][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 913.627865][T12616] __do_fast_syscall_32+0x87/0xe0 [ 913.633151][T12616] do_fast_syscall_32+0x33/0x70 [ 913.638160][T12616] do_SYSENTER_32+0x1b/0x20 [ 913.642916][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 913.649475][T12616] [ 913.651973][T12616] Uninit was stored to memory at: [ 913.657222][T12616] __get_compat_msghdr+0x514/0x750 [ 913.662626][T12616] get_compat_msghdr+0x8c/0x1c0 [ 913.668203][T12616] ___sys_recvmsg+0x19d/0x890 [ 913.673128][T12616] do_recvmmsg+0x63a/0x10a0 [ 913.677785][T12616] __sys_recvmmsg+0x113/0x450 [ 913.682732][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 913.689166][T12616] __do_fast_syscall_32+0x87/0xe0 [ 913.694453][T12616] do_fast_syscall_32+0x33/0x70 [ 913.699458][T12616] do_SYSENTER_32+0x1b/0x20 [ 913.704207][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 913.710773][T12616] [ 913.713284][T12616] Uninit was stored to memory at: [ 913.718546][T12616] __get_compat_msghdr+0x514/0x750 [ 913.723957][T12616] get_compat_msghdr+0x8c/0x1c0 [ 913.729008][T12616] ___sys_recvmsg+0x19d/0x890 [ 913.733933][T12616] do_recvmmsg+0x63a/0x10a0 [ 913.738587][T12616] __sys_recvmmsg+0x113/0x450 [ 913.743504][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 913.749924][T12616] __do_fast_syscall_32+0x87/0xe0 [ 913.755217][T12616] do_fast_syscall_32+0x33/0x70 [ 913.760233][T12616] do_SYSENTER_32+0x1b/0x20 [ 913.765080][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 913.771632][T12616] [ 913.774129][T12616] Uninit was stored to memory at: [ 913.779385][T12616] __get_compat_msghdr+0x514/0x750 [ 913.784813][T12616] get_compat_msghdr+0x8c/0x1c0 [ 913.789883][T12616] ___sys_recvmsg+0x19d/0x890 [ 913.794828][T12616] do_recvmmsg+0x63a/0x10a0 [ 913.799484][T12616] __sys_recvmmsg+0x113/0x450 [ 913.804416][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 913.810839][T12616] __do_fast_syscall_32+0x87/0xe0 [ 913.816134][T12616] do_fast_syscall_32+0x33/0x70 [ 913.821151][T12616] do_SYSENTER_32+0x1b/0x20 [ 913.825904][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 913.832564][T12616] [ 913.834972][T12616] Uninit was stored to memory at: [ 913.840222][T12616] __get_compat_msghdr+0x514/0x750 [ 913.845645][T12616] get_compat_msghdr+0x8c/0x1c0 [ 913.850702][T12616] ___sys_recvmsg+0x19d/0x890 [ 913.855662][T12616] do_recvmmsg+0x63a/0x10a0 [ 913.860335][T12616] __sys_recvmmsg+0x113/0x450 [ 913.865279][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 913.871708][T12616] __do_fast_syscall_32+0x87/0xe0 [ 913.876993][T12616] do_fast_syscall_32+0x33/0x70 [ 913.882105][T12616] do_SYSENTER_32+0x1b/0x20 [ 913.886762][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 913.893423][T12616] [ 913.895833][T12616] Uninit was stored to memory at: [ 913.901116][T12616] __get_compat_msghdr+0x514/0x750 [ 913.906548][T12616] get_compat_msghdr+0x8c/0x1c0 [ 913.911652][T12616] ___sys_recvmsg+0x19d/0x890 [ 913.916697][T12616] do_recvmmsg+0x63a/0x10a0 [ 913.921634][T12616] __sys_recvmmsg+0x113/0x450 [ 913.926579][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 913.933087][T12616] __do_fast_syscall_32+0x87/0xe0 [ 913.938269][T12616] do_fast_syscall_32+0x33/0x70 [ 913.943369][T12616] do_SYSENTER_32+0x1b/0x20 [ 913.948058][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 913.954708][T12616] [ 913.957110][T12616] Uninit was stored to memory at: [ 913.962451][T12616] __get_compat_msghdr+0x514/0x750 [ 913.967785][T12616] get_compat_msghdr+0x8c/0x1c0 [ 913.973056][T12616] ___sys_recvmsg+0x19d/0x890 [ 913.977896][T12616] do_recvmmsg+0x63a/0x10a0 [ 913.982655][T12616] __sys_recvmmsg+0x113/0x450 [ 913.987498][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 913.994023][T12616] __do_fast_syscall_32+0x87/0xe0 [ 913.999212][T12616] do_fast_syscall_32+0x33/0x70 [ 914.004316][T12616] do_SYSENTER_32+0x1b/0x20 [ 914.008981][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 914.015638][T12616] [ 914.018045][T12616] Local variable msg_sys created at: [ 914.023506][T12616] do_recvmmsg+0x5f/0x10a0 [ 914.028070][T12616] __sys_recvmmsg+0x113/0x450 [ 914.288679][T12616] not chained 430000 origins [ 914.293600][T12616] CPU: 1 PID: 12616 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 914.304292][T12616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 914.314488][T12616] Call Trace: [ 914.317870][T12616] [ 914.320895][T12616] dump_stack_lvl+0x1c8/0x256 [ 914.325885][T12616] dump_stack+0x1a/0x1c [ 914.330281][T12616] kmsan_internal_chain_origin+0x78/0x120 [ 914.336211][T12616] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 914.342494][T12616] ? kmsan_get_metadata+0x33/0x220 [ 914.347802][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 914.354243][T12616] ? kmsan_get_metadata+0x33/0x220 [ 914.359554][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 914.365573][T12616] ? kmsan_get_metadata+0x33/0x220 [ 914.370876][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 914.376896][T12616] ? __get_compat_msghdr+0x5b/0x750 [ 914.382333][T12616] ? kmsan_get_metadata+0x33/0x220 [ 914.387664][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 914.393685][T12616] ? should_fail+0x3f/0x810 [ 914.398376][T12616] ? __stack_depot_save+0x21/0x4b0 [ 914.403667][T12616] ? kmsan_get_metadata+0x33/0x220 [ 914.408957][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 914.415395][T12616] ? kmsan_get_metadata+0x33/0x220 [ 914.420696][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 914.426707][T12616] __msan_chain_origin+0xbd/0x140 [ 914.431915][T12616] __get_compat_msghdr+0x514/0x750 [ 914.437274][T12616] get_compat_msghdr+0x8c/0x1c0 [ 914.442340][T12616] ? ___sys_recvmsg+0xa9/0x890 [ 914.447268][T12616] ? do_recvmmsg+0x63a/0x10a0 [ 914.452114][T12616] ___sys_recvmsg+0x19d/0x890 [ 914.456973][T12616] ? __schedule+0x1609/0x21d0 [ 914.461819][T12616] ? kmsan_get_metadata+0x33/0x220 [ 914.467115][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 914.473123][T12616] ? kmsan_get_metadata+0x33/0x220 [ 914.478425][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 914.484435][T12616] do_recvmmsg+0x63a/0x10a0 [ 914.489127][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 914.495577][T12616] ? __sys_recvmmsg+0x52/0x450 [ 914.500504][T12616] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 914.507118][T12616] __sys_recvmmsg+0x113/0x450 [ 914.511965][T12616] ? kmsan_get_metadata+0x33/0x220 [ 914.517278][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 914.523730][T12616] __do_fast_syscall_32+0x87/0xe0 [ 914.528939][T12616] ? exit_to_user_mode_prepare+0x119/0x220 [ 914.534941][T12616] do_fast_syscall_32+0x33/0x70 [ 914.539963][T12616] do_SYSENTER_32+0x1b/0x20 [ 914.544628][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 914.551198][T12616] RIP: 0023:0xf7fc5549 [ 914.555409][T12616] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 914.575227][T12616] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 914.583876][T12616] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 914.592010][T12616] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 914.600128][T12616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 914.608682][T12616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.616822][T12616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 914.624927][T12616] [ 914.635787][T12616] Uninit was stored to memory at: [ 914.641065][T12616] __get_compat_msghdr+0x514/0x750 [ 914.647798][T12616] get_compat_msghdr+0x8c/0x1c0 [ 914.652965][T12616] ___sys_recvmsg+0x19d/0x890 [ 914.657800][T12616] do_recvmmsg+0x63a/0x10a0 [ 914.662544][T12616] __sys_recvmmsg+0x113/0x450 [ 914.667372][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 914.673890][T12616] __do_fast_syscall_32+0x87/0xe0 [ 914.679079][T12616] do_fast_syscall_32+0x33/0x70 [ 914.684183][T12616] do_SYSENTER_32+0x1b/0x20 [ 914.688872][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 914.695544][T12616] [ 914.697931][T12616] Uninit was stored to memory at: [ 914.703328][T12616] __get_compat_msghdr+0x514/0x750 [ 914.708645][T12616] get_compat_msghdr+0x8c/0x1c0 [ 914.713853][T12616] ___sys_recvmsg+0x19d/0x890 [ 914.718695][T12616] do_recvmmsg+0x63a/0x10a0 [ 914.723466][T12616] __sys_recvmmsg+0x113/0x450 [ 914.728308][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 914.734886][T12616] __do_fast_syscall_32+0x87/0xe0 [ 914.740053][T12616] do_fast_syscall_32+0x33/0x70 [ 914.745164][T12616] do_SYSENTER_32+0x1b/0x20 [ 914.749828][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 914.756613][T12616] [ 914.759000][T12616] Uninit was stored to memory at: [ 914.764386][T12616] __get_compat_msghdr+0x514/0x750 [ 914.769724][T12616] get_compat_msghdr+0x8c/0x1c0 [ 914.774883][T12616] ___sys_recvmsg+0x19d/0x890 [ 914.779722][T12616] do_recvmmsg+0x63a/0x10a0 [ 914.784543][T12616] __sys_recvmmsg+0x113/0x450 [ 914.789361][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 914.795893][T12616] __do_fast_syscall_32+0x87/0xe0 [ 914.801082][T12616] do_fast_syscall_32+0x33/0x70 [ 914.806265][T12616] do_SYSENTER_32+0x1b/0x20 [ 914.810929][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 914.817527][T12616] [ 914.819916][T12616] Uninit was stored to memory at: [ 914.825391][T12616] __get_compat_msghdr+0x514/0x750 [ 914.830734][T12616] get_compat_msghdr+0x8c/0x1c0 [ 914.835945][T12616] ___sys_recvmsg+0x19d/0x890 [ 914.840781][T12616] do_recvmmsg+0x63a/0x10a0 [ 914.845546][T12616] __sys_recvmmsg+0x113/0x450 [ 914.850360][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 914.856875][T12616] __do_fast_syscall_32+0x87/0xe0 [ 914.862200][T12616] do_fast_syscall_32+0x33/0x70 [ 914.867217][T12616] do_SYSENTER_32+0x1b/0x20 [ 914.872013][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 914.878589][T12616] [ 914.880993][T12616] Uninit was stored to memory at: [ 914.886451][T12616] __get_compat_msghdr+0x514/0x750 [ 914.891872][T12616] get_compat_msghdr+0x8c/0x1c0 [ 914.896925][T12616] ___sys_recvmsg+0x19d/0x890 [ 914.901979][T12616] do_recvmmsg+0x63a/0x10a0 [ 914.906640][T12616] __sys_recvmmsg+0x113/0x450 [ 914.911451][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 914.918015][T12616] __do_fast_syscall_32+0x87/0xe0 [ 914.923291][T12616] do_fast_syscall_32+0x33/0x70 [ 914.928315][T12616] do_SYSENTER_32+0x1b/0x20 [ 914.933078][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 914.939813][T12616] [ 914.942366][T12616] Uninit was stored to memory at: [ 914.947615][T12616] __get_compat_msghdr+0x514/0x750 [ 914.953024][T12616] get_compat_msghdr+0x8c/0x1c0 [ 914.958060][T12616] ___sys_recvmsg+0x19d/0x890 [ 914.962980][T12616] do_recvmmsg+0x63a/0x10a0 [ 914.967640][T12616] __sys_recvmmsg+0x113/0x450 [ 914.972641][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 914.979071][T12616] __do_fast_syscall_32+0x87/0xe0 [ 914.984418][T12616] do_fast_syscall_32+0x33/0x70 [ 914.989481][T12616] do_SYSENTER_32+0x1b/0x20 [ 914.994287][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 915.000828][T12616] [ 915.003354][T12616] Uninit was stored to memory at: [ 915.008600][T12616] __get_compat_msghdr+0x514/0x750 [ 915.014081][T12616] get_compat_msghdr+0x8c/0x1c0 [ 915.019115][T12616] ___sys_recvmsg+0x19d/0x890 [ 915.024043][T12616] do_recvmmsg+0x63a/0x10a0 [ 915.028677][T12616] __sys_recvmmsg+0x113/0x450 [ 915.033607][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 915.040030][T12616] __do_fast_syscall_32+0x87/0xe0 [ 915.045370][T12616] do_fast_syscall_32+0x33/0x70 [ 915.050466][T12616] do_SYSENTER_32+0x1b/0x20 [ 915.055270][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 915.062009][T12616] [ 915.064416][T12616] Local variable msg_sys created at: [ 915.069796][T12616] do_recvmmsg+0x5f/0x10a0 [ 915.074460][T12616] __sys_recvmmsg+0x113/0x450 [ 915.300470][T12616] not chained 440000 origins [ 915.305399][T12616] CPU: 0 PID: 12616 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 915.316080][T12616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 915.326246][T12616] Call Trace: [ 915.329572][T12616] [ 915.332552][T12616] dump_stack_lvl+0x1c8/0x256 [ 915.337350][T12616] dump_stack+0x1a/0x1c [ 915.341603][T12616] kmsan_internal_chain_origin+0x78/0x120 [ 915.347418][T12616] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 915.353583][T12616] ? kmsan_get_metadata+0x33/0x220 [ 915.358783][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 915.365157][T12616] ? kmsan_get_metadata+0x33/0x220 [ 915.370448][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 915.376422][T12616] ? kmsan_get_metadata+0x33/0x220 [ 915.381682][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 915.387687][T12616] ? __get_compat_msghdr+0x5b/0x750 [ 915.393009][T12616] ? kmsan_get_metadata+0x33/0x220 [ 915.398227][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 915.404135][T12616] ? should_fail+0x3f/0x810 [ 915.408733][T12616] ? __stack_depot_save+0x21/0x4b0 [ 915.413970][T12616] ? kmsan_get_metadata+0x33/0x220 [ 915.419257][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 915.425682][T12616] ? kmsan_get_metadata+0x33/0x220 [ 915.430884][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 915.436788][T12616] __msan_chain_origin+0xbd/0x140 [ 915.441910][T12616] __get_compat_msghdr+0x514/0x750 [ 915.447154][T12616] get_compat_msghdr+0x8c/0x1c0 [ 915.452118][T12616] ? ___sys_recvmsg+0xa9/0x890 [ 915.456961][T12616] ? do_recvmmsg+0x63a/0x10a0 [ 915.461721][T12616] ___sys_recvmsg+0x19d/0x890 [ 915.466566][T12616] ? __schedule+0x1609/0x21d0 [ 915.471410][T12616] ? kmsan_get_metadata+0x33/0x220 [ 915.476619][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 915.482553][T12616] ? kmsan_get_metadata+0x33/0x220 [ 915.487822][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 915.493742][T12616] do_recvmmsg+0x63a/0x10a0 [ 915.498349][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 915.504694][T12616] ? __sys_recvmmsg+0x52/0x450 [ 915.510335][T12616] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 915.516908][T12616] __sys_recvmmsg+0x113/0x450 [ 915.521753][T12616] ? kmsan_get_metadata+0x33/0x220 [ 915.527034][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 915.533390][T12616] __do_fast_syscall_32+0x87/0xe0 [ 915.538513][T12616] ? exit_to_user_mode_prepare+0x119/0x220 [ 915.544422][T12616] do_fast_syscall_32+0x33/0x70 [ 915.549356][T12616] do_SYSENTER_32+0x1b/0x20 [ 915.553945][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 915.560401][T12616] RIP: 0023:0xf7fc5549 [ 915.564564][T12616] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 915.584373][T12616] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 915.592948][T12616] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 915.600996][T12616] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 915.609053][T12616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 915.617141][T12616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.625227][T12616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 915.633300][T12616] [ 915.641587][T12616] Uninit was stored to memory at: [ 915.647366][T12616] __get_compat_msghdr+0x514/0x750 [ 915.652824][T12616] get_compat_msghdr+0x8c/0x1c0 [ 915.657882][T12616] ___sys_recvmsg+0x19d/0x890 [ 915.662839][T12616] do_recvmmsg+0x63a/0x10a0 [ 915.667495][T12616] __sys_recvmmsg+0x113/0x450 [ 915.672449][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 915.678871][T12616] __do_fast_syscall_32+0x87/0xe0 [ 915.684186][T12616] do_fast_syscall_32+0x33/0x70 [ 915.689220][T12616] do_SYSENTER_32+0x1b/0x20 [ 915.694016][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 915.700572][T12616] [ 915.703107][T12616] Uninit was stored to memory at: [ 915.708375][T12616] __get_compat_msghdr+0x514/0x750 [ 915.713829][T12616] get_compat_msghdr+0x8c/0x1c0 [ 915.718880][T12616] ___sys_recvmsg+0x19d/0x890 [ 915.723855][T12616] do_recvmmsg+0x63a/0x10a0 [ 915.728513][T12616] __sys_recvmmsg+0x113/0x450 [ 915.733475][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 915.739876][T12616] __do_fast_syscall_32+0x87/0xe0 [ 915.745157][T12616] do_fast_syscall_32+0x33/0x70 [ 915.750147][T12616] do_SYSENTER_32+0x1b/0x20 [ 915.754884][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 915.761416][T12616] [ 915.763982][T12616] Uninit was stored to memory at: [ 915.769233][T12616] __get_compat_msghdr+0x514/0x750 [ 915.774727][T12616] get_compat_msghdr+0x8c/0x1c0 [ 915.779755][T12616] ___sys_recvmsg+0x19d/0x890 [ 915.784671][T12616] do_recvmmsg+0x63a/0x10a0 [ 915.789327][T12616] __sys_recvmmsg+0x113/0x450 [ 915.794352][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 915.800760][T12616] __do_fast_syscall_32+0x87/0xe0 [ 915.806026][T12616] do_fast_syscall_32+0x33/0x70 [ 915.811011][T12616] do_SYSENTER_32+0x1b/0x20 [ 915.815743][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 915.822461][T12616] [ 915.824870][T12616] Uninit was stored to memory at: [ 915.830061][T12616] __get_compat_msghdr+0x514/0x750 [ 915.835444][T12616] get_compat_msghdr+0x8c/0x1c0 [ 915.840501][T12616] ___sys_recvmsg+0x19d/0x890 [ 915.845424][T12616] do_recvmmsg+0x63a/0x10a0 [ 915.850083][T12616] __sys_recvmmsg+0x113/0x450 [ 915.855059][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 915.861462][T12616] __do_fast_syscall_32+0x87/0xe0 [ 915.866749][T12616] do_fast_syscall_32+0x33/0x70 [ 915.871857][T12616] do_SYSENTER_32+0x1b/0x20 [ 915.876534][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 915.883284][T12616] [ 915.885678][T12616] Uninit was stored to memory at: [ 915.890993][T12616] __get_compat_msghdr+0x514/0x750 [ 915.896472][T12616] get_compat_msghdr+0x8c/0x1c0 [ 915.901528][T12616] ___sys_recvmsg+0x19d/0x890 [ 915.906509][T12616] do_recvmmsg+0x63a/0x10a0 [ 915.911152][T12616] __sys_recvmmsg+0x113/0x450 [ 915.916088][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 915.922638][T12616] __do_fast_syscall_32+0x87/0xe0 [ 915.927857][T12616] do_fast_syscall_32+0x33/0x70 [ 915.933002][T12616] do_SYSENTER_32+0x1b/0x20 [ 915.937663][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 915.944380][T12616] [ 915.946783][T12616] Uninit was stored to memory at: [ 915.952180][T12616] __get_compat_msghdr+0x514/0x750 [ 915.957499][T12616] get_compat_msghdr+0x8c/0x1c0 [ 915.962699][T12616] ___sys_recvmsg+0x19d/0x890 [ 915.967518][T12616] do_recvmmsg+0x63a/0x10a0 [ 915.972278][T12616] __sys_recvmmsg+0x113/0x450 [ 915.977094][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 915.983654][T12616] __do_fast_syscall_32+0x87/0xe0 [ 915.988845][T12616] do_fast_syscall_32+0x33/0x70 [ 915.994031][T12616] do_SYSENTER_32+0x1b/0x20 [ 915.998687][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 916.005318][T12616] [ 916.007696][T12616] Uninit was stored to memory at: [ 916.013186][T12616] __get_compat_msghdr+0x514/0x750 [ 916.019214][T12616] get_compat_msghdr+0x8c/0x1c0 [ 916.024430][T12616] ___sys_recvmsg+0x19d/0x890 [ 916.029250][T12616] do_recvmmsg+0x63a/0x10a0 [ 916.034003][T12616] __sys_recvmmsg+0x113/0x450 [ 916.038818][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 916.045386][T12616] __do_fast_syscall_32+0x87/0xe0 [ 916.050579][T12616] do_fast_syscall_32+0x33/0x70 [ 916.055791][T12616] do_SYSENTER_32+0x1b/0x20 [ 916.060437][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 916.067075][T12616] [ 916.069468][T12616] Local variable msg_sys created at: [ 916.075058][T12616] do_recvmmsg+0x5f/0x10a0 [ 916.079654][T12616] __sys_recvmmsg+0x113/0x450 [ 916.314338][T12616] not chained 450000 origins [ 916.319069][T12616] CPU: 1 PID: 12616 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 916.329740][T12616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 916.339958][T12616] Call Trace: [ 916.343313][T12616] [ 916.346344][T12616] dump_stack_lvl+0x1c8/0x256 [ 916.351237][T12616] dump_stack+0x1a/0x1c [ 916.355580][T12616] kmsan_internal_chain_origin+0x78/0x120 [ 916.361461][T12616] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 916.367653][T12616] ? kmsan_get_metadata+0x33/0x220 [ 916.372949][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 916.379362][T12616] ? kmsan_get_metadata+0x33/0x220 [ 916.384591][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 916.390563][T12616] ? kmsan_get_metadata+0x33/0x220 [ 916.395769][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 916.401693][T12616] ? __get_compat_msghdr+0x5b/0x750 [ 916.407086][T12616] ? kmsan_get_metadata+0x33/0x220 [ 916.412377][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 916.418356][T12616] ? should_fail+0x3f/0x810 [ 916.422983][T12616] ? __stack_depot_save+0x21/0x4b0 [ 916.428269][T12616] ? kmsan_get_metadata+0x33/0x220 [ 916.433561][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 916.439965][T12616] ? kmsan_get_metadata+0x33/0x220 [ 916.445197][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 916.451170][T12616] __msan_chain_origin+0xbd/0x140 [ 916.456314][T12616] __get_compat_msghdr+0x514/0x750 [ 916.461643][T12616] get_compat_msghdr+0x8c/0x1c0 [ 916.466663][T12616] ? ___sys_recvmsg+0xa9/0x890 [ 916.471565][T12616] ? do_recvmmsg+0x63a/0x10a0 [ 916.476352][T12616] ___sys_recvmsg+0x19d/0x890 [ 916.481187][T12616] ? __schedule+0x1609/0x21d0 [ 916.485967][T12616] ? kmsan_get_metadata+0x33/0x220 [ 916.491184][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 916.497117][T12616] ? kmsan_get_metadata+0x33/0x220 [ 916.502515][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 916.508518][T12616] do_recvmmsg+0x63a/0x10a0 [ 916.513208][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 916.519621][T12616] ? __sys_recvmmsg+0x52/0x450 [ 916.524465][T12616] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 916.530986][T12616] __sys_recvmmsg+0x113/0x450 [ 916.535762][T12616] ? kmsan_get_metadata+0x33/0x220 [ 916.541069][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 916.547505][T12616] __do_fast_syscall_32+0x87/0xe0 [ 916.552695][T12616] ? exit_to_user_mode_prepare+0x119/0x220 [ 916.558660][T12616] do_fast_syscall_32+0x33/0x70 [ 916.563630][T12616] do_SYSENTER_32+0x1b/0x20 [ 916.568290][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 916.574769][T12616] RIP: 0023:0xf7fc5549 [ 916.578964][T12616] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 916.598744][T12616] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 916.607282][T12616] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 916.615401][T12616] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 916.623614][T12616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 916.631709][T12616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.639889][T12616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 916.647989][T12616] [ 916.657408][T12616] Uninit was stored to memory at: [ 916.663733][T12616] __get_compat_msghdr+0x514/0x750 [ 916.669057][T12616] get_compat_msghdr+0x8c/0x1c0 [ 916.674205][T12616] ___sys_recvmsg+0x19d/0x890 [ 916.679039][T12616] do_recvmmsg+0x63a/0x10a0 [ 916.683798][T12616] __sys_recvmmsg+0x113/0x450 [ 916.688639][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 916.695169][T12616] __do_fast_syscall_32+0x87/0xe0 [ 916.700371][T12616] do_fast_syscall_32+0x33/0x70 [ 916.705506][T12616] do_SYSENTER_32+0x1b/0x20 [ 916.710226][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 916.716902][T12616] [ 916.719320][T12616] Uninit was stored to memory at: [ 916.724675][T12616] __get_compat_msghdr+0x514/0x750 [ 916.730620][T12616] get_compat_msghdr+0x8c/0x1c0 [ 916.735794][T12616] ___sys_recvmsg+0x19d/0x890 [ 916.740616][T12616] do_recvmmsg+0x63a/0x10a0 [ 916.745386][T12616] __sys_recvmmsg+0x113/0x450 [ 916.750203][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 916.756737][T12616] __do_fast_syscall_32+0x87/0xe0 [ 916.762024][T12616] do_fast_syscall_32+0x33/0x70 [ 916.767036][T12616] do_SYSENTER_32+0x1b/0x20 [ 916.771664][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 916.778352][T12616] [ 916.780714][T12616] Uninit was stored to memory at: [ 916.786092][T12616] __get_compat_msghdr+0x514/0x750 [ 916.791439][T12616] get_compat_msghdr+0x8c/0x1c0 [ 916.796597][T12616] ___sys_recvmsg+0x19d/0x890 [ 916.801430][T12616] do_recvmmsg+0x63a/0x10a0 [ 916.806282][T12616] __sys_recvmmsg+0x113/0x450 [ 916.811096][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 916.818038][T12616] __do_fast_syscall_32+0x87/0xe0 [ 916.823318][T12616] do_fast_syscall_32+0x33/0x70 [ 916.828328][T12616] do_SYSENTER_32+0x1b/0x20 [ 916.833088][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 916.839639][T12616] [ 916.842158][T12616] Uninit was stored to memory at: [ 916.847427][T12616] __get_compat_msghdr+0x514/0x750 [ 916.853047][T12616] get_compat_msghdr+0x8c/0x1c0 [ 916.858085][T12616] ___sys_recvmsg+0x19d/0x890 [ 916.863020][T12616] do_recvmmsg+0x63a/0x10a0 [ 916.867680][T12616] __sys_recvmmsg+0x113/0x450 [ 916.872609][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 916.879118][T12616] __do_fast_syscall_32+0x87/0xe0 [ 916.884471][T12616] do_fast_syscall_32+0x33/0x70 [ 916.889491][T12616] do_SYSENTER_32+0x1b/0x20 [ 916.894253][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 916.900798][T12616] [ 916.903330][T12616] Uninit was stored to memory at: [ 916.908586][T12616] __get_compat_msghdr+0x514/0x750 [ 916.913989][T12616] get_compat_msghdr+0x8c/0x1c0 [ 916.919049][T12616] ___sys_recvmsg+0x19d/0x890 [ 916.924071][T12616] do_recvmmsg+0x63a/0x10a0 [ 916.928706][T12616] __sys_recvmmsg+0x113/0x450 [ 916.933639][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 916.940039][T12616] __do_fast_syscall_32+0x87/0xe0 [ 916.945334][T12616] do_fast_syscall_32+0x33/0x70 [ 916.950327][T12616] do_SYSENTER_32+0x1b/0x20 [ 916.955043][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 916.961575][T12616] [ 916.964110][T12616] Uninit was stored to memory at: [ 916.969311][T12616] __get_compat_msghdr+0x514/0x750 [ 916.974791][T12616] get_compat_msghdr+0x8c/0x1c0 [ 916.979855][T12616] ___sys_recvmsg+0x19d/0x890 [ 916.984846][T12616] do_recvmmsg+0x63a/0x10a0 [ 916.989592][T12616] __sys_recvmmsg+0x113/0x450 [ 916.994583][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 917.000984][T12616] __do_fast_syscall_32+0x87/0xe0 [ 917.006267][T12616] do_fast_syscall_32+0x33/0x70 [ 917.011259][T12616] do_SYSENTER_32+0x1b/0x20 [ 917.016022][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 917.022669][T12616] [ 917.025077][T12616] Uninit was stored to memory at: [ 917.030332][T12616] __get_compat_msghdr+0x514/0x750 [ 917.035802][T12616] get_compat_msghdr+0x8c/0x1c0 [ 917.040925][T12616] ___sys_recvmsg+0x19d/0x890 [ 917.045835][T12616] do_recvmmsg+0x63a/0x10a0 [ 917.050476][T12616] __sys_recvmmsg+0x113/0x450 [ 917.055426][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 917.061939][T12616] __do_fast_syscall_32+0x87/0xe0 [ 917.067108][T12616] do_fast_syscall_32+0x33/0x70 [ 917.072196][T12616] do_SYSENTER_32+0x1b/0x20 [ 917.076852][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 917.083562][T12616] [ 917.085972][T12616] Local variable msg_sys created at: [ 917.091346][T12616] do_recvmmsg+0x5f/0x10a0 [ 917.096080][T12616] __sys_recvmmsg+0x113/0x450 [ 917.311494][T12616] not chained 460000 origins [ 917.316426][T12616] CPU: 1 PID: 12616 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 917.327118][T12616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 917.337322][T12616] Call Trace: [ 917.340698][T12616] [ 917.343700][T12616] dump_stack_lvl+0x1c8/0x256 [ 917.348582][T12616] dump_stack+0x1a/0x1c [ 917.352861][T12616] kmsan_internal_chain_origin+0x78/0x120 [ 917.358772][T12616] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 917.365028][T12616] ? kmsan_get_metadata+0x33/0x220 [ 917.370300][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 917.376673][T12616] ? kmsan_get_metadata+0x33/0x220 [ 917.382054][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 917.388030][T12616] ? kmsan_get_metadata+0x33/0x220 [ 917.393261][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 917.399231][T12616] ? __get_compat_msghdr+0x5b/0x750 [ 917.404567][T12616] ? kmsan_get_metadata+0x33/0x220 [ 917.409779][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 917.415718][T12616] ? should_fail+0x3f/0x810 [ 917.420405][T12616] ? __stack_depot_save+0x21/0x4b0 [ 917.425693][T12616] ? kmsan_get_metadata+0x33/0x220 [ 917.430986][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 917.437401][T12616] ? kmsan_get_metadata+0x33/0x220 [ 917.442634][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 917.448614][T12616] __msan_chain_origin+0xbd/0x140 [ 917.453759][T12616] __get_compat_msghdr+0x514/0x750 [ 917.459087][T12616] get_compat_msghdr+0x8c/0x1c0 [ 917.464077][T12616] ? ___sys_recvmsg+0xa9/0x890 [ 917.469084][T12616] ? do_recvmmsg+0x63a/0x10a0 [ 917.473929][T12616] ___sys_recvmsg+0x19d/0x890 [ 917.478756][T12616] ? __schedule+0x1609/0x21d0 [ 917.483568][T12616] ? kmsan_get_metadata+0x33/0x220 [ 917.488954][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 917.494874][T12616] ? kmsan_get_metadata+0x33/0x220 [ 917.500092][T12616] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 917.506038][T12616] do_recvmmsg+0x63a/0x10a0 [ 917.510791][T12616] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 917.517170][T12616] ? __sys_recvmmsg+0x52/0x450 [ 917.522058][T12616] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 917.528754][T12616] __sys_recvmmsg+0x113/0x450 [ 917.533599][T12616] ? kmsan_get_metadata+0x33/0x220 [ 917.538970][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 917.545435][T12616] __do_fast_syscall_32+0x87/0xe0 [ 917.550576][T12616] ? exit_to_user_mode_prepare+0x119/0x220 [ 917.556508][T12616] do_fast_syscall_32+0x33/0x70 [ 917.561451][T12616] do_SYSENTER_32+0x1b/0x20 [ 917.566065][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 917.572629][T12616] RIP: 0023:0xf7fc5549 [ 917.576828][T12616] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 917.596610][T12616] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 917.605270][T12616] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 917.613386][T12616] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 917.621494][T12616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 917.629604][T12616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.637709][T12616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 917.645858][T12616] [ 917.652600][T12616] Uninit was stored to memory at: [ 917.657875][T12616] __get_compat_msghdr+0x514/0x750 [ 917.663530][T12616] get_compat_msghdr+0x8c/0x1c0 [ 917.668591][T12616] ___sys_recvmsg+0x19d/0x890 [ 917.673519][T12616] do_recvmmsg+0x63a/0x10a0 [ 917.678173][T12616] __sys_recvmmsg+0x113/0x450 [ 917.683094][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 917.689509][T12616] __do_fast_syscall_32+0x87/0xe0 [ 917.694792][T12616] do_fast_syscall_32+0x33/0x70 [ 917.699794][T12616] do_SYSENTER_32+0x1b/0x20 [ 917.704635][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 917.711194][T12616] [ 917.713696][T12616] Uninit was stored to memory at: [ 917.718946][T12616] __get_compat_msghdr+0x514/0x750 [ 917.724348][T12616] get_compat_msghdr+0x8c/0x1c0 [ 917.729407][T12616] ___sys_recvmsg+0x19d/0x890 [ 917.734330][T12616] do_recvmmsg+0x63a/0x10a0 [ 917.738987][T12616] __sys_recvmmsg+0x113/0x450 [ 917.743930][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 917.750347][T12616] __do_fast_syscall_32+0x87/0xe0 [ 917.755649][T12616] do_fast_syscall_32+0x33/0x70 [ 917.760661][T12616] do_SYSENTER_32+0x1b/0x20 [ 917.765420][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 917.772075][T12616] [ 917.774505][T12616] Uninit was stored to memory at: [ 917.779750][T12616] __get_compat_msghdr+0x514/0x750 [ 917.785294][T12616] get_compat_msghdr+0x8c/0x1c0 [ 917.790342][T12616] ___sys_recvmsg+0x19d/0x890 [ 917.795267][T12616] do_recvmmsg+0x63a/0x10a0 [ 917.800018][T12616] __sys_recvmmsg+0x113/0x450 [ 917.804953][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 917.811375][T12616] __do_fast_syscall_32+0x87/0xe0 [ 917.816661][T12616] do_fast_syscall_32+0x33/0x70 [ 917.821671][T12616] do_SYSENTER_32+0x1b/0x20 [ 917.826437][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 917.833172][T12616] [ 917.835578][T12616] Uninit was stored to memory at: [ 917.840823][T12616] __get_compat_msghdr+0x514/0x750 [ 917.846239][T12616] get_compat_msghdr+0x8c/0x1c0 [ 917.851284][T12616] ___sys_recvmsg+0x19d/0x890 [ 917.856206][T12616] do_recvmmsg+0x63a/0x10a0 [ 917.860863][T12616] __sys_recvmmsg+0x113/0x450 [ 917.865797][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 917.872332][T12616] __do_fast_syscall_32+0x87/0xe0 [ 917.877537][T12616] do_fast_syscall_32+0x33/0x70 [ 917.882649][T12616] do_SYSENTER_32+0x1b/0x20 [ 917.887320][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 917.893983][T12616] [ 917.896389][T12616] Uninit was stored to memory at: [ 917.901647][T12616] __get_compat_msghdr+0x514/0x750 [ 917.907083][T12616] get_compat_msghdr+0x8c/0x1c0 [ 917.912251][T12616] ___sys_recvmsg+0x19d/0x890 [ 917.917089][T12616] do_recvmmsg+0x63a/0x10a0 [ 917.921936][T12616] __sys_recvmmsg+0x113/0x450 [ 917.926771][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 917.933533][T12616] __do_fast_syscall_32+0x87/0xe0 [ 917.938723][T12616] do_fast_syscall_32+0x33/0x70 [ 917.943900][T12616] do_SYSENTER_32+0x1b/0x20 [ 917.948559][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 917.955223][T12616] [ 917.957632][T12616] Uninit was stored to memory at: [ 917.963044][T12616] __get_compat_msghdr+0x514/0x750 [ 917.968358][T12616] get_compat_msghdr+0x8c/0x1c0 [ 917.973526][T12616] ___sys_recvmsg+0x19d/0x890 [ 917.978365][T12616] do_recvmmsg+0x63a/0x10a0 [ 917.983123][T12616] __sys_recvmmsg+0x113/0x450 [ 917.987965][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 917.994530][T12616] __do_fast_syscall_32+0x87/0xe0 [ 917.999717][T12616] do_fast_syscall_32+0x33/0x70 [ 918.004898][T12616] do_SYSENTER_32+0x1b/0x20 [ 918.009557][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 918.016273][T12616] [ 918.018674][T12616] Uninit was stored to memory at: [ 918.024023][T12616] __get_compat_msghdr+0x514/0x750 [ 918.029338][T12616] get_compat_msghdr+0x8c/0x1c0 [ 918.034554][T12616] ___sys_recvmsg+0x19d/0x890 [ 918.039386][T12616] do_recvmmsg+0x63a/0x10a0 [ 918.044129][T12616] __sys_recvmmsg+0x113/0x450 [ 918.048963][T12616] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 918.055540][T12616] __do_fast_syscall_32+0x87/0xe0 [ 918.060738][T12616] do_fast_syscall_32+0x33/0x70 [ 918.065932][T12616] do_SYSENTER_32+0x1b/0x20 [ 918.070593][T12616] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 918.077308][T12616] [ 918.079711][T12616] Local variable msg_sys created at: [ 918.085237][T12616] do_recvmmsg+0x5f/0x10a0 [ 918.089781][T12616] __sys_recvmmsg+0x113/0x450 16:09:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000700), 0x4) 16:09:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x1275, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:09:58 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) (fail_nth: 16) 16:09:58 executing program 4: syz_mount_image$efs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)={[], [{@subj_type={'subj_type', 0x3d, '*'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@obj_type={'obj_type', 0x3d, '\b{'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) open(&(0x7f0000001bc0)='./file0\x00', 0x512201, 0x80) 16:09:58 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300, 0x31, 0xffffffffffffffff, 0x0) 16:09:58 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 918.419782][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:09:58 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x402, 0x31, 0xffffffffffffffff, 0x0) 16:09:58 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x1000}, 0x4) [ 918.525147][T12648] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x1276, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 918.678050][T12647] FAULT_INJECTION: forcing a failure. [ 918.678050][T12647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.692155][T12647] CPU: 1 PID: 12647 Comm: syz-executor.5 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 918.702950][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 918.713237][T12647] Call Trace: [ 918.716682][T12647] [ 918.719778][T12647] dump_stack_lvl+0x1c8/0x256 [ 918.724786][T12647] dump_stack+0x1a/0x1c [ 918.729243][T12647] should_fail+0x757/0x810 [ 918.733977][T12647] should_fail_usercopy+0x2a/0x30 [ 918.739300][T12647] _copy_to_user+0x30/0x100 [ 918.744079][T12647] simple_read_from_buffer+0x195/0x330 [ 918.749862][T12647] proc_fail_nth_read+0x1f3/0x2f0 [ 918.755215][T12647] ? proc_fault_inject_write+0x4c0/0x4c0 [ 918.761163][T12647] vfs_read+0x3a9/0x11b0 [ 918.765702][T12647] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 918.772257][T12647] ? kmsan_get_metadata+0x33/0x220 [ 918.777644][T12647] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 918.783727][T12647] ksys_read+0x21b/0x4e0 [ 918.788249][T12647] __ia32_sys_read+0x8d/0xd0 [ 918.793139][T12647] __do_fast_syscall_32+0x87/0xe0 [ 918.798515][T12647] do_fast_syscall_32+0x33/0x70 [ 918.803597][T12647] do_SYSENTER_32+0x1b/0x20 [ 918.808329][T12647] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 918.815212][T12647] RIP: 0023:0xf7fdd549 [ 918.819482][T12647] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 918.839349][T12647] RSP: 002b:00000000f7fd8600 EFLAGS: 00000282 ORIG_RAX: 0000000000000003 [ 918.848026][T12647] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f7fd8690 [ 918.856208][T12647] RDX: 000000000000000f RSI: 00000000f6f37000 RDI: 0000000000000000 [ 918.864380][T12647] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 918.872546][T12647] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 918.880717][T12647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 918.888948][T12647] 16:09:59 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:09:59 executing program 3: r0 = syz_io_uring_setup(0x149c, &(0x7f0000000340), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) clock_gettime(0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) pivot_root(0x0, &(0x7f00000000c0)='./file0\x00') 16:09:59 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x406, 0x31, 0xffffffffffffffff, 0x0) 16:09:59 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 919.575247][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x1, 0x200}) 16:09:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x1277, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:09:59 executing program 4: socketpair(0x25, 0x0, 0x0, &(0x7f00000012c0)) 16:09:59 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x604, 0x31, 0xffffffffffffffff, 0x0) [ 919.809066][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:00 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:00 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:00 executing program 4: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 16:10:00 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000, 0x31, 0xffffffffffffffff, 0x0) 16:10:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x1278, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000340)) [ 920.558709][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:00 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 920.853066][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:01 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x60ff, 0x31, 0xffffffffffffffff, 0x0) 16:10:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x1279, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:01 executing program 4: syz_mount_image$jfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000001900)=[{&(0x7f00000015c0)='#', 0x1}, {&(0x7f0000001740)='`', 0x1, 0x80000001}, {&(0x7f0000001800)='7', 0x1, 0xffff}], 0x0, 0x0) 16:10:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x1, 0x0, 0x6, 0x0, 0xffffffffffffffff}) 16:10:01 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 921.493655][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x127a, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:01 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfeff, 0x31, 0xffffffffffffffff, 0x0) [ 921.662109][T12702] loop4: detected capacity change from 0 to 264192 16:10:01 executing program 3: syz_clone3(&(0x7f0000001940)={0x1000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000880)=""/4096, 0x1000, 0x0, &(0x7f0000001900)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) 16:10:01 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000080)=0x65) [ 921.979962][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:02 executing program 0: r0 = socket(0x0, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:02 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffe, 0x31, 0xffffffffffffffff, 0x0) 16:10:02 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x127b, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:02 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x1276, 0x0) 16:10:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd261740002800100064011eb04f801", 0x17}], 0x0, &(0x7f0000000180)) stat(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 922.568504][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:03 executing program 0: r0 = socket(0x0, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:03 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x20000, 0x31, 0xffffffffffffffff, 0x0) 16:10:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x127c, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 923.186956][T12728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x1276, 0x0) [ 923.298347][T12729] FAT-fs (loop3): bogus number of reserved sectors [ 923.305993][T12729] FAT-fs (loop3): Can't find a valid FAT filesystem 16:10:03 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 923.592419][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:03 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x80000, 0x31, 0xffffffffffffffff, 0x0) 16:10:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x127d, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x1276, 0x0) 16:10:04 executing program 0: r0 = socket(0x0, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 924.078702][T12727] not chained 470000 origins [ 924.088046][T12727] CPU: 0 PID: 12727 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 924.098760][T12727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 924.108960][T12727] Call Trace: [ 924.112337][T12727] [ 924.115360][T12727] dump_stack_lvl+0x1c8/0x256 [ 924.120243][T12727] dump_stack+0x1a/0x1c [ 924.124576][T12727] kmsan_internal_chain_origin+0x78/0x120 [ 924.130467][T12727] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 924.136705][T12727] ? kmsan_get_metadata+0x33/0x220 [ 924.142089][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 924.148536][T12727] ? kmsan_get_metadata+0x33/0x220 [ 924.153833][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 924.159825][T12727] ? kmsan_get_metadata+0x33/0x220 [ 924.165103][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 924.171083][T12727] ? __get_compat_msghdr+0x5b/0x750 [ 924.176738][T12727] ? kmsan_get_metadata+0x33/0x220 [ 924.182015][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 924.188007][T12727] ? should_fail+0x3f/0x810 [ 924.192680][T12727] ? __stack_depot_save+0x21/0x4b0 [ 924.197953][T12727] ? kmsan_get_metadata+0x33/0x220 [ 924.203312][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 924.209733][T12727] ? kmsan_get_metadata+0x33/0x220 [ 924.215007][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 924.220998][T12727] __msan_chain_origin+0xbd/0x140 [ 924.226192][T12727] __get_compat_msghdr+0x514/0x750 [ 924.231530][T12727] get_compat_msghdr+0x8c/0x1c0 [ 924.236569][T12727] ? ___sys_recvmsg+0xa9/0x890 [ 924.241480][T12727] ? do_recvmmsg+0x63a/0x10a0 [ 924.246305][T12727] ___sys_recvmsg+0x19d/0x890 [ 924.251141][T12727] ? __schedule+0x1609/0x21d0 [ 924.255973][T12727] ? kmsan_get_metadata+0x33/0x220 [ 924.261243][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 924.267219][T12727] ? kmsan_get_metadata+0x33/0x220 [ 924.272495][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 924.278483][T12727] do_recvmmsg+0x63a/0x10a0 [ 924.283157][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 924.289584][T12727] ? __sys_recvmmsg+0x52/0x450 [ 924.294490][T12727] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 924.301098][T12727] __sys_recvmmsg+0x113/0x450 [ 924.305927][T12727] ? kmsan_get_metadata+0x33/0x220 [ 924.311242][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 924.317670][T12727] __do_fast_syscall_32+0x87/0xe0 [ 924.322844][T12727] ? exit_to_user_mode_prepare+0x119/0x220 [ 924.328818][T12727] do_fast_syscall_32+0x33/0x70 [ 924.333817][T12727] do_SYSENTER_32+0x1b/0x20 [ 924.338490][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 924.345029][T12727] RIP: 0023:0xf7fc5549 [ 924.349215][T12727] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 924.368996][T12727] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 924.377561][T12727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 924.385673][T12727] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 924.393760][T12727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 924.401842][T12727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.409931][T12727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 924.418047][T12727] [ 924.421680][T12727] Uninit was stored to memory at: [ 924.427010][T12727] __get_compat_msghdr+0x514/0x750 [ 924.432449][T12727] get_compat_msghdr+0x8c/0x1c0 [ 924.437513][T12727] ___sys_recvmsg+0x19d/0x890 [ 924.442468][T12727] do_recvmmsg+0x63a/0x10a0 [ 924.447125][T12727] __sys_recvmmsg+0x113/0x450 [ 924.452081][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 924.458509][T12727] __do_fast_syscall_32+0x87/0xe0 [ 924.463814][T12727] do_fast_syscall_32+0x33/0x70 [ 924.468826][T12727] do_SYSENTER_32+0x1b/0x20 [ 924.473619][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 924.480207][T12727] [ 924.482737][T12727] Uninit was stored to memory at: [ 924.487990][T12727] __get_compat_msghdr+0x514/0x750 [ 924.493415][T12727] get_compat_msghdr+0x8c/0x1c0 [ 924.498478][T12727] ___sys_recvmsg+0x19d/0x890 [ 924.503421][T12727] do_recvmmsg+0x63a/0x10a0 [ 924.508083][T12727] __sys_recvmmsg+0x113/0x450 [ 924.513028][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 924.519450][T12727] __do_fast_syscall_32+0x87/0xe0 [ 924.524718][T12727] do_fast_syscall_32+0x33/0x70 [ 924.529736][T12727] do_SYSENTER_32+0x1b/0x20 [ 924.534520][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 924.541082][T12727] [ 924.543608][T12727] Uninit was stored to memory at: [ 924.548864][T12727] __get_compat_msghdr+0x514/0x750 [ 924.554300][T12727] get_compat_msghdr+0x8c/0x1c0 [ 924.559363][T12727] ___sys_recvmsg+0x19d/0x890 [ 924.564351][T12727] do_recvmmsg+0x63a/0x10a0 [ 924.569016][T12727] __sys_recvmmsg+0x113/0x450 [ 924.573976][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 924.580405][T12727] __do_fast_syscall_32+0x87/0xe0 [ 924.585730][T12727] do_fast_syscall_32+0x33/0x70 [ 924.590743][T12727] do_SYSENTER_32+0x1b/0x20 [ 924.595534][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 924.602231][T12727] [ 924.604649][T12727] Uninit was stored to memory at: [ 924.609908][T12727] __get_compat_msghdr+0x514/0x750 [ 924.615437][T12727] get_compat_msghdr+0x8c/0x1c0 [ 924.620488][T12727] ___sys_recvmsg+0x19d/0x890 [ 924.625459][T12727] do_recvmmsg+0x63a/0x10a0 [ 924.630116][T12727] __sys_recvmmsg+0x113/0x450 [ 924.635075][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 924.641500][T12727] __do_fast_syscall_32+0x87/0xe0 [ 924.646824][T12727] do_fast_syscall_32+0x33/0x70 [ 924.651958][T12727] do_SYSENTER_32+0x1b/0x20 [ 924.656614][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 924.663287][T12727] [ 924.665692][T12727] Uninit was stored to memory at: [ 924.670974][T12727] __get_compat_msghdr+0x514/0x750 [ 924.676416][T12727] get_compat_msghdr+0x8c/0x1c0 [ 924.681526][T12727] ___sys_recvmsg+0x19d/0x890 [ 924.686489][T12727] do_recvmmsg+0x63a/0x10a0 [ 924.691149][T12727] __sys_recvmmsg+0x113/0x450 [ 924.696104][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 924.702659][T12727] __do_fast_syscall_32+0x87/0xe0 [ 924.707838][T12727] do_fast_syscall_32+0x33/0x70 [ 924.712975][T12727] do_SYSENTER_32+0x1b/0x20 [ 924.717628][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 924.724314][T12727] [ 924.726723][T12727] Uninit was stored to memory at: [ 924.732080][T12727] __get_compat_msghdr+0x514/0x750 [ 924.737414][T12727] get_compat_msghdr+0x8c/0x1c0 [ 924.742800][T12727] ___sys_recvmsg+0x19d/0x890 [ 924.744326][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 924.747579][T12727] do_recvmmsg+0x63a/0x10a0 [ 924.747674][T12727] __sys_recvmmsg+0x113/0x450 [ 924.747768][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 924.773010][T12727] __do_fast_syscall_32+0x87/0xe0 [ 924.778279][T12727] do_fast_syscall_32+0x33/0x70 [ 924.783404][T12727] do_SYSENTER_32+0x1b/0x20 [ 924.788058][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 924.794748][T12727] [ 924.797156][T12727] Uninit was stored to memory at: [ 924.802534][T12727] __get_compat_msghdr+0x514/0x750 [ 924.807914][T12727] get_compat_msghdr+0x8c/0x1c0 [ 924.813156][T12727] ___sys_recvmsg+0x19d/0x890 [ 924.818007][T12727] do_recvmmsg+0x63a/0x10a0 [ 924.822857][T12727] __sys_recvmmsg+0x113/0x450 16:10:04 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x80040, 0x31, 0xffffffffffffffff, 0x0) [ 924.827705][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 924.834310][T12727] __do_fast_syscall_32+0x87/0xe0 [ 924.839502][T12727] do_fast_syscall_32+0x33/0x70 [ 924.844805][T12727] do_SYSENTER_32+0x1b/0x20 [ 924.849513][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 924.856271][T12727] [ 924.858697][T12727] Local variable msg_sys created at: [ 924.864247][T12727] do_recvmmsg+0x5f/0x10a0 [ 924.868833][T12727] __sys_recvmmsg+0x113/0x450 16:10:05 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 925.331101][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 