ANGE): wlan0: link becomes ready [ 192.661955][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.041230][ C1] hrtimer: interrupt took 347727 ns 23:09:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) [ 193.171689][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.180295][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.285384][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.354470][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.363509][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:09:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x7ff}) [ 193.471390][ T114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.511173][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.520819][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.599763][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 23:09:55 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @private}}}], 0x20}, 0x0) 23:09:55 executing program 1: syz_clone(0x54a25080, 0x0, 0x0, 0x0, 0x0, 0x0) 23:09:55 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "205faafc1d8dd25ae6d5df07dfe5a8bf5f23383d42f0e3d70b3118c1968444b7d8a5afbed3ba6d6ffc20b7b7a85135e5c7fd194ab262cb0bf2b537617a346e9a"}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f0000000040)=""/3, 0x3) 23:09:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)=@ipv6_deladdrlabel={0x1c, 0x49, 0x3}, 0x1c}}, 0x0) 23:09:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0x81}]}) [ 195.212943][ T3582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.223479][ T3582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.291673][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 195.467510][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.476939][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.488918][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 23:09:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc0189436, 0x0) 23:09:56 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 23:09:56 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000340)) 23:09:56 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) getuid() syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x6, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000480)={[{@grpid}, {@minixdf}], [{@obj_type={'obj_type', 0x3d, '}\'--'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@mode={'mode', 0x3d, 0x8001}}, {}], [{@uid_gt}, {@fowner_gt}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x0, 0x0}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 23:09:56 executing program 0: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[], [{@subj_role={'subj_role', 0x3d, '/dev/kvm\x00'}}]}) 23:09:56 executing program 1: syz_clone(0x54a25080, 0x0, 0x0, 0x0, 0x0, 0x0) [ 195.882402][ T3775] ext2: Unknown parameter 'obj_type' 23:09:57 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x0, "1b799150624e0d12153f4da568118fadb11ac1248bcdb722fdd8bb62da280fcb", 0xffffffffffffffff}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"96bb2015d7c8c09de2dde9b15cc041907f3fa606776785acebab5f1a3d69aedd", r2}) 23:09:57 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f00000015c0)) 23:09:57 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) 23:09:57 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 23:09:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@call, @generic={0x3}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0xce, &(0x7f0000000140)=""/206, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:09:57 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40) 23:09:57 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x40305829, &(0x7f00000000c0)={0x0, "1b799150624e0d12153f4da568118fadb11ac1248bcdb722fdd8bb62da280fcb"}) 23:09:57 executing program 2: r0 = semget(0x2, 0x0, 0x410) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0x0]) 23:09:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x0) 23:09:58 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x40305828, &(0x7f00000000c0)={0x0, "1b799150624e0d12153f4da568118fadb11ac1248bcdb722fdd8bb62da280fcb"}) 23:09:58 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x40305839, 0x0) 23:09:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x40049409, 0x0) 23:09:58 executing program 2: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, r0/1000+60000}}, 0x0) 23:09:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 23:09:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x5451, 0x0) 23:09:58 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x4020940d, 0x0) 23:09:58 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, 0x0) 23:09:58 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x0, "1b799150624e0d12153f4da568118fadb11ac1248bcdb722fdd8bb62da280fcb"}) 23:09:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) 23:09:59 executing program 2: write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x40200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 23:09:59 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@jmp]}, &(0x7f0000000380)='GPL\x00', 0x3, 0x95, &(0x7f0000000480)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:09:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae04, 0x0) 23:09:59 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x1}) 23:09:59 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0189436, 0x0) 23:09:59 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x5460, &(0x7f00000000c0)={0x0, "1b799150624e0d12153f4da568118fadb11ac1248bcdb722fdd8bb62da280fcb"}) 23:09:59 executing program 1: r0 = gettid() r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001700)={r0, r1, 0x0, 0x21, 0x0}, 0x30) 23:09:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:09:59 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0045878, 0x0) 23:09:59 executing program 0: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0x40086602, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "36cdfac82559ce95d5391058a990dd62ee4340352f23960964a7192dcc40764701910224b11be40bc9834867a29f27d78d80c18c4ed0d0d07806b7d01a6bb5d369dfa0159eaaeb29dfe1ee6b57e4a8a7890da73151b10c978215c3c99e4e946f0ac1977dd7dcf7e48f3ed555864406752f25ae9143f866baf8cde92de64b7956fe534490426c7351fa10c591c3c2f795d3055f8a8efa7d35b4d9b1e4eeb361f690fc11508647415674cc0192184dc19386d44ef14200d527161d12d030960f6db020ad589ce927c169be1545dd65843fb041445a458de4e4359b75dc73bad1b8a3d2fd561034157d5ed89c109970a3f808e3153b0893b51a472be83e830e8ed8", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x3f, 0x3, &(0x7f0000000080)=[{&(0x7f0000001300)="d655c1b66fcf7cbfcabf9cf1378abd1238fbd12f19f2343bc6f935e977e0622cf7b0e3a141ace98685d4ebe90b9a2a453020c0b3f43036aa9fb7f19c1a4f5e7d76e5702f0538b6afa190c247812e8f5afa9a1bc206c07e76849ff0b01b7b5acbcf43f6302b5e6d3cd6021a71207ee0e9217044061f8c4200ac80b2176b01738d7986ee0f7ae3a7e488f33c3b1cdfabecf766384b7aaff7030ba1a6a9d581a89e298a45f57d42aae8c7f197f677f7c28b626c962af4b7fc165ea1fcb3db3d33dc87f487fd4ef55ee321b530ee748b7e3229d154ef828258bf41", 0xd9, 0xfba}, {&(0x7f0000000180)="ef", 0x1, 0x9}, {&(0x7f0000000200)="be", 0x1, 0xfffffffffffffff7}], 0x0, &(0x7f00000024c0)) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005a700)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) 23:09:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1, &(0x7f0000000040)=@raw=[@jmp], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000100)=""/210, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:10:00 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x801c581f, 0x0) 23:10:00 executing program 1: ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, 0x0}, 0x20000891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:10:00 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xb000000e}) 23:10:00 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [ 199.285991][ T3859] loop0: detected capacity change from 0 to 264192 23:10:00 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x3, "1b799150624e0d12153f4da568118fadb11ac1248bcdb722fdd8bb62da280fcb"}) 23:10:00 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x2, 0xce, &(0x7f0000000140)=""/206, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:10:00 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000300)=@framed={{}, [@alu, @exit, @map_fd]}, &(0x7f0000000380)='GPL\x00', 0x3, 0x95, &(0x7f0000000480)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:10:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 23:10:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000280)=@bridge_dellink={0x20, 0x11, 0x1}, 0x20}}, 0x0) 23:10:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:10:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @private2}, 0x80, 0x0}, 0x0) 23:10:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xf000, 0x0, 0x0, r2, 0x8}) 23:10:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x10203, &(0x7f00000003c0)) 23:10:01 executing program 0: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x29) 23:10:01 executing program 4: syz_clone(0x4805080, 0x0, 0x0, 0x0, 0x0, 0x0) 23:10:01 executing program 0: syz_clone(0x1cc07080, 0x0, 0x0, 0x0, 0x0, 0x0) 23:10:01 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x800) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) [ 200.547173][ T3898] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 23:10:01 executing program 3: syz_clone(0x59089480, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x0) 23:10:01 executing program 5: syz_clone(0x4805080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:10:01 executing program 2: r0 = epoll_create(0x3) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x10000000}) 23:10:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)) 23:10:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae00, 0x0) 23:10:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x11, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@local, 0x3f, r3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x4, 0xfffffff8, 0x55, 0x0, 0xffffffffffffffff, 0xaf7b, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x48) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x8, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x9, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, @exit, @map_fd={0x18, 0x6, 0x1, 0x0, r4}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}], &(0x7f0000000180)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x100, 0x1d, '\x00', r3, 0xd, r5, 0x8, &(0x7f00000001c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0x9c4, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0x1, 0x1, r6, 0x1, 0xffffffffffffffff]}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 23:10:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x88, 0x68, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast1, [], [], 'veth0_to_hsr\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00', @private1, [], [], 'vlan1\x00', 'wg2\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 23:10:02 executing program 0: syz_clone(0xca05080, 0x0, 0x0, 0x0, 0x0, 0x0) 23:10:02 executing program 4: syz_clone(0x300a1000, 0x0, 0x2a, 0x0, 0x0, 0x0) 23:10:02 executing program 5: syz_clone(0x4805080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:10:02 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x401c5820, &(0x7f00000000c0)={0x0, "1b799150624e0d12153f4da568118fadb11ac1248bcdb722fdd8bb62da280fcb"}) 23:10:02 executing program 1: r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) ioctl$FIONCLEX(r0, 0x5450) 23:10:03 executing program 3: syz_clone(0x50088080, 0x0, 0x0, 0x0, 0x0, 0x0) 23:10:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x8}) 23:10:03 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x5452, 0x0) 23:10:03 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000080)=""/16) 23:10:03 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x0, "1b799150624e0d12153f4da568118fadb11ac1248bcdb722fdd8bb62da280fcb", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, 0x0) 23:10:03 executing program 5: syz_clone(0x4805080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:10:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc000000) 23:10:03 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000280)={0x0}) 23:10:03 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001380), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000013c0)) 23:10:04 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x80086601, 0x0) 23:10:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc000000) 23:10:04 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xfffffffffffffe3d) 23:10:04 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x8}]}) 23:10:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x4, 0xfffffff8, 0x55}, 0x48) 23:10:04 executing program 5: syz_clone(0x4805080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:10:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc000000) 23:10:04 executing program 1: openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x40200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:10:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80045510, &(0x7f000005a700)) 23:10:04 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f00000002c0)=[{}], 0x8, 0x0, &(0x7f0000000200), 0x5) [ 203.798064][ T24] audit: type=1326 audit(1655766604.843:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3970 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7faf549 code=0x0 23:10:04 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23:10:05 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc000) 23:10:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80045510, &(0x7f000005a700)) 23:10:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc000000) 23:10:05 executing program 1: io_setup(0x3, &(0x7f0000000040)=0x0) io_cancel(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 23:10:05 executing program 3: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)=[0x0, 0x0, 0x3, 0x3, 0x3]) 23:10:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x28, 0x4) 23:10:05 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x40086602, &(0x7f00000000c0)={0x0, "1b799150624e0d12153f4da568118fadb11ac1248bcdb722fdd8bb62da280fcb"}) 23:10:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80045510, &(0x7f000005a700)) 23:10:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pipe2$9p(0x0, 0x0) r3 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) setpriority(0x0, r3, 0x2) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="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"], 0x70}}, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x89a0, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000280)='hsr0\x00'}) 23:10:05 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) 23:10:05 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:10:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002020, 0x0) 23:10:05 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x5451, 0x0) 23:10:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80045510, &(0x7f000005a700)) 23:10:06 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWSTAT(r0, &(0x7f00000000c0)={0x5c}, 0xfdd1) 23:10:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create(0x81) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 23:10:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x7, 0xae9}, 0x48) 23:10:06 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x40049409, &(0x7f00000000c0)={0x0, "1b799150624e0d12153f4da568118fadb11ac1248bcdb722fdd8bb62da280fcb"}) 23:10:06 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x5421, &(0x7f00000000c0)={0x0, "1b799150624e0d12153f4da568118fadb11ac1248bcdb722fdd8bb62da280fcb"}) 23:10:06 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x541b, &(0x7f00000000c0)={0x0, "1b799150624e0d12153f4da568118fadb11ac1248bcdb722fdd8bb62da280fcb"}) [ 206.962062][ T4015] not chained 10000 origins [ 206.966838][ T4015] CPU: 0 PID: 4015 Comm: syz-executor.4 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 206.976955][ T4015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.987350][ T4015] Call Trace: [ 206.990684][ T4015] [ 206.993631][ T4015] dump_stack_lvl+0x1c8/0x256 [ 206.998489][ T4015] dump_stack+0x1a/0x1c [ 207.002964][ T4015] kmsan_internal_chain_origin+0x78/0x120 [ 207.008776][ T4015] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 207.015178][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 207.020352][ T4015] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 207.026848][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 207.032027][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 207.038276][ T4015] ? __get_compat_msghdr+0x5b/0x750 [ 207.043635][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 207.048981][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 207.055073][ T4015] ? should_fail+0x3f/0x7e0 [ 207.059861][ T4015] ? __stack_depot_save+0x21/0x4b0 [ 207.065439][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 207.070673][ T4015] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 207.077323][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 207.083060][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 207.089337][ T4015] __msan_chain_origin+0xbd/0x140 [ 207.094691][ T4015] __get_compat_msghdr+0x514/0x750 [ 207.099872][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 207.105053][ T4015] ? ___sys_recvmsg+0xa9/0x870 [ 207.111175][ T4015] ? do_recvmmsg+0x63a/0x10a0 [ 207.115930][ T4015] ___sys_recvmsg+0x19d/0x870 [ 207.120716][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 207.125980][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 207.131860][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 207.137038][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 207.143083][ T4015] do_recvmmsg+0x63a/0x10a0 [ 207.147654][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 207.152921][ T4015] ? __sys_recvmmsg+0x52/0x450 [ 207.157737][ T4015] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 207.164370][ T4015] __sys_recvmmsg+0x113/0x450 [ 207.169107][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 207.174290][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 207.180609][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 207.185687][ T4015] ? exit_to_user_mode_prepare+0x119/0x220 [ 207.191702][ T4015] do_fast_syscall_32+0x33/0x70 [ 207.196735][ T4015] do_SYSENTER_32+0x1b/0x20 [ 207.201822][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 207.208223][ T4015] RIP: 0023:0xf7f93549 [ 207.212317][ T4015] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 207.231973][ T4015] RSP: 002b:00000000f7f6d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 207.240447][ T4015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 207.248466][ T4015] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 207.258158][ T4015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.266171][ T4015] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 207.274266][ T4015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.282291][ T4015] [ 207.290438][ T4015] Uninit was stored to memory at: [ 207.299239][ T4015] __get_compat_msghdr+0x514/0x750 [ 207.304567][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 207.310012][ T4015] ___sys_recvmsg+0x19d/0x870 [ 207.314952][ T4015] do_recvmmsg+0x63a/0x10a0 [ 207.319617][ T4015] __sys_recvmmsg+0x113/0x450 [ 207.324498][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 207.331015][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 207.336741][ T4015] do_fast_syscall_32+0x33/0x70 [ 207.341684][ T4015] do_SYSENTER_32+0x1b/0x20 [ 207.346400][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 207.353002][ T4015] [ 207.355519][ T4015] Uninit was stored to memory at: [ 207.360798][ T4015] __get_compat_msghdr+0x514/0x750 [ 207.366229][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 207.371382][ T4015] ___sys_recvmsg+0x19d/0x870 [ 207.376379][ T4015] do_recvmmsg+0x63a/0x10a0 [ 207.381144][ T4015] __sys_recvmmsg+0x113/0x450 [ 207.386103][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 207.392528][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 207.397773][ T4015] do_fast_syscall_32+0x33/0x70 [ 207.402683][ T4015] do_SYSENTER_32+0x1b/0x20 [ 207.407934][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 207.414436][ T4015] [ 207.416779][ T4015] Uninit was stored to memory at: [ 207.421889][ T4015] __get_compat_msghdr+0x514/0x750 [ 207.427231][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 207.432343][ T4015] ___sys_recvmsg+0x19d/0x870 [ 207.437268][ T4015] do_recvmmsg+0x63a/0x10a0 [ 207.443092][ T4015] __sys_recvmmsg+0x113/0x450 [ 207.448243][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 207.454657][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 207.459827][ T4015] do_fast_syscall_32+0x33/0x70 [ 207.464910][ T4015] do_SYSENTER_32+0x1b/0x20 [ 207.469474][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 207.476239][ T4015] [ 207.478583][ T4015] Uninit was stored to memory at: [ 207.483860][ T4015] __get_compat_msghdr+0x514/0x750 [ 207.489040][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 207.495760][ T4015] ___sys_recvmsg+0x19d/0x870 [ 207.500601][ T4015] do_recvmmsg+0x63a/0x10a0 [ 207.505400][ T4015] __sys_recvmmsg+0x113/0x450 [ 207.510183][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 207.517122][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 207.522319][ T4015] do_fast_syscall_32+0x33/0x70 [ 207.527518][ T4015] do_SYSENTER_32+0x1b/0x20 [ 207.532412][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 207.539161][ T4015] [ 207.542036][ T4015] Uninit was stored to memory at: [ 207.548500][ T4015] __get_compat_msghdr+0x514/0x750 [ 207.553864][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 207.559044][ T4015] ___sys_recvmsg+0x19d/0x870 [ 207.563988][ T4015] do_recvmmsg+0x63a/0x10a0 [ 207.569373][ T4015] __sys_recvmmsg+0x113/0x450 [ 207.574443][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 207.580762][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 207.586136][ T4015] do_fast_syscall_32+0x33/0x70 [ 207.591059][ T4015] do_SYSENTER_32+0x1b/0x20 [ 207.595771][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 207.602255][ T4015] [ 207.604859][ T4015] Uninit was stored to memory at: [ 207.610138][ T4015] __get_compat_msghdr+0x514/0x750 [ 207.615465][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 207.620505][ T4015] ___sys_recvmsg+0x19d/0x870 [ 207.626845][ T4015] do_recvmmsg+0x63a/0x10a0 [ 207.631543][ T4015] __sys_recvmmsg+0x113/0x450 [ 207.636973][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 207.643392][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 207.648646][ T4015] do_fast_syscall_32+0x33/0x70 [ 207.654566][ T4015] do_SYSENTER_32+0x1b/0x20 [ 207.659505][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 207.666522][ T4015] [ 207.668868][ T4015] Uninit was stored to memory at: [ 207.674403][ T4015] __get_compat_msghdr+0x514/0x750 [ 207.679660][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 207.684868][ T4015] ___sys_recvmsg+0x19d/0x870 [ 207.689624][ T4015] do_recvmmsg+0x63a/0x10a0 [ 207.694430][ T4015] __sys_recvmmsg+0x113/0x450 [ 207.699268][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 207.706401][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 207.711529][ T4015] do_fast_syscall_32+0x33/0x70 [ 207.717316][ T4015] do_SYSENTER_32+0x1b/0x20 [ 207.721886][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 207.728491][ T4015] [ 207.730862][ T4015] Local variable msg_sys created at: [ 207.736445][ T4015] do_recvmmsg+0x5f/0x10a0 [ 207.741032][ T4015] __sys_recvmmsg+0x113/0x450 [ 207.838229][ T1193] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.845630][ T1193] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.133434][ T4015] not chained 20000 origins [ 208.138546][ T4015] CPU: 0 PID: 4015 Comm: syz-executor.4 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 208.150345][ T4015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.160765][ T4015] Call Trace: [ 208.164076][ T4015] [ 208.167025][ T4015] dump_stack_lvl+0x1c8/0x256 [ 208.171772][ T4015] dump_stack+0x1a/0x1c [ 208.176002][ T4015] kmsan_internal_chain_origin+0x78/0x120 [ 208.181874][ T4015] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 208.188679][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 208.193864][ T4015] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 208.208573][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 208.214057][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 208.220023][ T4015] ? __get_compat_msghdr+0x5b/0x750 [ 208.225466][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 208.230675][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 208.236667][ T4015] ? should_fail+0x3f/0x7e0 [ 208.241484][ T4015] ? __stack_depot_save+0x21/0x4b0 [ 208.246756][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 208.252585][ T4015] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 208.260049][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 208.265323][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 208.271384][ T4015] __msan_chain_origin+0xbd/0x140 [ 208.276496][ T4015] __get_compat_msghdr+0x514/0x750 [ 208.281861][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 208.287585][ T4015] ? ___sys_recvmsg+0xa9/0x870 [ 208.292861][ T4015] ? do_recvmmsg+0x63a/0x10a0 [ 208.298197][ T4015] ___sys_recvmsg+0x19d/0x870 [ 208.305272][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 208.310560][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 208.316815][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 208.322251][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 208.328302][ T4015] do_recvmmsg+0x63a/0x10a0 [ 208.333624][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 208.339527][ T4015] ? __sys_recvmmsg+0x52/0x450 [ 208.345069][ T4015] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 208.351687][ T4015] __sys_recvmmsg+0x113/0x450 [ 208.356445][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 208.361632][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 208.368439][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 208.373554][ T4015] ? exit_to_user_mode_prepare+0x119/0x220 [ 208.379685][ T4015] do_fast_syscall_32+0x33/0x70 [ 208.384603][ T4015] do_SYSENTER_32+0x1b/0x20 [ 208.389159][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 208.395641][ T4015] RIP: 0023:0xf7f93549 [ 208.399738][ T4015] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 208.420542][ T4015] RSP: 002b:00000000f7f6d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 208.429095][ T4015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 208.437190][ T4015] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 208.445192][ T4015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.454100][ T4015] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 208.462551][ T4015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.471001][ T4015] [ 208.474666][ T4015] Uninit was stored to memory at: [ 208.479899][ T4015] __get_compat_msghdr+0x514/0x750 [ 208.485534][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 208.490555][ T4015] ___sys_recvmsg+0x19d/0x870 [ 208.495865][ T4015] do_recvmmsg+0x63a/0x10a0 [ 208.500426][ T4015] __sys_recvmmsg+0x113/0x450 [ 208.506127][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 208.512465][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 208.517692][ T4015] do_fast_syscall_32+0x33/0x70 [ 208.522708][ T4015] do_SYSENTER_32+0x1b/0x20 [ 208.527438][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 208.533941][ T4015] [ 208.536276][ T4015] Uninit was stored to memory at: [ 208.541380][ T4015] __get_compat_msghdr+0x514/0x750 [ 208.546810][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 208.551736][ T4015] ___sys_recvmsg+0x19d/0x870 [ 208.557336][ T4015] do_recvmmsg+0x63a/0x10a0 [ 208.561902][ T4015] __sys_recvmmsg+0x113/0x450 [ 208.566834][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 208.573391][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 208.579034][ T4015] do_fast_syscall_32+0x33/0x70 [ 208.584064][ T4015] do_SYSENTER_32+0x1b/0x20 [ 208.589537][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 208.596101][ T4015] [ 208.598581][ T4015] Uninit was stored to memory at: [ 208.604144][ T4015] __get_compat_msghdr+0x514/0x750 [ 208.609320][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 208.614402][ T4015] ___sys_recvmsg+0x19d/0x870 [ 208.619211][ T4015] do_recvmmsg+0x63a/0x10a0 [ 208.624117][ T4015] __sys_recvmmsg+0x113/0x450 [ 208.628872][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 208.636165][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 208.641434][ T4015] do_fast_syscall_32+0x33/0x70 [ 208.646663][ T4015] do_SYSENTER_32+0x1b/0x20 [ 208.651424][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 208.662412][ T4015] [ 208.665512][ T4015] Uninit was stored to memory at: [ 208.671605][ T4015] __get_compat_msghdr+0x514/0x750 [ 208.678490][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 208.683425][ T4015] ___sys_recvmsg+0x19d/0x870 [ 208.688666][ T4015] do_recvmmsg+0x63a/0x10a0 [ 208.693253][ T4015] __sys_recvmmsg+0x113/0x450 [ 208.698298][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 208.704715][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 208.709821][ T4015] do_fast_syscall_32+0x33/0x70 [ 208.715158][ T4015] do_SYSENTER_32+0x1b/0x20 [ 208.719833][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 208.726779][ T4015] [ 208.729130][ T4015] Uninit was stored to memory at: [ 208.734406][ T4015] __get_compat_msghdr+0x514/0x750 [ 208.739860][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 208.744951][ T4015] ___sys_recvmsg+0x19d/0x870 [ 208.750409][ T4015] do_recvmmsg+0x63a/0x10a0 [ 208.755282][ T4015] __sys_recvmmsg+0x113/0x450 [ 208.761086][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 208.768309][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 208.773568][ T4015] do_fast_syscall_32+0x33/0x70 [ 208.778928][ T4015] do_SYSENTER_32+0x1b/0x20 [ 208.783817][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 208.791133][ T4015] [ 208.793566][ T4015] Uninit was stored to memory at: [ 208.799452][ T4015] __get_compat_msghdr+0x514/0x750 [ 208.805203][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 208.810224][ T4015] ___sys_recvmsg+0x19d/0x870 [ 208.815436][ T4015] do_recvmmsg+0x63a/0x10a0 [ 208.820714][ T4015] __sys_recvmmsg+0x113/0x450 [ 208.825707][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 208.832853][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 208.838248][ T4015] do_fast_syscall_32+0x33/0x70 [ 208.843170][ T4015] do_SYSENTER_32+0x1b/0x20 [ 208.848359][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 208.855487][ T4015] [ 208.858529][ T4015] Uninit was stored to memory at: [ 208.863981][ T4015] __get_compat_msghdr+0x514/0x750 [ 208.869436][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 208.874644][ T4015] ___sys_recvmsg+0x19d/0x870 [ 208.881138][ T4015] do_recvmmsg+0x63a/0x10a0 [ 208.888265][ T4015] __sys_recvmmsg+0x113/0x450 [ 208.893013][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 208.899788][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 208.905867][ T4015] do_fast_syscall_32+0x33/0x70 [ 208.911361][ T4015] do_SYSENTER_32+0x1b/0x20 [ 208.916382][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 208.923385][ T4015] [ 208.926471][ T4015] Local variable msg_sys created at: [ 208.933080][ T4015] do_recvmmsg+0x5f/0x10a0 [ 208.938105][ T4015] __sys_recvmmsg+0x113/0x450 [ 209.517625][ T4015] not chained 30000 origins [ 209.522227][ T4015] CPU: 1 PID: 4015 Comm: syz-executor.4 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 209.533506][ T4015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.543889][ T4015] Call Trace: [ 209.547291][ T4015] [ 209.550430][ T4015] dump_stack_lvl+0x1c8/0x256 [ 209.556049][ T4015] dump_stack+0x1a/0x1c [ 209.560492][ T4015] kmsan_internal_chain_origin+0x78/0x120 [ 209.567507][ T4015] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 209.574132][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 209.579419][ T4015] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 209.586265][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 209.592588][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 209.598751][ T4015] ? __get_compat_msghdr+0x5b/0x750 [ 209.604034][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 209.609823][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 209.615891][ T4015] ? should_fail+0x3f/0x7e0 [ 209.621263][ T4015] ? __stack_depot_save+0x21/0x4b0 [ 209.626424][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 209.631623][ T4015] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 209.638034][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 209.643890][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 209.651802][ T4015] __msan_chain_origin+0xbd/0x140 [ 209.657339][ T4015] __get_compat_msghdr+0x514/0x750 [ 209.663093][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 209.668007][ T4015] ? ___sys_recvmsg+0xa9/0x870 [ 209.674389][ T4015] ? do_recvmmsg+0x63a/0x10a0 [ 209.679137][ T4015] ___sys_recvmsg+0x19d/0x870 [ 209.684065][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 209.689864][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 209.695735][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 209.703087][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 209.711649][ T4015] do_recvmmsg+0x63a/0x10a0 [ 209.716196][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 209.722117][ T4015] ? __sys_recvmmsg+0x52/0x450 [ 209.727785][ T4015] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 209.734448][ T4015] __sys_recvmmsg+0x113/0x450 [ 209.739525][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 209.745240][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 209.752357][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 209.758048][ T4015] ? exit_to_user_mode_prepare+0x119/0x220 [ 209.765171][ T4015] do_fast_syscall_32+0x33/0x70 [ 209.770318][ T4015] do_SYSENTER_32+0x1b/0x20 [ 209.775761][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 209.784497][ T4015] RIP: 0023:0xf7f93549 [ 209.789001][ T4015] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 209.811880][ T4015] RSP: 002b:00000000f7f6d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 209.820740][ T4015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 209.829141][ T4015] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 209.837546][ T4015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.846740][ T4015] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 209.857227][ T4015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.868151][ T4015] [ 209.878398][ T4015] Uninit was stored to memory at: [ 209.888811][ T4015] __get_compat_msghdr+0x514/0x750 [ 209.895149][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 209.902310][ T4015] ___sys_recvmsg+0x19d/0x870 [ 209.908611][ T4015] do_recvmmsg+0x63a/0x10a0 [ 209.913571][ T4015] __sys_recvmmsg+0x113/0x450 [ 209.919169][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 209.925781][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 209.931316][ T4015] do_fast_syscall_32+0x33/0x70 [ 209.937810][ T4015] do_SYSENTER_32+0x1b/0x20 [ 209.942555][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 209.949973][ T4015] [ 209.952593][ T4015] Uninit was stored to memory at: [ 209.959047][ T4015] __get_compat_msghdr+0x514/0x750 [ 209.966653][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 209.971855][ T4015] ___sys_recvmsg+0x19d/0x870 [ 209.978598][ T4015] do_recvmmsg+0x63a/0x10a0 [ 209.984147][ T4015] __sys_recvmmsg+0x113/0x450 [ 209.990734][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 209.997816][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 210.003548][ T4015] do_fast_syscall_32+0x33/0x70 [ 210.009774][ T4015] do_SYSENTER_32+0x1b/0x20 [ 210.015755][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 210.022323][ T4015] [ 210.026307][ T4015] Uninit was stored to memory at: [ 210.032255][ T4015] __get_compat_msghdr+0x514/0x750 [ 210.038496][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 210.046592][ T4015] ___sys_recvmsg+0x19d/0x870 [ 210.052660][ T4015] do_recvmmsg+0x63a/0x10a0 [ 210.058357][ T4015] __sys_recvmmsg+0x113/0x450 [ 210.065905][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 210.073508][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 210.078874][ T4015] do_fast_syscall_32+0x33/0x70 [ 210.085275][ T4015] do_SYSENTER_32+0x1b/0x20 [ 210.090668][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 210.100891][ T4015] [ 210.103244][ T4015] Uninit was stored to memory at: [ 210.109287][ T4015] __get_compat_msghdr+0x514/0x750 [ 210.114688][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 210.119706][ T4015] ___sys_recvmsg+0x19d/0x870 [ 210.125201][ T4015] do_recvmmsg+0x63a/0x10a0 [ 210.129788][ T4015] __sys_recvmmsg+0x113/0x450 [ 210.135832][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 210.142595][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 210.148413][ T4015] do_fast_syscall_32+0x33/0x70 [ 210.154943][ T4015] do_SYSENTER_32+0x1b/0x20 [ 210.159986][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 210.167836][ T4015] [ 210.170471][ T4015] Uninit was stored to memory at: [ 210.176943][ T4015] __get_compat_msghdr+0x514/0x750 [ 210.182913][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 210.189676][ T4015] ___sys_recvmsg+0x19d/0x870 [ 210.194683][ T4015] do_recvmmsg+0x63a/0x10a0 [ 210.199923][ T4015] __sys_recvmmsg+0x113/0x450 [ 210.205137][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 210.213103][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 210.219661][ T4015] do_fast_syscall_32+0x33/0x70 [ 210.225759][ T4015] do_SYSENTER_32+0x1b/0x20 [ 210.230550][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 210.240124][ T4015] [ 210.242752][ T4015] Uninit was stored to memory at: [ 210.248246][ T4015] __get_compat_msghdr+0x514/0x750 [ 210.254224][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 210.259264][ T4015] ___sys_recvmsg+0x19d/0x870 [ 210.264864][ T4015] do_recvmmsg+0x63a/0x10a0 [ 210.269781][ T4015] __sys_recvmmsg+0x113/0x450 [ 210.275544][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 210.282968][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 210.288323][ T4015] do_fast_syscall_32+0x33/0x70 [ 210.293406][ T4015] do_SYSENTER_32+0x1b/0x20 [ 210.299337][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 210.306137][ T4015] [ 210.309045][ T4015] Uninit was stored to memory at: [ 210.316064][ T4015] __get_compat_msghdr+0x514/0x750 [ 210.321907][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 210.328132][ T4015] ___sys_recvmsg+0x19d/0x870 [ 210.335964][ T4015] do_recvmmsg+0x63a/0x10a0 [ 210.341957][ T4015] __sys_recvmmsg+0x113/0x450 [ 210.349020][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 210.358664][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 210.366011][ T4015] do_fast_syscall_32+0x33/0x70 [ 210.370960][ T4015] do_SYSENTER_32+0x1b/0x20 [ 210.376171][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 210.383966][ T4015] [ 210.387021][ T4015] Local variable msg_sys created at: [ 210.394609][ T4015] do_recvmmsg+0x5f/0x10a0 [ 210.399954][ T4015] __sys_recvmmsg+0x113/0x450 [ 210.633139][ T4015] not chained 40000 origins [ 210.638208][ T4015] CPU: 1 PID: 4015 Comm: syz-executor.4 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 210.650261][ T4015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.663199][ T4015] Call Trace: [ 210.667533][ T4015] [ 210.671588][ T4015] dump_stack_lvl+0x1c8/0x256 [ 210.676660][ T4015] dump_stack+0x1a/0x1c [ 210.681075][ T4015] kmsan_internal_chain_origin+0x78/0x120 [ 210.687657][ T4015] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 210.694166][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 210.699920][ T4015] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 210.706619][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 210.711990][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 210.719095][ T4015] ? __get_compat_msghdr+0x5b/0x750 [ 210.725085][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 210.730369][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 210.736870][ T4015] ? should_fail+0x3f/0x7e0 [ 210.741992][ T4015] ? __stack_depot_save+0x21/0x4b0 [ 210.747186][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 210.752490][ T4015] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 210.759052][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 210.764642][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 210.773075][ T4015] __msan_chain_origin+0xbd/0x140 [ 210.778647][ T4015] __get_compat_msghdr+0x514/0x750 [ 210.784086][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 210.789792][ T4015] ? ___sys_recvmsg+0xa9/0x870 [ 210.794785][ T4015] ? do_recvmmsg+0x63a/0x10a0 [ 210.800130][ T4015] ___sys_recvmsg+0x19d/0x870 [ 210.805200][ T4015] ? raw_spin_rq_unlock_irq+0x22/0x90 [ 210.812006][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 210.818030][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 210.826431][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 210.832489][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 210.839239][ T4015] do_recvmmsg+0x63a/0x10a0 [ 210.844754][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 210.850833][ T4015] ? __sys_recvmmsg+0x52/0x450 [ 210.855760][ T4015] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 210.863646][ T4015] __sys_recvmmsg+0x113/0x450 [ 210.870596][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 210.879549][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 210.888862][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 210.893956][ T4015] ? exit_to_user_mode_prepare+0x119/0x220 [ 210.901674][ T4015] do_fast_syscall_32+0x33/0x70 [ 210.909063][ T4015] do_SYSENTER_32+0x1b/0x20 [ 210.914865][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 210.922687][ T4015] RIP: 0023:0xf7f93549 [ 210.928110][ T4015] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 210.955706][ T4015] RSP: 002b:00000000f7f6d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 210.966952][ T4015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 210.978296][ T4015] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 210.988459][ T4015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.997672][ T4015] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 211.006301][ T4015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.015193][ T4015] [ 211.024777][ T4015] Uninit was stored to memory at: [ 211.031519][ T4015] __get_compat_msghdr+0x514/0x750 [ 211.036929][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 211.041864][ T4015] ___sys_recvmsg+0x19d/0x870 [ 211.047011][ T4015] do_recvmmsg+0x63a/0x10a0 [ 211.051692][ T4015] __sys_recvmmsg+0x113/0x450 [ 211.056943][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 211.063718][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 211.069434][ T4015] do_fast_syscall_32+0x33/0x70 [ 211.075200][ T4015] do_SYSENTER_32+0x1b/0x20 [ 211.080335][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 211.087957][ T4015] [ 211.090534][ T4015] Uninit was stored to memory at: [ 211.098121][ T4015] __get_compat_msghdr+0x514/0x750 [ 211.103745][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 211.108935][ T4015] ___sys_recvmsg+0x19d/0x870 [ 211.114674][ T4015] do_recvmmsg+0x63a/0x10a0 [ 211.119748][ T4015] __sys_recvmmsg+0x113/0x450 [ 211.125346][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 211.133140][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 211.138468][ T4015] do_fast_syscall_32+0x33/0x70 [ 211.143563][ T4015] do_SYSENTER_32+0x1b/0x20 [ 211.148763][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 211.155778][ T4015] [ 211.158314][ T4015] Uninit was stored to memory at: [ 211.164996][ T4015] __get_compat_msghdr+0x514/0x750 [ 211.172350][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 211.178371][ T4015] ___sys_recvmsg+0x19d/0x870 [ 211.183813][ T4015] do_recvmmsg+0x63a/0x10a0 [ 211.188785][ T4015] __sys_recvmmsg+0x113/0x450 [ 211.196083][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 211.204754][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 211.212283][ T4015] do_fast_syscall_32+0x33/0x70 [ 211.217657][ T4015] do_SYSENTER_32+0x1b/0x20 [ 211.222928][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 211.231577][ T4015] [ 211.234051][ T4015] Uninit was stored to memory at: [ 211.239824][ T4015] __get_compat_msghdr+0x514/0x750 [ 211.245835][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 211.252829][ T4015] ___sys_recvmsg+0x19d/0x870 [ 211.259109][ T4015] do_recvmmsg+0x63a/0x10a0 [ 211.264138][ T4015] __sys_recvmmsg+0x113/0x450 [ 211.269233][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 211.275990][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 211.281235][ T4015] do_fast_syscall_32+0x33/0x70 [ 211.287277][ T4015] do_SYSENTER_32+0x1b/0x20 [ 211.292664][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 211.299720][ T4015] [ 211.302714][ T4015] Uninit was stored to memory at: [ 211.308291][ T4015] __get_compat_msghdr+0x514/0x750 [ 211.314103][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 211.319161][ T4015] ___sys_recvmsg+0x19d/0x870 [ 211.324079][ T4015] do_recvmmsg+0x63a/0x10a0 [ 211.328763][ T4015] __sys_recvmmsg+0x113/0x450 [ 211.333571][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 211.340127][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 211.345424][ T4015] do_fast_syscall_32+0x33/0x70 [ 211.351411][ T4015] do_SYSENTER_32+0x1b/0x20 [ 211.356357][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 211.363434][ T4015] [ 211.366474][ T4015] Uninit was stored to memory at: [ 211.372234][ T4015] __get_compat_msghdr+0x514/0x750 [ 211.377780][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 211.382700][ T4015] ___sys_recvmsg+0x19d/0x870 [ 211.388362][ T4015] do_recvmmsg+0x63a/0x10a0 [ 211.393558][ T4015] __sys_recvmmsg+0x113/0x450 [ 211.399169][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 211.406706][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 211.414171][ T4015] do_fast_syscall_32+0x33/0x70 [ 211.421360][ T4015] do_SYSENTER_32+0x1b/0x20 [ 211.426364][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 211.433060][ T4015] [ 211.435606][ T4015] Uninit was stored to memory at: [ 211.441211][ T4015] __get_compat_msghdr+0x514/0x750 [ 211.447389][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 211.452419][ T4015] ___sys_recvmsg+0x19d/0x870 [ 211.457892][ T4015] do_recvmmsg+0x63a/0x10a0 [ 211.463135][ T4015] __sys_recvmmsg+0x113/0x450 [ 211.468287][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 211.476343][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 211.486713][ T4015] do_fast_syscall_32+0x33/0x70 [ 211.491867][ T4015] do_SYSENTER_32+0x1b/0x20 [ 211.497878][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 211.506670][ T4015] [ 211.509843][ T4015] Local variable msg_sys created at: [ 211.516689][ T4015] do_recvmmsg+0x5f/0x10a0 [ 211.521594][ T4015] __sys_recvmmsg+0x113/0x450 [ 211.751552][ T4015] not chained 50000 origins [ 211.757972][ T4015] CPU: 1 PID: 4015 Comm: syz-executor.4 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 211.768187][ T4015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.782571][ T4015] Call Trace: [ 211.785877][ T4015] [ 211.788851][ T4015] dump_stack_lvl+0x1c8/0x256 [ 211.794133][ T4015] dump_stack+0x1a/0x1c [ 211.798475][ T4015] kmsan_internal_chain_origin+0x78/0x120 [ 211.805507][ T4015] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 211.812711][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 211.817911][ T4015] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 211.825040][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 211.830653][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 211.836648][ T4015] ? __get_compat_msghdr+0x5b/0x750 [ 211.842126][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 211.847569][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 211.853935][ T4015] ? should_fail+0x3f/0x7e0 [ 211.859723][ T4015] ? __stack_depot_save+0x21/0x4b0 [ 211.865180][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 211.870541][ T4015] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 211.877576][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 211.883260][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 211.890547][ T4015] __msan_chain_origin+0xbd/0x140 [ 211.896372][ T4015] __get_compat_msghdr+0x514/0x750 [ 211.903693][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 211.909549][ T4015] ? ___sys_recvmsg+0xa9/0x870 [ 211.916664][ T4015] ? do_recvmmsg+0x63a/0x10a0 [ 211.923688][ T4015] ___sys_recvmsg+0x19d/0x870 [ 211.929758][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 211.934945][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 211.941843][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 211.948101][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 211.954533][ T4015] do_recvmmsg+0x63a/0x10a0 [ 211.961343][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 211.972021][ T4015] ? __sys_recvmmsg+0x52/0x450 [ 211.979609][ T4015] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 211.990228][ T4015] __sys_recvmmsg+0x113/0x450 [ 211.996775][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 212.004159][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 212.013114][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 212.019259][ T4015] ? exit_to_user_mode_prepare+0x119/0x220 [ 212.025871][ T4015] do_fast_syscall_32+0x33/0x70 [ 212.031293][ T4015] do_SYSENTER_32+0x1b/0x20 [ 212.037614][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 212.044556][ T4015] RIP: 0023:0xf7f93549 [ 212.049360][ T4015] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 212.072602][ T4015] RSP: 002b:00000000f7f6d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 212.085171][ T4015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 212.095106][ T4015] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 212.104438][ T4015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.113948][ T4015] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 212.125672][ T4015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.137148][ T4015] [ 212.147237][ T4015] Uninit was stored to memory at: [ 212.153140][ T4015] __get_compat_msghdr+0x514/0x750 [ 212.160283][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 212.167622][ T4015] ___sys_recvmsg+0x19d/0x870 [ 212.172958][ T4015] do_recvmmsg+0x63a/0x10a0 [ 212.177870][ T4015] __sys_recvmmsg+0x113/0x450 [ 212.184555][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 212.191493][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 212.196936][ T4015] do_fast_syscall_32+0x33/0x70 [ 212.202919][ T4015] do_SYSENTER_32+0x1b/0x20 [ 212.207763][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 212.214364][ T4015] [ 212.217011][ T4015] Uninit was stored to memory at: [ 212.222307][ T4015] __get_compat_msghdr+0x514/0x750 [ 212.228656][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 212.235090][ T4015] ___sys_recvmsg+0x19d/0x870 [ 212.240446][ T4015] do_recvmmsg+0x63a/0x10a0 [ 212.245961][ T4015] __sys_recvmmsg+0x113/0x450 [ 212.251341][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 212.258311][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 212.264843][ T4015] do_fast_syscall_32+0x33/0x70 [ 212.269761][ T4015] do_SYSENTER_32+0x1b/0x20 [ 212.275673][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 212.282385][ T4015] [ 212.284872][ T4015] Uninit was stored to memory at: [ 212.290561][ T4015] __get_compat_msghdr+0x514/0x750 [ 212.296365][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 212.302083][ T4015] ___sys_recvmsg+0x19d/0x870 [ 212.308514][ T4015] do_recvmmsg+0x63a/0x10a0 [ 212.313719][ T4015] __sys_recvmmsg+0x113/0x450 [ 212.319266][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 212.328028][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 212.333448][ T4015] do_fast_syscall_32+0x33/0x70 [ 212.339185][ T4015] do_SYSENTER_32+0x1b/0x20 [ 212.344739][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 212.351538][ T4015] [ 212.354129][ T4015] Uninit was stored to memory at: [ 212.359365][ T4015] __get_compat_msghdr+0x514/0x750 [ 212.365459][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 212.371811][ T4015] ___sys_recvmsg+0x19d/0x870 [ 212.377245][ T4015] do_recvmmsg+0x63a/0x10a0 [ 212.381999][ T4015] __sys_recvmmsg+0x113/0x450 [ 212.387042][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 212.394056][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 212.399398][ T4015] do_fast_syscall_32+0x33/0x70 [ 212.405511][ T4015] do_SYSENTER_32+0x1b/0x20 [ 212.410786][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 212.418076][ T4015] [ 212.420530][ T4015] Uninit was stored to memory at: [ 212.426604][ T4015] __get_compat_msghdr+0x514/0x750 [ 212.432043][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 212.438967][ T4015] ___sys_recvmsg+0x19d/0x870 [ 212.445071][ T4015] do_recvmmsg+0x63a/0x10a0 [ 212.449641][ T4015] __sys_recvmmsg+0x113/0x450 [ 212.455725][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 212.462666][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 212.469689][ T4015] do_fast_syscall_32+0x33/0x70 [ 212.475588][ T4015] do_SYSENTER_32+0x1b/0x20 [ 212.482834][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 212.492121][ T4015] [ 212.495068][ T4015] Uninit was stored to memory at: [ 212.502434][ T4015] __get_compat_msghdr+0x514/0x750 [ 212.508779][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 212.514096][ T4015] ___sys_recvmsg+0x19d/0x870 [ 212.519190][ T4015] do_recvmmsg+0x63a/0x10a0 [ 212.524176][ T4015] __sys_recvmmsg+0x113/0x450 [ 212.529708][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 212.537066][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 212.542467][ T4015] do_fast_syscall_32+0x33/0x70 [ 212.547800][ T4015] do_SYSENTER_32+0x1b/0x20 [ 212.554074][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 212.561466][ T4015] [ 212.564367][ T4015] Uninit was stored to memory at: [ 212.569634][ T4015] __get_compat_msghdr+0x514/0x750 [ 212.575345][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 212.581031][ T4015] ___sys_recvmsg+0x19d/0x870 [ 212.586024][ T4015] do_recvmmsg+0x63a/0x10a0 [ 212.592173][ T4015] __sys_recvmmsg+0x113/0x450 [ 212.597086][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 212.604229][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 212.609312][ T4015] do_fast_syscall_32+0x33/0x70 [ 212.615548][ T4015] do_SYSENTER_32+0x1b/0x20 [ 212.620340][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 212.627684][ T4015] [ 212.630448][ T4015] Local variable msg_sys created at: [ 212.636646][ T4015] do_recvmmsg+0x5f/0x10a0 [ 212.641889][ T4015] __sys_recvmmsg+0x113/0x450 [ 212.922639][ T4015] not chained 60000 origins [ 212.927396][ T4015] CPU: 1 PID: 4015 Comm: syz-executor.4 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 212.938044][ T4015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.948429][ T4015] Call Trace: [ 212.951748][ T4015] [ 212.954799][ T4015] dump_stack_lvl+0x1c8/0x256 [ 212.960079][ T4015] dump_stack+0x1a/0x1c [ 212.964381][ T4015] kmsan_internal_chain_origin+0x78/0x120 [ 212.970392][ T4015] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 212.976904][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 212.983687][ T4015] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 212.990739][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 212.997803][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 213.004254][ T4015] ? __get_compat_msghdr+0x5b/0x750 [ 213.009611][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 213.016116][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 213.022211][ T4015] ? should_fail+0x3f/0x7e0 [ 213.026772][ T4015] ? __stack_depot_save+0x21/0x4b0 [ 213.033118][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 213.038304][ T4015] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 213.045572][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 213.050973][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 213.057124][ T4015] __msan_chain_origin+0xbd/0x140 [ 213.063704][ T4015] __get_compat_msghdr+0x514/0x750 [ 213.070258][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 213.075456][ T4015] ? ___sys_recvmsg+0xa9/0x870 [ 213.081016][ T4015] ? do_recvmmsg+0x63a/0x10a0 [ 213.086034][ T4015] ___sys_recvmsg+0x19d/0x870 [ 213.091846][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 213.097782][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 213.106012][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 213.111494][ T4015] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 213.117730][ T4015] do_recvmmsg+0x63a/0x10a0 [ 213.123038][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 213.128336][ T4015] ? __sys_recvmmsg+0x52/0x450 [ 213.134187][ T4015] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 213.141601][ T4015] __sys_recvmmsg+0x113/0x450 [ 213.146694][ T4015] ? kmsan_get_metadata+0x33/0x220 [ 213.152333][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 213.159046][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 213.164223][ T4015] ? exit_to_user_mode_prepare+0x119/0x220 [ 213.170389][ T4015] do_fast_syscall_32+0x33/0x70 [ 213.175496][ T4015] do_SYSENTER_32+0x1b/0x20 [ 213.180619][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 213.188835][ T4015] RIP: 0023:0xf7f93549 [ 213.192939][ T4015] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 213.213949][ T4015] RSP: 002b:00000000f7f6d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 213.225141][ T4015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 213.236887][ T4015] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 213.245415][ T4015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.256306][ T4015] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 213.266431][ T4015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.274939][ T4015] [ 213.284429][ T4015] Uninit was stored to memory at: [ 213.289665][ T4015] __get_compat_msghdr+0x514/0x750 [ 213.296387][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 213.301614][ T4015] ___sys_recvmsg+0x19d/0x870 [ 213.308155][ T4015] do_recvmmsg+0x63a/0x10a0 [ 213.312986][ T4015] __sys_recvmmsg+0x113/0x450 [ 213.318346][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 213.325636][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 213.330735][ T4015] do_fast_syscall_32+0x33/0x70 [ 213.337958][ T4015] do_SYSENTER_32+0x1b/0x20 [ 213.343171][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 213.350278][ T4015] [ 213.352981][ T4015] Uninit was stored to memory at: [ 213.358426][ T4015] __get_compat_msghdr+0x514/0x750 [ 213.364168][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 213.369173][ T4015] ___sys_recvmsg+0x19d/0x870 [ 213.374231][ T4015] do_recvmmsg+0x63a/0x10a0 [ 213.378796][ T4015] __sys_recvmmsg+0x113/0x450 [ 213.383541][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 213.390140][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 213.396108][ T4015] do_fast_syscall_32+0x33/0x70 [ 213.401015][ T4015] do_SYSENTER_32+0x1b/0x20 [ 213.405979][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 213.412389][ T4015] [ 213.416143][ T4015] Uninit was stored to memory at: [ 213.422266][ T4015] __get_compat_msghdr+0x514/0x750 [ 213.428203][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 213.433948][ T4015] ___sys_recvmsg+0x19d/0x870 [ 213.438787][ T4015] do_recvmmsg+0x63a/0x10a0 [ 213.443808][ T4015] __sys_recvmmsg+0x113/0x450 [ 213.450095][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 213.457162][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 213.465167][ T4015] do_fast_syscall_32+0x33/0x70 [ 213.471007][ T4015] do_SYSENTER_32+0x1b/0x20 [ 213.476151][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 213.483349][ T4015] [ 213.485979][ T4015] Uninit was stored to memory at: [ 213.491400][ T4015] __get_compat_msghdr+0x514/0x750 [ 213.498823][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 213.504614][ T4015] ___sys_recvmsg+0x19d/0x870 [ 213.509470][ T4015] do_recvmmsg+0x63a/0x10a0 [ 213.515014][ T4015] __sys_recvmmsg+0x113/0x450 [ 213.519763][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 213.526647][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 213.534042][ T4015] do_fast_syscall_32+0x33/0x70 [ 213.543065][ T4015] do_SYSENTER_32+0x1b/0x20 [ 213.548483][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 213.556463][ T4015] [ 213.560063][ T4015] Uninit was stored to memory at: [ 213.566468][ T4015] __get_compat_msghdr+0x514/0x750 [ 213.572258][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 213.577400][ T4015] ___sys_recvmsg+0x19d/0x870 [ 213.582618][ T4015] do_recvmmsg+0x63a/0x10a0 [ 213.587578][ T4015] __sys_recvmmsg+0x113/0x450 [ 213.593218][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 213.600717][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 213.607224][ T4015] do_fast_syscall_32+0x33/0x70 [ 213.612715][ T4015] do_SYSENTER_32+0x1b/0x20 [ 213.617995][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 213.625388][ T4015] [ 213.627775][ T4015] Uninit was stored to memory at: [ 213.633196][ T4015] __get_compat_msghdr+0x514/0x750 [ 213.638674][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 213.644276][ T4015] ___sys_recvmsg+0x19d/0x870 [ 213.649412][ T4015] do_recvmmsg+0x63a/0x10a0 [ 213.654238][ T4015] __sys_recvmmsg+0x113/0x450 [ 213.659531][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 213.667673][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 213.672922][ T4015] do_fast_syscall_32+0x33/0x70 [ 213.680323][ T4015] do_SYSENTER_32+0x1b/0x20 [ 213.685272][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 213.692889][ T4015] [ 213.695478][ T4015] Uninit was stored to memory at: [ 213.702714][ T4015] __get_compat_msghdr+0x514/0x750 [ 213.708723][ T4015] get_compat_msghdr+0x8c/0x1c0 [ 213.714751][ T4015] ___sys_recvmsg+0x19d/0x870 [ 213.720001][ T4015] do_recvmmsg+0x63a/0x10a0 [ 213.726614][ T4015] __sys_recvmmsg+0x113/0x450 [ 213.731876][ T4015] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 213.739263][ T4015] __do_fast_syscall_32+0x95/0xf0 [ 213.746514][ T4015] do_fast_syscall_32+0x33/0x70 [ 213.751685][ T4015] do_SYSENTER_32+0x1b/0x20 [ 213.758192][ T4015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 213.764728][ T4015] [ 213.769938][ T4015] Local variable msg_sys created at: [ 213.775846][ T4015] do_recvmmsg+0x5f/0x10a0 [ 213.780324][ T4015] __sys_recvmmsg+0x113/0x450 23:10:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)={0x0, 0x2, [{0x1, 0x1}, {0x3, 0x1}]}) 23:10:15 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x40049409, &(0x7f00000000c0)={0x0, "1b799150624e0d12153f4da568118fadb11ac1248bcdb722fdd8bb62da280fcb"}) 23:10:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551c, &(0x7f0000000080)={0x0, 0x1, [{}]}) 23:10:15 executing program 2: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, 0x0) 23:10:15 executing program 3: syz_clone(0x17889080, 0x0, 0x0, 0x0, 0x0, 0x0) 23:10:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x7, 0xae9}, 0x48) 23:10:15 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x40049409, &(0x7f00000000c0)={0x0, "1b799150624e0d12153f4da568118fadb11ac1248bcdb722fdd8bb62da280fcb"}) 23:10:15 executing program 2: r0 = syz_clone(0x4805080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(r0) r2 = syz_clone(0x800000, &(0x7f00000000c0), 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000480)="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") r3 = socket$packet(0x11, 0x2, 0x300) r4 = epoll_create1(0x80000) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000240)={r4, r5, 0x400}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) 23:10:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc0045878, 0x0) 23:10:15 executing program 3: syz_clone(0xca05080, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) [ 214.372423][ T4052] usb usb9: usbfs: process 4052 (syz-executor.4) did not claim interface 0 before use 23:10:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)={0x0, 0x2, [{0x1, 0x1}, {0x3, 0x1}]}) 23:10:15 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x40049409, &(0x7f00000000c0)={0x0, "1b799150624e0d12153f4da568118fadb11ac1248bcdb722fdd8bb62da280fcb"}) 23:10:15 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000000300)=@framed={{}, [@alu, @exit, @jmp, @map_fd, @map_idx]}, &(0x7f0000000380)='GPL\x00', 0x3, 0x95, &(0x7f0000000480)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 214.881706][ T4067] usb usb9: usbfs: process 4067 (syz-executor.4) did not claim interface 0 before use 23:10:16 executing program 2: r0 = inotify_init() ioctl(r0, 0x2, &(0x7f0000000100)) 23:10:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)={0x0, 0x2, [{0x1, 0x1}, {0x3, 0x1}]}) 23:10:16 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0189436, &(0x7f00000000c0)={0x0, "1b799150624e0d12153f4da568118fadb11ac1248bcdb722fdd8bb62da280fcb"}) 23:10:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)) 23:10:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x7, 0xae9}, 0x48) 23:10:16 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x1c12, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQES(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0xc, 0x11, r0, 0x10000000) 23:10:16 executing program 2: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x1}, 0x2}}, 0x18) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x40200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) 23:10:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)={0x0, 0x2, [{0x1, 0x1}, {0x3, 0x1}]}) 23:10:16 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0x14) write$P9_RWSTAT(r0, &(0x7f00000000c0)={0x5c}, 0xfdd1) 23:10:16 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f0000000800)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) 23:10:16 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x401c5820, 0x0) [ 215.845390][ T4094] usb usb9: usbfs: process 4094 (syz-executor.4) did not claim interface 0 before use 23:10:17 executing program 2: syz_clone(0x8020000, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 23:10:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8943, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 23:10:17 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x40) 23:10:17 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0xec40, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000003800)={"255c953cf006653fd96eb59fc41e76ef", 0x0, 0x0, {}, {0x20, 0xfff}, 0x1, [0x0, 0x7, 0x9, 0x0, 0x2, 0xffff, 0x33, 0x0, 0x101, 0x6, 0x2, 0xff, 0x5, 0x2, 0x2ced, 0x8000]}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 23:10:17 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0x9c}]}) [ 216.509323][ T24] audit: type=1800 audit(1655766617.553:3): pid=4112 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1181 res=0 errno=0 23:10:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x7, 0xae9}, 0x48) 23:10:17 executing program 3: r0 = socket(0x11, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:10:17 executing program 4: r0 = openat$sysfs(0xffffff9c, &(0x7f0000001440)='/sys/class/net', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x1b812, r0, 0x10000000) 23:10:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000240)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0x1001) 23:10:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 23:10:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002f80)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) 23:10:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) 23:10:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8946, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}) 23:10:18 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x4d99ff1c1feb98f2, 0xffffffffffffffff, 0x0) 23:10:18 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0xffffe000, 0x0, 0x1ffd, 0xffffffffffffffff, 0x8000000) 23:10:18 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0xe0ffff, 0x12, r0, 0x10000000) 23:10:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8942, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 23:10:19 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x40305828, &(0x7f0000000040)) 23:10:19 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x0) read$msr(r0, 0x0, 0xef7b4ec8fea32d77) 23:10:19 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x59c5) 23:10:19 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000017c0)=@security={'security\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2e4, 0x2e4, 0x2e4, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth0_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@private, @private, 0x0, 0x0, 'tunl0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00', 0x2}}, @common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x388) 23:10:19 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x1000000}) 23:10:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x402c5828, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 23:10:19 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae00, 0x0) 23:10:19 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0xb33f}]}]}}, &(0x7f0000000500)=""/147, 0x32, 0x93, 0x1}, 0x20) 23:10:19 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1ffd, 0xffffffffffffffff, 0x8000000) 23:10:19 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 23:10:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000100), 0x4) 23:10:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8970, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 23:10:19 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0xc01047d0, &(0x7f0000000040)) 23:10:19 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x803e) 23:10:19 executing program 3: io_uring_setup(0x591e, &(0x7f0000000280)={0x0, 0x0, 0x7, 0x0, 0xa2020000}) 23:10:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x200, 0x4) 23:10:19 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private}, 0xc) 23:10:20 executing program 0: r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x2285, 0x0) 23:10:20 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x6}]}) 23:10:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003980)=[{{&(0x7f0000000000)={0x2, 0x4e20, @private}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x1c, 0x1, 0x0, [{@empty}, {@broadcast}, {@dev}, {@private}]}]}}}], 0x30}}], 0x1, 0x0) 23:10:20 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) 23:10:20 executing program 4: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x8, 0x0, 0x0) 23:10:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x15, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 23:10:20 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0xb33f, 0x1}]}]}}, &(0x7f0000000500)=""/147, 0x32, 0x93, 0x1}, 0x20) [ 219.543284][ T24] audit: type=1326 audit(1655766620.583:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4178 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f7b549 code=0x0 [ 219.589751][ T4184] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:10:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x894a, 0x0) 23:10:20 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000500)=""/147, 0x32, 0x93, 0x1}, 0x20) 23:10:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x800, 0x4, 0x871}, 0x48) 23:10:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002d40)={&(0x7f0000000140), 0xc, &(0x7f0000002d00)={&(0x7f0000002f80)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c}}, 0x0) 23:10:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x11, 0x68, &(0x7f0000000100), 0x4) 23:10:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x2, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 23:10:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, r1) 23:10:21 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f901000000"], 0x67b) unshare(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x20044000) sendto$inet6(r2, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) unshare(0x2a000200) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) recvmmsg(r3, &(0x7f00000065c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000200)}, {&(0x7f0000001640)=""/237, 0xed}, {0x0}, {&(0x7f0000000280)=""/26, 0x1a}], 0x6, &(0x7f0000000540)=""/55, 0x37}}, {{&(0x7f0000001840)=@un=@abs, 0x80, &(0x7f00000018c0)}, 0x80}, {{&(0x7f0000001900)=@can, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001980)=""/169, 0xa9}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/28, 0x1c}, {&(0x7f0000001b40)=""/43, 0x2b}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/31, 0x1f}, {&(0x7f0000002bc0)=""/239, 0xef}, {&(0x7f0000002cc0)=""/6, 0x6}], 0x8, &(0x7f0000002d40)=""/89, 0x59}, 0x5}, {{0x0, 0x0, &(0x7f0000003e00)=[{0x0}], 0x1}, 0xc3c0}, {{&(0x7f0000003e40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003ec0)=""/173, 0xad}, {&(0x7f0000003f80)=""/206, 0xce}, {&(0x7f0000004080)=""/20, 0x14}, {&(0x7f00000040c0)=""/241, 0xf1}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/121, 0x79}], 0x6, &(0x7f0000005280)=""/36, 0x24}, 0x1}, {{&(0x7f00000052c0)=@ax25={{0x3, @rose}, [@remote, @netrom, @netrom, @null, @null, @null, @bcast, @default]}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/79, 0x4f}], 0x1}}, {{&(0x7f0000005400)=@nfc, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/33, 0x21}, {&(0x7f00000054c0)=""/140, 0x8c}], 0x2, &(0x7f00000055c0)=""/4096, 0x1000}, 0x3}], 0x7, 0x2, 0x0) 23:10:21 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x62) 23:10:21 executing program 2: io_uring_setup(0x2007b46, &(0x7f00000000c0)={0x0, 0x0, 0x10}) 23:10:21 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0xffffffff, 0x2cc2) 23:10:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x80108906, 0x0) 23:10:21 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1b813, r0, 0x10000000) 23:10:21 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5}, {}, {0x6}]}) 23:10:21 executing program 2: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000017c0)=@security={'security\x00', 0xe, 0x4, 0x2cc, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2e4, 0x2e4, 0x2e4, 0xffffffff, 0x8000000, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth0_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@private, @private, 0x0, 0x0, 'tunl0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x328) [ 220.797533][ T4212] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. 23:10:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x30, 0x0, 0x0) 23:10:22 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0xff}]}) 23:10:22 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5411, &(0x7f0000001ac0)={'gre0\x00', 0x0}) [ 221.116060][ T24] audit: type=1326 audit(1655766622.163:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4225 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7faf549 code=0x0 23:10:22 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {0x6}]}) [ 221.306990][ T24] audit: type=1326 audit(1655766622.353:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4229 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93549 code=0x0 [ 221.382010][ T4232] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 221.512754][ T24] audit: type=1326 audit(1655766622.553:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4234 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6549 code=0x0 23:10:22 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f901000000"], 0x67b) unshare(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x20044000) sendto$inet6(r2, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) unshare(0x2a000200) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) recvmmsg(r3, &(0x7f00000065c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000200)}, {&(0x7f0000001640)=""/237, 0xed}, {0x0}, {&(0x7f0000000280)=""/26, 0x1a}], 0x6, &(0x7f0000000540)=""/55, 0x37}}, {{&(0x7f0000001840)=@un=@abs, 0x80, &(0x7f00000018c0)}, 0x80}, {{&(0x7f0000001900)=@can, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001980)=""/169, 0xa9}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/28, 0x1c}, {&(0x7f0000001b40)=""/43, 0x2b}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/31, 0x1f}, {&(0x7f0000002bc0)=""/239, 0xef}, {&(0x7f0000002cc0)=""/6, 0x6}], 0x8, &(0x7f0000002d40)=""/89, 0x59}, 0x5}, {{0x0, 0x0, &(0x7f0000003e00)=[{0x0}], 0x1}, 0xc3c0}, {{&(0x7f0000003e40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003ec0)=""/173, 0xad}, {&(0x7f0000003f80)=""/206, 0xce}, {&(0x7f0000004080)=""/20, 0x14}, {&(0x7f00000040c0)=""/241, 0xf1}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/121, 0x79}], 0x6, &(0x7f0000005280)=""/36, 0x24}, 0x1}, {{&(0x7f00000052c0)=@ax25={{0x3, @rose}, [@remote, @netrom, @netrom, @null, @null, @null, @bcast, @default]}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/79, 0x4f}], 0x1}}, {{&(0x7f0000005400)=@nfc, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/33, 0x21}, {&(0x7f00000054c0)=""/140, 0x8c}], 0x2, &(0x7f00000055c0)=""/4096, 0x1000}, 0x3}], 0x7, 0x2, 0x0) 23:10:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x1600bd74, 0x0, 0x0) 23:10:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x1600bd78, &(0x7f0000000100), 0x4) 23:10:22 executing program 4: io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0xfc9fa1c8cecdea7d}) 23:10:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) 23:10:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x40, 0x7, 0x4, 0x40, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 23:10:23 executing program 3: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f901000000"], 0x67b) unshare(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x20044000) sendto$inet6(r2, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) unshare(0x2a000200) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) recvmmsg(r3, &(0x7f00000065c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000200)}, {&(0x7f0000001640)=""/237, 0xed}, {0x0}, {&(0x7f0000000280)=""/26, 0x1a}], 0x6, &(0x7f0000000540)=""/55, 0x37}}, {{&(0x7f0000001840)=@un=@abs, 0x80, &(0x7f00000018c0)}, 0x80}, {{&(0x7f0000001900)=@can, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001980)=""/169, 0xa9}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/28, 0x1c}, {&(0x7f0000001b40)=""/43, 0x2b}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/31, 0x1f}, {&(0x7f0000002bc0)=""/239, 0xef}, {&(0x7f0000002cc0)=""/6, 0x6}], 0x8, &(0x7f0000002d40)=""/89, 0x59}, 0x5}, {{0x0, 0x0, &(0x7f0000003e00)=[{0x0}], 0x1}, 0xc3c0}, {{&(0x7f0000003e40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003ec0)=""/173, 0xad}, {&(0x7f0000003f80)=""/206, 0xce}, {&(0x7f0000004080)=""/20, 0x14}, {&(0x7f00000040c0)=""/241, 0xf1}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/121, 0x79}], 0x6, &(0x7f0000005280)=""/36, 0x24}, 0x1}, {{&(0x7f00000052c0)=@ax25={{0x3, @rose}, [@remote, @netrom, @netrom, @null, @null, @null, @bcast, @default]}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/79, 0x4f}], 0x1}}, {{&(0x7f0000005400)=@nfc, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/33, 0x21}, {&(0x7f00000054c0)=""/140, 0x8c}], 0x2, &(0x7f00000055c0)=""/4096, 0x1000}, 0x3}], 0x7, 0x2, 0x0) 23:10:23 executing program 1: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f901000000"], 0x67b) unshare(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x20044000) sendto$inet6(r2, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) unshare(0x2a000200) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) recvmmsg(r3, &(0x7f00000065c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000200)}, {&(0x7f0000001640)=""/237, 0xed}, {0x0}, {&(0x7f0000000280)=""/26, 0x1a}], 0x6, &(0x7f0000000540)=""/55, 0x37}}, {{&(0x7f0000001840)=@un=@abs, 0x80, &(0x7f00000018c0)}, 0x80}, {{&(0x7f0000001900)=@can, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001980)=""/169, 0xa9}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/28, 0x1c}, {&(0x7f0000001b40)=""/43, 0x2b}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/31, 0x1f}, {&(0x7f0000002bc0)=""/239, 0xef}, {&(0x7f0000002cc0)=""/6, 0x6}], 0x8, &(0x7f0000002d40)=""/89, 0x59}, 0x5}, {{0x0, 0x0, &(0x7f0000003e00)=[{0x0}], 0x1}, 0xc3c0}, {{&(0x7f0000003e40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003ec0)=""/173, 0xad}, {&(0x7f0000003f80)=""/206, 0xce}, {&(0x7f0000004080)=""/20, 0x14}, {&(0x7f00000040c0)=""/241, 0xf1}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/121, 0x79}], 0x6, &(0x7f0000005280)=""/36, 0x24}, 0x1}, {{&(0x7f00000052c0)=@ax25={{0x3, @rose}, [@remote, @netrom, @netrom, @null, @null, @null, @bcast, @default]}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/79, 0x4f}], 0x1}}, {{&(0x7f0000005400)=@nfc, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/33, 0x21}, {&(0x7f00000054c0)=""/140, 0x8c}], 0x2, &(0x7f00000055c0)=""/4096, 0x1000}, 0x3}], 0x7, 0x2, 0x0) 23:10:23 executing program 0: socket(0x25, 0x3, 0xffffff01) 23:10:23 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0xffffffff, 0x0) 23:10:23 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000140)=""/217, 0x1000000, 0xd9, 0x1}, 0x20) 23:10:23 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000017c0)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2e4, 0x2e4, 0x2e4, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth0_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0x70}, @common=@SET={0x60}}, {{@ip={@private, @private, 0x0, 0x0, 'tunl0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xbc, 0xe4, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@realm={{0x2c}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3d4) [ 222.465140][ T4255] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.591084][ T4262] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. 23:10:24 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f901000000"], 0x67b) unshare(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x20044000) sendto$inet6(r2, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) unshare(0x2a000200) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) recvmmsg(r3, &(0x7f00000065c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000200)}, {&(0x7f0000001640)=""/237, 0xed}, {0x0}, {&(0x7f0000000280)=""/26, 0x1a}], 0x6, &(0x7f0000000540)=""/55, 0x37}}, {{&(0x7f0000001840)=@un=@abs, 0x80, &(0x7f00000018c0)}, 0x80}, {{&(0x7f0000001900)=@can, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001980)=""/169, 0xa9}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/28, 0x1c}, {&(0x7f0000001b40)=""/43, 0x2b}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/31, 0x1f}, {&(0x7f0000002bc0)=""/239, 0xef}, {&(0x7f0000002cc0)=""/6, 0x6}], 0x8, &(0x7f0000002d40)=""/89, 0x59}, 0x5}, {{0x0, 0x0, &(0x7f0000003e00)=[{0x0}], 0x1}, 0xc3c0}, {{&(0x7f0000003e40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003ec0)=""/173, 0xad}, {&(0x7f0000003f80)=""/206, 0xce}, {&(0x7f0000004080)=""/20, 0x14}, {&(0x7f00000040c0)=""/241, 0xf1}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/121, 0x79}], 0x6, &(0x7f0000005280)=""/36, 0x24}, 0x1}, {{&(0x7f00000052c0)=@ax25={{0x3, @rose}, [@remote, @netrom, @netrom, @null, @null, @null, @bcast, @default]}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/79, 0x4f}], 0x1}}, {{&(0x7f0000005400)=@nfc, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/33, 0x21}, {&(0x7f00000054c0)=""/140, 0x8c}], 0x2, &(0x7f00000055c0)=""/4096, 0x1000}, 0x3}], 0x7, 0x2, 0x0) 23:10:24 executing program 0: r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x400c744d, 0x0) 23:10:24 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x9d9b2ac0edcf1739, 0xffffffffffffffff, 0x10000000) 23:10:24 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000140)=""/217, 0x1000000, 0xd9, 0x1}, 0x20) 23:10:25 executing program 3: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f901000000"], 0x67b) unshare(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x20044000) sendto$inet6(r2, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) unshare(0x2a000200) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) recvmmsg(r3, &(0x7f00000065c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000200)}, {&(0x7f0000001640)=""/237, 0xed}, {0x0}, {&(0x7f0000000280)=""/26, 0x1a}], 0x6, &(0x7f0000000540)=""/55, 0x37}}, {{&(0x7f0000001840)=@un=@abs, 0x80, &(0x7f00000018c0)}, 0x80}, {{&(0x7f0000001900)=@can, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001980)=""/169, 0xa9}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/28, 0x1c}, {&(0x7f0000001b40)=""/43, 0x2b}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/31, 0x1f}, {&(0x7f0000002bc0)=""/239, 0xef}, {&(0x7f0000002cc0)=""/6, 0x6}], 0x8, &(0x7f0000002d40)=""/89, 0x59}, 0x5}, {{0x0, 0x0, &(0x7f0000003e00)=[{0x0}], 0x1}, 0xc3c0}, {{&(0x7f0000003e40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003ec0)=""/173, 0xad}, {&(0x7f0000003f80)=""/206, 0xce}, {&(0x7f0000004080)=""/20, 0x14}, {&(0x7f00000040c0)=""/241, 0xf1}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/121, 0x79}], 0x6, &(0x7f0000005280)=""/36, 0x24}, 0x1}, {{&(0x7f00000052c0)=@ax25={{0x3, @rose}, [@remote, @netrom, @netrom, @null, @null, @null, @bcast, @default]}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/79, 0x4f}], 0x1}}, {{&(0x7f0000005400)=@nfc, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/33, 0x21}, {&(0x7f00000054c0)=""/140, 0x8c}], 0x2, &(0x7f00000055c0)=""/4096, 0x1000}, 0x3}], 0x7, 0x2, 0x0) 23:10:25 executing program 1: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f901000000"], 0x67b) unshare(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x20044000) sendto$inet6(r2, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) unshare(0x2a000200) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) recvmmsg(r3, &(0x7f00000065c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000200)}, {&(0x7f0000001640)=""/237, 0xed}, {0x0}, {&(0x7f0000000280)=""/26, 0x1a}], 0x6, &(0x7f0000000540)=""/55, 0x37}}, {{&(0x7f0000001840)=@un=@abs, 0x80, &(0x7f00000018c0)}, 0x80}, {{&(0x7f0000001900)=@can, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001980)=""/169, 0xa9}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/28, 0x1c}, {&(0x7f0000001b40)=""/43, 0x2b}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/31, 0x1f}, {&(0x7f0000002bc0)=""/239, 0xef}, {&(0x7f0000002cc0)=""/6, 0x6}], 0x8, &(0x7f0000002d40)=""/89, 0x59}, 0x5}, {{0x0, 0x0, &(0x7f0000003e00)=[{0x0}], 0x1}, 0xc3c0}, {{&(0x7f0000003e40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003ec0)=""/173, 0xad}, {&(0x7f0000003f80)=""/206, 0xce}, {&(0x7f0000004080)=""/20, 0x14}, {&(0x7f00000040c0)=""/241, 0xf1}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/121, 0x79}], 0x6, &(0x7f0000005280)=""/36, 0x24}, 0x1}, {{&(0x7f00000052c0)=@ax25={{0x3, @rose}, [@remote, @netrom, @netrom, @null, @null, @null, @bcast, @default]}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/79, 0x4f}], 0x1}}, {{&(0x7f0000005400)=@nfc, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/33, 0x21}, {&(0x7f00000054c0)=""/140, 0x8c}], 0x2, &(0x7f00000055c0)=""/4096, 0x1000}, 0x3}], 0x7, 0x2, 0x0) 23:10:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x11, 0x65, &(0x7f0000000100), 0x4) 23:10:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002f80)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1c}}, 0x0) [ 224.297004][ T4279] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. 23:10:25 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 23:10:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x11, 0xa, &(0x7f0000000100), 0x4) [ 225.001455][ T4282] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.079614][ T4288] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. 23:10:26 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000140)=""/217, 0x1000000, 0xd9, 0x1}, 0x20) 23:10:26 executing program 1: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f901000000"], 0x67b) unshare(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x20044000) sendto$inet6(r2, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) unshare(0x2a000200) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) recvmmsg(r3, &(0x7f00000065c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000200)}, {&(0x7f0000001640)=""/237, 0xed}, {0x0}, {&(0x7f0000000280)=""/26, 0x1a}], 0x6, &(0x7f0000000540)=""/55, 0x37}}, {{&(0x7f0000001840)=@un=@abs, 0x80, &(0x7f00000018c0)}, 0x80}, {{&(0x7f0000001900)=@can, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001980)=""/169, 0xa9}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/28, 0x1c}, {&(0x7f0000001b40)=""/43, 0x2b}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/31, 0x1f}, {&(0x7f0000002bc0)=""/239, 0xef}, {&(0x7f0000002cc0)=""/6, 0x6}], 0x8, &(0x7f0000002d40)=""/89, 0x59}, 0x5}, {{0x0, 0x0, &(0x7f0000003e00)=[{0x0}], 0x1}, 0xc3c0}, {{&(0x7f0000003e40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003ec0)=""/173, 0xad}, {&(0x7f0000003f80)=""/206, 0xce}, {&(0x7f0000004080)=""/20, 0x14}, {&(0x7f00000040c0)=""/241, 0xf1}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/121, 0x79}], 0x6, &(0x7f0000005280)=""/36, 0x24}, 0x1}, {{&(0x7f00000052c0)=@ax25={{0x3, @rose}, [@remote, @netrom, @netrom, @null, @null, @null, @bcast, @default]}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/79, 0x4f}], 0x1}}, {{&(0x7f0000005400)=@nfc, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/33, 0x21}, {&(0x7f00000054c0)=""/140, 0x8c}], 0x2, &(0x7f00000055c0)=""/4096, 0x1000}, 0x3}], 0x7, 0x2, 0x0) 23:10:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0xc0189436, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}) 23:10:26 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f901000000"], 0x67b) unshare(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x20044000) sendto$inet6(r2, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) unshare(0x2a000200) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) recvmmsg(r3, &(0x7f00000065c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000200)}, {&(0x7f0000001640)=""/237, 0xed}, {0x0}, {&(0x7f0000000280)=""/26, 0x1a}], 0x6, &(0x7f0000000540)=""/55, 0x37}}, {{&(0x7f0000001840)=@un=@abs, 0x80, &(0x7f00000018c0)}, 0x80}, {{&(0x7f0000001900)=@can, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001980)=""/169, 0xa9}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/28, 0x1c}, {&(0x7f0000001b40)=""/43, 0x2b}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/31, 0x1f}, {&(0x7f0000002bc0)=""/239, 0xef}, {&(0x7f0000002cc0)=""/6, 0x6}], 0x8, &(0x7f0000002d40)=""/89, 0x59}, 0x5}, {{0x0, 0x0, &(0x7f0000003e00)=[{0x0}], 0x1}, 0xc3c0}, {{&(0x7f0000003e40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003ec0)=""/173, 0xad}, {&(0x7f0000003f80)=""/206, 0xce}, {&(0x7f0000004080)=""/20, 0x14}, {&(0x7f00000040c0)=""/241, 0xf1}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/121, 0x79}], 0x6, &(0x7f0000005280)=""/36, 0x24}, 0x1}, {{&(0x7f00000052c0)=@ax25={{0x3, @rose}, [@remote, @netrom, @netrom, @null, @null, @null, @bcast, @default]}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/79, 0x4f}], 0x1}}, {{&(0x7f0000005400)=@nfc, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/33, 0x21}, {&(0x7f00000054c0)=""/140, 0x8c}], 0x2, &(0x7f00000055c0)=""/4096, 0x1000}, 0x3}], 0x7, 0x2, 0x0) 23:10:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x1600bd7e, 0x0, 0x0) 23:10:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x1600bd7d, 0x0, 0x0) 23:10:26 executing program 3: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f901000000"], 0x67b) unshare(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x20044000) sendto$inet6(r2, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) unshare(0x2a000200) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) recvmmsg(r3, &(0x7f00000065c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000200)}, {&(0x7f0000001640)=""/237, 0xed}, {0x0}, {&(0x7f0000000280)=""/26, 0x1a}], 0x6, &(0x7f0000000540)=""/55, 0x37}}, {{&(0x7f0000001840)=@un=@abs, 0x80, &(0x7f00000018c0)}, 0x80}, {{&(0x7f0000001900)=@can, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001980)=""/169, 0xa9}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/28, 0x1c}, {&(0x7f0000001b40)=""/43, 0x2b}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/31, 0x1f}, {&(0x7f0000002bc0)=""/239, 0xef}, {&(0x7f0000002cc0)=""/6, 0x6}], 0x8, &(0x7f0000002d40)=""/89, 0x59}, 0x5}, {{0x0, 0x0, &(0x7f0000003e00)=[{0x0}], 0x1}, 0xc3c0}, {{&(0x7f0000003e40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003ec0)=""/173, 0xad}, {&(0x7f0000003f80)=""/206, 0xce}, {&(0x7f0000004080)=""/20, 0x14}, {&(0x7f00000040c0)=""/241, 0xf1}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/121, 0x79}], 0x6, &(0x7f0000005280)=""/36, 0x24}, 0x1}, {{&(0x7f00000052c0)=@ax25={{0x3, @rose}, [@remote, @netrom, @netrom, @null, @null, @null, @bcast, @default]}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/79, 0x4f}], 0x1}}, {{&(0x7f0000005400)=@nfc, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/33, 0x21}, {&(0x7f00000054c0)=""/140, 0x8c}], 0x2, &(0x7f00000055c0)=""/4096, 0x1000}, 0x3}], 0x7, 0x2, 0x0) 23:10:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) 23:10:27 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @local}, 0xc) [ 226.577329][ T4306] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. [ 226.677666][ T4312] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. 23:10:27 executing program 0: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000017c0)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2e4, 0x2e4, 0x2e4, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth0_to_team\x00', 'sit0\x00'}, 0x0, 0xbc, 0xd0}, @common=@SET={0x60}}, {{@ip={@private, @private, 0x0, 0x0, 'tunl0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xbc, 0xe4, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@realm={{0x2c}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3d4) [ 227.125166][ T4300] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. 23:10:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@bridge_setlink={0x20, 0x13, 0x1}, 0x20}}, 0x0) 23:10:28 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @local}, 0xc) 23:10:28 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000140)=""/217, 0x1000000, 0xd9, 0x1}, 0x20) 23:10:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x11, 0x0, &(0x7f0000000100), 0x4) 23:10:28 executing program 1: r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8004700b, 0x0) 23:10:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000100), 0x4) 23:10:28 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @local}, 0xc) 23:10:29 executing program 0: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000017c0)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2e4, 0x2e4, 0x2e4, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth0_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@private, @private, 0x0, 0x0, 'tunl0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x42}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xbc, 0xe4, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@realm={{0x2c}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3d4) 23:10:29 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4d99ff1c1bf9d9f1, 0xffffffffffffffff, 0x0) 23:10:29 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x40042) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1b812, r0, 0x10000000) 23:10:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 23:10:29 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @local}, 0xc) 23:10:29 executing program 1: syz_clone(0x100000, 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f00000012c0)='Y') 23:10:29 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x3e80) 23:10:30 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0xec40, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 23:10:30 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2801) read$msr(r0, 0x0, 0xfffffffffffffe1f) 23:10:30 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0xc0189436, &(0x7f0000000040)) 23:10:30 executing program 0: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000017c0)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2e4, 0x2e4, 0x2e4, 0xffffffff, 0x4, &(0x7f0000000340), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth0_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x2, 0x7], 0x4, 0x7}}}}, {{@ip={@private=0xa010100, @private=0xa010102, 0x0, 0x0, 'tunl0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x32}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0x1, [0x0, 0x2, 0x3, 0x1, 0x7, 0x1]}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x3, 0x5]}, {0x0, [0x6, 0x5, 0x1, 0x4], 0x5, 0x5}}}}, {{@uncond, 0x0, 0xbc, 0xe4, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@realm={{0x2c}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x1, 0x3, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3d4) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8906, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x8085) pidfd_open(0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={0x0, 0x178}}, 0x0) 23:10:30 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, 0x0) 23:10:30 executing program 2: r0 = socket$inet(0x2, 0x3, 0x3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast2}}}}) [ 229.261765][ T24] audit: type=1800 audit(1655766630.303:8): pid=4360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1169 res=0 errno=0 23:10:30 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x41, 0x0, 0x0) 23:10:30 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0xdf004000, 0x0, 0x1b812, r0, 0x10000000) 23:10:30 executing program 5: io_uring_setup(0x591e, &(0x7f0000000280)={0x0, 0x0, 0x7, 0x2}) [ 229.397475][ T4362] x_tables: duplicate underflow at hook 2 23:10:30 executing program 0: syz_io_uring_setup(0x11ed, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x800000)=nil, 0x0, 0x0) syz_io_uring_setup(0xd53, &(0x7f0000000200), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 23:10:30 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000280)=ANY=[], 0x62) 23:10:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8955, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 23:10:30 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x12, r0, 0x10000000) 23:10:30 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000017c0)=@security={'security\x00', 0xe, 0x4, 0x2cc, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0x2e4, 0x2e4, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth0_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@private, @private, 0x0, 0x0, 'tunl0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x328) 23:10:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x800, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 23:10:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8914, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 23:10:31 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4d99ff1c1feb98f2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1b94, &(0x7f0000000040), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 23:10:31 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 23:10:31 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/184, 0x0}) 23:10:31 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000500)=""/147, 0x26, 0x93, 0x1}, 0x20) 23:10:31 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1b812, r0, 0x10000000) syz_io_uring_setup(0x4a4c, &(0x7f0000000680), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000700), &(0x7f0000000740)) 23:10:31 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, 0x0, 0x0) 23:10:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8983, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 23:10:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000017c0)=@security={'security\x00', 0xe, 0x4, 0x30a, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2e4, 0x2e4, 0x2e4, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth0_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@private, @private, 0x0, 0x0, 'tunl0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xbc, 0xe4, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@realm={{0x2c}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3d4) 23:10:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8922, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 23:10:32 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @private}}}}) 23:10:32 executing program 5: socketpair(0x11, 0x2, 0x80, &(0x7f0000000080)) 23:10:32 executing program 1: io_uring_setup(0x591e, &(0x7f0000000280)={0x0, 0x0, 0x7}) 23:10:33 executing program 2: io_uring_setup(0x1532e, &(0x7f0000000040)) 23:10:33 executing program 3: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x30, 0x0, 0x0) 23:10:33 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5421, &(0x7f0000000040)) 23:10:33 executing program 1: r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x40087446, 0x0) 23:10:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002f80)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x0) 23:10:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x11, 0x0, 0x0, 0x8) 23:10:33 executing program 2: socketpair(0x11, 0x80003, 0xffff, &(0x7f0000000240)) 23:10:33 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)) syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0xec40, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 23:10:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x11, 0x64, &(0x7f0000000100), 0x4) 23:10:33 executing program 4: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x73, &(0x7f0000000340)={0x0, 0x2dbb, 0x8, 0x0, 0x33f}, &(0x7f00001e7000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x7f) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xaec2, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 23:10:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89b1, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 23:10:33 executing program 2: r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x4004700c, 0x0) [ 232.951346][ T24] audit: type=1800 audit(1655766633.993:9): pid=4430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=1159 res=0 errno=0 23:10:34 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@multicast2=0x7f000001, @multicast2}, 0x5) 23:10:34 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4d99ff1c1feb98f2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1b94, &(0x7f0000000040)={0x0, 0x21d3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 23:10:34 executing program 0: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000017c0)=@security={'security\x00', 0xe, 0x4, 0x2ec, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0x2e4, 0x2e4, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth0_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@private, @private, 0x0, 0x0, 'tunl0\x00', 'bond0\x00'}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x348) 23:10:34 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000017c0)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2e4, 0x2e4, 0x2e4, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth0_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x50}}, {{@ip={@private, @private, 0x0, 0x0, 'tunl0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0x3000000}, [@common=@socket0={{0x20}}, @common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xbc, 0xe4, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@realm={{0x2c}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3d4) 23:10:34 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x1b812, r0, 0x10000000) 23:10:35 executing program 3: socketpair(0x2, 0x3, 0x1f, &(0x7f0000000140)) 23:10:35 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1}}]}}, &(0x7f0000000280)=""/238, 0x32, 0xee, 0x1}, 0x20) 23:10:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) 23:10:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x4, &(0x7f0000000140)={0x0, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @loopback}}}, 0x104) 23:10:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x11, 0xb, &(0x7f0000000100), 0x4) 23:10:36 executing program 3: r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) 23:10:36 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) ioctl$UDMABUF_CREATE(r0, 0x801c581f, 0x0) 23:10:36 executing program 2: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@multicast2, @multicast2}, 0x5) 23:10:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @private1}, 0x1c) 23:10:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8970, 0x0) 23:10:36 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x42800) read$msr(r0, 0x0, 0x0) 23:10:36 executing program 2: r0 = syz_io_uring_setup(0x11ed, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x800000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f00004b3000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x372f, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f000013f000/0x4000)=nil, &(0x7f0000223000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 23:10:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800000000000000000a00f000", @ANYRES32=0x0, @ANYBLOB="000a00000800000008000400", @ANYRES32=r2, @ANYBLOB="08001b"], 0x30}}, 0x0) 23:10:36 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}) 23:10:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000680)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "82961c0a3aadc02ba9f511f2e4b40ee11727331196297c1d273a6b9c0b319e1c9234e254ad4729769d63e19565b1a329b2b8fe3f00099a8eb377c13d740a019a", "420617779c7e39d43611399766b4b29b9289ea9cabe3cbf3e91c077850a62dcf"}) 23:10:36 executing program 1: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)=""/51, 0x33}], 0x2, 0x0, 0x1}, 0x7) syz_io_uring_setup(0x73, &(0x7f0000000340)={0x0, 0x2dbb, 0x8, 0x0, 0x33f}, &(0x7f00001e7000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x7f) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xaec2, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 23:10:37 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xaefc, 0x0) 23:10:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x1600bd80, 0x0, 0x0) 23:10:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 23:10:37 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1600bd78, &(0x7f00000017c0)=@security={'security\x00', 0xe, 0x4, 0x2cc, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2e4, 0x2e4, 0x2e4, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth0_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@private, @private, 0x0, 0x0, 'tunl0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x328) [ 236.388182][ T4483] Zero length message leads to an empty skb 23:10:37 executing program 2: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000017c0)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2e4, 0x2e4, 0x2e4, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth0_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@private, @private, 0x0, 0x0, 'tunl0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@socket0={{0x25}}, @common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xbc, 0xe4, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@realm={{0x2c}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3d4) [ 236.947564][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 23:10:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x800, 0x4}, 0x48) 23:10:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000540)={0x16, 0x7, 0x0}) 23:10:38 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 23:10:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x1276, 0x0) 23:10:38 executing program 2: ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, 0x0) 23:10:38 executing program 5: io_uring_setup(0x4bdb, &(0x7f00000000c0)={0x0, 0x0, 0x20}) 23:10:39 executing program 1: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)=""/51, 0x33}], 0x2, 0x0, 0x1}, 0x7) syz_io_uring_setup(0x73, &(0x7f0000000340)={0x0, 0x2dbb, 0x8, 0x0, 0x33f}, &(0x7f00001e7000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x7f) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xaec2, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 23:10:39 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40084503, 0x0) 23:10:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000540)={0x16, 0x7, 0x0}) 23:10:39 executing program 2: syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000f40)=[{&(0x7f0000000940)="1d", 0x1}, {&(0x7f0000000b80)="d2", 0x1, 0xfffffffffffffff7}, {&(0x7f0000000e40)="98", 0x1, 0x8000}], 0x0, 0x0) 23:10:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="230727bd7000fcdbdf2505"], 0x9c}}, 0x0) 23:10:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80084502, &(0x7f0000000540)={0x0, 0x0, 0x0}) 23:10:40 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x4100, 0x0) 23:10:40 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000540)={0x16, 0x7, 0x0}) 23:10:40 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) 23:10:40 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000002580)=""/4105) 23:10:40 executing program 5: syz_mount_image$btrfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'user.', '\\#{/\x00'}, 0x0, 0x0) 23:10:40 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000028c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) 23:10:42 executing program 1: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)=""/51, 0x33}], 0x2, 0x0, 0x1}, 0x7) syz_io_uring_setup(0x73, &(0x7f0000000340)={0x0, 0x2dbb, 0x8, 0x0, 0x33f}, &(0x7f00001e7000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x7f) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xaec2, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 23:10:42 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000f703"], 0x2c}}, 0x0) 23:10:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000540)={0x16, 0x7, 0x0}) 23:10:42 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[], [{@smackfshat={'smackfshat', 0x3d, 'port'}}]}) 23:10:42 executing program 5: syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000800)="1482f0f372bd271a892752f081067e86a83bb929ac397136c4deccd007259226bd75c9f517a25f7901431998fa8c6e8ddd8af79f5a9ab7a218a77e27d7d7e2160ff3653cc2fdff762ed124e7bbe8a3bee68fbfcc8252b9cf157473f0c9d7ae29225fb52b6c71121bcd0917711cbcaa20a4a17ad784e950dedfaf68f1cd8cc6765fc365f1aa0fefe7f7f910ff8c2e020c20bb041eab8360b8b7cf93ba62b6bf9b336ccbcfd7b48574044c45637070b01ea5f1b2c6a722a241db9b6d8658e2e843bec770171e3968df474da52c48fe66deff6f76985c8213295e2d551cc3f9cad8c0e21a50a095ddb44d644dcacbc804b4e563a073d794dd53f64e9e51c056f98c2d9d02a62e40c5c9f737620cc437e991091e2d3d4a9dee70f0b1e86da9f30f13a7e6d0a6412e085a618af846a60b59ccc366f0a0a011cc52255eeb954e5b846dd0c11a465ece6c7e58b483425862fca956480b60d0e958eca5be1f50c21a0e9868ef5455ededbd0ea9a86f996c72be25d846d87ecd1e62790a48fb7449547e0d5b1745095d4582c52cba5fa7c8f20bc617becf83c065f44346ee6fe33516f97bbba5a4ad19c78b18e071ce3d88f56d9d03c31ec227f35fd02ded8149f845d8a9187e23bca26c964eff1f16526a7533cc8c51da371e15742f0ba9b619eb22a83732d20799c56b516a49f6a8a8c8c128021900cc25dd30b30c622d424d33ffbbdb4cc23223f904a1d6d848cae4f318b1219974e06b1d68d4dc9a58b050ce37e56768c4a55984a25c580810f91ad4a9719b5f214ccfd497003ba6a91d14924819bcec5418fc9c7351fbd82e979dc2f3f22fddcff08ece438012908af9d717ab9c102c463c7d1ef803e214f8afa05641a0b7d42219008f5f2381ec757877beff987b9ba23cf0212c9764bd24e0f601b8e15c9852b6a0a314e79b6daae2377eab091aba7cfb9281bfdc23156ad62accd8d4df0b7b7126ffd297a18d53629714361e90fdb9ee8a333a0e2cd9445f9e06a2667c4b9356a7a5f24a76fe6810e4df31ec9390f24384470efd6b291ba84348ed2fc9f337f1b31c2524083addb00b5f885d5c6ee5d0a3d963a5b758a790b3bee31e61cdfe88d9469b457c7246ce23c6db5c6fe90a8cffa585471c294084f84f3516e5d7de5c01db98ccbb855e2cbc139f81317e7a72ed64b24c4ea0f473e8dd96fcfe1f8dc7f0917ac6474a768057f4bc7f20cce0751ece930d7749f397bd0f013da52f5a84871a0c68f494fd6658946554489da4c95a2f97b9850be5bc1f8218cc5be18c43dd02ed7fbdc2a9ba2e528525b21db299156e1092404ff0ec3a997a545f63c5ddcb7bd9ac82e234bb9945da713dce5fd15f13bde04049fcecce09d25cf7d6d637bca896b41974d5b8a9f285afc293909cb3ec28b877305d0fd8d6eaf80352607503e93c52435999ffdd594169eb6e97e40a7aa83e047a081a3800cc26601f8da7f7973833d2a5daf189f8968d36dff0ba2a45dcea449b88983998faa8e8c0c342aa1519b553c5e0596f1bf76c48b8de77226c2d0215b12e06f57e3ca19b314a9f501e18beae7be242a7e8987248c052b0c0f432509e8f155a7370a5de1994ad4c9286a370a8cffa4465f4f468a56ad4b30929766570048d173a010501b46ae9739df22fd3602e29fa4e679bd4b8affa88df5053e957ec59467c2245b403820d406859ee2223ca48c804e6358b81a69f42fbc37fbcc17a91d411dae6914560e75f60be373fcdb6c173abcea14ef79a12c758e840fb713d55ccba61d4e147154a3040c8d4c3252112958d83e005b2804ef2f7c2c66067ae30c4cbb62e207466e0bee4dd1249cb58dca02f6f1f5d23190e17db32a6650d170478f72b5f12d8ca36975f1d9052e8acac6d776b848e39db044789b91284df6e6d23a25d4bc1607fa992944891353cf26139657edb98108002ee79b3c4cf17550c95018b06f93f46492bf65c39aec2e55e38214fcc15c82321acf118cebf99e854f3949a0ada3f84c6d68fa1f531ebce314a2ad983367f2eddd7d8503e7e7455a211d7e56399f44576ea1959169a33ce6cb13a39a16581e4f72c0ffc66656c176106d70523dbbadb2a265c072b7350bee0ea68772f2f2fea29428ff778bd4ab273e1f5c39afd2f84deefc94667febd1bf8831f3f8786fffaae609e505b1412160e4c2e08d83f68775d196ed16f49439b69c909a6276cefd3383fd2a1be5392c745abaa02cc1733fa51cac072e6bfd9e3d0ad6b7ddb21a66966e98487d6088346bb8544616488e099500731c60b56de786d4a7de3c63730f763b30d3c8695b0450d9a3a32a43cb79d27f985b2e79675f146958e97183dd92f017471d3477e4a4b7d98d01bf8b5d68b65ccc10bce21847a42c40e8c0753921efce943bca40be219d526c8667b1e68c9cd2df6f00eedfa569849f96f58ac5a46f637de4baab52a4928e022e017bafa2e308ab3b26c0e35665cc7facc6dc9458f8f3350d26d9c77ded51beb6e78e399185ec735becbd9eb74adc248909852ac290cbd401c2fbfea176174a565f48b080d3a17b98c737edf5bde133264935ae608b958dded8d31c3d4707ba4ef386dccd73398fe0ae08b0a543af07a4c50c4b246c1aab3016d58fd2eb08a0f3f5e2336f199a7b2584afb2a95db4909246716082f8b47caf82772040f3c3800ab043a9e10b648911f8552ee8de53c0a5a8fc855c6b5032c2c17f5ae796a3ec0eeaaf1070fc7619202262f2bf7b9f50355aa3190dad3ef85d38fad90f19de5215a4d67d23bb19032d4f2e1fd43533aa4a4ff8b9e6ab747e1bac0254206ec99d4006997f3a372ed9418fa6d9a8981492feef5dfde1bda22a3817206f78a59f06205a7ad4d0c651ed44604586aa82900f56fa4f81176", 0x801}], 0x0, 0x0) 23:10:42 executing program 0: syz_mount_image$btrfs(0x0, &(0x7f0000000900)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 241.424743][ T4547] loop5: detected capacity change from 0 to 4 23:10:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="230f27bd7000fcdbdf2505"], 0x9c}}, 0x0) 23:10:42 executing program 3: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000540)={0x16, 0x7, 0x0}) 23:10:43 executing program 2: syz_io_uring_setup(0x52ee, &(0x7f00000028c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002940), &(0x7f0000002980)) 23:10:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="230027bd7000fcdbdf2505"], 0x9c}}, 0x0) 23:10:43 executing program 0: utimensat(0xffffffffffffffff, &(0x7f0000001080)='./file0/file0/file0\x00', &(0x7f00000010c0)={{0x77359400}, {0x77359400}}, 0x0) 23:10:44 executing program 3: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000540)={0x16, 0x7, 0x0}) 23:10:45 executing program 1: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)=""/51, 0x33}], 0x2, 0x0, 0x1}, 0x7) syz_io_uring_setup(0x73, &(0x7f0000000340)={0x0, 0x2dbb, 0x8, 0x0, 0x33f}, &(0x7f00001e7000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x7f) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xaec2, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 23:10:45 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x602) 23:10:45 executing program 4: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) shmdt(r1) 23:10:45 executing program 5: syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x1125008, &(0x7f00000029c0)={[{@flushoncommit}, {@space_cache}, {@check_int_print_mask={'check_int_print_mask', 0x3d, 0x100000000}}], [{@fowner_eq}]}) 23:10:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2286, 0x0) 23:10:45 executing program 3: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000540)={0x16, 0x7, 0x0}) 23:10:46 executing program 2: syz_open_dev$vcsa(&(0x7f0000001840), 0x0, 0x64000) 23:10:46 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000540)={0x16, 0x7, 0x0}) 23:10:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x5385, &(0x7f0000000040)) 23:10:46 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x5452, &(0x7f0000000540)={0x7, 0x0, 0x0}) 23:10:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x227f, 0x0) 23:10:46 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000540)={0x16, 0x7, 0x0}) 23:10:49 executing program 0: syz_mount_image$btrfs(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x0, 0x3, &(0x7f0000001740)=[{&(0x7f0000001400)="0334ad49fb93ed8f580aedd17509f3fc83b546f62e11fe89e64865212261bf", 0x1f, 0x100}, {0x0}, {&(0x7f0000001680)}], 0x0, &(0x7f0000001800)={[{@flushoncommit}], [{@seclabel}]}) 23:10:49 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) 23:10:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x227d, &(0x7f0000000040)) 23:10:49 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000540)={0x16, 0x7, 0x0}) 23:10:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x24, r2, 0xcc83bcd13d80ad21, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'NLBL_UNLBL\x00'}]}, 0x24}}, 0x0) 23:10:49 executing program 1: syz_mount_image$btrfs(&(0x7f00000012c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)) [ 248.300871][ T4595] loop0: detected capacity change from 0 to 1 23:10:49 executing program 1: syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="73dba616f4e665d2e729f0ff3dd44ded61") 23:10:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000080)={@private0, @dev, 0xf}}) 23:10:49 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x2}, 0xe) 23:10:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter, 0x48) 23:10:49 executing program 3: syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000540)={0x16, 0x7, 0x0}) 23:10:49 executing program 2: socket(0x18, 0x0, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000ac0)) 23:10:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) 23:10:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000003740)=[{{&(0x7f0000000540)=@generic, 0x80, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{0x0}], 0x1}}], 0x2, 0x20, &(0x7f0000003880)={0x77359400}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 23:10:49 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff}) accept4$llc(r0, 0x0, 0x0, 0xc0800) 23:10:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @loopback}}}}) 23:10:50 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}]}, 0x24}}, 0x0) 23:10:50 executing program 3: syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000540)={0x16, 0x7, 0x0}) 23:10:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 23:10:50 executing program 0: getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0) 23:10:50 executing program 3: syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000540)={0x16, 0x7, 0x0}) 23:10:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x3, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvlan1\x00'}) 23:10:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 23:10:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8901, 0x0) 23:10:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89a0, 0x0) 23:10:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0xc0189436, 0x0) 23:10:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 23:10:51 executing program 5: socketpair(0x23, 0x0, 0x0, &(0x7f00000000c0)) 23:10:51 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x3}, {}, {0x0, 0x1}]}]}}, &(0x7f0000000100)=""/225, 0x3e, 0xe1, 0x1}, 0x20) 23:10:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000840)={{{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@private}, 0x0, @in6=@dev}}, 0xe8) 23:10:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000140)={@empty}, 0x14) 23:10:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 23:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003740)=[{{&(0x7f0000000540)=@generic, 0x80, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{0x0}], 0x10000065}}], 0x2, 0x0, &(0x7f0000003880)={0x77359400}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 23:10:51 executing program 5: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000b40), 0xffffffffffffffff) 23:10:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x1e, 0x0, 0x0) 23:10:51 executing program 2: socket(0x11, 0x3, 0x782600) 23:10:51 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000000140)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "9d7d658a411f8a907985c804c94823753fe35adc0b15b9a70a73d55da2c9771bd61321c2cf7bcb89c114f36f4c02107708eb0e3367e0158c0e8da221b898bd", 0x17}, 0x60) 23:10:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 23:10:51 executing program 1: sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 23:10:51 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x311, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) 23:10:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="240000002c000100"/20, @ANYRES32=r1, @ANYBLOB="0bbb7ccb00060000000019"], 0x24}}, 0x0) 23:10:51 executing program 2: socketpair(0x1e, 0x0, 0x4, &(0x7f0000000040)) 23:10:51 executing program 4: openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) 23:10:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8982, &(0x7f0000000100)={'sit0\x00', 0x0}) 23:10:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000540)={0x0, 0x7, 0x0}) 23:10:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000003240)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0xf8}}], 0x1, 0x12040, &(0x7f0000003280)={0x0, r1+60000000}) 23:10:52 executing program 2: socket(0x23, 0x0, 0x8000007f) 23:10:52 executing program 0: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 23:10:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8915, &(0x7f0000000100)={'sit0\x00', 0x0}) 23:10:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000540)={0x0, 0x7, 0x0}) 23:10:52 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id, 0x10) 23:10:52 executing program 0: socket(0x18, 0x0, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000b40), 0xffffffffffffffff) 23:10:52 executing program 4: r0 = socket(0x11, 0x3, 0x0) sendto$rose(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) 23:10:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000001640)}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 23:10:53 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0) 23:10:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 23:10:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000540)={0x0, 0x7, 0x0}) 23:10:53 executing program 4: socketpair(0x26, 0x0, 0x0, &(0x7f0000000600)) 23:10:53 executing program 0: socket$inet6(0xa, 0x100006, 0x0) 23:10:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000b00)={@mcast1, 0x80000000}) 23:10:53 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x1412, 0x1}, 0x10}}, 0x0) 23:10:53 executing program 1: r0 = socket(0x25, 0x1, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) 23:10:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000400)) 23:10:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:10:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000080)="85", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) 23:10:53 executing program 5: socket$inet_sctp(0x2, 0x10, 0x84) 23:10:53 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7f, @fixed}, 0xe) 23:10:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\ax']}) 23:10:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000500)=ANY=[]}) 23:10:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000080)="85", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e24, 0xffff8001, @mcast2}, 0x1c) 23:10:54 executing program 3: socketpair(0x36, 0x0, 0x0, &(0x7f00000000c0)) 23:10:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x78, 0x0, 0x0) 23:10:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}}], 0x1, 0x0, 0x0) 23:10:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000b00)={@private1}) 23:10:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8914, &(0x7f0000000100)={'sit0\x00', 0x0}) 23:10:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "b333ef"}) 23:10:54 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x10) 23:10:54 executing program 5: r0 = socket(0x11, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 23:10:54 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$nfc_raw(r0, &(0x7f0000000040), 0x2544c835970656f8) 23:10:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="240000002c0001000000", @ANYRES32, @ANYBLOB="0bbb7c"], 0x24}}, 0x0) 23:10:54 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x9}, 0x0, 0x0, 0x0) 23:10:55 executing program 2: r0 = socket(0x11, 0x3, 0x0) sendto$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:10:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x16, 0x0, 0x0) 23:10:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @multicast2}, 0x46, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)='team_slave_1\x00', 0x4c, 0x0, 