925.736244][T12762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 926.359452][T12727] not chained 480000 origins [ 926.364378][T12727] CPU: 1 PID: 12727 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 926.375086][T12727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 926.385286][T12727] Call Trace: [ 926.388664][T12727] [ 926.391691][T12727] dump_stack_lvl+0x1c8/0x256 [ 926.396644][T12727] dump_stack+0x1a/0x1c [ 926.400992][T12727] kmsan_internal_chain_origin+0x78/0x120 [ 926.406910][T12727] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 926.413169][T12727] ? kmsan_get_metadata+0x33/0x220 [ 926.418462][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 926.424995][T12727] ? kmsan_get_metadata+0x33/0x220 [ 926.430291][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 926.436466][T12727] ? kmsan_get_metadata+0x33/0x220 [ 926.441770][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 926.447788][T12727] ? __get_compat_msghdr+0x5b/0x750 [ 926.453200][T12727] ? kmsan_get_metadata+0x33/0x220 [ 926.458492][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 926.464506][T12727] ? should_fail+0x3f/0x810 [ 926.469193][T12727] ? __stack_depot_save+0x21/0x4b0 [ 926.474492][T12727] ? kmsan_get_metadata+0x33/0x220 [ 926.479785][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 926.486225][T12727] ? kmsan_get_metadata+0x33/0x220 [ 926.491515][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 926.497528][T12727] __msan_chain_origin+0xbd/0x140 [ 926.502736][T12727] __get_compat_msghdr+0x514/0x750 [ 926.508093][T12727] get_compat_msghdr+0x8c/0x1c0 [ 926.513155][T12727] ? ___sys_recvmsg+0xa9/0x890 [ 926.518080][T12727] ? do_recvmmsg+0x63a/0x10a0 [ 926.522934][T12727] ___sys_recvmsg+0x19d/0x890 [ 926.527782][T12727] ? __schedule+0x1609/0x21d0 [ 926.532638][T12727] ? kmsan_get_metadata+0x33/0x220 [ 926.537960][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 926.543974][T12727] ? kmsan_get_metadata+0x33/0x220 [ 926.549262][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 926.555272][T12727] do_recvmmsg+0x63a/0x10a0 [ 926.559977][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 926.566427][T12727] ? __sys_recvmmsg+0x52/0x450 [ 926.571442][T12727] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 926.578057][T12727] __sys_recvmmsg+0x113/0x450 [ 926.582902][T12727] ? kmsan_get_metadata+0x33/0x220 [ 926.588216][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 926.594663][T12727] __do_fast_syscall_32+0x87/0xe0 [ 926.599856][T12727] ? exit_to_user_mode_prepare+0x119/0x220 [ 926.605864][T12727] do_fast_syscall_32+0x33/0x70 [ 926.610884][T12727] do_SYSENTER_32+0x1b/0x20 [ 926.615552][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 926.622122][T12727] RIP: 0023:0xf7fc5549 [ 926.626314][T12727] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 926.646146][T12727] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 926.654737][T12727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 926.662862][T12727] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 926.670981][T12727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 926.679120][T12727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.687235][T12727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 926.695366][T12727] [ 926.702803][T12727] Uninit was stored to memory at: [ 926.708081][T12727] __get_compat_msghdr+0x514/0x750 [ 926.713818][T12727] get_compat_msghdr+0x8c/0x1c0 [ 926.718882][T12727] ___sys_recvmsg+0x19d/0x890 [ 926.723823][T12727] do_recvmmsg+0x63a/0x10a0 [ 926.728488][T12727] __sys_recvmmsg+0x113/0x450 [ 926.733412][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 926.739844][T12727] __do_fast_syscall_32+0x87/0xe0 [ 926.745134][T12727] do_fast_syscall_32+0x33/0x70 [ 926.750144][T12727] do_SYSENTER_32+0x1b/0x20 [ 926.754901][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 926.761459][T12727] [ 926.763961][T12727] Uninit was stored to memory at: [ 926.769207][T12727] __get_compat_msghdr+0x514/0x750 [ 926.774617][T12727] get_compat_msghdr+0x8c/0x1c0 [ 926.779674][T12727] ___sys_recvmsg+0x19d/0x890 [ 926.784612][T12727] do_recvmmsg+0x63a/0x10a0 [ 926.789313][T12727] __sys_recvmmsg+0x113/0x450 [ 926.794260][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 926.800699][T12727] __do_fast_syscall_32+0x87/0xe0 [ 926.806008][T12727] do_fast_syscall_32+0x33/0x70 [ 926.811025][T12727] do_SYSENTER_32+0x1b/0x20 [ 926.815798][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 926.822455][T12727] [ 926.824865][T12727] Uninit was stored to memory at: [ 926.830172][T12727] __get_compat_msghdr+0x514/0x750 [ 926.835789][T12727] get_compat_msghdr+0x8c/0x1c0 [ 926.841220][T12727] ___sys_recvmsg+0x19d/0x890 [ 926.846162][T12727] do_recvmmsg+0x63a/0x10a0 [ 926.850857][T12727] __sys_recvmmsg+0x113/0x450 [ 926.855785][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 926.862297][T12727] __do_fast_syscall_32+0x87/0xe0 [ 926.867480][T12727] do_fast_syscall_32+0x33/0x70 [ 926.872583][T12727] do_SYSENTER_32+0x1b/0x20 [ 926.877242][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 926.883901][T12727] [ 926.886305][T12727] Uninit was stored to memory at: [ 926.891550][T12727] __get_compat_msghdr+0x514/0x750 [ 926.897001][T12727] get_compat_msghdr+0x8c/0x1c0 [ 926.902164][T12727] ___sys_recvmsg+0x19d/0x890 [ 926.907004][T12727] do_recvmmsg+0x63a/0x10a0 [ 926.911661][T12727] __sys_recvmmsg+0x113/0x450 [ 926.916602][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 926.923125][T12727] __do_fast_syscall_32+0x87/0xe0 [ 926.928314][T12727] do_fast_syscall_32+0x33/0x70 [ 926.933408][T12727] do_SYSENTER_32+0x1b/0x20 [ 926.938077][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 926.944734][T12727] [ 926.947143][T12727] Uninit was stored to memory at: [ 926.952494][T12727] __get_compat_msghdr+0x514/0x750 [ 926.957816][T12727] get_compat_msghdr+0x8c/0x1c0 [ 926.962973][T12727] ___sys_recvmsg+0x19d/0x890 [ 926.967850][T12727] do_recvmmsg+0x63a/0x10a0 [ 926.972643][T12727] __sys_recvmmsg+0x113/0x450 [ 926.977483][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 926.984007][T12727] __do_fast_syscall_32+0x87/0xe0 [ 926.989191][T12727] do_fast_syscall_32+0x33/0x70 [ 926.994712][T12727] do_SYSENTER_32+0x1b/0x20 [ 926.999378][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 927.006031][T12727] [ 927.008432][T12727] Uninit was stored to memory at: [ 927.013776][T12727] __get_compat_msghdr+0x514/0x750 [ 927.019094][T12727] get_compat_msghdr+0x8c/0x1c0 [ 927.024335][T12727] ___sys_recvmsg+0x19d/0x890 [ 927.029190][T12727] do_recvmmsg+0x63a/0x10a0 [ 927.033971][T12727] __sys_recvmmsg+0x113/0x450 [ 927.038822][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 927.045440][T12727] __do_fast_syscall_32+0x87/0xe0 [ 927.050646][T12727] do_fast_syscall_32+0x33/0x70 [ 927.055847][T12727] do_SYSENTER_32+0x1b/0x20 [ 927.060513][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 927.067256][T12727] [ 927.069670][T12727] Uninit was stored to memory at: [ 927.075083][T12727] __get_compat_msghdr+0x514/0x750 [ 927.080402][T12727] get_compat_msghdr+0x8c/0x1c0 [ 927.085629][T12727] ___sys_recvmsg+0x19d/0x890 [ 927.090462][T12727] do_recvmmsg+0x63a/0x10a0 [ 927.095299][T12727] __sys_recvmmsg+0x113/0x450 [ 927.100137][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 927.106725][T12727] __do_fast_syscall_32+0x87/0xe0 [ 927.112031][T12727] do_fast_syscall_32+0x33/0x70 [ 927.117046][T12727] do_SYSENTER_32+0x1b/0x20 [ 927.121708][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 927.128444][T12727] [ 927.130849][T12727] Local variable msg_sys created at: [ 927.136337][T12727] do_recvmmsg+0x5f/0x10a0 [ 927.140930][T12727] __sys_recvmmsg+0x113/0x450 [ 928.207266][T12727] not chained 490000 origins [ 928.212180][T12727] CPU: 0 PID: 12727 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 928.222865][T12727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 928.233059][T12727] Call Trace: [ 928.236552][T12727] [ 928.239586][T12727] dump_stack_lvl+0x1c8/0x256 [ 928.244491][T12727] dump_stack+0x1a/0x1c [ 928.248853][T12727] kmsan_internal_chain_origin+0x78/0x120 [ 928.254788][T12727] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 928.261063][T12727] ? kmsan_get_metadata+0x33/0x220 [ 928.266370][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 928.272823][T12727] ? kmsan_get_metadata+0x33/0x220 [ 928.278116][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 928.284117][T12727] ? kmsan_get_metadata+0x33/0x220 [ 928.289431][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 928.295435][T12727] ? __get_compat_msghdr+0x5b/0x750 [ 928.301209][T12727] ? kmsan_get_metadata+0x33/0x220 [ 928.306511][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 928.312517][T12727] ? should_fail+0x3f/0x810 [ 928.317199][T12727] ? __stack_depot_save+0x21/0x4b0 [ 928.322497][T12727] ? kmsan_get_metadata+0x33/0x220 [ 928.327805][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 928.334248][T12727] ? kmsan_get_metadata+0x33/0x220 [ 928.339537][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 928.345536][T12727] __msan_chain_origin+0xbd/0x140 [ 928.350750][T12727] __get_compat_msghdr+0x514/0x750 [ 928.356108][T12727] get_compat_msghdr+0x8c/0x1c0 [ 928.361171][T12727] ? ___sys_recvmsg+0xa9/0x890 [ 928.366097][T12727] ? do_recvmmsg+0x63a/0x10a0 [ 928.370951][T12727] ___sys_recvmsg+0x19d/0x890 [ 928.375809][T12727] ? __schedule+0x1609/0x21d0 [ 928.380648][T12727] ? kmsan_get_metadata+0x33/0x220 [ 928.385948][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 928.391956][T12727] ? kmsan_get_metadata+0x33/0x220 [ 928.397248][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 928.403258][T12727] do_recvmmsg+0x63a/0x10a0 [ 928.407958][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 928.414407][T12727] ? __sys_recvmmsg+0x52/0x450 [ 928.419338][T12727] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 928.425992][T12727] __sys_recvmmsg+0x113/0x450 [ 928.430843][T12727] ? kmsan_get_metadata+0x33/0x220 [ 928.436158][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 928.442610][T12727] __do_fast_syscall_32+0x87/0xe0 [ 928.447816][T12727] ? exit_to_user_mode_prepare+0x119/0x220 [ 928.453823][T12727] do_fast_syscall_32+0x33/0x70 [ 928.458861][T12727] do_SYSENTER_32+0x1b/0x20 [ 928.463536][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 928.470103][T12727] RIP: 0023:0xf7fc5549 [ 928.474310][T12727] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 928.494121][T12727] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 928.502693][T12727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 928.510744][T12727] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 928.518800][T12727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 928.526885][T12727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.534973][T12727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 928.543035][T12727] [ 928.551951][T12727] Uninit was stored to memory at: [ 928.557240][T12727] __get_compat_msghdr+0x514/0x750 [ 928.563066][T12727] get_compat_msghdr+0x8c/0x1c0 [ 928.568129][T12727] ___sys_recvmsg+0x19d/0x890 [ 928.573101][T12727] do_recvmmsg+0x63a/0x10a0 [ 928.577756][T12727] __sys_recvmmsg+0x113/0x450 [ 928.582725][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 928.589275][T12727] __do_fast_syscall_32+0x87/0xe0 [ 928.594603][T12727] do_fast_syscall_32+0x33/0x70 [ 928.599621][T12727] do_SYSENTER_32+0x1b/0x20 [ 928.604424][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 928.610984][T12727] [ 928.613516][T12727] Uninit was stored to memory at: [ 928.618778][T12727] __get_compat_msghdr+0x514/0x750 [ 928.624231][T12727] get_compat_msghdr+0x8c/0x1c0 [ 928.629270][T12727] ___sys_recvmsg+0x19d/0x890 [ 928.634262][T12727] do_recvmmsg+0x63a/0x10a0 [ 928.638924][T12727] __sys_recvmmsg+0x113/0x450 [ 928.643896][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 928.650302][T12727] __do_fast_syscall_32+0x87/0xe0 [ 928.655585][T12727] do_fast_syscall_32+0x33/0x70 [ 928.660574][T12727] do_SYSENTER_32+0x1b/0x20 [ 928.665381][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 928.672068][T12727] [ 928.674468][T12727] Uninit was stored to memory at: [ 928.679736][T12727] __get_compat_msghdr+0x514/0x750 [ 928.685200][T12727] get_compat_msghdr+0x8c/0x1c0 [ 928.690270][T12727] ___sys_recvmsg+0x19d/0x890 [ 928.695306][T12727] do_recvmmsg+0x63a/0x10a0 [ 928.700123][T12727] __sys_recvmmsg+0x113/0x450 [ 928.705120][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 928.711531][T12727] __do_fast_syscall_32+0x87/0xe0 [ 928.716821][T12727] do_fast_syscall_32+0x33/0x70 [ 928.721946][T12727] do_SYSENTER_32+0x1b/0x20 [ 928.726612][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 928.733318][T12727] [ 928.735707][T12727] Uninit was stored to memory at: [ 928.740874][T12727] __get_compat_msghdr+0x514/0x750 [ 928.746254][T12727] get_compat_msghdr+0x8c/0x1c0 [ 928.751303][T12727] ___sys_recvmsg+0x19d/0x890 [ 928.756290][T12727] do_recvmmsg+0x63a/0x10a0 [ 928.760949][T12727] __sys_recvmmsg+0x113/0x450 [ 928.765890][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 928.772436][T12727] __do_fast_syscall_32+0x87/0xe0 [ 928.777601][T12727] do_fast_syscall_32+0x33/0x70 [ 928.782736][T12727] do_SYSENTER_32+0x1b/0x20 [ 928.787395][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 928.794085][T12727] [ 928.796520][T12727] Uninit was stored to memory at: [ 928.801903][T12727] __get_compat_msghdr+0x514/0x750 [ 928.807226][T12727] get_compat_msghdr+0x8c/0x1c0 [ 928.812430][T12727] ___sys_recvmsg+0x19d/0x890 [ 928.817244][T12727] do_recvmmsg+0x63a/0x10a0 [ 928.822016][T12727] __sys_recvmmsg+0x113/0x450 [ 928.826855][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 928.833449][T12727] __do_fast_syscall_32+0x87/0xe0 [ 928.838618][T12727] do_fast_syscall_32+0x33/0x70 [ 928.843718][T12727] do_SYSENTER_32+0x1b/0x20 [ 928.848377][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 928.855060][T12727] [ 928.857466][T12727] Uninit was stored to memory at: [ 928.862861][T12727] __get_compat_msghdr+0x514/0x750 [ 928.868161][T12727] get_compat_msghdr+0x8c/0x1c0 [ 928.873342][T12727] ___sys_recvmsg+0x19d/0x890 [ 928.878156][T12727] do_recvmmsg+0x63a/0x10a0 [ 928.882986][T12727] __sys_recvmmsg+0x113/0x450 [ 928.887831][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 928.894423][T12727] __do_fast_syscall_32+0x87/0xe0 [ 928.899606][T12727] do_fast_syscall_32+0x33/0x70 [ 928.904808][T12727] do_SYSENTER_32+0x1b/0x20 [ 928.909447][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 928.916131][T12727] [ 928.918534][T12727] Uninit was stored to memory at: [ 928.923972][T12727] __get_compat_msghdr+0x514/0x750 [ 928.929265][T12727] get_compat_msghdr+0x8c/0x1c0 [ 928.934390][T12727] ___sys_recvmsg+0x19d/0x890 [ 928.939206][T12727] do_recvmmsg+0x63a/0x10a0 [ 928.944002][T12727] __sys_recvmmsg+0x113/0x450 [ 928.948819][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 928.955310][T12727] __do_fast_syscall_32+0x87/0xe0 [ 928.960474][T12727] do_fast_syscall_32+0x33/0x70 [ 928.965569][T12727] do_SYSENTER_32+0x1b/0x20 [ 928.970216][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 928.976957][T12727] [ 928.979365][T12727] Local variable msg_sys created at: [ 928.984880][T12727] do_recvmmsg+0x5f/0x10a0 [ 928.989433][T12727] __sys_recvmmsg+0x113/0x450 [ 929.250497][T12727] not chained 500000 origins [ 929.255459][T12727] CPU: 1 PID: 12727 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 929.266205][T12727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 929.276363][T12727] Call Trace: [ 929.279724][T12727] [ 929.282732][T12727] dump_stack_lvl+0x1c8/0x256 [ 929.287645][T12727] dump_stack+0x1a/0x1c [ 929.291922][T12727] kmsan_internal_chain_origin+0x78/0x120 [ 929.297824][T12727] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 929.304062][T12727] ? kmsan_get_metadata+0x33/0x220 [ 929.309417][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 929.315888][T12727] ? kmsan_get_metadata+0x33/0x220 [ 929.321185][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 929.327120][T12727] ? kmsan_get_metadata+0x33/0x220 [ 929.332422][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 929.338405][T12727] ? __get_compat_msghdr+0x5b/0x750 [ 929.343754][T12727] ? kmsan_get_metadata+0x33/0x220 [ 929.349071][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 929.355079][T12727] ? should_fail+0x3f/0x810 [ 929.359760][T12727] ? __stack_depot_save+0x21/0x4b0 [ 929.365063][T12727] ? kmsan_get_metadata+0x33/0x220 [ 929.370354][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 929.376747][T12727] ? kmsan_get_metadata+0x33/0x220 [ 929.382042][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 