0x1000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x9, &(0x7f0000000800)=ANY=[@ANYRES32=0x1, @ANYBLOB], &(0x7f0000000880)='GPL\x00', 0x0, 0xaf, &(0x7f00000008c0)=""/175, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980), 0x8, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x27eb88bf5dd68138, &(0x7f0000e68000)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2041) socket$inet6(0xa, 0x803, 0x6) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'veth0_to_bridge\x00'}, 0x18) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000240)) 23:10:55 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x24}}, 0x0) 23:10:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20c49a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'veth0_to_bridge\x00'}, 0x18) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0x0, [0x2, 0x4], 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0}, &(0x7f0000000240)=0x78) 23:10:55 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4005) 23:10:55 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), 0x4) [ 254.848740][ T4765] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 23:10:56 executing program 0: pipe(&(0x7f0000001240)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) 23:10:56 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x0, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000004}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x5, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x40) 23:10:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1}}, [@migrate={0x50, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@dev}]}]}, 0xa0}}, 0x0) 23:10:56 executing program 2: r0 = socket(0x1, 0x2, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) 23:10:56 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) [ 255.382471][ T4779] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 23:10:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) 23:10:56 executing program 0: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000017c0)=@security={'security\x00', 0xe, 0x7fffffe, 0x2cc, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2e4, 0x2e4, 0x2e4, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth0_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@private, @private, 0x0, 0x0, 'tunl0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x328) 23:10:56 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180), 0x8) 23:10:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x890b, &(0x7f0000000100)={'sit0\x00', 0x0}) 23:10:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(r0, 0x0, 0x0) 23:10:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000840)={{{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@private}, 0x0, @in6=@dev}}, 0xe8) 23:10:56 executing program 1: r0 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) 23:10:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001380)=[{{&(0x7f0000001880)={0x2, 0x4e24, 0x0, @private2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 23:10:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0x2, 0x0, 0x0, @private2}, 0xf, 0x0}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002ec0)="c6", 0x1}], 0x1}}], 0x2, 0x0) 23:10:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, r2, 0x1, 0xf000000, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x44}}, 0x0) 23:10:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000014c0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x1, 0x0) 23:10:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0xa, 0x4e24, 0x0, @private2}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001900)="a48e353e3d0722d565752a55888488742a4d32f8bea6a60c59d88240235a9259ab1910eade892e75eeaac63ca5f6f514f91b19f2a979886aeb4cdca16a89959f29056eaf183e224ed4744d33f7f9351dd01142d0f4c6c9b9c968bfb33860a2b04970ce2216f63e17913966f9948d78ce46f87a54a526461e493f50c84395405cdbe0d6d03d6d177b6520bf4ff73ac828c1118666b3210956e0827d00b2", 0x9d}], 0x1}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002a40)="4b8c8d86d74f8dbb8e21d621941ada76ca36ccf0300cf7f9b562ceb8c5344c9351758306e87a37bad5e72eeca8ac1445f7b080d7453fc00d5797ae195869b73e4cb382c8fd137e07c8b48039b5ade3c60e2d347bc2125ab920e8285c105fda2bdf3acf132eb56d31f3cd0f8045f397e9e163beb358563151601281c435d5121b1c69372cb7e68ba3c985988099b84fd5f2c308541835389ad4cf221e409f253077d83595e381276b65ef123d8b74163c03efebc8b1cdbf69c7a4c16b8df24867976dd09ddefcba9b9e6e65ea04f8c04d629e38e60f49", 0xd6}, {&(0x7f0000002b40)="8d44330243d546100b98f6e922e17737a422956db993d64ce6abdc70fd87ffddb108e884408970018f9193044f", 0x2d}, {&(0x7f0000002b80)="1d61372ca6ce63609e407d6c22bdf252013c061d14d7ee75e4ca686e91102234289fcdccda8b4f42ced062c741a3467035631a6a5d526da8c1733d231e93a699db22a4d6a531641beecdedf59bcb907038bfa6d258f5e935b859316a7789230cd431e8d5d228d3cb7d073c896291d89746640eb9bf25f48286790dda75a6e2ba600f9a1159ab1e64d88550dd692c16a3d42465450fababb8c0bfc6", 0x9b}, {&(0x7f0000002c40)="b38f8a567c56c1572ceafdc8748ed7cfaf917190b3b14fad02d4640c6621fbef2ab4a4371b6ea47c3654f0136c4f0c3da220c3aa5b2ef26b890aaf55ca7ac1d2276bdd869144bdf2e395ff4d52debad73fab037ce2917287ed63f929a50afd8b226c0eb8ead61b710c68de3b32577296e34501df854a1295603ca1ec4a9cf35246a85696a8b1197105d9a295351608c3d43ede3f63b0c4bfd39a42c5c2", 0x9d}, {&(0x7f0000002d00)="30b468282ced1a822c204adde9413d385cb140a5b13bb57c7df1a874a43d83565ab2475954c1adcec02001a8893d61713e85db8cf61d21657a494f83f0b6c11c67bfc5320cbbce041ca5035ebe4c9a82fe7968796704c898f8d1e6a082645c70f4cb230dda1228d5b9d8ed3b81d81275be9cb7e767dc31ec3767b910f729fc09c37da1f1d5a748388e66921864bd534d4f3d3668", 0x94}], 0x5, 0x0, 0xffffff7f00000000}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002ec0)="c62d7945dd1e820979387c1a2f120e3451abece47e0a5ff8fe7487fb93669380d4ec8a98eb8660811172997f57f880fb786174ad1c439a0cba461e35bf303c72e2bc51ac6c778b84bcb1dee2394942d47913", 0x52}, {&(0x7f0000002f40)="0a19dc1b3226e1c6fb75a95bee4e7768999c44a4ea6a171b4d83a66624a859d1a870a8491ab24b3159088d9d23df9d690d3cadde184082dddf401cd99c0c4f0c352db4e79ed3951e2fece12c8acae03208120a71311ea5", 0x57}, {&(0x7f0000002fc0)="8292cd9fbc390405b8b46ef69a59bbd4a009e1b0ab94cc3dbb14e0a0f3da633507b04cd07ac79d9e247125dcfa347ef153db4c1e88", 0x35}, {&(0x7f0000003000)="801e0cd8bb2a9e65ea314d0b52888896d867843f2307a3b5b8aebf71f25804aa82efe9b5e3d662", 0x27}, {&(0x7f0000003040)="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", 0x13b}], 0x5}}], 0x3, 0x4c000) 23:10:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) 23:10:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 23:10:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0xa, 0x4e24, 0x0, @private2}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001900)="a48e353e3d0722d565752a55888488742a4d32f8bea6a60c59d88240235a9259ab1910eade892e75eeaac63ca5f6f514f91b19f2a979886aeb4cdca16a89959f29056eaf183e224ed4744d33f7f9351dd01142d0f4c6c9b9c968bfb33860a2b04970ce2216f63e17913966f9948d78ce46f87a54a526461e493f50c84395405cdbe0d6d03d6d177b6520bf4ff73ac828c1118666b3210956e0827d00b2", 0x9d}], 0x1}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002a40)="4b8c8d86d74f8dbb8e21d621941ada76ca36ccf0300cf7f9b562ceb8c5344c9351758306e87a37bad5e72eeca8ac1445f7b080d7453fc00d5797ae195869b73e4cb382c8fd137e07c8b48039b5ade3c60e2d347bc2125ab920e8285c105fda2bdf3acf132eb56d31f3cd0f8045f397e9e163beb358563151601281c435d5121b1c69372cb7e68ba3c985988099b84fd5f2c308541835389ad4cf221e409f253077d83595e381276b65ef123d8b74163c03efebc8b1cdbf69c7a4c16b8df24867976dd09ddefcba9b9e6e65ea04f8c04d629e38e60f49", 0xd6}, {&(0x7f0000002b40)="8d44330243d546100b98f6e922e17737a422956db993d64ce6abdc70fd87ffddb108e884408970018f9193044f", 0x2d}, {&(0x7f0000002b80)="1d61372ca6ce63609e407d6c22bdf252013c061d14d7ee75e4ca686e91102234289fcdccda8b4f42ced062c741a3467035631a6a5d526da8c1733d231e93a699db22a4d6a531641beecdedf59bcb907038bfa6d258f5e935b859316a7789230cd431e8d5d228d3cb7d073c896291d89746640eb9bf25f48286790dda75a6e2ba600f9a1159ab1e64d88550dd692c16a3d42465450fababb8c0bfc6", 0x9b}, {&(0x7f0000002c40)="b38f8a567c56c1572ceafdc8748ed7cfaf917190b3b14fad02d4640c6621fbef2ab4a4371b6ea47c3654f0136c4f0c3da220c3aa5b2ef26b890aaf55ca7ac1d2276bdd869144bdf2e395ff4d52debad73fab037ce2917287ed63f929a50afd8b226c0eb8ead61b710c68de3b32577296e34501df854a1295603ca1ec4a9cf35246a85696a8b1197105d9a295351608c3d43ede3f63b0c4bfd39a42c5c2", 0x9d}, {&(0x7f0000002d00)="30b468282ced1a822c204adde9413d385cb140a5b13bb57c7df1a874a43d83565ab2475954c1adcec02001a8893d61713e85db8cf61d21657a494f83f0b6c11c67bfc5320cbbce041ca5035ebe4c9a82fe7968796704c898f8d1e6a082645c70f4cb230dda1228d5b9d8ed3b81d81275be9cb7e767dc31ec3767b910f729fc09c37da1f1d5a748388e66921864bd534d4f3d3668", 0x94}], 0x5}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002ec0)="c62d7945dd1e820979387c1a2f120e3451abece47e0a5ff8fe7487fb93669380d4ec8a98eb8660811172997f57f880fb786174ad1c439a0cba461e35bf303c72e2bc51ac6c778b84bcb1dee2394942d47913", 0x52}, {&(0x7f0000002f40)="0a19dc1b3226e1c6fb75a95bee4e7768999c44a4ea6a171b4d83a66624a859d1a870a8491ab24b3159088d9d23df9d690d3cadde184082dddf401cd99c0c4f0c352db4e79ed3951e2fece12c8acae03208120a71311ea5", 0x57}, {&(0x7f0000002fc0)="8292cd9fbc390405b8b46ef69a59bbd4a009e1b0ab94cc3dbb14e0a0f3da633507b04cd07ac79d9e247125dcfa347ef153db4c1e88", 0x35}, {&(0x7f0000003000)="801e0cd8bb2a9e65ea314d0b52888896d867843f2307a3b5b8aebf71f25804aa82efe9b5e3d662f4", 0x28}, {&(0x7f0000003040)="49e7ea5955d7f98da4cb266db42ef7fc061ad6ea9469a7533f01bc668dff5d5a7ecf56de69f6805ec4783a2f372bfef543061fa330fe05e3ec28334b52a8809aa727c7de84f363f7e43654d02c87d55999c2e3ed6b557e087cc2d519421efff197ff90da9e75e7391f811fdf21c285a688581d907b0bea0edd5b88c68abcf5c54fcdb7ec395cf7bb0282bf153bf25d7e4d480589b31e5d5c43111974899e2986de8c8e01c8320c1abb5b066aa0ba5d1ec4bcde9e7e4f08385fad5c762294653ced6b7998e9e3be739eec8e5d62ae702ab4d4436095700a11a74056a573bc77e92631b12979006d598eb1cd9f5c02a119b4e78375c0fd92787b691f1066335aa094193b90921115084d733623b232515f6b3a67aaf3f5631558f7a7d674dce83b401a989d48e17cabc13fb3180d848d5921af39444825c1168e97", 0x13a}], 0x1000000000000027}}], 0x3, 0x4c000) 23:10:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002ec0)="c6", 0xff00}], 0x1}}], 0x2, 0x4c000) 23:10:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4}]}}}}}) 23:10:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000240000000a"], 0x20}}, 0x0) 23:10:57 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0x2, 0x0, 0x0, @private2}, 0x1c, 0x0}}], 0x1, 0x0) 23:10:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0xa, 0x4e24, 0x0, @private2}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001900)="a48e353e3d0722d565752a55888488742a4d32f8bea6a60c59d88240235a9259ab1910eade892e75eeaac63ca5f6f514f91b19f2a979886aeb4cdca16a89959f29056eaf183e224ed4744d33f7f9351dd01142d0f4c6c9b9c968bfb33860a2b04970ce2216f63e17913966f9948d78ce46f87a54a526461e493f50c84395405cdbe0d6d03d6d177b6520bf4ff73ac828c1118666b3210956e0827d00b2", 0x9d}], 0x1}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002a40)="4b8c8d86d74f8dbb8e21d621941ada76ca36ccf0300cf7f9b562ceb8c5344c9351758306e87a37bad5e72eeca8ac1445f7b080d7453fc00d5797ae195869b73e4cb382c8fd137e07c8b48039b5ade3c60e2d347bc2125ab920e8285c105fda2bdf3acf132eb56d31f3cd0f8045f397e9e163beb358563151601281c435d5121b1c69372cb7e68ba3c985988099b84fd5f2c308541835389ad4cf221e409f253077d83595e381276b65ef123d8b74163c03efebc8b1cdbf69c7a4c16b8df24867976dd09ddefcba9b9e6e65ea04f8c04d629e38e60f49", 0xd6}, {&(0x7f0000002b40)="8d44330243d546100b98f6e922e17737a422956db993d64ce6abdc70fd87ffddb108e884408970018f9193044f", 0x2d}, {&(0x7f0000002b80)="1d61372ca6ce63609e407d6c22bdf252013c061d14d7ee75e4ca686e91102234289fcdccda8b4f42ced062c741a3467035631a6a5d526da8c1733d231e93a699db22a4d6a531641beecdedf59bcb907038bfa6d258f5e935b859316a7789230cd431e8d5d228d3cb7d073c896291d89746640eb9bf25f48286790dda75a6e2ba600f9a1159ab1e64d88550dd692c16a3d42465450fababb8c0bfc6", 0x9b}, {&(0x7f0000002c40)="b38f8a567c56c1572ceafdc8748ed7cfaf917190b3b14fad02d4640c6621fbef2ab4a4371b6ea47c3654f0136c4f0c3da220c3aa5b2ef26b890aaf55ca7ac1d2276bdd869144bdf2e395ff4d52debad73fab037ce2917287ed63f929a50afd8b226c0eb8ead61b710c68de3b32577296e34501df854a1295603ca1ec4a9cf35246a85696a8b1197105d9a295351608c3d43ede3f63b0c4bfd39a42c5c2", 0x9d}, {&(0x7f0000002d00)="30b468282ced1a822c204adde9413d385cb140a5b13bb57c7df1a874a43d83565ab2475954c1adcec02001a8893d61713e85db8cf61d21657a494f83f0b6c11c67bfc5320cbbce041ca5035ebe4c9a82fe7968796704c898f8d1e6a082645c70f4cb230dda1228d5b9d8ed3b81d81275be9cb7e767dc31ec3767b910f729fc09c37da1f1d5a748388e66921864bd534d4f3d3668", 0x94}], 0x5, 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002ec0)="c62d7945dd1e820979387c1a2f120e3451abece47e0a5ff8fe7487fb93669380d4ec8a98eb8660811172997f57f880fb786174ad1c439a0cba461e35bf303c72e2bc51ac6c778b84bcb1dee2394942d47913", 0x52}, {&(0x7f0000002f40)="0a19dc1b3226e1c6fb75a95bee4e7768999c44a4ea6a171b4d83a66624a859d1a870a8491ab24b3159088d9d23df9d690d3cadde184082dddf401cd99c0c4f0c352db4e79ed3951e2fece12c8acae03208120a71311ea5", 0x57}, {&(0x7f0000002fc0)="8292cd9fbc390405b8b46ef69a59bbd4a009e1b0ab94cc3dbb14e0a0f3da633507b04cd07ac79d9e247125dcfa347ef153db4c1e88", 0x35}, {&(0x7f0000003000)="801e0cd8bb2a9e65ea314d0b52888896d867843f2307a3b5b8aebf71f25804aa82efe9b5e3d662", 0x27}, {&(0x7f0000003040)="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", 0x13b}], 0x5}}], 0x3, 0x4c000) 23:10:57 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) 23:10:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0x2, 0x4e24, 0x0, @private2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002a40)='K', 0x1}], 0x1}}], 0x2, 0x4c000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="85", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}], 0x28}}], 0x2, 0x0) 23:10:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x18}, 0x0) 23:10:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0xa, 0x4e24, 0x0, @private2}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001900)="a48e353e3d0722d565752a55888488742a4d32f8bea6a60c59d88240235a9259ab1910eade892e75eeaac63ca5f6f514f91b19f2a979886aeb4cdca16a89959f29056eaf183e224ed4744d33f7f9351dd01142d0f4c6c9b9c968bfb33860a2b04970ce2216f63e17913966f9948d78ce46f87a54a526461e493f50c84395405cdbe0d6d03d6d177b6520bf4ff73ac828c1118666b3210956e0827d00b2", 0x9d}], 0x1}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002a40)="4b8c8d86d74f8dbb8e21d621941ada76ca36ccf0300cf7f9b562ceb8c5344c9351758306e87a37bad5e72eeca8ac1445f7b080d7453fc00d5797ae195869b73e4cb382c8fd137e07c8b48039b5ade3c60e2d347bc2125ab920e8285c105fda2bdf3acf132eb56d31f3cd0f8045f397e9e163beb358563151601281c435d5121b1c69372cb7e68ba3c985988099b84fd5f2c308541835389ad4cf221e409f253077d83595e381276b65ef123d8b74163c03efebc8b1cdbf69c7a4c16b8df24867976dd09ddefcba9b9e6e65ea04f8c04d629e38e60f49", 0xd6}, {&(0x7f0000002b40)="8d44330243d546100b98f6e922e17737a422956db993d64ce6abdc70fd87ffddb108e884408970018f9193044f", 0x2d}, {&(0x7f0000002b80)="1d61372ca6ce63609e407d6c22bdf252013c061d14d7ee75e4ca686e91102234289fcdccda8b4f42ced062c741a3467035631a6a5d526da8c1733d231e93a699db22a4d6a531641beecdedf59bcb907038bfa6d258f5e935b859316a7789230cd431e8d5d228d3cb7d073c896291d89746640eb9bf25f48286790dda75a6e2ba600f9a1159ab1e64d88550dd692c16a3d42465450fababb8c0bfc6", 0x9b}, {&(0x7f0000002c40)="b38f8a567c56c1572ceafdc8748ed7cfaf917190b3b14fad02d4640c6621fbef2ab4a4371b6ea47c3654f0136c4f0c3da220c3aa5b2ef26b890aaf55ca7ac1d2276bdd869144bdf2e395ff4d52debad73fab037ce2917287ed63f929a50afd8b226c0eb8ead61b710c68de3b32577296e34501df854a1295603ca1ec4a9cf35246a85696a8b1197105d9a295351608c3d43ede3f63b0c4bfd39a42c5c2", 0x7fffee62}, {&(0x7f0000002d00)="30b468282ced1a822c204adde9413d385cb140a5b13bb57c7df1a874a43d83565ab2475954c1adcec02001a8893d61713e85db8cf61d21657a494f83f0b6c11c67bfc5320cbbce041ca5035ebe4c9a82fe7968796704c898f8d1e6a082645c70f4cb230dda1228d5b9d8ed3b81d81275be9cb7e767dc31ec3767b910f729fc09c37da1f1d5a748388e66921864bd534d4f3d3668", 0x94}], 0x5}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002ec0)="c62d7945dd1e820979387c1a2f120e3451abece47e0a5ff8fe7487fb93669380d4ec8a98eb8660811172997f57f880fb786174ad1c439a0cba461e35bf303c72e2bc51ac6c778b84bcb1dee2394942d47913", 0x52}, {&(0x7f0000002f40)="0a19dc1b3226e1c6fb75a95bee4e7768999c44a4ea6a171b4d83a66624a859d1a870a8491ab24b3159088d9d23df9d690d3cadde184082dddf401cd99c0c4f0c352db4e79ed3951e2fece12c8acae03208120a71311ea5", 0x57}, {&(0x7f0000002fc0)="8292cd9fbc390405b8b46ef69a59bbd4a009e1b0ab94cc3dbb14e0a0f3da633507b04cd07ac79d9e247125dcfa347ef153db4c1e88", 0x35}, {&(0x7f0000003000)="801e0cd8bb2a9e65ea314d0b52888896d867843f2307a3b5b8aebf71f25804aa82efe9b5e3d662f4", 0x28}, {&(0x7f0000003040)="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", 0x13a}], 0x5}}], 0x3, 0x4c000) 23:10:57 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0xa, 0x4e24, 0x0, @private2}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001900)="a48e353e3d0722d565752a55888488742a4d32f8bea6a60c59d88240235a9259ab1910eade892e75eeaac63ca5f6f514f91b19f2a979886aeb4cdca16a89959f29056eaf183e224ed4744d33f7f9351dd01142d0f4c6c9b9c968bfb33860a2b04970ce2216f63e17913966f9948d78ce46f87a54a526461e493f50c84395405cdbe0d6d03d6d177b6520bf4ff73ac828c1118666b3210956e0827d00b2", 0x9d}], 0x1}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002a40)="4b8c8d86d74f8dbb8e21d621941ada76ca36ccf0300cf7f9b562ceb8c5344c9351758306e87a37bad5e72eeca8ac1445f7b080d7453fc00d5797ae195869b73e4cb382c8fd137e07c8b48039b5ade3c60e2d347bc2125ab920e8285c105fda2bdf3acf132eb56d31f3cd0f8045f397e9e163beb358563151601281c435d5121b1c69372cb7e68ba3c985988099b84fd5f2c308541835389ad4cf221e409f253077d83595e381276b65ef123d8b74163c03efebc8b1cdbf69c7a4c16b8df24867976dd09ddefcba9b9e6e65ea04f8c04d629e38e60f49", 0xd6}, {&(0x7f0000002b40)="8d44330243d546100b98f6e922e17737a422956db993d64ce6abdc70fd87ffddb108e884408970018f9193044f", 0x2d}, {&(0x7f0000002b80)="1d61372ca6ce63609e407d6c22bdf252013c061d14d7ee75e4ca686e91102234289fcdccda8b4f42ced062c741a3467035631a6a5d526da8c1733d231e93a699db22a4d6a531641beecdedf59bcb907038bfa6d258f5e935b859316a7789230cd431e8d5d228d3cb7d073c896291d89746640eb9bf25f48286790dda75a6e2ba600f9a1159ab1e64d88550dd692c16a3d42465450fababb8c0bfc6", 0x9b}, {&(0x7f0000002c40)="b38f8a567c56c1572ceafdc8748ed7cfaf917190b3b14fad02d4640c6621fbef2ab4a4371b6ea47c3654f0136c4f0c3da220c3aa5b2ef26b890aaf55ca7ac1d2276bdd869144bdf2e395ff4d52debad73fab037ce2917287ed63f929a50afd8b226c0eb8ead61b710c68de3b32577296e34501df854a1295603ca1ec4a9cf35246a85696a8b1197105d9a295351608c3d43ede3f63b0c4bfd39a42c5c2", 0x9d}, {&(0x7f0000002d00)="30b468282ced1a822c204adde9413d385cb140a5b13bb57c7df1a874a43d83565ab2475954c1adcec02001a8893d61713e85db8cf61d21657a494f83f0b6c11c67bfc5320cbbce041ca5035ebe4c9a82fe7968796704c898f8d1e6a082645c70f4cb230dda1228d5b9d8ed3b81d81275be9cb7e767dc31ec3767b910f729fc09c37da1f1d5a748388e66921864bd534d4f3d3668", 0x94}], 0x5, 0x0, 0x10}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002ec0)="c62d7945dd1e820979387c1a2f120e3451abece47e0a5ff8fe7487fb93669380d4ec8a98eb8660811172997f57f880fb786174ad1c439a0cba461e35bf303c72e2bc51ac6c778b84bcb1dee2394942d47913", 0x52}, {&(0x7f0000002f40)="0a19dc1b3226e1c6fb75a95bee4e7768999c44a4ea6a171b4d83a66624a859d1a870a8491ab24b3159088d9d23df9d690d3cadde184082dddf401cd99c0c4f0c352db4e79ed3951e2fece12c8acae03208120a71311ea5", 0x57}, {&(0x7f0000002fc0)="8292cd9fbc390405b8b46ef69a59bbd4a009e1b0ab94cc3dbb14e0a0f3da633507b04cd07ac79d9e247125dcfa347ef153db4c1e88", 0x35}, {&(0x7f0000003000)="801e0cd8bb2a9e65ea314d0b52888896d867843f2307a3b5b8aebf71f25804aa82efe9b5e3d662", 0x27}, {&(0x7f0000003040)="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", 0x13b}], 0x5}}], 0x3, 0x4c000) 23:10:58 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c00028005000100000020000800"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) bind$netlink(0xffffffffffffffff, &(0x7f0000000280), 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0xf5ffffff00000000) 23:10:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x1}]}}, &(0x7f00000001c0)=""/228, 0x26, 0xe4, 0x1}, 0x20) 23:10:58 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0x2, 0x4e21, 0x0, @private2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="76458cbff1a90f5048e65a0c74905586bdf46d4944271b404fadf38fdbe272f4ea7bc6a8649f713f0c0659b5ea3a5f581e3bdb79b0892595e3c22e29f8813282e0b832075cb959597b920398df47011cea87ee706b55cc3cbb4f92831bd028b65cf99d676cbe54d8255159d38db5ce67e977d05779", 0x75}, {&(0x7f0000000080)="531389669e40e1e01a7ae3081dcfe1732e1d94e67d0666111b101b85d3032d16f12eee336582b602e81748124e0da9a5010000000100000004000000000000005bc6259faf4b068fea8d034742e2ce4eef0f255e6863b2935b1257abd2350939097951f8f2d9e0a4432ff5b55115b00f20df55fb8571", 0x76}, {&(0x7f0000000100)="b7c90d9089fa80ff772e0046f449f47a122e18593cbcf53e4342e111b39e93614b3f5fdef10e79e21de57476dcd0e34b9a221766965cf9c09622c245e02b29fd274e8e7bfad5857d9aa4898a16eb6c74bd06c9415d43285e2228b6e976dc1e6ecd315303cf4077bbb0c7bdf12ab9fc6cefafc5f77f10f5cfc95859ad575aac4dbb4a6c1066a2089e2cd3b3d489688fbe0ad330366dbd3267966512d0cbdffd383078", 0xa2}, {&(0x7f00000001c0)="4690eb62cac343fd0931be59dfb68793579e687903af71295ab6c2ab05a080019f02405784cc340aa218489f9ba72142f68661edeaa249d3064d8c333b1f36761588a74e3b9c47b7bf25336c2663a0ab1ed2b35413bc46a82212d6c6998ea0c056b7f224f645b25fd49b6efaa5c3e4d3b29eacb7d5568bd164f9e78dde9c2a3c18c109f86738ee90", 0x88}, {&(0x7f0000000280)}, {&(0x7f00000003c0)="5d7316247508072c62e72c96a7652be813fcabe68b86bc34020b803eff12b258cc89b2e37f2cdd98098a0f34c84702f9a332c2ca47d233bd9b9aeb5264fa8c22fd1320895d16bc3c4e47b177f0da38f3ed13c05fa2c359343b204c44271364af0c82a5af0ef8", 0x66}], 0x44}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000002ec0)="c6", 0x1}, {&(0x7f0000000280)="9018f614c776b84999eb5489e32ab321c76f3c59ef17ea44a63b34b9a2aec8da364ff1fa67cec1f600a187783ffcab0b2a1ed9e89c49653cde23bf9d4dd900fd24f378110140a00d65d25785a191614e86ead4217ff88a08d02f56cf9ba0230e1f58f9159c66ad209ec701fa05c74070c59d1b7dfec30cccc5e08241a6705a23f6c92043e2c609b25bad2c"}, {&(0x7f0000000440)="7e8a47f75f5c365f28010d89b344703a2e4c9ea3596b140b8c02a6428b33181e2bfc1213f19f8a490c80f6c5869f156749496b76a2e0a9e1072349b3826cd4d9a05744d163c5e1fe8461c41c4ba9d46f21bb"}], 0x1}}], 0x3, 0x0) 23:10:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0x2, 0x4e24, 0x0, @private2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002a40)='K', 0xffe3}], 0x1}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002ec0)="c6", 0x1}], 0x1}}], 0x3, 0x4c000) 23:10:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 23:10:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:hugetlbfs_t:s0\x00'}]}, 0x3c}}, 0x0) 23:10:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0x2, 0x4e23, 0x0, @private2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002ec0)="c6", 0x1}], 0x100000000000021f}}], 0x2, 0x800) 23:10:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001480)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote, 0x8}, 0x1c, 0x0}, 0x0) 23:10:58 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0xa, 0x4e24, 0x0, @private2}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001900)="a48e353e3d0722d565752a55888488742a4d32f8bea6a60c59d88240235a9259ab1910eade892e75eeaac63ca5f6f514f91b19f2a979886aeb4cdca16a89959f29056eaf183e224ed4744d33f7f9351dd01142d0f4c6c9b9c968bfb33860a2b04970ce2216f63e17913966f9948d78ce46f87a54a526461e493f50c84395405cdbe0d6d03d6d177b6520bf4ff73ac828c1118666b3210956e0827d00b2", 0x9d}], 0x1}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002a40)="4b8c8d86d74f8dbb8e21d621941ada76ca36ccf0300cf7f9b562ceb8c5344c9351758306e87a37bad5e72eeca8ac1445f7b080d7453fc00d5797ae195869b73e4cb382c8fd137e07c8b48039b5ade3c60e2d347bc2125ab920e8285c105fda2bdf3acf132eb56d31f3cd0f8045f397e9e163beb358563151601281c435d5121b1c69372cb7e68ba3c985988099b84fd5f2c308541835389ad4cf221e409f253077d83595e381276b65ef123d8b74163c03efebc8b1cdbf69c7a4c16b8df24867976dd09ddefcba9b9e6e65ea04f8c04d629e38e60f49", 0xd6}, {&(0x7f0000002b40)="8d44330243d546100b98f6e922e17737a422956db993d64ce6abdc70fd87ffddb108e884408970018f9193044f", 0x2d}, {&(0x7f0000002b80)="1d61372ca6ce63609e407d6c22bdf252013c061d14d7ee75e4ca686e91102234289fcdccda8b4f42ced062c741a3467035631a6a5d526da8c1733d231e93a699db22a4d6a531641beecdedf59bcb907038bfa6d258f5e935b859316a7789230cd431e8d5d228d3cb7d073c896291d89746640eb9bf25f48286790dda75a6e2ba600f9a1159ab1e64d88550dd692c16a3d42465450fababb8c0bfc6", 0x9b}, {&(0x7f0000002c40)="b38f8a567c56c1572ceafdc8748ed7cfaf917190b3b14fad02d4640c6621fbef2ab4a4371b6ea47c3654f0136c4f0c3da220c3aa5b2ef26b890aaf55ca7ac1d2276bdd869144bdf2e395ff4d52debad73fab037ce2917287ed63f929a50afd8b226c0eb8ead61b710c68de3b32577296e34501df854a1295603ca1ec4a9cf35246a85696a8b1197105d9a295351608c3d43ede3f63b0c4bfd39a42c5c2", 0x9d}, {&(0x7f0000002d00)="30b468282ced1a822c204adde9413d385cb140a5b13bb57c7df1a874a43d83565ab2475954c1adcec02001a8893d61713e85db8cf61d21657a494f83f0b6c11c67bfc5320cbbce041ca5035ebe4c9a82fe7968796704c898f8d1e6a082645c70f4cb230dda1228d5b9d8ed3b81d81275be9cb7e767dc31ec3767b910f729fc09c37da1f1d5a748388e66921864bd534d4f3d3668", 0x94}], 0x5}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002ec0)="c62d7945dd1e820979387c1a2f120e3451abece47e0a5ff8fe7487fb93669380d4ec8a98eb8660811172997f57f880fb786174ad1c439a0cba461e35bf303c72e2bc51ac6c778b84bcb1dee2394942d47913", 0x52}, {&(0x7f0000002f40)="0a19dc1b3226e1c6fb75a95bee4e7768999c44a4ea6a171b4d83a66624a859d1a870a8491ab24b3159088d9d23df9d690d3cadde184082dddf401cd99c0c4f0c352db4e79ed3951e2fece12c8acae03208120a71311ea5", 0x57}, {&(0x7f0000002fc0)="8292cd9fbc390405b8b46ef69a59bbd4a009e1b0ab94cc3dbb14e0a0f3da633507b04cd07ac79d9e247125dcfa347ef153db4c1e88", 0x35}, {&(0x7f0000003000)="801e0cd8bb2a9e65ea314d0b52888896d867843f2307a3b5b8aebf71f25804aa82efe9b5e3d662f4", 0x28}, {&(0x7f0000003040)="49e7ea5955d7f98da4cb266db42ef7fc061ad6ea9469a7533f01bc668dff5d5a7ecf56de69f6805ec4783a2f372bfef543061fa330fe05e3ec28334b52a8809aa727c7de84f363f7e43654d02c87d55999c2e3ed6b557e087cc2d519421efff197ff90da9e75e7391f811fdf21c285a688581d907b0bea0edd5b88c68abcf5c54fcdb7ec395cf7bb0282bf153bf25d7e4d480589b31e5d5c43111974899e2986de8c8e01c8320c1abb5b066aa0ba5d1ec4bcde9e7e4f08385fad5c762294653ced6b7998e9e3be739eec8e5d62ae702ab4d4436095700a11a74056a573bc77e92631b12979006d598eb1cd9f5c02a119b4e78375c0fd92787b691f1066335aa094193b90921115084d733623b232515f6b3a67aaf3f5631558f7a7d674dce83b401a989d48e17cabc13fb3180d848d5921af39444825c1168e97", 0x13a}], 0x5, 0x0, 0xf5ffffff}}], 0x3, 0x4c000) 23:10:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0x2, 0x4e24, 0x0, @private2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002a40)='K', 0xffe3}], 0x1}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002ec0)="c6", 0x1}], 0x1}}], 0x3, 0x4c000) 23:10:59 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000004280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='ext4_mballoc_prealloc\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000180), 0x41) 23:10:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 23:10:59 executing program 5: r0 = socket(0x1c, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0x2, 0x1c}, 0x1c) 23:10:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0x2, 0x4e24, 0x0, @private2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002a40)='K', 0x1}], 0x1}}], 0x2, 0x4c000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="85", 0x1}], 0x1}}], 0x1, 0x0) 23:10:59 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) close(r0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000100), 0xc) getpeername$qrtr(r1, 0x0, &(0x7f0000000080)) 23:10:59 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) 23:10:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001900)="a48e353e3d0722d565752a55888488742a4d32f8bea6a60c59d88240235a9259ab1910eade892e75eeaac63ca5f6f514f91b19f2a979886aeb4cdca16a89959f29056eaf183e224ed4744d33f7f9351dd01142d0f4c6c9b9c968bfb33860a2b04970ce2216f63e17913966f9948d78ce46f87a54a526461e493f50c84395405cdbe0d6d03d6d177b6520bf4ff73ac828c1118666b3210956e0827d00b2", 0x9d}], 0x1}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002a40)="4b8c8d86d74f8dbb8e21d621941ada76ca36ccf0300cf7f9b562ceb8c5344c9351758306e87a37bad5e72eeca8ac1445f7b080d7453fc00d5797ae195869b73e4cb382c8fd137e07c8b48039b5ade3c60e2d347bc2125ab920e8285c105fda2bdf3acf132eb56d31f3cd0f8045f397e9e163beb358563151601281c435d5121b1c69372cb7e68ba3c985988099b84fd5f2c308541835389ad4cf221e409f253077d83595e381276b65ef123d8b74163c03efebc8b1cdbf69c7a4c16b8df24867976dd09ddefcba9b9e6e65ea04f8c04d629e38e60f49", 0xd6}, {&(0x7f0000002b40)="8d44330243d546100b98f6e922e17737a422956db993d64ce6abdc70fd87ffddb108e884408970018f9193044f", 0x2d}, {&(0x7f0000002b80)="1d61372ca6ce63609e407d6c22bdf252013c061d14d7ee75e4ca686e91102234289fcdccda8b4f42ced062c741a3467035631a6a5d526da8c1733d231e93a699db22a4d6a531641beecdedf59bcb907038bfa6d258f5e935b859316a7789230cd431e8d5d228d3cb7d073c896291d89746640eb9bf25f48286790dda75a6e2ba600f9a1159ab1e64d88550dd692c16a3d42465450fababb8c0bfc6", 0x9b}, {&(0x7f0000002c40)="b38f8a567c56c1572ceafdc8748ed7cfaf917190b3b14fad02d4640c6621fbef2ab4a4371b6ea47c3654f0136c4f0c3da220c3aa5b2ef26b890aaf55ca7ac1d2276bdd869144bdf2e395ff4d52debad73fab037ce2917287ed63f929a50afd8b226c0eb8ead61b710c68de3b32577296e34501df854a1295603ca1ec4a9cf35246a85696a8b1197105d9a295351608c3d43ede3f63b0c4bfd39a42c5c2", 0x9d}, {&(0x7f0000002d00)="30b468282ced1a822c204adde9413d385cb140a5b13bb57c7df1a874a43d83565ab2475954c1adcec02001a8893d61713e85db8cf61d21657a494f83f0b6c11c67bfc5320cbbce041ca5035ebe4c9a82fe7968796704c898f8d1e6a082645c70f4cb230dda1228d5b9d8ed3b81d81275be9cb7e767dc31ec3767b910f729fc09c37da1f1d5a748388e66921864bd534d4f3d", 0x92}], 0x5}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002ec0)="c62d7945dd1e820979387c1a2f120e3451abece47e0a5ff8fe7487fb93669380d4ec8a98eb8660811172997f57f880fb786174ad1c439a0cba461e35bf303c72e2bc51ac6c778b84bcb1dee2394942d47913", 0x52}, {&(0x7f0000002f40)="0a19dc1b3226e1c6fb75a95bee4e7768999c44a4ea6a171b4d83a66624a859d1a870a8491ab24b3159088d9d23df9d690d3cadde184082dddf401cd99c0c4f0c352db4e79ed3951e2fece12c8acae03208120a71311ea5", 0x57}, {&(0x7f0000002fc0)="8292cd9fbc390405b8b46ef69a59bbd4a009e1b0ab94cc3dbb14e0a0f3da633507b04cd07ac79d9e247125dcfa347ef153db4c1e88", 0x35}, {&(0x7f0000003000)="801e0cd8bb2a9e65ea314d0b52888896d867843f2307a3b5b8aebf71f25804aa82efe9b5e3d662", 0x27}, {&(0x7f0000003040)="49e7ea5955d7f98da4cb266db42ef7fc061ad6ea9469a7533f01bc668dff5d5a7ecf56de69f6805ec4783a2f372bfef543061fa330fe05e3ec28334b52a8809aa727c7de84f363f7e43654d02c87d55999c2e3ed6b557e087cc2d519421efff197ff90da9e75e7391f811fdf21c285a688581d907b0bea0edd5b88c68abcf5c54fcdb7ec395cf7bb0282bf153bf25d7e4d480589b31e5d5c43111974899e2986de8c8e01c8320c1abb5b066aa0ba5d1ec4bcde9e7e", 0xb5}], 0x5}}], 0x3, 0x4c000) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="57de1c2759f63ea1030a4075ae7d8da713d21aff5f4e1b9734a3ff5fd927489b76b363c3aae630bab32274e41e2e622179690b14d52ddeca58a59e937de9873a83e34bc978525a8d993569e8dba6497b8ebbd3b899f90ecb8b94ae6cb10ca9fcf355b9d56be9a5953e5fcc8ded9f37a91a2e30919c2a59875395e4965f50b8aa4f634cd0b28eafd4f7", 0x89}], 0x1}}], 0x1, 0x0) 23:10:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000001880)={0xa, 0x4e24, 0x0, @private2}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001900)="a48e353e3d0722d565752a55888488742a4d32f8bea6a60c59d88240235a9259ab1910eade892e75eeaac63ca5f6f514f91b19f2a979886aeb4cdca16a89959f29056eaf183e224ed4744d33f7f9351dd01142d0f4c6c9b9c968bfb33860a2b04970ce2216f63e17913966f9948d78ce46f87a54a526461e493f50c84395405cdbe0d6d03d6d177b6520bf4ff73ac828c1118666b3210956e0827d00b2", 0x9d}], 