929.388022][T12727] __msan_chain_origin+0xbd/0x140 [ 929.393166][T12727] __get_compat_msghdr+0x514/0x750 [ 929.399008][T12727] get_compat_msghdr+0x8c/0x1c0 [ 929.403975][T12727] ? ___sys_recvmsg+0xa9/0x890 [ 929.408840][T12727] ? do_recvmmsg+0x63a/0x10a0 [ 929.413691][T12727] ___sys_recvmsg+0x19d/0x890 [ 929.418543][T12727] ? __schedule+0x1609/0x21d0 [ 929.423392][T12727] ? kmsan_get_metadata+0x33/0x220 [ 929.428616][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 929.434549][T12727] ? kmsan_get_metadata+0x33/0x220 [ 929.439839][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 929.445849][T12727] do_recvmmsg+0x63a/0x10a0 [ 929.450459][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 929.456842][T12727] ? __sys_recvmmsg+0x52/0x450 [ 929.461764][T12727] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 929.468344][T12727] __sys_recvmmsg+0x113/0x450 [ 929.473132][T12727] ? kmsan_get_metadata+0x33/0x220 [ 929.478447][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 929.484894][T12727] __do_fast_syscall_32+0x87/0xe0 [ 929.490065][T12727] ? exit_to_user_mode_prepare+0x119/0x220 [ 929.495981][T12727] do_fast_syscall_32+0x33/0x70 [ 929.500923][T12727] do_SYSENTER_32+0x1b/0x20 [ 929.505530][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 929.512097][T12727] RIP: 0023:0xf7fc5549 [ 929.516299][T12727] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 929.536083][T12727] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 929.544617][T12727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 929.552731][T12727] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 929.560812][T12727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 929.568884][T12727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.577008][T12727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 929.585149][T12727] [ 929.597283][T12727] Uninit was stored to memory at: [ 929.603993][T12727] __get_compat_msghdr+0x514/0x750 [ 929.609336][T12727] get_compat_msghdr+0x8c/0x1c0 [ 929.614583][T12727] ___sys_recvmsg+0x19d/0x890 [ 929.619428][T12727] do_recvmmsg+0x63a/0x10a0 [ 929.624188][T12727] __sys_recvmmsg+0x113/0x450 [ 929.629010][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 929.635505][T12727] __do_fast_syscall_32+0x87/0xe0 [ 929.640696][T12727] do_fast_syscall_32+0x33/0x70 [ 929.645799][T12727] do_SYSENTER_32+0x1b/0x20 [ 929.650469][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 929.657132][T12727] [ 929.659538][T12727] Uninit was stored to memory at: [ 929.664903][T12727] __get_compat_msghdr+0x514/0x750 [ 929.670233][T12727] get_compat_msghdr+0x8c/0x1c0 [ 929.675409][T12727] ___sys_recvmsg+0x19d/0x890 [ 929.680255][T12727] do_recvmmsg+0x63a/0x10a0 [ 929.685010][T12727] __sys_recvmmsg+0x113/0x450 [ 929.689846][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 929.696379][T12727] __do_fast_syscall_32+0x87/0xe0 [ 929.701686][T12727] do_fast_syscall_32+0x33/0x70 [ 929.706793][T12727] do_SYSENTER_32+0x1b/0x20 [ 929.711453][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 929.718125][T12727] [ 929.720536][T12727] Uninit was stored to memory at: [ 929.725900][T12727] __get_compat_msghdr+0x514/0x750 [ 929.731227][T12727] get_compat_msghdr+0x8c/0x1c0 [ 929.736406][T12727] ___sys_recvmsg+0x19d/0x890 [ 929.741243][T12727] do_recvmmsg+0x63a/0x10a0 [ 929.745971][T12727] __sys_recvmmsg+0x113/0x450 [ 929.750784][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 929.757273][T12727] __do_fast_syscall_32+0x87/0xe0 [ 929.762563][T12727] do_fast_syscall_32+0x33/0x70 [ 929.767583][T12727] do_SYSENTER_32+0x1b/0x20 [ 929.772399][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 929.778948][T12727] [ 929.781311][T12727] Uninit was stored to memory at: [ 929.786698][T12727] __get_compat_msghdr+0x514/0x750 [ 929.792109][T12727] get_compat_msghdr+0x8c/0x1c0 [ 929.797172][T12727] ___sys_recvmsg+0x19d/0x890 [ 929.802127][T12727] do_recvmmsg+0x63a/0x10a0 [ 929.806761][T12727] __sys_recvmmsg+0x113/0x450 [ 929.811517][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 929.818049][T12727] __do_fast_syscall_32+0x87/0xe0 [ 929.823328][T12727] do_fast_syscall_32+0x33/0x70 [ 929.828345][T12727] do_SYSENTER_32+0x1b/0x20 [ 929.833167][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 929.839714][T12727] [ 929.842254][T12727] Uninit was stored to memory at: [ 929.847458][T12727] __get_compat_msghdr+0x514/0x750 [ 929.852890][T12727] get_compat_msghdr+0x8c/0x1c0 [ 929.857961][T12727] ___sys_recvmsg+0x19d/0x890 [ 929.862979][T12727] do_recvmmsg+0x63a/0x10a0 [ 929.867625][T12727] __sys_recvmmsg+0x113/0x450 [ 929.872564][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 929.878992][T12727] __do_fast_syscall_32+0x87/0xe0 [ 929.884339][T12727] do_fast_syscall_32+0x33/0x70 [ 929.889330][T12727] do_SYSENTER_32+0x1b/0x20 [ 929.894089][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 929.900759][T12727] [ 929.903318][T12727] Uninit was stored to memory at: [ 929.908832][T12727] __get_compat_msghdr+0x514/0x750 [ 929.914271][T12727] get_compat_msghdr+0x8c/0x1c0 [ 929.919331][T12727] ___sys_recvmsg+0x19d/0x890 [ 929.924321][T12727] do_recvmmsg+0x63a/0x10a0 [ 929.928980][T12727] __sys_recvmmsg+0x113/0x450 [ 929.933979][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 929.940406][T12727] __do_fast_syscall_32+0x87/0xe0 [ 929.945756][T12727] do_fast_syscall_32+0x33/0x70 [ 929.950752][T12727] do_SYSENTER_32+0x1b/0x20 [ 929.955506][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 929.962155][T12727] [ 929.964561][T12727] Uninit was stored to memory at: [ 929.969746][T12727] __get_compat_msghdr+0x514/0x750 [ 929.975150][T12727] get_compat_msghdr+0x8c/0x1c0 [ 929.980186][T12727] ___sys_recvmsg+0x19d/0x890 [ 929.985128][T12727] do_recvmmsg+0x63a/0x10a0 [ 929.989796][T12727] __sys_recvmmsg+0x113/0x450 [ 929.994796][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 930.001200][T12727] __do_fast_syscall_32+0x87/0xe0 [ 930.006503][T12727] do_fast_syscall_32+0x33/0x70 [ 930.011515][T12727] do_SYSENTER_32+0x1b/0x20 [ 930.016331][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 930.023005][T12727] [ 930.025411][T12727] Local variable msg_sys created at: [ 930.030778][T12727] do_recvmmsg+0x5f/0x10a0 [ 930.035484][T12727] __sys_recvmmsg+0x113/0x450 [ 930.247092][T12727] not chained 510000 origins [ 930.252145][T12727] CPU: 0 PID: 12727 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 930.262834][T12727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 930.273077][T12727] Call Trace: [ 930.276402][T12727] [ 930.279394][T12727] dump_stack_lvl+0x1c8/0x256 [ 930.284218][T12727] dump_stack+0x1a/0x1c [ 930.288480][T12727] kmsan_internal_chain_origin+0x78/0x120 [ 930.294298][T12727] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 930.300527][T12727] ? kmsan_get_metadata+0x33/0x220 [ 930.305733][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 930.312099][T12727] ? kmsan_get_metadata+0x33/0x220 [ 930.317379][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 930.323378][T12727] ? kmsan_get_metadata+0x33/0x220 [ 930.328688][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 930.334683][T12727] ? __get_compat_msghdr+0x5b/0x750 [ 930.340017][T12727] ? kmsan_get_metadata+0x33/0x220 [ 930.345230][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 930.351148][T12727] ? should_fail+0x3f/0x810 [ 930.355749][T12727] ? __stack_depot_save+0x21/0x4b0 [ 930.361042][T12727] ? kmsan_get_metadata+0x33/0x220 [ 930.366273][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 930.372698][T12727] ? kmsan_get_metadata+0x33/0x220 [ 930.377907][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 930.383837][T12727] __msan_chain_origin+0xbd/0x140 [ 930.388954][T12727] __get_compat_msghdr+0x514/0x750 [ 930.394218][T12727] get_compat_msghdr+0x8c/0x1c0 [ 930.399185][T12727] ? ___sys_recvmsg+0xa9/0x890 [ 930.404027][T12727] ? do_recvmmsg+0x63a/0x10a0 [ 930.408785][T12727] ___sys_recvmsg+0x19d/0x890 [ 930.413578][T12727] ? __schedule+0x1609/0x21d0 [ 930.418431][T12727] ? kmsan_get_metadata+0x33/0x220 [ 930.423721][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 930.429669][T12727] ? kmsan_get_metadata+0x33/0x220 [ 930.434900][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 930.440900][T12727] do_recvmmsg+0x63a/0x10a0 [ 930.445510][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 930.451966][T12727] ? __sys_recvmmsg+0x52/0x450 [ 930.456811][T12727] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 930.463355][T12727] __sys_recvmmsg+0x113/0x450 [ 930.468188][T12727] ? kmsan_get_metadata+0x33/0x220 [ 930.473495][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 930.479899][T12727] __do_fast_syscall_32+0x87/0xe0 [ 930.485006][T12727] ? exit_to_user_mode_prepare+0x119/0x220 [ 930.490908][T12727] do_fast_syscall_32+0x33/0x70 [ 930.495843][T12727] do_SYSENTER_32+0x1b/0x20 [ 930.500684][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 930.507235][T12727] RIP: 0023:0xf7fc5549 [ 930.511364][T12727] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 930.531087][T12727] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 930.539609][T12727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 930.547659][T12727] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 930.555704][T12727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 930.563765][T12727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.571866][T12727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 930.579922][T12727] [ 930.588592][T12727] Uninit was stored to memory at: [ 930.594375][T12727] __get_compat_msghdr+0x514/0x750 [ 930.599698][T12727] get_compat_msghdr+0x8c/0x1c0 [ 930.604901][T12727] ___sys_recvmsg+0x19d/0x890 [ 930.609745][T12727] do_recvmmsg+0x63a/0x10a0 [ 930.614534][T12727] __sys_recvmmsg+0x113/0x450 [ 930.619364][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 930.625928][T12727] __do_fast_syscall_32+0x87/0xe0 [ 930.631099][T12727] do_fast_syscall_32+0x33/0x70 [ 930.636255][T12727] do_SYSENTER_32+0x1b/0x20 [ 930.640920][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 930.647647][T12727] [ 930.650059][T12727] Uninit was stored to memory at: [ 930.655482][T12727] __get_compat_msghdr+0x514/0x750 [ 930.660787][T12727] get_compat_msghdr+0x8c/0x1c0 [ 930.665966][T12727] ___sys_recvmsg+0x19d/0x890 [ 930.670781][T12727] do_recvmmsg+0x63a/0x10a0 [ 930.675534][T12727] __sys_recvmmsg+0x113/0x450 [ 930.680347][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 930.686921][T12727] __do_fast_syscall_32+0x87/0xe0 [ 930.692327][T12727] do_fast_syscall_32+0x33/0x70 [ 930.697319][T12727] do_SYSENTER_32+0x1b/0x20 [ 930.702088][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 930.708639][T12727] [ 930.711041][T12727] Uninit was stored to memory at: [ 930.716430][T12727] __get_compat_msghdr+0x514/0x750 [ 930.721865][T12727] get_compat_msghdr+0x8c/0x1c0 [ 930.726929][T12727] ___sys_recvmsg+0x19d/0x890 [ 930.731957][T12727] do_recvmmsg+0x63a/0x10a0 [ 930.736598][T12727] __sys_recvmmsg+0x113/0x450 [ 930.741384][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 930.747953][T12727] __do_fast_syscall_32+0x87/0xe0 [ 930.753263][T12727] do_fast_syscall_32+0x33/0x70 [ 930.758358][T12727] do_SYSENTER_32+0x1b/0x20 [ 930.763145][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 930.769756][T12727] [ 930.772310][T12727] Uninit was stored to memory at: [ 930.777497][T12727] __get_compat_msghdr+0x514/0x750 [ 930.782930][T12727] get_compat_msghdr+0x8c/0x1c0 [ 930.787984][T12727] ___sys_recvmsg+0x19d/0x890 [ 930.792957][T12727] do_recvmmsg+0x63a/0x10a0 [ 930.797951][T12727] __sys_recvmmsg+0x113/0x450 [ 930.802872][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 930.809272][T12727] __do_fast_syscall_32+0x87/0xe0 [ 930.814596][T12727] do_fast_syscall_32+0x33/0x70 [ 930.819606][T12727] do_SYSENTER_32+0x1b/0x20 [ 930.824452][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 930.830992][T12727] [ 930.833557][T12727] Uninit was stored to memory at: [ 930.838742][T12727] __get_compat_msghdr+0x514/0x750 [ 930.844166][T12727] get_compat_msghdr+0x8c/0x1c0 [ 930.849217][T12727] ___sys_recvmsg+0x19d/0x890 [ 930.854178][T12727] do_recvmmsg+0x63a/0x10a0 [ 930.858814][T12727] __sys_recvmmsg+0x113/0x450 [ 930.863817][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 930.870216][T12727] __do_fast_syscall_32+0x87/0xe0 [ 930.875532][T12727] do_fast_syscall_32+0x33/0x70 [ 930.880519][T12727] do_SYSENTER_32+0x1b/0x20 [ 930.885272][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 930.891944][T12727] [ 930.894345][T12727] Uninit was stored to memory at: [ 930.899573][T12727] __get_compat_msghdr+0x514/0x750 [ 930.905059][T12727] get_compat_msghdr+0x8c/0x1c0 [ 930.910092][T12727] ___sys_recvmsg+0x19d/0x890 [ 930.915016][T12727] do_recvmmsg+0x63a/0x10a0 [ 930.919660][T12727] __sys_recvmmsg+0x113/0x450 [ 930.924638][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 930.931040][T12727] __do_fast_syscall_32+0x87/0xe0 [ 930.936315][T12727] do_fast_syscall_32+0x33/0x70 [ 930.941294][T12727] do_SYSENTER_32+0x1b/0x20 [ 930.946134][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 930.952859][T12727] [ 930.955259][T12727] Uninit was stored to memory at: [ 930.960437][T12727] __get_compat_msghdr+0x514/0x750 [ 930.965845][T12727] get_compat_msghdr+0x8c/0x1c0 [ 930.970899][T12727] ___sys_recvmsg+0x19d/0x890 [ 930.975823][T12727] do_recvmmsg+0x63a/0x10a0 [ 930.980457][T12727] __sys_recvmmsg+0x113/0x450 [ 930.985430][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 930.991975][T12727] __do_fast_syscall_32+0x87/0xe0 [ 930.997138][T12727] do_fast_syscall_32+0x33/0x70 [ 931.002222][T12727] do_SYSENTER_32+0x1b/0x20 [ 931.006858][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 931.013515][T12727] [ 931.015922][T12727] Local variable msg_sys created at: [ 931.021273][T12727] do_recvmmsg+0x5f/0x10a0 [ 931.025962][T12727] __sys_recvmmsg+0x113/0x450 [ 931.256562][T12727] not chained 520000 origins [ 931.261303][T12727] CPU: 1 PID: 12727 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 931.271983][T12727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 931.282178][T12727] Call Trace: [ 931.285555][T12727] [ 931.288583][T12727] dump_stack_lvl+0x1c8/0x256 [ 931.293566][T12727] dump_stack+0x1a/0x1c [ 931.297887][T12727] kmsan_internal_chain_origin+0x78/0x120 [ 931.303822][T12727] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 931.310059][T12727] ? kmsan_get_metadata+0x33/0x220 [ 931.315265][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 931.321615][T12727] ? kmsan_get_metadata+0x33/0x220 [ 931.326852][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 931.332859][T12727] ? kmsan_get_metadata+0x33/0x220 [ 931.338134][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 931.344065][T12727] ? __get_compat_msghdr+0x5b/0x750 [ 931.349449][T12727] ? kmsan_get_metadata+0x33/0x220 [ 931.354679][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 931.360677][T12727] ? should_fail+0x3f/0x810 [ 931.365307][T12727] ? __stack_depot_save+0x21/0x4b0 [ 931.370598][T12727] ? kmsan_get_metadata+0x33/0x220 [ 931.375872][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 931.382249][T12727] ? kmsan_get_metadata+0x33/0x220 [ 931.387541][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 931.393540][T12727] __msan_chain_origin+0xbd/0x140 [ 931.398793][T12727] __get_compat_msghdr+0x514/0x750 [ 931.404085][T12727] get_compat_msghdr+0x8c/0x1c0 [ 931.409148][T12727] ? ___sys_recvmsg+0xa9/0x890 [ 931.414073][T12727] ? do_recvmmsg+0x63a/0x10a0 [ 931.418895][T12727] ___sys_recvmsg+0x19d/0x890 [ 931.423667][T12727] ? __schedule+0x1609/0x21d0 [ 931.428436][T12727] ? kmsan_get_metadata+0x33/0x220 [ 931.433672][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 931.439666][T12727] ? kmsan_get_metadata+0x33/0x220 [ 931.444876][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 931.450787][T12727] do_recvmmsg+0x63a/0x10a0 [ 931.455426][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 931.461875][T12727] ? __sys_recvmmsg+0x52/0x450 [ 931.466775][T12727] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 931.473322][T12727] __sys_recvmmsg+0x113/0x450 [ 931.478157][T12727] ? kmsan_get_metadata+0x33/0x220 [ 931.483465][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 931.489881][T12727] __do_fast_syscall_32+0x87/0xe0 [ 931.495013][T12727] ? exit_to_user_mode_prepare+0x119/0x220 [ 931.501099][T12727] do_fast_syscall_32+0x33/0x70 [ 931.506109][T12727] do_SYSENTER_32+0x1b/0x20 [ 931.510743][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 931.517228][T12727] RIP: 0023:0xf7fc5549 [ 931.521421][T12727] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 