0x1}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002a40)="4b8c8d86d74f8dbb8e21d621941ada76ca36ccf0300cf7f9b562ceb8c5344c9351758306e87a37bad5e72eeca8ac1445f7b080d7453fc00d5797ae195869b73e4cb382c8fd137e07c8b48039b5ade3c60e2d347bc2125ab920e8285c105fda2bdf3acf132eb56d31f3cd0f8045f397e9e163beb358563151601281c435d5121b1c69372cb7e68ba3c985988099b84fd5f2c308541835389ad4cf221e409f253077d83595e381276b65ef123d8b74163c03efebc8b1cdbf69c7a4c16b8df24867976dd09ddefcba9b9e6e65ea04f8c04d629e38e60f49", 0xd6}, {&(0x7f0000002b40)="8d44330243d546100b98f6e922e17737a422956db993d64ce6abdc70fd87ffddb108e884408970018f9193044f", 0x2d}, {&(0x7f0000002b80)="1d61372ca6ce63609e407d6c22bdf252013c061d14d7ee75e4ca686e91102234289fcdccda8b4f42ced062c741a3467035631a6a5d526da8c1733d231e93a699db22a4d6a531641beecdedf59bcb907038bfa6d258f5e935b859316a7789230cd431e8d5d228d3cb7d073c896291d89746640eb9bf25f48286790dda75a6e2ba600f9a1159ab1e64d88550dd692c16a3d42465450fababb8c0bfc6", 0x9b}, {&(0x7f0000002c40)="b38f8a567c56c1572ceafdc8748ed7cfaf917190b3b14fad02d4640c6621fbef2ab4a4371b6ea47c3654f0136c4f0c3da220c3aa5b2ef26b890aaf55ca7ac1d2276bdd869144bdf2e395ff4d52debad73fab037ce2917287ed63f929a50afd8b226c0eb8ead61b710c68de3b32577296e34501df854a1295603ca1ec4a9cf35246a85696a8b1197105d9a295351608c3d43ede3f63b0c4bfd39a42c5c2", 0x9d}, {&(0x7f0000002d00)="30b468282ced1a822c204adde9413d385cb140a5b13bb57c7df1a874a43d83565ab2475954c1adcec02001a8893d61713e85db8cf61d21657a494f83f0b6c11c67bfc5320cbbce041ca5035ebe4c9a82fe7968796704c898f8d1e6a082645c70f4cb230dda1228d5b9d8ed3b81d81275be9cb7e767dc31ec3767b910f729fc09c37da1f1d5a748388e66921864bd534d4f3d3668", 0x94}], 0x5}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002ec0)="c62d7945dd1e820979387c1a2f120e3451abece47e0a5ff8fe7487fb93669380d4ec8a98eb8660811172997f57f880fb786174ad1c439a0cba461e35bf303c72e2bc51ac6c778b84bcb1dee2394942d47913", 0x52}, {&(0x7f0000002f40)="0a19dc1b3226e1c6fb75a95bee4e7768999c44a4ea6a171b4d83a66624a859d1a870a8491ab24b3159088d9d23df9d690d3cadde184082dddf401cd99c0c4f0c352db4e79ed3951e2fece12c8acae03208120a71311ea5", 0x57}, {&(0x7f0000002fc0)="8292cd9fbc390405b8b46ef69a59bbd4a009e1b0ab94cc3dbb14e0a0f3da633507b04cd07ac79d9e247125dcfa347ef153db4c1e88", 0x35}, {&(0x7f0000003000)="801e0cd8bb2a9e65ea314d0b52888896d867843f2307a3b5b8aebf71f25804aa82efe9b5e3d662f4", 0x28}, {&(0x7f0000003040)="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", 0x13a}], 0x5, 0x0, 0x74}}], 0x3, 0x4c000) 23:10:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x2, 0x0}]}, 0x1c}, 0x1, 0x9000000}, 0x0) 23:10:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x5, 0x0, 0x0) 23:10:59 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x9, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1000000}, 0x80) [ 258.999432][ T4880] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:11:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x11}]}]}, 0x20}}, 0x0) 23:11:00 executing program 2: socketpair(0x2, 0xa, 0x1000db99, &(0x7f0000000240)) 23:11:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 23:11:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan3\x00'}) 23:11:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x44, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x13, 0x3, @local}, {0x14, 0x4, @local}}}]}]}, 0x44}}, 0x0) 23:11:00 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x2, 0x340, 0xffffffff, 0xd0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@ipv6={@private0, @dev, [], [], 'team_slave_1\x00', 'wg2\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 23:11:00 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00'}, 0x10) 23:11:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x11}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}}, 0x0) 23:11:00 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x24, &(0x7f0000000040)=0x1ff, 0x4) 23:11:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12}, 0x48) 23:11:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 23:11:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0xc}, 0x0) 23:11:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x49}}) 23:11:01 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x2f, &(0x7f0000000040), 0x4) 23:11:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @private0, 0x7800, 0x7800}}) 23:11:01 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x15, 0x3, &(0x7f0000000100)=@framed={{}, [], {0x95, 0x0, 0x0, 0xffffff9f}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:01 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:01 executing program 3: bpf$MAP_LOOKUP_BATCH(0x13, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x38) 23:11:01 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x560, 0x0, 0x230, 0x230, 0x350, 0x140, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@private0}}}, {{@ipv6={@private2, @mcast1, [], [], 'vlan1\x00', 'macvtap0\x00', {}, {}, 0x0, 0x0, 0x9}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev, @ipv6=@local}}}, {{@ipv6={@empty, @remote, [], [], 'veth1_to_batadv\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@broadcast}}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'wlan0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) 23:11:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xd, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}}, 0x0) 23:11:01 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xc, &(0x7f0000000040), 0x4) 23:11:01 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@private1}, 0x14) 23:11:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0xe}}) 23:11:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ipv6={@private0, @mcast1, [], [], 'batadv_slave_1\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 23:11:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, 0xf, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}}, 0x0) 23:11:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100b600080001007063690011001a"], 0x30}}, 0x0) 23:11:01 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x20, r0, 0x7066cc0199f13eb, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}}, 0x0) 23:11:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x3, 0x6, 0x101}, 0x14}}, 0x0) 23:11:02 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x15, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x5451, 0x0) [ 261.202226][ T4937] netlink: 'syz-executor.2': attribute type 26 has an invalid length. 23:11:02 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0) 23:11:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}}, 0x0) 23:11:02 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1600bd81, 0x0, 0x0) 23:11:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 23:11:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000007c0)) 23:11:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0xd, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 23:11:02 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ipv6={@private0, @mcast1, [], [], 'batadv_slave_1\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 23:11:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x5, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}}, 0x0) 23:11:02 executing program 4: pipe(&(0x7f00000005c0)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 23:11:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}}, 0x0) 23:11:02 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x8, 0x200, 0x7, 0x0, 0x1}, 0x48) 23:11:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4b, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ipv6={@private0, @mcast1, [], [], 'batadv_slave_1\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 23:11:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000000500)={'sit0\x00', 0x0}) 23:11:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000010000100"/17, @ANYRES32], 0x24}}, 0x0) 23:11:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x6}}) 23:11:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) 23:11:03 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x2a, &(0x7f0000000040), 0x4) 23:11:03 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x14, r0, 0x7066cc0199f13eb}, 0x14}}, 0x0) 23:11:03 executing program 2: pipe(&(0x7f00000001c0)) r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 262.455790][ T4977] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 23:11:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4, 0x0, 0x0) 23:11:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, 0x0, 0x0) 23:11:03 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @dev}, 0x80) 23:11:03 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x14, r0, 0x7066cc0199f13eb}, 0x14}}, 0x0) 23:11:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@deltfilter={0x38, 0x2d, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) 23:11:04 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xb, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x6, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ipv6={@private0, @mcast1, [], [], 'batadv_slave_1\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 23:11:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4a}}) 23:11:04 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x14, r0, 0x7066cc0199f13eb}, 0x14}}, 0x0) 23:11:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f00000008c0)=@sco={0x1f, @none}, &(0x7f0000000980)=0xfffffffffffffd6f) 23:11:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a732f667621e3ce, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x50, 0x3, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0x12, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 23:11:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x8}}) 23:11:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 23:11:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@gettfilter={0x23, 0x2e, 0x1}, 0x24}}, 0x0) 23:11:04 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x14, r0, 0x7066cc0199f13eb}, 0x14}}, 0x0) [ 263.694502][ T5015] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 23:11:04 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c6e88b59ad8db240becb430b917796efad2b831131804f06f5fd04bd703ae76dcf1bb078f1133c7b990b12af2a799a643c9dca785904d2ad8acf3b5722f55d24fcef53b366c1794d92ac01f5b5fc7e18af9b7f194f1f0b45b7e4e71abfe0fb22ea0eb27791b8a53de5ae23a9ef3573f79d10ada0436a70bbc6033dd8fb"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x1e, 0x40, 0xfb2, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7, 0xf859, 0x195c, 0x2d8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x20, 0x0, 0xec9, 0xffffffff, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x64, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x37}, {[@timestamp_prespec={0x44, 0x14, 0xdc, 0x3, 0x9, [{@broadcast, 0x5}, {@loopback, 0x6}]}, @timestamp_prespec={0x44, 0x4c, 0x51, 0x3, 0x9, [{@remote}, {@empty, 0x2b19}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0x8}, {@multicast2, 0x9}, {@private=0xa010102, 0x3ff}, {@empty, 0x7ff}, {@local, 0x5}, {@broadcast, 0xc06}]}]}}}}}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl2\x00', r8, 0x4, 0x2, 0xe3, 0x0, 0x48, @dev={0xfe, 0x80, '\x00', 0x11}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x10, 0x9, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f0000000600)={0x2dc, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x84, 0x0, 0x9}]}}}]}}, {{0x8, 0x1, r0}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x38a8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}]}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x480101}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24044830}, 0x2004850) r11 = epoll_create(0x9) epoll_pwait(r11, &(0x7f00000000c0)=[{}], 0x1, 0x80000001, 0x0, 0x0) 23:11:04 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:04 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x834}, 0x10}}, 0x0) 23:11:04 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$alg(r0, 0x0, 0x0) 23:11:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x28}}) 23:11:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newchain={0x24, 0x64, 0x1}, 0x24}}, 0x0) 23:11:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind(r0, 0x0, 0xb) 23:11:05 executing program 4: bpf$OBJ_GET_MAP(0x1e, &(0x7f0000000b00)={&(0x7f0000000ac0)='./file0\x00'}, 0x10) 23:11:05 executing program 1: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x6, &(0x7f0000000040)={[0x7]}, 0x8) 23:11:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x18, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 23:11:05 executing program 3: pipe(&(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 23:11:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, 0x0, 0x0) 23:11:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0xc0045878, 0x0) 23:11:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 23:11:06 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x49, &(0x7f0000000040), 0x4) 23:11:06 executing program 5: r0 = epoll_create(0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x90000000}) 23:11:06 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000001}, 0x39) 23:11:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 23:11:06 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f00000000c0)=@framed={{}, [@cb_func]}, &(0x7f0000000140)='GPL\x00', 0x4, 0xe0, &(0x7f0000000180)=""/224, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c00), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 23:11:06 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x482581, 0x0) 23:11:06 executing program 5: syz_clone(0x87940700, 0x0, 0x0, 0x0, 0x0, 0x0) 23:11:06 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x4, 0x0, 0xa7) 23:11:06 executing program 2: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)) 23:11:06 executing program 4: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000017c0)="3afdc058c843fab7e1263123714771e131e0930e04f18b5f3b3e1905cb042305b5713dbcbc1ea8ad7ea15e9b26aa0111ead353e4fdb87129af8e101d0329a04933b5af399096756a274dc5fd680e691d447b55025bfbcfe5a8b9e76c0a6aaf441f0e889edff5d2ac7129dd6f1a9f1b0a1dc877388c732124a7aa89a342c41d5ac385fc55dcc5d839199b57581355ee2fae4118643aa0c0c2d85d518828b98e85f419c734fcb7eccf21e36214c298e7e944a70ce22a2fd835d46a524b3539ecb8", 0xc0}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="8611", 0x2}], 0x3}, 0x200008d1) 23:11:06 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1, &(0x7f0000000400)=@raw=[@jmp], &(0x7f0000000440)='GPL\x00', 0x2, 0x88, &(0x7f0000000480)=""/136, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:06 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, &(0x7f0000000ec0)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 23:11:06 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000017c0)="3afdc058c843fab7e1263123714771e131e0930e04f18b5f3b3e1905cb042305b5713dbcbc1ea8ad7ea15e9b26aa0111ead353e4fdb87129af8e101d0329a04933b5af399096756a274dc5fd680e691d447b55025bfbcfe5a8b9e76c0a6aaf441f0e889edff5d2ac7129dd6f1a9f1b0a1dc877388c732124a7aa89a342c41d5ac385fc55dcc5d839199b57581355ee2fae4118643aa0c0c2d85d518828b98e85f419c734fcb7eccf21e36214c298e7e944a70ce22a2fd835d46a524b3539ecb89462", 0xc2}, {&(0x7f00000018c0)="b1ba", 0x2}], 0x2, &(0x7f0000002c40)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}], 0x30}, 0x200008d1) 23:11:06 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:06 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x8, 0x6, 0x1000, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000003c0)}, 0x10) 23:11:06 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001440)="e2", &(0x7f0000001540)}, 0x48) 23:11:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x19, 0x0, 0x0, 0x8}, 0x48) 23:11:07 executing program 3: syz_clone(0xaa085400, 0x0, 0x0, 0x0, 0x0, 0x0) 23:11:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[{0x1010, 0x0, 0x0, "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"}, {0xff8, 0x0, 0x0, "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"}], 0x2008}, 0x0) 23:11:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x8, 0x6, 0x4800, 0x0, 0x1}, 0x48) 23:11:07 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000400)=@raw=[@jmp, @cb_func], &(0x7f0000000440)='GPL\x00', 0x2, 0x88, &(0x7f0000000480)=""/136, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x80) 23:11:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x8, 0x6, 0x1000, 0x0, 0x1}, 0x48) 23:11:07 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) 23:11:07 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0x8) mkdir(&(0x7f0000000a00)='./file0\x00', 0x31) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000cc0)={&(0x7f0000000a40)='./file0\x00'}, 0x10) 23:11:07 executing program 1: syz_clone(0x440a4000, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 23:11:07 executing program 3: syz_clone(0xcec7afae0d80d62e, 0x0, 0x0, 0x0, 0x0, 0x0) 23:11:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2}}, @restrict]}}, &(0x7f0000000ec0)=""/4096, 0x3e, 0x1000, 0x1}, 0x20) 23:11:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x8, 0x6, 0x1000, 0x5, 0x1}, 0x48) 23:11:07 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440), 0x0}, 0x48) 23:11:08 executing program 5: mkdir(&(0x7f0000000a00)='./file0\x00', 0x31) 23:11:08 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:08 executing program 3: syz_clone(0x440a4000, &(0x7f0000000000)="66c6c274379c0b6f5a93", 0xa, &(0x7f0000000080), 0x0, &(0x7f0000000100)="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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x4, 0x0, 0xa7) 23:11:08 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000017c0)="3afdc058c843fab7e1263123714771e131e0930e04f18b5f3b3e1905cb042305b5713dbcbc1ea8ad7ea15e9b26aa0111ead353e4fdb87129af8e101d0329a04933b5af399096756a274dc5fd680e691d447b55025bfbcfe5a8b9e76c0a6aaf441f0e889edff5d2ac7129dd6f1a9f1b0a1dc877388c732124a7aa89a342", 0x7d}, {&(0x7f00000018c0)="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", 0xf85}], 0x2}, 0x200008d1) 23:11:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x0, 0x4}, 0x48) 23:11:08 executing program 1: syz_clone(0x440a4000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x4, 0x0, 0xa7) 23:11:08 executing program 5: syz_clone(0x29a25000, 0x0, 0xfd2a, 0x0, 0x0, 0x0) 23:11:08 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:08 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040), 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)) 23:11:09 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x8, 0x6, 0x9, 0x0, 0x1}, 0x48) 23:11:09 executing program 2: syz_clone(0x440a4000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x4, 0x0, 0xa7) 23:11:09 executing program 4: syz_clone(0x50020100, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() 23:11:09 executing program 5: syz_clone(0x440a4000, &(0x7f0000000000)="66c6c274379c0b6f5a9352f904088ae4ed1cef7ef28a518fae455ae16fee38cef0c166a22ff6703c934ca6a793312662986cc57f13163b9bd5dcbe0ada3da3735c7749ca29ff8c7bc98cc6708e0ec69127424db46bdcd6d952c3113b3ec1323e6b4f4e97606949a5cba5", 0x6a, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x4, 0x0, 0xa7) 23:11:09 executing program 3: syz_clone(0xb5a25000, 0x0, 0x7, 0x0, 0x0, 0x0) 23:11:09 executing program 0: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000cc0)={0x0}, 0x10) 23:11:10 executing program 1: syz_clone(0x440a4000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="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") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) 23:11:10 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 269.220616][ T1193] ieee802154 phy1 wpan1: encryption failed: -22 23:11:10 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x48) 23:11:10 executing program 4: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}, 0x38) 23:11:10 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r0, 0x4) 23:11:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0x2, 0x0, [{}]}]}}, &(0x7f0000000180)=""/206, 0x2e, 0xce, 0x6}, 0x20) 23:11:11 executing program 4: bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) 23:11:16 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) 23:11:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x10, 0x10, 0x10, 0x2, [@var]}}, &(0x7f0000000880)=""/128, 0x2a, 0x80, 0x1}, 0x20) 23:11:16 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={0x0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone(0x400000, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) 23:11:16 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) 23:11:16 executing program 5: syz_clone(0xe0000, 0x0, 0xf0ffffff, 0x0, 0x0, 0x0) 23:11:16 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1701335784b11306, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:16 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) 23:11:16 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) tgkill(r0, r0, 0x3a) 23:11:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xfffffffffffffe6f) 23:11:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r0, 0x0, &(0x7f0000000080), 0x0) 23:11:16 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 23:11:16 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8f1ee107d40fb80c, 0x0) 23:11:17 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x4, 0x0, 0x1a) 23:11:17 executing program 0: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x1}) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) close(r0) dup(r1) r2 = getpid() tkill(r2, 0x1004000000015) 23:11:17 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/if_inet6\x00') 23:11:17 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) 23:11:17 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:11:17 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$inet6(r0, 0x0, 0x0) 23:11:17 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x341, 0x0) write$cgroup_type(r0, 0x0, 0x64) 23:11:17 executing program 4: r0 = timerfd_create(0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) 23:11:17 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x40880, 0x0, 0x0) 23:11:17 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x2404c444, 0x0, 0x0) 23:11:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x6404404d, 0x0, 0x0) 23:11:17 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x6404004d, 0x0, 0xfffffffffffffecb) 23:11:18 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 23:11:18 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000000), 0x14) 23:11:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180), 0x98) 23:11:18 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c}, 0x1c) connect(r0, &(0x7f0000000140)=@in6={0x1c, 0x1c}, 0x1c) 23:11:18 executing program 5: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='cdg\x00', 0x4) 23:11:18 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xe, &(0x7f0000000200), &(0x7f0000000340)=0x8) 23:11:18 executing program 1: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000140), &(0x7f00000001c0)=0x8) 23:11:18 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x82) 23:11:18 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/84, 0x54}], 0x1) 23:11:18 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r1, r1) r3 = dup2(r0, r2) sendmsg$inet_sctp(r3, &(0x7f0000000240)={&(0x7f0000000300)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x23, &(0x7f00000005c0), &(0x7f0000000500)=0x90) 23:11:19 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)='R', 0x1, 0x20184, 0x0, 0x0) 23:11:19 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0xfffffffffffffe0d, 0x1c}, 0x1c) 23:11:19 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1ff}, 0x14) 23:11:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 23:11:19 executing program 0: getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000001c0), 0xfffffffffffffffe) 23:11:19 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x10) 23:11:19 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000000)={r3}, 0x14) 23:11:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000000)="90", 0x1, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) 23:11:20 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x24, &(0x7f0000000040)="aa", 0x1) 23:11:20 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x40, 0x0, 0x0) 23:11:20 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) connect$inet6(r1, &(0x7f0000000100)={0x1c, 0x1c, 0x2}, 0x1c) 23:11:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000000)=0x8741, 0x4) 23:11:20 executing program 4: r0 = socket(0x1c, 0x10000001, 0x84) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/206, 0xce}, 0xc1) 23:11:20 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) listen(r1, 0x7) 23:11:20 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x41) 23:11:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f00000001c0)={0x6, 0xd8, 0x2, 0x5}, 0x8) 23:11:20 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c}, 0x1c) r1 = dup2(r0, r0) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10) 23:11:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0xb) 23:11:20 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000380), 0xb) 23:11:21 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x24, 0x0, 0x0) 23:11:21 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000200)={0x1c, 0x1c, 0x3}, 0x4) 23:11:21 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x1a, &(0x7f0000000000)={r3}, &(0x7f0000000100)=0x8) 23:11:21 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x88, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 23:11:21 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x98) 23:11:21 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) sendmsg$inet_sctp(r2, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@sndrcv={0x2c}], 0x2c}, 0x0) 23:11:22 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, &(0x7f0000001880)="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", 0xff1, 0x0, &(0x7f00000002c0)=@in6={0x1c, 0x1c}, 0x1c) 23:11:22 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 23:11:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x903, &(0x7f0000000440), 0x8) 23:11:22 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r3 = socket$inet6_sctp(0x1c, 0x1, 0x84) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) r5 = dup2(r4, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000000)={r6, 0x0, 0x0, 0x5, 0x47f}, 0x14) 23:11:22 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) dup2(r1, r0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 23:11:22 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) 23:11:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x1000}}], 0x1c}, 0x0) 23:11:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002340)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000002300)=[@prinfo={0x14}], 0x14}, 0x0) 23:11:23 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r3 = socket$inet6_sctp(0x1c, 0x1, 0x84) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) r5 = dup2(r4, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000000)={r6}, 0x14) 23:11:23 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0x14) 23:11:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, 0x81}, 0x14) 23:11:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x81}, 0x14) 23:11:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 23:11:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000100)=@raw=[@map_idx_val, @jmp={0x5, 0x0, 0x9}, @exit, @exit, @map_idx_val, @map_fd, @initr0, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:24 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x1, 0x2, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:24 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:24 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10) 23:11:24 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x7}, [@jmp={0x4, 0x0, 0xb}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbf, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x42, 0x0}}, 0x10) 23:11:24 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x7}, [@jmp={0x4, 0x0, 0xb}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={r1}, 0x4) 23:11:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x7}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000600000025000100000000000500fcff0000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 23:11:24 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000600000025000100000000000500fcff0000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0x0, 0x0}, 0x10) 23:11:24 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map=0x1, r0}, 0x14) 23:11:24 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:24 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{}, [], {0x95, 0x0, 0x2}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xa}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x7}, [@jmp={0x4, 0x0, 0xb}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='writeback_pages_written\x00', r0}, 0x10) 23:11:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x4, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x4, 0x0, 0xb, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:25 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:25 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xe, &(0x7f0000004400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) 23:11:25 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x7}, [@jmp={0x4, 0x0, 0xb}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x1, &(0x7f0000000640)=@raw=[@jmp], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 23:11:25 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@jmp={0x4, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:25 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x7}, [@jmp={0x4, 0x0, 0xb}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:25 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0xe, &(0x7f0000004400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) 23:11:25 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x7}, [@jmp={0x4, 0x0, 0xb}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x0, 0x0, 0x6c, 0x0, &(0x7f0000000400)=""/108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 23:11:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:25 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xf09) 23:11:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x0, 0xe34, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x48) 23:11:26 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:26 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xe, &(0x7f0000004400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) 23:11:26 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x7, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:26 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x7}, [@jmp={0x4, 0x0, 0xb}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xb, &(0x7f0000000740)={r1}, 0x4) 23:11:26 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x279000}, [@jmp={0x4, 0x1, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:26 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x4, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:26 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x4, 0x1, 0x9}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:26 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x7, 0x0, 0xb}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:26 