931.541160][T12727] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 931.549670][T12727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 931.557750][T12727] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 931.565884][T12727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 931.574014][T12727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 931.582083][T12727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 931.590218][T12727] [ 931.600648][T12727] Uninit was stored to memory at: [ 931.606925][T12727] __get_compat_msghdr+0x514/0x750 [ 931.612359][T12727] get_compat_msghdr+0x8c/0x1c0 [ 931.617418][T12727] ___sys_recvmsg+0x19d/0x890 [ 931.622351][T12727] do_recvmmsg+0x63a/0x10a0 [ 931.627012][T12727] __sys_recvmmsg+0x113/0x450 [ 931.631925][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 931.638342][T12727] __do_fast_syscall_32+0x87/0xe0 [ 931.643621][T12727] do_fast_syscall_32+0x33/0x70 [ 931.648638][T12727] do_SYSENTER_32+0x1b/0x20 [ 931.653400][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 931.659981][T12727] [ 931.662493][T12727] Uninit was stored to memory at: [ 931.667747][T12727] __get_compat_msghdr+0x514/0x750 [ 931.673159][T12727] get_compat_msghdr+0x8c/0x1c0 [ 931.678223][T12727] ___sys_recvmsg+0x19d/0x890 [ 931.683145][T12727] do_recvmmsg+0x63a/0x10a0 [ 931.687796][T12727] __sys_recvmmsg+0x113/0x450 [ 931.692716][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 931.699153][T12727] __do_fast_syscall_32+0x87/0xe0 [ 931.704485][T12727] do_fast_syscall_32+0x33/0x70 [ 931.709487][T12727] do_SYSENTER_32+0x1b/0x20 [ 931.714231][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 931.720789][T12727] [ 931.723292][T12727] Uninit was stored to memory at: [ 931.728540][T12727] __get_compat_msghdr+0x514/0x750 [ 931.733950][T12727] get_compat_msghdr+0x8c/0x1c0 [ 931.739000][T12727] ___sys_recvmsg+0x19d/0x890 [ 931.743923][T12727] do_recvmmsg+0x63a/0x10a0 [ 931.748579][T12727] __sys_recvmmsg+0x113/0x450 [ 931.753505][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 931.759923][T12727] __do_fast_syscall_32+0x87/0xe0 [ 931.765197][T12727] do_fast_syscall_32+0x33/0x70 [ 931.770206][T12727] do_SYSENTER_32+0x1b/0x20 [ 931.774959][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 931.781519][T12727] [ 931.784024][T12727] Uninit was stored to memory at: [ 931.789275][T12727] __get_compat_msghdr+0x514/0x750 [ 931.794674][T12727] get_compat_msghdr+0x8c/0x1c0 [ 931.799717][T12727] ___sys_recvmsg+0x19d/0x890 [ 931.804636][T12727] do_recvmmsg+0x63a/0x10a0 [ 931.809301][T12727] __sys_recvmmsg+0x113/0x450 [ 931.814235][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 931.820658][T12727] __do_fast_syscall_32+0x87/0xe0 [ 931.825993][T12727] do_fast_syscall_32+0x33/0x70 [ 931.831003][T12727] do_SYSENTER_32+0x1b/0x20 [ 931.835758][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 931.842410][T12727] [ 931.844825][T12727] Uninit was stored to memory at: [ 931.850078][T12727] __get_compat_msghdr+0x514/0x750 [ 931.855504][T12727] get_compat_msghdr+0x8c/0x1c0 [ 931.860656][T12727] ___sys_recvmsg+0x19d/0x890 [ 931.865595][T12727] do_recvmmsg+0x63a/0x10a0 [ 931.870283][T12727] __sys_recvmmsg+0x113/0x450 [ 931.875217][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 931.881648][T12727] __do_fast_syscall_32+0x87/0xe0 [ 931.886957][T12727] do_fast_syscall_32+0x33/0x70 [ 931.892086][T12727] do_SYSENTER_32+0x1b/0x20 [ 931.896748][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 931.903408][T12727] [ 931.905809][T12727] Uninit was stored to memory at: [ 931.911057][T12727] __get_compat_msghdr+0x514/0x750 [ 931.916489][T12727] get_compat_msghdr+0x8c/0x1c0 [ 931.921557][T12727] ___sys_recvmsg+0x19d/0x890 [ 931.926486][T12727] do_recvmmsg+0x63a/0x10a0 [ 931.931142][T12727] __sys_recvmmsg+0x113/0x450 [ 931.936078][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 931.942672][T12727] __do_fast_syscall_32+0x87/0xe0 [ 931.947863][T12727] do_fast_syscall_32+0x33/0x70 [ 931.952969][T12727] do_SYSENTER_32+0x1b/0x20 [ 931.957643][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 931.964302][T12727] [ 931.966704][T12727] Uninit was stored to memory at: [ 931.972172][T12727] __get_compat_msghdr+0x514/0x750 [ 931.977494][T12727] get_compat_msghdr+0x8c/0x1c0 [ 931.982702][T12727] ___sys_recvmsg+0x19d/0x890 [ 931.987544][T12727] do_recvmmsg+0x63a/0x10a0 [ 931.992352][T12727] __sys_recvmmsg+0x113/0x450 [ 931.997163][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 932.003680][T12727] __do_fast_syscall_32+0x87/0xe0 [ 932.008901][T12727] do_fast_syscall_32+0x33/0x70 [ 932.014038][T12727] do_SYSENTER_32+0x1b/0x20 [ 932.018698][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 932.025355][T12727] [ 932.027764][T12727] Local variable msg_sys created at: [ 932.033304][T12727] do_recvmmsg+0x5f/0x10a0 [ 932.037881][T12727] __sys_recvmmsg+0x113/0x450 [ 932.280462][T12727] not chained 530000 origins [ 932.285370][T12727] CPU: 1 PID: 12727 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 932.296048][T12727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 932.306241][T12727] Call Trace: [ 932.309595][T12727] [ 932.312592][T12727] dump_stack_lvl+0x1c8/0x256 [ 932.317464][T12727] dump_stack+0x1a/0x1c [ 932.321722][T12727] kmsan_internal_chain_origin+0x78/0x120 [ 932.327622][T12727] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 932.333864][T12727] ? kmsan_get_metadata+0x33/0x220 [ 932.339070][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 932.345439][T12727] ? kmsan_get_metadata+0x33/0x220 [ 932.350703][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 932.356616][T12727] ? kmsan_get_metadata+0x33/0x220 [ 932.361846][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 932.367840][T12727] ? __get_compat_msghdr+0x5b/0x750 [ 932.373226][T12727] ? kmsan_get_metadata+0x33/0x220 [ 932.378458][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 932.384465][T12727] ? should_fail+0x3f/0x810 [ 932.389145][T12727] ? __stack_depot_save+0x21/0x4b0 [ 932.394431][T12727] ? kmsan_get_metadata+0x33/0x220 [ 932.400056][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 932.406425][T12727] ? kmsan_get_metadata+0x33/0x220 [ 932.411714][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 932.417701][T12727] __msan_chain_origin+0xbd/0x140 [ 932.422865][T12727] __get_compat_msghdr+0x514/0x750 [ 932.428186][T12727] get_compat_msghdr+0x8c/0x1c0 [ 932.433179][T12727] ? ___sys_recvmsg+0xa9/0x890 [ 932.438093][T12727] ? do_recvmmsg+0x63a/0x10a0 [ 932.442934][T12727] ___sys_recvmsg+0x19d/0x890 [ 932.447756][T12727] ? __schedule+0x1609/0x21d0 [ 932.452555][T12727] ? kmsan_get_metadata+0x33/0x220 [ 932.457852][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 932.463827][T12727] ? kmsan_get_metadata+0x33/0x220 [ 932.469032][T12727] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 932.474969][T12727] do_recvmmsg+0x63a/0x10a0 [ 932.479657][T12727] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 932.486110][T12727] ? __sys_recvmmsg+0x52/0x450 [ 932.491030][T12727] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 932.497582][T12727] __sys_recvmmsg+0x113/0x450 [ 932.502431][T12727] ? kmsan_get_metadata+0x33/0x220 [ 932.507735][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 932.514127][T12727] __do_fast_syscall_32+0x87/0xe0 [ 932.519318][T12727] ? exit_to_user_mode_prepare+0x119/0x220 [ 932.525311][T12727] do_fast_syscall_32+0x33/0x70 [ 932.530310][T12727] do_SYSENTER_32+0x1b/0x20 [ 932.534918][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 932.541476][T12727] RIP: 0023:0xf7fc5549 [ 932.545634][T12727] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 932.565448][T12727] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 932.574013][T12727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 932.582092][T12727] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 932.590205][T12727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 932.598406][T12727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 932.606517][T12727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 932.614658][T12727] [ 932.621182][T12727] Uninit was stored to memory at: [ 932.626766][T12727] __get_compat_msghdr+0x514/0x750 [ 932.632170][T12727] get_compat_msghdr+0x8c/0x1c0 [ 932.637218][T12727] ___sys_recvmsg+0x19d/0x890 [ 932.642154][T12727] do_recvmmsg+0x63a/0x10a0 [ 932.646822][T12727] __sys_recvmmsg+0x113/0x450 [ 932.651926][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 932.658354][T12727] __do_fast_syscall_32+0x87/0xe0 [ 932.663650][T12727] do_fast_syscall_32+0x33/0x70 [ 932.668665][T12727] do_SYSENTER_32+0x1b/0x20 [ 932.673688][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 932.680257][T12727] [ 932.682771][T12727] Uninit was stored to memory at: [ 932.688056][T12727] __get_compat_msghdr+0x514/0x750 [ 932.693564][T12727] get_compat_msghdr+0x8c/0x1c0 [ 932.698631][T12727] ___sys_recvmsg+0x19d/0x890 [ 932.703656][T12727] do_recvmmsg+0x63a/0x10a0 [ 932.708327][T12727] __sys_recvmmsg+0x113/0x450 [ 932.713336][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 932.719742][T12727] __do_fast_syscall_32+0x87/0xe0 [ 932.725033][T12727] do_fast_syscall_32+0x33/0x70 [ 932.730039][T12727] do_SYSENTER_32+0x1b/0x20 [ 932.734877][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 932.741415][T12727] [ 932.743948][T12727] Uninit was stored to memory at: [ 932.749205][T12727] __get_compat_msghdr+0x514/0x750 [ 932.754675][T12727] get_compat_msghdr+0x8c/0x1c0 [ 932.759738][T12727] ___sys_recvmsg+0x19d/0x890 [ 932.764758][T12727] do_recvmmsg+0x63a/0x10a0 [ 932.769401][T12727] __sys_recvmmsg+0x113/0x450 [ 932.774326][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 932.780755][T12727] __do_fast_syscall_32+0x87/0xe0 [ 932.786093][T12727] do_fast_syscall_32+0x33/0x70 [ 932.791102][T12727] do_SYSENTER_32+0x1b/0x20 [ 932.795920][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 932.802576][T12727] [ 932.804981][T12727] Uninit was stored to memory at: [ 932.810162][T12727] __get_compat_msghdr+0x514/0x750 [ 932.815562][T12727] get_compat_msghdr+0x8c/0x1c0 [ 932.820772][T12727] ___sys_recvmsg+0x19d/0x890 [ 932.825722][T12727] do_recvmmsg+0x63a/0x10a0 [ 932.830361][T12727] __sys_recvmmsg+0x113/0x450 [ 932.835304][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 932.841705][T12727] __do_fast_syscall_32+0x87/0xe0 [ 932.847032][T12727] do_fast_syscall_32+0x33/0x70 [ 932.852179][T12727] do_SYSENTER_32+0x1b/0x20 [ 932.856834][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 932.863539][T12727] [ 932.865939][T12727] Uninit was stored to memory at: [ 932.871190][T12727] __get_compat_msghdr+0x514/0x750 [ 932.876681][T12727] get_compat_msghdr+0x8c/0x1c0 [ 932.881818][T12727] ___sys_recvmsg+0x19d/0x890 [ 932.886647][T12727] do_recvmmsg+0x63a/0x10a0 [ 932.891299][T12727] __sys_recvmmsg+0x113/0x450 [ 932.896308][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 932.902829][T12727] __do_fast_syscall_32+0x87/0xe0 [ 932.907994][T12727] do_fast_syscall_32+0x33/0x70 [ 932.913097][T12727] do_SYSENTER_32+0x1b/0x20 [ 932.917758][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 932.924484][T12727] [ 932.926875][T12727] Uninit was stored to memory at: [ 932.932235][T12727] __get_compat_msghdr+0x514/0x750 [ 932.937550][T12727] get_compat_msghdr+0x8c/0x1c0 [ 932.942760][T12727] ___sys_recvmsg+0x19d/0x890 [ 932.947605][T12727] do_recvmmsg+0x63a/0x10a0 [ 932.952403][T12727] __sys_recvmmsg+0x113/0x450 [ 932.957234][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 932.963796][T12727] __do_fast_syscall_32+0x87/0xe0 [ 932.968991][T12727] do_fast_syscall_32+0x33/0x70 [ 932.974183][T12727] do_SYSENTER_32+0x1b/0x20 [ 932.978847][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 932.985562][T12727] [ 932.987947][T12727] Uninit was stored to memory at: [ 932.993307][T12727] __get_compat_msghdr+0x514/0x750 [ 932.998624][T12727] get_compat_msghdr+0x8c/0x1c0 [ 933.003776][T12727] ___sys_recvmsg+0x19d/0x890 [ 933.008619][T12727] do_recvmmsg+0x63a/0x10a0 [ 933.013384][T12727] __sys_recvmmsg+0x113/0x450 [ 933.018195][T12727] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 933.024714][T12727] __do_fast_syscall_32+0x87/0xe0 [ 933.029912][T12727] do_fast_syscall_32+0x33/0x70 [ 933.035074][T12727] do_SYSENTER_32+0x1b/0x20 [ 933.039735][T12727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 933.046404][T12727] [ 933.048816][T12727] Local variable msg_sys created at: [ 933.054364][T12727] do_recvmmsg+0x5f/0x10a0 [ 933.058943][T12727] __sys_recvmmsg+0x113/0x450 16:10:13 executing program 3: syz_mount_image$bfs(&(0x7f0000001c80), &(0x7f0000001cc0)='./file0\x00', 0x0, 0x1, &(0x7f00000030c0)=[{&(0x7f0000001fc0)="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", 0x17f, 0x81}], 0x0, &(0x7f0000003180)) 16:10:13 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x127e, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x1276, 0x0) 16:10:13 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x800000, 0x31, 0xffffffffffffffff, 0x0) 16:10:13 executing program 0: r0 = socket(0x10, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:13 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 933.384493][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 933.440334][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:13 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000000, 0x31, 0xffffffffffffffff, 0x0) 16:10:13 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x127f, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:13 executing program 4: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[], [{@uid_lt}]}) 16:10:13 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 933.784711][T12788] loop3: detected capacity change from 0 to 1 16:10:13 executing program 0: r0 = socket(0x10, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 933.850491][T12788] Dev loop3: unable to read RDB block 1 [ 933.856767][T12788] loop3: unable to read partition table [ 933.918130][T12788] loop3: partition table beyond EOD, truncated [ 933.956877][T12788] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) 16:10:14 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000000, 0x31, 0xffffffffffffffff, 0x0) [ 934.154036][T12794] jfs: Unrecognized mount option "uid<00000000000000000000" or missing value 16:10:14 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) syz_clone3(&(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001b40), 0x0, 0x0) shmctl$IPC_RMID(r0, 0x0) [ 934.352880][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:14 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c00, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:14 executing program 4: syz_mount_image$bfs(0x0, &(0x7f0000001cc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000003200)='./file0\x00', 0x0, 0x216004, 0x0) 16:10:14 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2040000, 0x31, 0xffffffffffffffff, 0x0) [ 934.638354][T12799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:14 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:15 executing program 0: r0 = socket(0x10, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:15 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x100010, r0, 0x10000000) 16:10:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c01, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:15 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3000000, 0x31, 0xffffffffffffffff, 0x0) 16:10:15 executing program 4: syz_mount_image$bfs(0x0, &(0x7f0000001cc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000003200)='./file0\x00', 0x0, 0x0, 0x0) [ 935.399406][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 935.537449][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:15 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x40841, 0x0) 16:10:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c03, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:16 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x0, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:16 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:16 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4000000, 0x31, 0xffffffffffffffff, 0x0) [ 936.250167][T12834] random: crng reseeded on system resumption 16:10:16 executing program 4: semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000340)=""/252) 16:10:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) [ 936.590160][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x40000}], 0x1c) pipe(0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) sendfile(r2, r3, 0x0, 0x80001d00c0d0) 16:10:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c04, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:16 