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x2}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:26 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:26 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x4, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:26 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000600000025000100000000000500fcff0000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 23:11:26 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0ffffff}, [@jmp={0x4, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:27 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xe, &(0x7f0000004400)=ANY=[@ANYBLOB="b70200000f0e1d09bfa300000000000024020000fffeff7f7a03f0fff8ffffff79a4f0ff00000000b7060000d0b68af1de640200000000007502faff07cd02020404000003007d60b70300000d1000006a0a00fe0000000d8500000026000000b70000000604002995000000000000001da5ad3548ebb63d18db6a1c72821c9b767ac8308fbcd5c5e4a5ad1059b5725ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1aa503b8de7ab9a780001000000000000d4bf20c2bd152d814f01f2cd539e030b0000000000007f4182f32333b08e6e497640000000aea5cac0ceafdb9a2eeb02a1f5104d16ddb64963d84d91004cd5817e0b7f005e6ee7a39e2f0b5a18ed786b783ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a62d79b4c03e53466fa4f22d8c19f958e8b34de3535e7dacf1b13f7e851ec843c2288e7ff949a7a48ce18799ee53de177a81ea67a8f84538a9a311c754e5ab59a43f56d2085786e7ec07d78917f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d34a442bc098f4fcc96623b7c373b0ef04d55b846b094b0d6c7a75a76d445e0dcdf72c7ef97e08512ef5987b6e09a6a7caffff0000141f65e7d9ebe3be70c4364333af9a9d91c3e41ac37a63f85ad8254479c12f7c84fa5df32b70a80cce69cf30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48eb19767e00b75041739952fe87fde27ce01893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7686bc2e1b45577c205c70631e8ad585951950e851250540593e61860b69a521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7f58bde38b44ab13d980c894ed90d9338923789a1edcd8043fe83919088383268324a25df14010c8e1b49b0400e4f6f767ee30ea3aad2c6d6b8c97c00eaa00ff9bc46e1cfecbdc0e4ffac53e8f76c8b556306b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404a0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37d2fe7a60b903d2d9fe9c151cafcc8dc389671c2d08b6e2641500568445b00cee4585af04fa69e0380be0d66649dcf3bf8a9066e596119109ea8b308ff070000aab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628ebe757bae30b356521df06f995cb57f97052fc4158250ccecfb47ea8faf509593fadc7eafb613313b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6c9eb0dcca5303eed6689ea910900785f61278dde47e6672e93a314a5f60e7b682bf0cacde21f6090f4fb311afd7f8b48f3f0d8c66449d8687dcf2d0f76668b2b9bf8b32b518e01ffb985f8054d37959c529e99b7daf32acfed749d516d014cef5f98126324e202badc1e5c20d69e576a770000000000005addc0103756b894418e4591c624a9b2ccabbfb888d413d923b0c901973cd7c9d197d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe84f483b15f45b9a1d3af087047c568aef1d8559c6146a793026ebfc0bb5ec10b6290dc757a4903a88fb2c035f9349b6d2f0c051b8b775152786118a1020000fc19928ccb713ff09e179c308fbe9bc543dcf43f731074d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad10e5e9d26631c2f1db3a2882f6e130a79517a88de7596429a20793e12616aa32b3e720c6521fbe933321adde8ca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471647f8bc03d11811ac6eec1741ceb39a3ecd9e3c325fcabbab3d12f6a759f7ce11dafa387a8077db8a2230d2014a57bc8dd47741270000008000000000b2eebd5e1626cab98499328ff024a240199993433ceb5be20427a32df7047d63010dfc6a461517ad48ff64042e84c85c899fd11c6320a8d8fc0e78c1aaa152d567f91dd943f62d167fed1b605965a5c2b32d094a461a990000000000000000000000000000000000000000000200000000000000000000b385c644a4a170e6dc9e9e546bfa049d025b319abd87fd85482b43db5d6c2cb6a204d45f88dd4140c8edb598a36e21ad132bf6b88c99c56633b01813fc5cd7d048469a966bbfb300fd772cbadf0cf26899bfd15e7d9408026a92f13f11d1c9832259b2f97227f84a3bb96253717a177ac091d0f4632f638b09a0307ff31729857f9e6fe9f19e481a3f77cead663f42456e080952636515c758f5047b2148944133a492ef20a1778088c42094903d6ece2497b99fc745c420b035ff7961484a0f62a2d957ae2e47ff1ea8a059f2d03bf9c3e8d2b16ab409de762522f6008de48bb70b698c5c9867437ac3127fad4bd699acaad78a5f66c7fc7d46e048082a0af61e6b052e473ed26b032a070ea10e985703b292c7336112b1f35c3b069363869dce725d8da75dcec76dc591c052feecee18c64c4600a0bc3d4945d4b918865bbf52f732a500689cbd9a84d07846417796f2a85e7a41d27d64b10f8e970469cf495b4a1b4ea8b5322f78e9f3048351b550c59a634b47981420081ea4da18b9d318fa001ce660b28bbcf3c1a8893d130b26d25e491f478ae4f95f71ea8897b34c55f1678b8453f08a5ae1b3b4d8c83053c57637a98ef57e5fa51971eba5e287e9910cba734336703defc13fe1659b157e5d9de7bfb929e715ed1a9a505a04a8d8474482295afbb9de90de2e918522cac2d5b5ac09d1fdc4fd7c6393a684ad7234ecb65d0008000000000000560ad146e8b9e9f9ff050edb1f6735c90a76b1ba4dbdee34d0b6750f25ba7251944ada77665573460056351d009a568c782f4438ecba9bee47f25286300e83bd1853076ad52eac84029335b86e7f21e39a1af3d070abef94bc0827db0046dcb7d63bf64bf801c836a40b0100d0961533737c57e9b7337b981a99f63f600f90647703f0640f6594dd9f26436024a1f90f174769bad5a283271e6d7f49dec90a05bd771dd0502dc2170ccf98ade27e858eb5686ac900000000ae1bc4246ae316c6af10bf02088b4bb2ac89c96e58578dc50eddbf01ece3cb8a363ecbeb8198997115d7151f691a2a755d8233e006dd38ed5ba350bd6aad3bf6f5108083f0100f8a20666e92ec7254ce7284159057be455d16134d65ce69c4b906b76427224b69750b779d81eb6e37e1db62b1788ff918433787f8026ef5c518113d4841b5ca4dbe8d4afff527513a2efc8403be48e494b3de33b1deefd9d902e8dc868f30161c2cd13621b0a20362181186ff8cf4c8d58d74822f92554287ee157e9f1597c3e2e238f382a91bf48b4de88363c841bd7a8cddae334429ccf45bd3d434d9ecf74634ffc9539010f0d36e672b9d668cc6762c0b25e4a527fb4d184ba84498b1367e4b31faf75f1b3dcecfd80c57015d8cd16171507add30833865fc1a42780e9d57bb14a6ebea4018d26e18747546fc7a4a619753fd9bea132058eb90f9b80549473eea2fb9bc43d38d8719a1cca094bd933ceef87a3ec0c2ac70d5f843425100950000009e000000000008000018779600b1f2ae5ed34f5b7e77278f7ded9f030000002e050000009f95a59418f612dfa87c654043da1a59c3c43c7884ab65d4b34984afe30c67179c4f5a3ba0e491f2b942b754a3c0d5b878c4ad63591c3fc7d3a4d4296d4bab0a88e55ff9c2536654bb2f83e8015fac216119e8ce582698938c9a331a974087b71f07e50300f7ff00d03bf057b408c86a1165bd9a1bdbf3dff88c9b2173a75d5fc82dce6d8a3f297231e33588d7cf183109c1118d94a41d48f8efcf193ff26908accba23f1ec1cff64a1b912ededeb080f9a241e07709e6dd6a3a7e18200c9e80b9634e6f0c4d000000000000000000000000000000005e50e77d04fcf8931ad07b38a39957e6b3a3c909000000e9d694e483e848fe0d00ee7c7d6cc30932a9575aa8808d10a4963560250bb4e60e88c726f63662cb143daf4b9ebd0774998a59fbb42dc35f12452cca456a12b7d15cf3ce7ea350e9510e96527cde622998683e65b235c284543ca32436f9e705dff00f08df1115175628a327876dea291480c2dde8a59d1856eed2b502965038af0d56e49e0e2e9cb06b2927b2eec3f42fa0e4d0f2e25104805f386d460e212c27ac7bafe6a0078f8648ff9f1e0257338ae58457fb27b29430cc9ac6a33ea11b88ae8bc95dffa293aa69d6d47f89b28a25a7ec2fce6691549990f93d1f02e1b619813699303b6b1260d5537e85315551adabe00c98bd7aa06e7f00c89f11a410518d181cbfb9bdb9160af19f1fc456b5fc4f099814631024b734c0cd8843c5cb124a21092e6cdd8aa2f4d3f93e92c6d850898890d9449e3f499af92be74ba8ba7928feabbd99d6288dece7513c50b973bab87214415078857d18032ab5adb8d4bf32405cc5f63eba7e60bcd0098fd7957943b3c4cf13de4e049e06ad7ebc236d1088c99d35f40555364ff86cab4542261999bccd3269e51d10900a1c05696b47ff33a159abce6bb1d69193bd01f59f1d3f431b4e0868db623cb8375baa50785b8fcd37ce4c52abe43c1e3368735022e7cc7a9b397b494d0183cbd8dae2ba19b32adc91444f519ad33f7f2680e3cf7ecd3cfc67816eb66b1faa78dd8e3f7e233b6048c53813e6b508dfc713583d8ef8f9cfff5cdae59aa7aca654b1740c90eb71ca000000000000000000000000000000000000000000faa53c07b5f590ee4c8bfbd828972bb7bbc8ed7ae23bf3bca7eb378ba0e912b150dde95dafe80ee043a1d640fd000000e4a2d2aa0607b026f78417471e6ea0d1e86b309b29d0dae2d2c9c730ac21cc2a6213596a784a09775f86a9e6d5b6c7b3c5d10177a873edb630fdf9b1e11005a1ce41d04a2ad3f5d25a1595e7609849033d2e86ac682f2f0cde376f50a88a3ab5e83f56e43a07641b82c077fa1479b79e85c71a9c00000000000000078ce7c4ab383dac0325fa7f4ffb201c479265ff572dd061679c0000000000000f4f6b4ef8eb757ac80dc44711ae17816e32e38d7c894ab51238b2d7051ee26121404c0ade6faea7e72449cf38be7173b066f3a7835a31f1516c4cb1fda57ec8c19bc2800e246c1b64cf278c7afb3c9a5e346bdb259ac6788eefd5086e45554c8e2bdde8a3ac990dd929277a6af1876940c7c012f4b7d3d7aa68f2f07d83e925b326b05f13"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) 23:11:27 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x4, 0x0, 0xb, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:27 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x1, 0x2, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x1) 23:11:27 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x1}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000180)=""/247, 0x28, 0xf7, 0x1}, 0x20) 23:11:27 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa}]}]}}, &(0x7f0000000180)=""/247, 0x2e, 0xf7, 0x1}, 0x20) 23:11:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001640)=[{0x0, 0x7ffffffff000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 23:11:27 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0xffff8000}]}}, &(0x7f0000000180)=""/247, 0x26, 0xf7, 0x1}, 0x20) 23:11:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x0, 0x4}, 0x48) 23:11:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10}, 0x48) 23:11:27 executing program 1: socketpair(0x10, 0x2, 0x10001, &(0x7f0000000040)) 23:11:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001640), 0x9}, 0x0) 23:11:28 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xe, &(0x7f0000004400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) 23:11:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x0, 0x0, 0x2}, 0x48) 23:11:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@rc={0x1f, @fixed}, 0xfffffffffffffdac, 0x0}, 0x0) 23:11:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 23:11:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 23:11:28 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f0000000100)=""/132, 0x26, 0x84, 0x1}, 0x20) 23:11:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x96, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 23:11:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vcan0\x00', 0x1}) ioctl$TUNGETFILTER(r0, 0x800454e0, 0x0) 23:11:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000000)="e2", 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001640)=[{0x0, 0x7ffffffff000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 23:11:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vcan0\x00', 0x1}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)) 23:11:28 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f00000007c0)) 23:11:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 23:11:29 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 23:11:29 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0x0, 0x0) 23:11:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 23:11:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x2100) 23:11:29 executing program 3: keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000080)='asymmetric\x00', 0x0) 23:11:29 executing program 5: bpf$PROG_LOAD_XDP(0xf, 0x0, 0x0) 23:11:29 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$sock(r0, &(0x7f0000001b80)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f00000018c0)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x18}}], 0x1, 0x0) 23:11:29 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000000), 0x4) 23:11:29 executing program 2: syz_usbip_server_init(0x6e4167d2874f3ea1) 23:11:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x0, 0x0, 0x80, 0x0, 0x1}, 0x48) 23:11:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x0, 0x5, 0x0, 0x0) 23:11:29 executing program 5: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)='syz') 23:11:30 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$clear(0x7, r1) 23:11:30 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/27, 0x1b, 0x1, 0x0}, &(0x7f0000000200)=0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getrule={0x14, 0x22, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24088000}, 0x48001) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/27, 0x1b, 0x1, &(0x7f0000000100)=""/162, 0xa2}, &(0x7f0000000200)=0x40) r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, 0x0) 23:11:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x48001) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) pipe2$watch_queue(0x0, 0x80) 23:11:30 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000200)) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/28, 0x1c, 0x1, &(0x7f0000000100)=""/150, 0x96}, &(0x7f0000000200)=0x40) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='\x00', r2) 23:11:30 executing program 5: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)='syz') 23:11:30 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$clear(0x7, r1) 23:11:30 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x10, r0, 0x0, 0x0, 0x0) 23:11:30 executing program 3: request_key(&(0x7f0000000480)='dns_resolver\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0) 23:11:30 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002980)={0x6, 0x3, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, &(0x7f00000018c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001900)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x48001) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) pipe2$watch_queue(0x0, 0x80) 23:11:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)='=', 0x1}], 0x1, &(0x7f00000028c0)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 23:11:30 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002980)={0x6, 0x3, &(0x7f0000001800)=@framed={{0x18, 0xb}}, &(0x7f00000018c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001900)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:30 executing program 5: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)='syz') 23:11:30 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0x0) 23:11:30 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000001c0)) 23:11:31 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x48001) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) pipe2$watch_queue(0x0, 0x80) 23:11:31 executing program 1: keyctl$KEYCTL_MOVE(0x19, 0x0, 0x0, 0x0, 0x0) 23:11:31 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x140, &(0x7f00000007c0)) 23:11:31 executing program 5: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)='syz') 23:11:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002980)={0x6, 0x3, &(0x7f0000001800)=@framed={{}, [], {0x95, 0x0, 0x0, 0xd6030000}}, &(0x7f00000018c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) 23:11:31 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000240)="12", 0x1}], 0x2}, 0x0) 23:11:31 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x48001) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) pipe2$watch_queue(0x0, 0x80) [ 290.444691][ T5598] ======================================================= [ 290.444691][ T5598] WARNING: The mand mount option has been deprecated and [ 290.444691][ T5598] and is ignored by this kernel. Remove the mand [ 290.444691][ T5598] option from the mount to silence this warning. [ 290.444691][ T5598] ======================================================= 23:11:31 executing program 5: request_key(&(0x7f0000000000)='logon\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)='}\x00', 0x0) 23:11:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@security={'security\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x210, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "27578e15822f9a34b45e96ed232bc65eefbb91cb58dd056a72e90065f6f4"}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 23:11:31 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x1000000, 0x4) 23:11:31 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002980)={0x19, 0x3, &(0x7f0000001800)=@framed, &(0x7f00000018c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:31 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x6, 0x4) 23:11:31 executing program 0: socketpair(0x1d, 0x0, 0x5658ac5, &(0x7f0000000000)) 23:11:32 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$clear(0x7, r1) 23:11:32 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x7000) 23:11:32 executing program 3: syz_mount_image$udf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0/file0\x00', 0xed195e8afa7be976) fchown(r0, 0x0, 0x0) 23:11:32 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 23:11:32 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x36, 0x0, &(0x7f0000000080)) 23:11:32 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002980)={0x6, 0x2, &(0x7f0000001800)=@framed, &(0x7f00000018c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001900)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:32 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002980)={0x6, 0x3, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f00000018c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001900)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', &(0x7f0000000080)=@ethtool_coalesce={0xe}}) 23:11:32 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x19, &(0x7f0000000040)={@mcast1}, 0x14) 23:11:32 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="185300001000000000000099"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:32 executing program 1: sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r0 = eventfd2(0x8001, 0x0) read$eventfd(r0, &(0x7f0000000540), 0x8) 23:11:32 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000001980)={@broadcast, @local, @val, {@ipv6}}, 0x0) 23:11:32 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000640)={@local, @remote, @val, {@ipv6}}, 0x0) 23:11:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights], 0x10}, 0xe) 23:11:32 executing program 3: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 23:11:33 executing program 1: msync(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0) 23:11:33 executing program 0: socket$inet(0x2, 0x4003, 0x0) 23:11:33 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000000)) 23:11:33 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) 23:11:33 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000080)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 23:11:33 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000140)={@random="6f09f9ddd3e4", @broadcast, @val, {@ipv4}}, 0x0) 23:11:33 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 23:11:33 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000080)={@random="ab3ed99a60c3", @broadcast, @val, {@ipv4}}, 0x0) 23:11:33 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002500)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004540)={0x2020}, 0x2020) 23:11:33 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpgid(0x0, r1) 23:11:33 executing program 4: syz_genetlink_get_family_id$net_dm(&(0x7f0000000600), 0xffffffffffffffff) 23:11:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x0, 0x440}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:33 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x880) 23:11:33 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0xb, &(0x7f0000000300)=@framed={{}, [@kfunc, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @ldst={0x0, 0x1, 0x2, 0x5, 0xa, 0x40, 0xfffffffffffffffc}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:11:33 executing program 3: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x42000000) 23:11:34 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x4020940d, 0x0) 23:11:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 23:11:34 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/sem\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:11:34 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000024c0)='/proc/bus/input/devices\x00', 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) 23:11:34 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 23:11:34 executing program 5: socketpair(0x2, 0x1, 0x8, &(0x7f0000000180)) 23:11:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r1, 0x585fd15bee2207b7, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x2c}}, 0x0) 23:11:34 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 23:11:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 23:11:35 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x514) 23:11:35 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x240) 23:11:35 executing program 3: r0 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$damon_init_regions(r0, 0x0, 0x0) 23:11:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8901, &(0x7f0000000100)={'sit0\x00', 0x0}) 23:11:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}}, 0x0) 23:11:35 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) 23:11:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000c80)={'ip6tnl0\x00', &(0x7f0000000c00)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 23:11:35 executing program 5: syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x0, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x3, 0x3f}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x1f, 0x19, 0x9, 0x20, 0x5}, 0x5d, &(0x7f0000000180)={0x5, 0xf, 0x5d, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x24, 0x7, 0x4f, 0x7, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x10, 0x6, 0xf0cd, 0xf0f, 0x5, [0x0, 0x0, 0x3fff, 0x0, 0xc0, 0xff00c0]}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x8, 0xff00, 0x3f, [0x101c0c0, 0xffff6f, 0xfebd2d6dbfb18d73, 0xc0f0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x40, 0x8, 0x1}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x402}}, {0x66, &(0x7f0000000240)=@string={0x66, 0x3, "f7913718a1ce440b8d04f54c4fd3d8f30b4207ca29f2ef8befa3d72ac689eaf0c242092482988bc4a7cfc678d66cd8d94e00ddd8525a951d739df7b21b4dfbe1e8e3263770d19252241cd61a66138bdd7b9a2dabb372356d46066641ebbfd23ce982b4c9"}}]}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @broadcast}, &(0x7f0000000340)=0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r0) openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x84) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x9, 0x240700) 23:11:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)) 23:11:35 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x5421, 0x0) 23:11:35 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 23:11:35 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000024c0)='/proc/bus/input/devices\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/71, 0x47) 23:11:36 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f00000029c0)='/sys/block/loop2', 0x0, 0x0) 23:11:36 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) 23:11:36 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f00000024c0)='/proc/slabinfo\x00', 0x0, 0x0) 23:11:36 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xc602, 0x0) [ 295.125302][ T3542] usb 6-1: new full-speed USB device number 2 using dummy_hcd 23:11:36 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@e={0xff, 0xc}) 23:11:36 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x86c01) 23:11:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @dev}, 0xc) [ 295.524329][ T3542] usb 6-1: not running at top speed; connect to a high speed hub [ 295.604154][ T3542] usb 6-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.618112][ T3542] usb 6-1: config 1 interface 0 has no altsetting 0 [ 295.814625][ T3542] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 295.824350][ T3542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.832774][ T3542] usb 6-1: Product: syz [ 295.837383][ T3542] usb 6-1: Manufacturer: 釷ᠷ캡ୄÒä³µíï˜äˆ‹ì¨‡ïˆ©è¯¯ê¯â«—视䋂â‰é¢‚쒋쾧磆泖N婒ᶕ鵳닷䴛î¨ãœ¦í…°åŠ’ᰤ᫖á¦é©»ê¬­çŠ³æ´µÙ†ä…¦ë¿«ã³’苩즴 [ 295.854224][ T3542] usb 6-1: SerialNumber: syz [ 296.294226][ T3542] usb 6-1: USB disconnect, device number 2 23:11:37 executing program 5: clock_getres(0x0, 0x0) syz_clone(0x28cc2080, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) syz_clone(0x4200000, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="426fb7843741d904a7be9ad8788b423608ccc05722e50eab21bde859d666e305cfdd64858b0a97a2869128d934962950aae6762ccb7b1eca7f23d84297a8443c96efa53abad877d470837c1ae1037fc7753b81ffa8346824576889f800624471da63b651c0b6d5c5e25f96c3d9522db8a5262afeeaa670b57ee4bbe306b50c6ef3acb2fcc14b1645c31f614c7727a2f69258f07d1fccd8c4d2735ee73e") 23:11:37 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 23:11:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1f}, 0x48) 23:11:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x119bcf25666abf13, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 23:11:37 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 23:11:37 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) [ 296.894083][ T3137] Bluetooth: hci0: command 0x0406 tx timeout [ 296.900691][ T3137] Bluetooth: hci3: command 0x0406 tx timeout 23:11:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) [ 296.958762][ T3137] Bluetooth: hci5: command 0x0406 tx timeout 23:11:38 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000040)) 23:11:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xb16, 0xd, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) [ 297.044932][ T3137] Bluetooth: hci1: command 0x0406 tx timeout [ 297.068299][ T3137] Bluetooth: hci2: command 0x0406 tx timeout 23:11:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-neon\x00'}, 0x58) 23:11:38 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f00000021c0)={0x23, 0x0, 0xad}, 0x10) [ 297.162270][ T3137] Bluetooth: hci4: command 0x0406 tx timeout 23:11:38 executing program 3: socketpair(0x2c, 0x3, 0x7fff, &(0x7f0000000000)) 23:11:38 executing program 5: semget(0x0, 0x2, 0x600) 23:11:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 23:11:38 executing program 2: r0 = socket(0x18, 0x2, 0x0) getsockname$inet(r0, 0x0, 0x0) 23:11:38 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x40) symlinkat(&(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 23:11:39 executing program 3: openat(0xffffffffffffffff, 0x0, 0x400, 0x0) 23:11:39 executing program 2: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x6018, 0xffffffffffffffff, 0x0) 23:11:39 executing program 0: r0 = getgid() getgroups(0x1, &(0x7f0000000000)=[r0]) r2 = getgid() setregid(r1, r2) 23:11:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) 23:11:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 23:11:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=[@cred], 0x20}, 0x408) 23:11:39 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:11:39 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) 23:11:39 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) readlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 23:11:40 executing program 5: socket$inet(0x2, 0x0, 0x9) 23:11:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 23:11:40 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @local, @val, {@ipv4}}, 0x0) 23:11:40 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000140)) 23:11:40 executing program 2: setitimer(0x0, &(0x7f0000000500)={{0x0, 0x7}, {0x0, 0x6}}, &(0x7f0000000540)) 23:11:40 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0xda05118) 23:11:40 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa, 0x0}, 0x0) 23:11:40 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x3}, 0xc) 23:11:40 executing program 4: socketpair(0x1, 0x3, 0x81, 0x0) 23:11:41 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) 23:11:41 executing program 0: mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001240), 0x20, 0x0) 23:11:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="cc", 0x1}], 0x4}, 0x0) 23:11:41 executing program 1: open$dir(&(0x7f0000002940)='./file\x00', 0x200, 0x0) 23:11:41 executing program 3: msgget(0x2, 0x70f) 23:11:41 executing program 4: r0 = semget$private(0x0, 0x3, 0x104) semctl$GETNCNT(r0, 0x0, 0x3, &(0x7f0000000000)=""/249) 23:11:41 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) 23:11:41 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x30200, 0x0) 23:11:41 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) getpeername$unix(r1, 0x0, &(0x7f00000000c0)) 23:11:42 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r0, &(0x7f0000003480), &(0x7f00000010c0)=0xfee) 23:11:42 executing program 1: open$dir(&(0x7f0000000100)='./file0\x00', 0x10a30, 0x0) 23:11:42 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup(r0) 23:11:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) sendto$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 23:11:42 executing program 5: shmget(0x2, 0x2000, 0x298, &(0x7f0000ffe000/0x2000)=nil) 23:11:42 executing program 0: msync(&(0x7f0000ff5000/0x6000)=nil, 0x6000, 0x2) 23:11:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x76, &(0x7f0000000100)=@assoc_value={r2}, 0x8) 23:11:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_b, @from_mac=@broadcast}, 0x0, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x44}}, 0x0) 23:11:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:42 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acff0"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:11:42 executing program 0: getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140)) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 23:11:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="25003300b0080000080211000000080211000001ffffffffffff0000000001"], 0x44}}, 0x0) 23:11:43 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x76, &(0x7f0000000100)=@assoc_value={r2}, 0x8) 23:11:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_b, @from_mac=@broadcast}, 0x0, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x44}}, 0x0) [ 302.157371][ T3542] usb 3-1: new high-speed USB device number 2 using dummy_hcd 23:11:43 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000000000000020"], &(0x7f0000000180)=""/223, 0x1a, 0xdf, 0x1}, 0x20) 23:11:43 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x5452, &(0x7f0000000080)=""/29) 23:11:43 executing program 5: select(0xfffffe56, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xea60}) 23:11:43 executing program 1: syz_open_dev$vcsn(&(0x7f0000000940), 0x2, 0x0) select(0x40, &(0x7f0000000100), &(0x7f0000000040)={0x9}, 0x0, 0x0) [ 302.404336][ T3542] usb 3-1: Using ep0 maxpacket: 8 [ 302.524496][ T3542] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 302.533125][ T3542] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.543721][ T3542] usb 3-1: config 0 has no interface number 0 [ 302.550625][ T3542] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 23:11:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) [ 302.566171][ T3542] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.580722][ T3542] usb 3-1: config 0 interface 52 has no altsetting 0 23:11:43 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b2, 0x0) 23:11:43 executing program 4: getitimer(0x1, &(0x7f0000002500)) [ 302.976587][ T3542] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 302.986294][ T3542] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 302.995292][ T3542] usb 3-1: Product: syz [ 302.999711][ T3542] usb 3-1: Manufacturer: syz [ 303.004674][ T3542] usb 3-1: SerialNumber: syz [ 303.081549][ T3542] usb 3-1: config 0 descriptor?? [ 303.346973][ T3542] input: syz syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input6 [ 303.548818][ T3542] usb 3-1: USB disconnect, device number 2 23:11:45 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acff0"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:11:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000280)) 23:11:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000780)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x17, 