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x6040000, 0x31, 0xffffffffffffffff, 0x0) [ 936.756379][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:17 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x0, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:17 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xa, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:17 executing program 4: getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f00000003c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 16:10:17 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x20000000, 0x31, 0xffffffffffffffff, 0x0) [ 937.486562][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c05, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:18 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x0, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:18 executing program 3: getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x4, @remote, 0x3}}, 0x277af264, 0x5, 0x0, 0x23cf}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f00000003c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 16:10:18 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x40000800, 0x31, 0xffffffffffffffff, 0x0) [ 938.328352][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:18 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 938.647537][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c06, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:18 executing program 4: openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x4, @remote}}, 0x277af264, 0x5, 0x0, 0x23cf}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 16:10:19 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfeffffff, 0x31, 0xffffffffffffffff, 0x0) 16:10:19 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 939.222160][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:19 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c07, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:19 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xff600000, 0x31, 0xffffffffffffffff, 0x0) [ 939.778617][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:20 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ftruncate(r4, 0x200002) sendfile(r2, r4, 0x0, 0x80001d00c0d0) 16:10:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c08, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:20 executing program 4: getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) [ 940.384929][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:20 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffe, 0x31, 0xffffffffffffffff, 0x0) 16:10:20 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 940.778440][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:21 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:21 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 941.108099][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:21 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffff, 0x31, 0xffffffffffffffff, 0x0) 16:10:21 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 941.601135][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:21 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:21 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f00000003c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100), 0x4) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 16:10:22 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(r4, 0x200002) sendfile(r2, r4, 0x0, 0x80001d00c0d0) 16:10:22 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 16:10:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c0a, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 942.178013][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 942.394001][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:22 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:22 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x2) 16:10:22 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x11, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:23 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) socket$inet6_sctp(0xa, 0x0, 0x84) pipe(0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) sendfile(r2, r3, 0x0, 0x80001d00c0d0) 16:10:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x541b, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:23 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x3) 16:10:23 executing program 4: getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x4, @remote, 0x3}}, 0x277af264, 0x5, 0x0, 0x23cf}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) [ 943.546080][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 943.653743][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x5421, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:24 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x4) 16:10:24 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:24 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x14, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:24 executing program 3: syz_mount_image$hpfs(0x0, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x1, &(0x7f0000001c00)=[{&(0x7f0000000b00)="b1", 0x1, 0x1000}], 0x0, &(0x7f0000001c80)) 16:10:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x5450, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:25 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0xfe) [ 944.916279][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 945.048064][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x5451, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:25 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 945.325921][T12982] loop3: detected capacity change from 0 to 16 16:10:25 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x202) fcntl$getown(r1, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) [ 945.469289][ T2848] loop3: unable to read partition table [ 945.505483][ T2848] loop3: partition table beyond EOD, truncated 16:10:25 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x15, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:25 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x204) 16:10:25 executing program 3: r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x6, r0, &(0x7f0000000c40)=""/4096, 0x1000) 16:10:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x5452, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 945.908045][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 946.087388][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:26 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:26 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x300) 16:10:26 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 16:10:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x5460, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:26 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x19, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 946.719596][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:26 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000100)={{}, 'port0\x00'}) 16:10:27 executing program 4: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0) 16:10:27 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x402) 16:10:27 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 946.995702][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x8933, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:27 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0x13, r0, 0x0) 16:10:27 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:27 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x406) [ 947.563418][T13023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:27 executing program 4: pselect6(0x40, &(0x7f0000000400), &(0x7f0000000440)={0x401}, 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500), 0x8}) 16:10:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x40041271, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:28 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:28 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)) [ 948.035813][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:28 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x604) 16:10:28 executing program 4: add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000080)="2728a7502b7711c19b99a6d6853139a5418525bc7d5f1451b0c3645296b78218dff5630023e54b7b13d94bb131e1e0fd8f016ff3539259733d4d9987583cd0b5dadafd292e546f83e1688b6c617501138228f6136e1bc87f862ac0b054190e2cfe895771830f00", 0x67, 0xfffffffffffffffb) 16:10:28 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x400448c9, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 948.618698][T13043] Option 'åK{ÙK±1áàýoóS’Ys' to dns_resolver key: bad/missing value 16:10:28 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4020940d, 0x0) 16:10:28 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x2000) [ 948.697248][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:28 executing program 4: syz_open_dev$vcsa(&(0x7f00000001c0), 0x0, 0x41) 16:10:29 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x400448dd, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 949.093305][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0xff, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "81f25679"}, @global=@item_012={0x1, 0x1, 0x3, "87"}]}}, 0x0}, 0x0) 16:10:29 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x60ff) 16:10:29 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfe, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private}}}}) [ 949.575187][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x400454ca, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:30 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:30 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0xfeff) [ 950.035864][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 950.072239][ T3551] usb 4-1: new high-speed USB device number 16 using dummy_hcd 16:10:30 executing program 4: add_key(&(0x7f00000010c0)='id_legacy\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 16:10:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x40046602, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:30 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x165, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 950.443118][ T3551] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.454652][ T3551] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.464895][ T3551] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 950.474308][ T3551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 16:10:30 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0xfffe) [ 950.558500][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 950.665562][ T3551] usb 4-1: config 0 descriptor?? 16:10:30 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 951.043917][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 951.153739][ T3551] wacom 0003:056A:032C.0002: unbalanced collection at end of report description [ 951.207508][ T3551] wacom 0003:056A:032C.0002: parse failed [ 951.215640][ T3551] wacom: probe of 0003:056A:032C.0002 failed with error -22 [ 951.350334][ T3595] usb 4-1: USB disconnect, device number 16 [ 951.484213][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:31 executing program 3: r0 = syz_usb_connect$hid(0x0, 0xff, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "81f25679"}, @global=@item_012={0x1, 0x1, 0x3, "87"}]}}, 0x0}, 0x0) 16:10:31 executing program 4: add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="aa", 0x1, 0xfffffffffffffffc) 16:10:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x40049409, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:31 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x20000) 16:10:31 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x203, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:31 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 952.049364][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 952.109867][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:32 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x80000) 16:10:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '#q\xc5\x9c\xc8\x15\xa6=Vc%/#\r)\x8f\xd6\xb2\xa4\xd1?\x16\x1a\xfc)\x88\x0f\x8e\xe3\xfb\x16\'\xc5\xa7oqQ\xb4U<\xf2\xfd.\xf8\xabv@z?%\\\x17\xcaif`\xf8!_\x9b'}], 0x8}, 0x48) 16:10:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x40086602, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:32 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:32 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 952.602826][ T3595] usb 4-1: new high-speed USB device number 17 using dummy_hcd 16:10:32 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x80040) [ 952.867251][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 953.006738][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.018843][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.029045][ T3595] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 953.038674][ T3595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.206435][ T3595] usb 4-1: config 0 descriptor?? [ 953.638312][T12786] udevd[12786]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 953.725821][ T3595] wacom 0003:056A:032C.0003: unbalanced collection at end of report description [ 953.742168][ T3595] wacom 0003:056A:032C.0003: parse failed [ 953.748211][ T3595] wacom: probe of 0003:056A:032C.0003 failed with error -22 [ 953.927289][ T3595] usb 4-1: USB disconnect, device number 17 [ 954.067207][T13116] udevd[13116]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 954.339392][T13120] udevd[13120]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 954.462759][T12786] udevd[12786]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 16:10:34 executing program 3: r0 = syz_usb_connect$hid(0x0, 0xff, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "81f25679"}, @global=@item_012={0x1, 0x1, 0x3, "87"}]}}, 0x0}, 0x0) 16:10:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) ftruncate(0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4188aec6, &(0x7f0000000240)={0x1, 0x0, @pic={0x0, 0x0, 0x4, 0x4, 0xbb, 0x7, 0x0, 0x40, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5}}) 16:10:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x40101283, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:34 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:34 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x302, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:34 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x800000) [ 954.725649][T13131] __nla_validate_parse: 1 callbacks suppressed [ 954.725725][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 954.859665][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:35 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x1000000) 16:10:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x40101286, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:35 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x399, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:35 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 955.179987][T13120] udevd[13120]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 955.243005][ T3595] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 955.286149][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 955.292977][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 16:10:35 executing program 4: pselect6(0x40, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)={0x1}, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000540)={&(0x7f0000000500)={[0x3]}, 0x8}) 16:10:35 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x2000000) [ 955.625664][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.637373][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.647593][ T3595] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 955.657031][ T3595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.837383][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 955.869511][ T3595] usb 4-1: config 0 descriptor?? [ 955.949026][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 956.062086][T13126] udevd[13126]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 956.432983][ T3595] wacom 0003:056A:032C.0004: unbalanced collection at end of report description [ 956.530713][ T3595] wacom 0003:056A:032C.0004: parse failed [ 956.538659][ T3595] wacom: probe of 0003:056A:032C.0004 failed with error -22 [ 956.668732][ T3595] usb 4-1: USB disconnect, device number 18 16:10:37 executing program 3: r0 = syz_usb_connect$hid(0x0, 0xff, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "81f25679"}, @global=@item_012={0x1, 0x1, 0x3, "87"}]}}, 0x0}, 0x0) 16:10:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x40101287, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:37 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:37 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x2040000) 16:10:37 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:37 executing program 4: keyctl$search(0xa, 0x0, &(0x7f0000000000)='big_key\x00', 0x0, 0x0) [ 957.451408][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:37 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) [ 957.543356][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x40101288, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:37 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x3000000) 16:10:37 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:38 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 958.162191][ T3541] usb 4-1: new high-speed USB device number 19 using dummy_hcd 16:10:38 executing program 4: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x76, &(0x7f0000000140), &(0x7f0000000280)=0x8) [ 958.523044][ T3541] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.534596][ T3541] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.544869][ T3541] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 958.554394][ T3541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.654681][T13177] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 958.744362][ T3541] usb 4-1: config 0 descriptor?? [ 958.810660][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 959.247659][ T3541] wacom 0003:056A:032C.0005: unbalanced collection at end of report description [ 959.272494][ T3541] wacom 0003:056A:032C.0005: parse failed [ 959.278550][ T3541] wacom: probe of 0003:056A:032C.0005 failed with error -22 [ 959.475535][ T3549] usb 4-1: USB disconnect, device number 19 16:10:40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0xff, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:10:40 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x4000000) 16:10:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x401070c9, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:40 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:40 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000002c0)={0x3c00, 0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x2, 0xa06d5a3aa284f3ff}) 16:10:40 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 960.379118][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:40 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x6040000) 16:10:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x401070ca, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 960.556947][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:40 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:41 executing program 4: pipe2$watch_queue(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$cgroup_pressure(r0, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) 16:10:41 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:41 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x20000000) [ 961.197694][T13208] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 961.423055][ T3541] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 961.758139][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 961.793600][ T3541] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.805050][ T3541] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.815364][ T3541] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 961.824950][ T3541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.904338][ T3541] usb 4-1: config 0 descriptor?? [ 962.442797][ T3541] usbhid 4-1:0.0: can't add hid device: -71 [ 962.449453][ T3541] usbhid: probe of 4-1:0.0 failed with error -71 [ 962.498541][ T3541] usb 4-1: USB disconnect, device number 20 16:10:43 executing program 3: r0 = syz_usb_connect$hid(0x0, 0xff, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:10:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x401070cd, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:43 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 16:10:43 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x40000800) 16:10:43 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xa00, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 963.159283][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x40186366, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:43 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000300), 0x18) 16:10:43 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0xfeffffff) 16:10:43 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:43 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xb00, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 963.724867][ T3549] usb 4-1: new high-speed USB device number 21 using dummy_hcd 16:10:44 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0xff600000) [ 964.093028][ T3549] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.104591][ T3549] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.115483][ T3549] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 964.129041][ T3549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.177944][T13239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 964.298020][ T3549] usb 4-1: config 0 descriptor?? [ 964.846496][ T3549] usbhid 4-1:0.0: can't add hid device: -71 [ 964.853260][ T3549] usbhid: probe of 4-1:0.0 failed with error -71 [ 964.919426][ T3549] usb 4-1: USB disconnect, device number 21 16:10:45 executing program 3: r0 = syz_usb_connect$hid(0x0, 0xff, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:10:45 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000540), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000003080)="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", 0xf82}], 0x1}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:10:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x401870c8, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:45 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xbf1, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:45 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0xfffffffe) 16:10:45 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 965.535658][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:45 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0xffffffff) 16:10:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000440)='\x02\a\xc5(\xec[r\xe1:.\xe4\x9d\xb9\x06\xfb\xea\xe6\xbb\x10\x1e\r\x00\xc3m\xc0n\xcf\xdf\xddi\xa218\xa2u\xa75\xcb\xca\x00\xf3!\xb5\x1f\xd1N\x97>,*\x81\xe6\xde\x99\x00\xae@\xaf\xbe\x84\xabj\x94\x17\xee\x9d\x8bE\x12\x1b\x86\xb9\xfa\xf0\xad\x93jh\xa4\x8fL\xc5Y\xd5\xd3\rD2\x8c\x9a\xb9s\x11NS\t{I\x16=#\x84\x17\xe3\xf3ho2\xf3p\xfeT\xa1\xbf\xcf\xb0\xf6T:%;\x19\xf5T\x95}\\c\xa3\xbf\xb8q\x17\x1f\x83\x1e.\xa2\xbb\xd9\xd8\xa4\xed\xcaq\xbc\xbd\x84\x12]\xc8\xcb\x13~N\xdfbG\x03\x02h\xc2\x91\x18\x10\x8d\xcf\x1b\xfe\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x401870cb, &(0x7f0000000200)={0x2400, {0x7a00}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "2bf7b4965238ac7fee648ebd17b263d0bbc2097203d244823975b9f37a5645516bb851bf29c2ec5252ad0dc236dc814b8d6cf05e51e312f6897c353cb4dc1ff2", "b894653ed35f352d585219cdc003000000209163966d2681d88940b154dfaa8e"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:10:45 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) 16:10:46 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xc00, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) [ 966.165926][T11105] usb 4-1: new high-speed USB device number 22 using dummy_hcd 16:10:46 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00003e4000/0x4000)=nil, 0x4000}, 0x1}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) 16:10:46 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="000e003f1400087e5bc5795e88a8", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 966.533568][T11105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.544875][T11105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.555459][T11105] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 966.564852][T11105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.623543][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 966.750536][T11105] usb 4-1: config 0 descriptor?? [ 967.003141][T13270] ===================================================== [ 967.010418][T13270] BUG: KMSAN: uninit-value in erspan_build_header+0x16d/0x330 [ 967.018206][T13270] erspan_build_header+0x16d/0x330 [ 967.023599][T13270] erspan_xmit+0x11a2/0x1f00 [ 967.028355][T13270] xmit_one+0x14e/0x5f0 [ 967.032793][T13270] dev_hard_start_xmit+0xe5/0x370 [ 967.037998][T13270] sch_direct_xmit+0x3f1/0xdb0 [ 967.043016][T13270] __dev_xmit_skb+0xbe9/0x19e0 [ 967.047948][T13270] __dev_queue_xmit+0x12cb/0x31f0 [ 967.053229][T13270] __bpf_redirect+0x1277/0x1430 [ 967.058296][T13270] bpf_clone_redirect+0x324/0x470 [ 967.063575][T13270] ___bpf_prog_run+0x7ed/0xaee0 [ 967.068631][T13270] __bpf_prog_run512+0xc2/0x110 [ 967.073741][T13270] bpf_test_run+0x592/0xd20 [ 967.078421][T13270] bpf_prog_test_run_skb+0x1625/0x20b0 [ 967.084166][T13270] bpf_prog_test_run+0x6a0/0x730 [ 967.089290][T13270] __sys_bpf+0x9e8/0xeb0 [ 967.093787][T13270] __ia32_sys_bpf+0x9c/0xe0 [ 967.098459][T13270] __do_fast_syscall_32+0x87/0xe0 [ 967.103741][T13270] do_fast_syscall_32+0x33/0x70 [ 967.108856][T13270] do_SYSENTER_32+0x1b/0x20 [ 967.113608][T13270] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 967.120176][T13270] [ 967.122670][T13270] Uninit was created at: [ 967.127194][T13270] __kmalloc_node_track_caller+0x86c/0x1230 [ 967.133410][T13270] pskb_expand_head+0x1aa/0x1a00 [ 967.138564][T13270] erspan_xmit+0xad2/0x1f00 [ 967.143321][T13270] xmit_one+0x14e/0x5f0 [ 967.147642][T13270] dev_hard_start_xmit+0xe5/0x370 [ 967.152960][T13270] sch_direct_xmit+0x3f1/0xdb0 [ 967.157911][T13270] __dev_xmit_skb+0xbe9/0x19e0 [ 967.162965][T13270] __dev_queue_xmit+0x12cb/0x31f0 [ 967.168168][T13270] __bpf_redirect+0x1277/0x1430 [ 967.173288][T13270] bpf_clone_redirect+0x324/0x470 [ 967.178493][T13270] ___bpf_prog_run+0x7ed/0xaee0 [ 967.183588][T13270] __bpf_prog_run512+0xc2/0x110 [ 967.188617][T13270] bpf_test_run+0x592/0xd20 [ 967.193388][T13270] bpf_prog_test_run_skb+0x1625/0x20b0 [ 967.199042][T13270] bpf_prog_test_run+0x6a0/0x730 [ 967.204304][T13270] __sys_bpf+0x9e8/0xeb0 [ 967.208738][T13270] __ia32_sys_bpf+0x9c/0xe0 [ 967.213526][T13270] __do_fast_syscall_32+0x87/0xe0 [ 967.218730][T13270] do_fast_syscall_32+0x33/0x70 [ 967.223849][T13270] do_SYSENTER_32+0x1b/0x20 [ 967.228513][T13270] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 967.235178][T13270] [ 967.237601][T13270] CPU: 1 PID: 13270 Comm: syz-executor.4 Not tainted 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 967.248463][T13270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 967.258746][T13270] ===================================================== [ 967.265866][T13270] Disabling lock debugging due to kernel taint [ 967.272205][T13270] Kernel panic - not syncing: kmsan.panic set ... [ 967.278723][T13270] CPU: 1 PID: 13270 Comm: syz-executor.4 Tainted: G B 5.19.0-rc8-syzkaller-32524-g82224c6104a8 #0 [ 967.290787][T13270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 967.300970][T13270] Call Trace: [ 967.304340][T13270] [ 967.307356][T13270] dump_stack_lvl+0x1c8/0x256 [ 967.312235][T13270] dump_stack+0x1a/0x1c [ 967.316592][T13270] panic+0x4d3/0xc69 [ 967.320676][T13270] ? kmsan_report+0x2c0/0x2d0 [ 967.325526][T13270] ? add_taint+0x104/0x1a0 [ 967.330155][T13270] kmsan_report+0x2cc/0x2d0 [ 967.334831][T13270] ? __msan_warning+0x92/0x110 [ 967.339782][T13270] ? erspan_build_header+0x16d/0x330 [ 967.345236][T13270] ? erspan_xmit+0x11a2/0x1f00 [ 967.350175][T13270] ? xmit_one+0x14e/0x5f0 [ 967.354669][T13270] ? dev_hard_start_xmit+0xe5/0x370 [ 967.360024][T13270] ? sch_direct_xmit+0x3f1/0xdb0 [ 967.365127][T13270] ? __dev_xmit_skb+0xbe9/0x19e0 [ 967.370224][T13270] ? __dev_queue_xmit+0x12cb/0x31f0 [ 967.375579][T13270] ? __bpf_redirect+0x1277/0x1430 [ 967.380772][T13270] ? bpf_clone_redirect+0x324/0x470 [ 967.386125][T13270] ? ___bpf_prog_run+0x7ed/0xaee0 [ 967.391294][T13270] ? __bpf_prog_run512+0xc2/0x110 [ 967.396467][T13270] ? bpf_test_run+0x592/0xd20 [ 967.401322][T13270] ? bpf_prog_test_run_skb+0x1625/0x20b0 [ 967.407126][T13270] ? bpf_prog_test_run+0x6a0/0x730 [ 967.412410][T13270] ? __sys_bpf+0x9e8/0xeb0 [ 967.416986][T13270] ? __ia32_sys_bpf+0x9c/0xe0 [ 967.421821][T13270] ? __do_fast_syscall_32+0x87/0xe0 [ 967.427175][T13270] ? do_fast_syscall_32+0x33/0x70 [ 967.432345][T13270] ? do_SYSENTER_32+0x1b/0x20 [ 967.437166][T13270] ? entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 967.443900][T13270] ? kfree+0x723/0x9c0 [ 967.448144][T13270] ? pskb_expand_head+0x537/0x1a00 [ 967.453469][T13270] ? kmsan_get_metadata+0x33/0x220 [ 967.458747][T13270] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 967.464747][T13270] ? pskb_expand_head+0x157e/0x1a00 [ 967.470145][T13270] ? kmsan_get_metadata+0x33/0x220 [ 967.475418][T13270] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 967.481404][T13270] __msan_warning+0x92/0x110 [ 967.486152][T13270] erspan_build_header+0x16d/0x330 [ 967.491446][T13270] erspan_xmit+0x11a2/0x1f00 [ 967.496192][T13270] ? kmsan_get_metadata+0x33/0x220 [ 967.501484][T13270] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 967.507486][T13270] ? erspan_tunnel_init+0x340/0x340 [ 967.512854][T13270] xmit_one+0x14e/0x5f0 [ 967.517172][T13270] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 967.523161][T13270] dev_hard_start_xmit+0xe5/0x370 [ 967.528349][T13270] ? kmsan_get_metadata+0x33/0x220 [ 967.533621][T13270] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 967.539620][T13270] sch_direct_xmit+0x3f1/0xdb0 [ 967.544548][T13270] ? kmsan_get_metadata+0x4d/0x220 [ 967.549833][T13270] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 967.556085][T13270] __dev_xmit_skb+0xbe9/0x19e0 [ 967.561215][T13270] ? noqueue_init+0x50/0x50 [ 967.565881][T13270] __dev_queue_xmit+0x12cb/0x31f0 [ 967.571075][T13270] ? kmsan_get_metadata+0x33/0x220 [ 967.576383][T13270] __bpf_redirect+0x1277/0x1430 [ 967.581417][T13270] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 967.587408][T13270] bpf_clone_redirect+0x324/0x470 [ 967.592613][T13270] ___bpf_prog_run+0x7ed/0xaee0 [ 967.597615][T13270] ? __stack_depot_save+0x38d/0x4b0 [ 967.602983][T13270] ? kmsan_get_metadata+0x33/0x220 [ 967.608281][T13270] __bpf_prog_run512+0xc2/0x110 [ 967.613297][T13270] ? kmsan_get_metadata+0x33/0x220 [ 967.618574][T13270] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 967.624551][T13270] ? kmsan_get_metadata+0x33/0x220 [ 967.629827][T13270] ? kmsan_get_metadata+0x33/0x220 [ 967.635108][T13270] ? kmsan_get_metadata+0x33/0x220 [ 967.640381][T13270] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 967.646369][T13270] ? kmsan_get_metadata+0x33/0x220 [ 967.651643][T13270] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 967.657639][T13270] ? ktime_get+0x379/0x460 [ 967.662290][T13270] ? kmsan_get_metadata+0x4d/0x220 [ 967.667566][T13270] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 967.673544][T13270] ? __bpf_prog_run480+0x110/0x110 [ 967.678809][T13270] bpf_test_run+0x592/0xd20 [ 967.683517][T13270] bpf_prog_test_run_skb+0x1625/0x20b0 [ 967.689187][T13270] ? __bpf_prog_test_run_raw_tp+0x380/0x380 [ 967.695258][T13270] bpf_prog_test_run+0x6a0/0x730 [ 967.700374][T13270] __sys_bpf+0x9e8/0xeb0 [ 967.704814][T13270] __ia32_sys_bpf+0x9c/0xe0 [ 967.709485][T13270] __do_fast_syscall_32+0x87/0xe0 [ 967.714665][T13270] do_fast_syscall_32+0x33/0x70 [ 967.719659][T13270] do_SYSENTER_32+0x1b/0x20 [ 967.724306][T13270] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 967.730847][T13270] RIP: 0023:0xf7f74549 [ 967.735029][T13270] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 967.754813][T13270] RSP: 002b:00000000f7f6f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 967.763383][T13270] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 967.771483][T13270] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 967.779577][T13270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 967.787667][T13270] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 967.795760][T13270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 967.803882][T13270] [ 967.807064][T13270] Kernel Offset: disabled [ 967.811456][T13270] Rebooting in 86400 seconds..