0x0, "2bbb19e5631df896ba98674d0b5600000000000000186049da15bffbdd1a3e02ca0718c73559bc4fe9801d897649294687be6979a0b60bafc062c41c7373af99", "fd623e60b1486a5e79ab919cff4f72d339f1538f1d1c4b68318117e2a6d5fe49"}) 23:11:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x80104592, &(0x7f0000000080)=""/29) 23:11:45 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x40084504, &(0x7f0000000080)=""/29) 23:11:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0xeac00) ioctl$EVIOCGSW(r0, 0x5452, &(0x7f0000000080)=""/29) 23:11:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "d49845ff9c29b4b67252b8148cd13e3c7e558f788b68014f1486322568a37880012b722e3b814507b795ff41115d2bc28fce74d8e7ad05fe6800965fb30e1e3f", "26075e01c2a72fa8d21bbf6479207ad9a66681393ece49c9e05618ca49395405"}) 23:11:45 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000014c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\x00'}]}}, &(0x7f0000000300)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 23:11:45 executing program 0: getresuid(&(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0)) 23:11:45 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x40044581, 0x0) 23:11:45 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/53, 0x35}], 0x1) 23:11:45 executing program 5: pipe2$9p(&(0x7f00000000c0), 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, 0x0, 0x0) [ 304.634063][ T3542] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 304.913949][ T3542] usb 3-1: Using ep0 maxpacket: 8 [ 305.044667][ T3542] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 305.056280][ T3542] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.067019][ T3542] usb 3-1: config 0 has no interface number 0 [ 305.073358][ T3542] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 305.084802][ T3542] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.098622][ T3542] usb 3-1: config 0 interface 52 has no altsetting 0 [ 305.274240][ T3542] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 305.283494][ T3542] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 305.292612][ T3542] usb 3-1: Product: syz [ 305.297171][ T3542] usb 3-1: Manufacturer: syz [ 305.301918][ T3542] usb 3-1: SerialNumber: syz [ 305.312147][ T3542] usb 3-1: config 0 descriptor?? [ 305.571525][ T3542] input: syz syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input7 [ 305.790494][ T3137] usb 3-1: USB disconnect, device number 3 [ 305.797043][ C0] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 23:11:47 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acff0"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:11:47 executing program 1: socketpair(0x9, 0x0, 0x0, &(0x7f0000000200)) 23:11:47 executing program 4: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) socketpair(0xa, 0x0, 0x0, &(0x7f0000001300)) 23:11:47 executing program 3: socketpair(0xa, 0x0, 0x0, &(0x7f0000001300)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 23:11:47 executing program 0: add_key$fscrypt_v1(&(0x7f00000008c0), 0x0, 0x0, 0x0, 0x0) 23:11:47 executing program 5: syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x101100) 23:11:47 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x6, r0, &(0x7f00000009c0)=""/140, 0x8c) 23:11:47 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:11:47 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:11:48 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x78, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0x1, 0x8, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x2, 0x6, 0x0, 0x7f, {{0x7, 0x24, 0x6, 0x0, 0x0, "cfd0"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x5, 0x0, 0x2}, [@obex={0x5, 0x24, 0x15, 0x8001}, @country_functional={0xc, 0x24, 0x7, 0x2, 0x5, [0x0, 0x1, 0x41]}, @dmm={0x7, 0x24, 0x14, 0xffe0, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x0, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0xed, 0xf8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xff, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x59, 0x5, 0x90}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x81, 0x6, 0x0, 0x40, 0x10}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x6c, 0x6, 0x3603}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xb5, 0x9, 0x8000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x0, 0x20, 0x7}]}, 0x5, [{0x5a, &(0x7f0000000140)=@string={0x5a, 0x3, "ad8f7c2256a926f28d71aa680b8bade4aaa890ec61053131ce83f98f181449a166f4ec9cbb08df796d6386e1e1d87c7b19c87b11fcdec482aaf0b5196fea4188afe509f506dbea294fb71170acf099c010fdfe6ea265637d"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x405}}, {0x94, &(0x7f0000000240)=@string={0x94, 0x3, "8ff2ba4ff25618db482610e1a185a2b23bc7a9995af37ae7c24241539752a0f5c87cd6f4d61bae38baba8a5033d7704ad682b90d2a77f862db92665aebff124bd5ce477c64fe1a47ff97a6bf33f47b4541d476043c87577f974d62ce528ffef4d18a59e198a421d62fc1db436ebf4f3f6170978f982e098b7f81f20c1ad5bf13db4516bd2bf0a56f8ef824cfc94131f192ce"}}, {0x8e, &(0x7f0000000300)=@string={0x8e, 0x3, "f80a1c72a4b831627ed2586d9210df9c33be16e5eac2ec1bbc856c8e735aecfbf6ad4a0a0b2c111cfa9e54e381e2179e8b593eb67f654132d555b9a2169ddb0844782e03c052989a1abb503e21ca7718db1f37978b4e597540a3e4b516725dc3a96886e4ba75eafda01cb1cab6bdb6dc57ab8f3c7ed67d9823ad20886ca08fbe35e71f9d4af8db6afbb157e7"}}]}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0xfffffffffffffffb, 0x0) [ 306.944693][ T5925] loop1: detected capacity change from 0 to 8 [ 306.983975][ T3542] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 307.032058][ T5925] Unable to read inode block [ 307.050213][ T5928] loop0: detected capacity change from 0 to 4 23:11:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32], 0x50}}, 0x0) [ 307.115565][ T5928] MINIX-fs: bad superblock or unable to read bitmaps 23:11:48 executing program 4: syz_usb_connect$cdc_ecm(0x2, 0x7a, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x1, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x2, 0x6, 0x0, 0x7f, {{0x9, 0x24, 0x6, 0x0, 0x0, "cfd0eaf2"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x5, 0x0, 0x2}, [@obex={0x5, 0x24, 0x15, 0x8001}, @country_functional={0xc, 0x24, 0x7, 0x2, 0x5, [0x0, 0x1, 0x41]}, @dmm={0x7, 0x24, 0x14, 0xffe0, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x0, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0xed, 0xf8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xff, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x59, 0x5, 0x90}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x81, 0x6, 0x9, 0x40, 0x10}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x6c, 0x6, 0x3603}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xb5, 0x9, 0x8000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x0, 0x20, 0x7}]}, 0x5, [{0x44, &(0x7f0000000140)=@string={0x44, 0x3, "ad8f7c2256a926f28d71aa680b8bade4aaa890ec61053131ce83f98f181449a166f4ec9cbb08df796d6386e1e1d87c7b19c87b11fcdec482aaf0b5196fea4188afe5"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x405}}, {0x94, &(0x7f0000000240)=@string={0x94, 0x3, "8ff2ba4ff25618db482610e1a185a2b23bc7a9995af37ae7c24241539752a0f5c87cd6f4d61bae38baba8a5033d7704ad682b90d2a77f862db92665aebff124bd5ce477c64fe1a47ff97a6bf33f47b4541d476043c87577f974d62ce528ffef4d18a59e198a421d62fc1db436ebf4f3f6170978f982e098b7f81f20c1ad5bf13db4516bd2bf0a56f8ef824cfc94131f192ce"}}, {0x7d, &(0x7f0000000300)=@string={0x7d, 0x3, "f80a1c72a4b831627ed2586d9210df9c33be16e5eac2ec1bbc856c8e735aecfbf6ad4a0a0b2c111cfa9e54e381e2179e8b593eb67f654132d555b9a2169ddb0844782e03c052989a1abb503e21ca7718db1f37978b4e597540a3e4b516725dc3a96886e4ba75eafda01cb1cab6bdb6dc57ab8f3c7ed67d9823ad20"}}]}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0xfffffffffffffffb, 0x0) [ 307.264245][ T3542] usb 3-1: Using ep0 maxpacket: 8 [ 307.405394][ T3542] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 307.414356][ T3542] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.425291][ T3542] usb 3-1: config 0 has no interface number 0 [ 307.431574][ T3542] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 307.444516][ T3542] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.459766][ T3542] usb 3-1: config 0 interface 52 has no altsetting 0 [ 307.635519][ T124] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 307.824473][ T3542] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 307.834039][ T3542] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 307.843160][ T3542] usb 3-1: Product: syz [ 307.845281][ T3137] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 307.847614][ T3542] usb 3-1: Manufacturer: syz [ 307.859915][ T3542] usb 3-1: SerialNumber: syz [ 307.870185][ T3542] usb 3-1: config 0 descriptor?? [ 308.054650][ T124] usb 4-1: config 1 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 308.066227][ T124] usb 4-1: config 1 interface 0 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 308.080770][ T124] usb 4-1: config 1 interface 0 has no altsetting 0 [ 308.157039][ T3542] input: syz syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input8 [ 308.255512][ T3137] usb 5-1: not running at top speed; connect to a high speed hub [ 308.275724][ T124] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.285925][ T124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.294515][ T124] usb 4-1: Product: Ð… [ 308.298792][ T124] usb 4-1: Manufacturer: ј [ 308.303780][ T124] usb 4-1: SerialNumber: ïŠä¾ºå›²â™ˆî„薡늢윻馩ïšîºä‹‚å劗糈ᯖ㢮몺傊휳䩰苖ඹ眪拸鋛婦￫䬒컕籇﹤䜚響뾦ï³ä•»í‘Ѷ蜼罗䶗칢轒諑꒘혡섯ä›ë½®ã½ç¡è¾—⺘謉腿ೲ픚Ꮏ䗛봖澥켤䇉캒 [ 308.384647][ T3137] usb 5-1: config 1 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 308.385136][ T5931] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 308.398361][ T3137] usb 5-1: config 1 interface 0 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 308.409389][ T5931] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 308.419273][ T3137] usb 5-1: config 1 interface 0 has no altsetting 0 [ 308.445748][ T3688] usb 3-1: USB disconnect, device number 4 [ 308.585501][ T3137] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.595765][ T3137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.604163][ T3137] usb 5-1: Product: Ð… [ 308.608369][ T3137] usb 5-1: Manufacturer: ј [ 308.613719][ T3137] usb 5-1: SerialNumber: ïŠä¾ºå›²â™ˆî„薡늢윻馩ïšîºä‹‚å劗糈ᯖ㢮몺傊휳䩰苖ඹ眪拸鋛婦￫䬒컕籇﹤䜚響뾦ï³ä•»í‘Ѷ蜼罗䶗칢轒諑꒘혡섯ä›ë½®ã½ç¡è¾—⺘謉腿ೲ픚Ꮏ䗛봖澥켤䇉캒 [ 308.665325][ T5935] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 308.673349][ T5935] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 308.736065][ T124] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 308.765565][ T124] usb 4-1: USB disconnect, device number 2 [ 308.925996][ T3137] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 308.959528][ T3137] usb 5-1: USB disconnect, device number 2 23:11:50 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acff0"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:11:50 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:11:50 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:11:50 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 309.102064][ T5941] loop1: detected capacity change from 0 to 8 [ 309.126707][ T5940] loop0: detected capacity change from 0 to 4 [ 309.145180][ T5940] MINIX-fs: bad superblock or unable to read bitmaps 23:11:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b0000000600010001000000080005"], 0x50}}, 0x0) [ 309.164868][ T5941] Unable to read inode block 23:11:50 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000000)='[', 0x1, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) [ 309.229015][ T4268] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 309.239032][ T4268] Buffer I/O error on dev loop1, logical block 0, async page read [ 309.250306][ T4315] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 309.260866][ T4315] Buffer I/O error on dev loop0, logical block 0, async page read 23:11:50 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:11:50 executing program 4: syz_usb_connect$cdc_ecm(0x2, 0x7a, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x1, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x2, 0x6, 0x0, 0x7f, {{0x9, 0x24, 0x6, 0x0, 0x0, "cfd0eaf2"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x5, 0x0, 0x2}, [@obex={0x5, 0x24, 0x15, 0x8001}, @country_functional={0xc, 0x24, 0x7, 0x2, 0x5, [0x0, 0x1, 0x41]}, @dmm={0x7, 0x24, 0x14, 0xffe0, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x0, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0xed, 0xf8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xff, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x59, 0x5, 0x90}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x81, 0x6, 0x9, 0x40, 0x10}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x6c, 0x6, 0x3603}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xb5, 0x9, 0x8000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x0, 0x20, 0x7}]}, 0x5, [{0x5a, &(0x7f0000000140)=@string={0x5a, 0x3, "ad8f7c2256a926f28d71aa680b8bade4aaa890ec61053131ce83f98f181449a166f4ec9cbb08df796d6386e1e1d87c7b19c87b11fcdec482aaf0b5196fea4188afe509f506dbea294fb71170acf099c010fdfe6ea265637d"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x405}}, {0x94, &(0x7f0000000240)=@string={0x94, 0x3, "8ff2ba4ff25618db482610e1a185a2b23bc7a9995af37ae7c24241539752a0f5c87cd6f4d61bae38baba8a5033d7704ad682b90d2a77f862db92665aebff124bd5ce477c64fe1a47ff97a6bf33f47b4541d476043c87577f974d62ce528ffef4d18a59e198a421d62fc1db436ebf4f3f6170978f982e098b7f81f20c1ad5bf13db4516bd2bf0a56f8ef824cfc94131f192ce"}}, {0x8e, &(0x7f0000000300)=@string={0x8e, 0x3, "f80a1c72a4b831627ed2586d9210df9c33be16e5eac2ec1bbc856c8e735aecfbf6ad4a0a0b2c111cfa9e54e381e2179e8b593eb67f654132d555b9a2169ddb0844782e03c052989a1abb503e21ca7718db1f37978b4e597540a3e4b516725dc3a96886e4ba75eafda01cb1cab6bdb6dc57ab8f3c7ed67d9823ad20886ca08fbe35e71f9d4af8db6afbb157e7"}}]}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0xfffffffffffffffb, 0x0) 23:11:50 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:11:50 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0xffffffffffffffff) 23:11:50 executing program 3: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 309.695332][ T3137] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 309.725141][ T5949] loop0: detected capacity change from 0 to 4 [ 309.839253][ T5949] MINIX-fs: bad superblock or unable to read bitmaps [ 309.857634][ T5953] loop1: detected capacity change from 0 to 8 [ 309.898955][ T5953] Unable to read inode block [ 309.935232][ T3137] usb 3-1: Using ep0 maxpacket: 8 23:11:51 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 310.053938][ T124] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 310.055108][ T3137] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 310.070450][ T5959] loop3: detected capacity change from 0 to 4 [ 310.076812][ T3137] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.087340][ T3137] usb 3-1: config 0 has no interface number 0 [ 310.093942][ T3137] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 310.105199][ T3137] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.105438][ T5959] MINIX-fs: bad superblock or unable to read bitmaps [ 310.118445][ T3137] usb 3-1: config 0 interface 52 has no altsetting 0 [ 310.454645][ T5961] loop0: detected capacity change from 0 to 4 [ 310.478121][ T5961] MINIX-fs: bad superblock or unable to read bitmaps [ 310.514840][ T3137] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 310.524326][ T3137] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 310.532863][ T3137] usb 3-1: Product: syz [ 310.534546][ T124] usb 5-1: not running at top speed; connect to a high speed hub [ 310.537368][ T3137] usb 3-1: Manufacturer: syz [ 310.551039][ T3137] usb 3-1: SerialNumber: syz [ 310.581680][ T3137] usb 3-1: config 0 descriptor?? [ 310.635016][ T124] usb 5-1: config 1 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 310.646359][ T124] usb 5-1: config 1 interface 0 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 310.659879][ T124] usb 5-1: config 1 interface 0 has no altsetting 0 [ 310.836767][ T3137] input: syz syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input9 [ 310.894116][ T124] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.903770][ T124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.912050][ T124] usb 5-1: Product: Ð… [ 310.916927][ T124] usb 5-1: Manufacturer: ј [ 310.921573][ T124] usb 5-1: SerialNumber: ïŠä¾ºå›²â™ˆî„薡늢윻馩ïšîºä‹‚å劗糈ᯖ㢮몺傊휳䩰苖ඹ眪拸鋛婦￫䬒컕籇﹤䜚響뾦ï³ä•»í‘Ѷ蜼罗䶗칢轒諑꒘혡섯ä›ë½®ã½ç¡è¾—⺘謉腿ೲ픚Ꮏ䗛봖澥켤䇉캒 [ 311.054712][ T5952] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 311.079859][ T5952] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 311.160737][ T114] usb 3-1: USB disconnect, device number 5 [ 311.167213][ C0] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 311.356013][ T124] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 311.403823][ T124] usb 5-1: USB disconnect, device number 3 23:11:52 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acff0"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:11:52 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:11:52 executing program 5: syz_usb_connect$cdc_ecm(0x2, 0x7a, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x1, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x2, 0x6, 0x0, 0x7f, {{0x9, 0x24, 0x6, 0x0, 0x0, "cfd0eaf2"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x5, 0x0, 0x2}, [@obex={0x5, 0x24, 0x15, 0x8001}, @country_functional={0xc, 0x24, 0x7, 0x2, 0x5, [0x0, 0x1, 0x41]}, @dmm={0x7, 0x24, 0x14, 0xffe0, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x0, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0xed, 0xf8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xff, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x59, 0x5, 0x90}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x81, 0x6, 0x9, 0x40, 0x10}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x6c, 0x6, 0x3603}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xb5, 0x9, 0x8000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x0, 0x20, 0x7}]}, 0x5, [{0x44, &(0x7f0000000140)=@string={0x44, 0x3, "ad8f7c2256a926f28d71aa680b8bade4aaa890ec61053131ce83f98f181449a166f4ec9cbb08df796d6386e1e1d87c7b19c87b11fcdec482aaf0b5196fea4188afe5"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x405}}, {0x94, &(0x7f0000000240)=@string={0x94, 0x3, "8ff2ba4ff25618db482610e1a185a2b23bc7a9995af37ae7c24241539752a0f5c87cd6f4d61bae38baba8a5033d7704ad682b90d2a77f862db92665aebff124bd5ce477c64fe1a47ff97a6bf33f47b4541d476043c87577f974d62ce528ffef4d18a59e198a421d62fc1db436ebf4f3f6170978f982e098b7f81f20c1ad5bf13db4516bd2bf0a56f8ef824cfc94131f192ce"}}, {0x7d, &(0x7f0000000300)=@string={0x7d, 0x3, "f80a1c72a4b831627ed2586d9210df9c33be16e5eac2ec1bbc856c8e735aecfbf6ad4a0a0b2c111cfa9e54e381e2179e8b593eb67f654132d555b9a2169ddb0844782e03c052989a1abb503e21ca7718db1f37978b4e597540a3e4b516725dc3a96886e4ba75eafda01cb1cab6bdb6dc57ab8f3c7ed67d9823ad20"}}]}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_dev$MSR(0x0, 0xfffffffffffffffb, 0x0) 23:11:52 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xe3e}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7f, 0x7}}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x37, &(0x7f00000000c0)={0x5, 0xf, 0x37, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "117126106f381d0a56597e62238b5872"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0x2b}, @ss_container_id={0x14, 0x10, 0x4, 0x3e, "70a4b8b4339d1396a6c15d3ae2502f10"}]}, 0x1, [{0x90, &(0x7f0000000180)=@string={0x90, 0x3, "184e33e10ea1f11705bbdb65d07cc8477d5bbece6c5b385943addc29c6622807f1fdaa6786ee5394d8be0126dd6924568f931cc34f2a2f5638a3f1fc2826fb22b5cae74774cd6f2f87a755785f2726f42186db54bbb599cd1b3f15cbd6520cc149157ec947f5bc1fc67f85efdaa113e1b1da61abb862e5c9c452fe6d9d1b5fb265958a9dd043447f4feb0729c812"}}]}) 23:11:52 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 311.812105][ T5969] loop1: detected capacity change from 0 to 8 [ 311.846582][ T5968] loop0: detected capacity change from 0 to 4 [ 311.874977][ T5969] Unable to read inode block 23:11:52 executing program 4: syz_usb_connect$cdc_ecm(0x2, 0x7a, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x1, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x2, 0x6, 0x0, 0x7f, {{0x9, 0x24, 0x6, 0x0, 0x0, "cfd0eaf2"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x5, 0x0, 0x2}, [@obex={0x5, 0x24, 0x15, 0x8001}, @country_functional={0xc, 0x24, 0x7, 0x2, 0x5, [0x0, 0x1, 0x41]}, @dmm={0x7, 0x24, 0x14, 0xffe0, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x0, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0xed, 0xf8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xff, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x59, 0x5, 0x90}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x81, 0x6, 0x9, 0x40, 0x10}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x6c, 0x6, 0x3603}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xb5, 0x9, 0x8000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x0, 0x20, 0x7}]}, 0x5, [{0x5a, &(0x7f0000000140)=@string={0x5a, 0x3, "ad8f7c2256a926f28d71aa680b8bade4aaa890ec61053131ce83f98f181449a166f4ec9cbb08df796d6386e1e1d87c7b19c87b11fcdec482aaf0b5196fea4188afe509f506dbea294fb71170acf099c010fdfe6ea265637d"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x405}}, {0x94, &(0x7f0000000240)=@string={0x94, 0x3, "8ff2ba4ff25618db482610e1a185a2b23bc7a9995af37ae7c24241539752a0f5c87cd6f4d61bae38baba8a5033d7704ad682b90d2a77f862db92665aebff124bd5ce477c64fe1a47ff97a6bf33f47b4541d476043c87577f974d62ce528ffef4d18a59e198a421d62fc1db436ebf4f3f6170978f982e098b7f81f20c1ad5bf13db4516bd2bf0a56f8ef824cfc94131f192ce"}}, {0x8e, &(0x7f0000000300)=@string={0x8e, 0x3, "f80a1c72a4b831627ed2586d9210df9c33be16e5eac2ec1bbc856c8e735aecfbf6ad4a0a0b2c111cfa9e54e381e2179e8b593eb67f654132d555b9a2169ddb0844782e03c052989a1abb503e21ca7718db1f37978b4e597540a3e4b516725dc3a96886e4ba75eafda01cb1cab6bdb6dc57ab8f3c7ed67d9823ad20886ca08fbe35e71f9d4af8db6afbb157e7"}}]}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0xfffffffffffffffb, 0x0) [ 311.952102][ T5968] MINIX-fs: bad superblock or unable to read bitmaps 23:11:53 executing program 1: syz_mount_image$minix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:11:53 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 312.074000][ T114] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 312.097084][ T3137] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 312.324621][ T3548] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 312.333923][ T5975] loop1: detected capacity change from 0 to 8 23:11:53 executing program 1: syz_mount_image$minix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) [ 312.460467][ T5977] loop0: detected capacity change from 0 to 4 [ 312.467993][ T3544] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 312.495494][ T114] usb 6-1: not running at top speed; connect to a high speed hub [ 312.545363][ T3137] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.556956][ T3137] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.575816][ T3548] usb 3-1: Using ep0 maxpacket: 8 [ 312.589650][ T114] usb 6-1: config 1 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 312.602747][ T114] usb 6-1: config 1 interface 0 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 312.616931][ T114] usb 6-1: config 1 interface 0 has no altsetting 0 [ 312.620692][ T5977] MINIX-fs: bad superblock or unable to read bitmaps 23:11:53 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 312.665628][ T4268] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 312.715730][ T3548] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 312.724896][ T3548] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.735429][ T3548] usb 3-1: config 0 has no interface number 0 [ 312.741661][ T3548] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 312.752971][ T3548] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.766153][ T3548] usb 3-1: config 0 interface 52 has no altsetting 0 [ 312.815653][ T3137] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 312.825518][ T3137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.833918][ T3137] usb 4-1: Product: syz [ 312.838246][ T3137] usb 4-1: Manufacturer: syz [ 312.843075][ T3137] usb 4-1: SerialNumber: syz [ 312.849876][ T114] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.859298][ T114] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.867707][ T114] usb 6-1: Product: Ð… [ 312.871913][ T114] usb 6-1: Manufacturer: ј [ 312.876816][ T114] usb 6-1: SerialNumber: ïŠä¾ºå›²â™ˆî„薡늢윻馩ïšîºä‹‚å劗糈ᯖ㢮몺傊휳䩰苖ඹ眪拸鋛婦￫䬒컕籇﹤䜚響뾦ï³ä•»í‘Ѷ蜼罗䶗칢轒諑꒘혡섯ä›ë½®ã½ç¡è¾—⺘謉腿ೲ픚Ꮏ䗛봖澥켤䇉캒 [ 312.985475][ T5966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 313.014846][ T3544] usb 5-1: not running at top speed; connect to a high speed hub [ 313.040990][ T5966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 313.075212][ T3548] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 313.084733][ T3548] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 313.093309][ T3548] usb 3-1: Product: syz [ 313.098190][ T3548] usb 3-1: Manufacturer: syz [ 313.103793][ T3548] usb 3-1: SerialNumber: syz [ 313.111354][ T3544] usb 5-1: config 1 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 313.123375][ T3544] usb 5-1: config 1 interface 0 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 313.136722][ T3544] usb 5-1: config 1 interface 0 has no altsetting 0 [ 313.141682][ T5979] loop1: detected capacity change from 0 to 8 [ 313.169648][ T3548] usb 3-1: config 0 descriptor?? 23:11:54 executing program 1: syz_mount_image$minix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) [ 313.244510][ T5981] loop0: detected capacity change from 0 to 4 [ 313.284691][ T5981] MINIX-fs: bad superblock or unable to read bitmaps [ 313.305927][ T3544] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.317326][ T3544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.326071][ T3544] usb 5-1: Product: Ð… [ 313.330279][ T3544] usb 5-1: Manufacturer: ј [ 313.335088][ T3544] usb 5-1: SerialNumber: ïŠä¾ºå›²â™ˆî„薡늢윻馩ïšîºä‹‚å劗糈ᯖ㢮몺傊휳䩰苖ඹ眪拸鋛婦￫䬒컕籇﹤䜚響뾦ï³ä•»í‘Ѷ蜼罗䶗칢轒諑꒘혡섯ä›ë½®ã½ç¡è¾—⺘謉腿ೲ픚Ꮏ䗛봖澥켤䇉캒 [ 313.370954][ T3137] usbhid 4-1:1.0: can't add hid device: -71 [ 313.378122][ T3137] usbhid: probe of 4-1:1.0 failed with error -71 [ 313.406552][ T114] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 313.426747][ T3137] usb 4-1: USB disconnect, device number 3 [ 313.440506][ T3548] usb 3-1: Can not set alternate setting to 1, error: -71 [ 313.448291][ T3548] synaptics_usb: probe of 3-1:0.52 failed with error -71 [ 313.489281][ T3548] usb 3-1: USB disconnect, device number 6 [ 313.503455][ T114] usb 6-1: USB disconnect, device number 3 23:11:54 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 313.571003][ T5983] loop1: detected capacity change from 0 to 8 [ 313.579381][ T5973] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 313.605468][ T5973] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 313.742601][ T5985] loop0: detected capacity change from 0 to 4 [ 313.797727][ T5985] MINIX-fs: bad superblock or unable to read bitmaps [ 313.876343][ T3544] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 313.908646][ T3544] usb 5-1: USB disconnect, device number 4 23:11:55 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acff0"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:11:55 executing program 1: syz_mount_image$minix(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:11:55 executing program 3: syz_open_dev$sg(&(0x7f0000000080), 0x80000000, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 23:11:55 executing program 5: syz_mount_image$f2fs(0x0, &(0x7f0000001e00)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:11:55 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 314.070321][ T5988] loop1: detected capacity change from 0 to 8 [ 314.296232][ T5995] loop0: detected capacity change from 0 to 4 [ 314.309596][ T5995] MINIX-fs: bad superblock or unable to read bitmaps 23:11:55 executing program 4: syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) syz_io_uring_setup(0x5d54, &(0x7f0000000380)={0x0, 0x9d0e, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 23:11:55 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 23:11:55 executing program 1: syz_mount_image$minix(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:11:55 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000640), 0x0, 0x200080) 23:11:55 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 314.501345][ T5998] loop1: detected capacity change from 0 to 8 [ 314.517008][ T124] usb 3-1: new high-speed USB device number 7 using dummy_hcd 23:11:55 executing program 3: io_uring_setup(0x25f1, &(0x7f00000002c0)) 23:11:55 executing program 1: syz_mount_image$minix(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) [ 314.785548][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 314.817502][ T6006] loop0: detected capacity change from 0 to 4 [ 314.887053][ T6006] MINIX-fs: bad superblock or unable to read bitmaps [ 314.914781][ T124] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 314.923423][ T124] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.934552][ T124] usb 3-1: config 0 has no interface number 0 [ 314.941720][ T124] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 314.956270][ T124] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.970654][ T124] usb 3-1: config 0 interface 52 has no altsetting 0 [ 314.994324][ T6009] loop1: detected capacity change from 0 to 8 [ 315.187111][ T124] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 315.196931][ T124] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 315.205802][ T124] usb 3-1: Product: syz [ 315.210301][ T124] usb 3-1: Manufacturer: syz [ 315.215631][ T124] usb 3-1: SerialNumber: syz [ 315.256490][ T124] usb 3-1: config 0 descriptor?? [ 315.524353][ T124] usb 3-1: Can not set alternate setting to 1, error: -71 [ 315.532014][ T124] synaptics_usb: probe of 3-1:0.52 failed with error -71 [ 315.583969][ T124] usb 3-1: USB disconnect, device number 7 23:11:57 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acff0"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:11:57 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x0) 23:11:57 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xe3e}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) 23:11:57 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000011600)) 23:11:57 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 23:11:57 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 316.199576][ T6016] loop0: detected capacity change from 0 to 4 23:11:57 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x0, 0x3}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x7f, 0x7}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x34, 0x1f, 0x7, 0xff}, 0x2d, &(0x7f00000000c0)={0x5, 0xf, 0x2d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "117126106f381d0a56597e62238b5872"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0x2b, 0x6e}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x20, 0x80, 0x4}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c1d}}, {0xa6, &(0x7f0000000180)=@string={0xa6, 0x3, "184e33e10ea1f11705bbdb65d07cc8477d5bbece6c5b385943addc29c6622807f1fdaa6786ee5394d8be0126dd6924568f931cc34f2a2f5638a3f1fc2826fb22b5cae74774cd6f2f87a755785f2726f42186db54bbb599cd1b3f15cbd6520cc149157ec947f5bc1fc67f85efdaa113e1b1da61abb862e5c9c452fe6d9d1b5fb265958a9dd043447f4feb0729c812c5052ce5623ef6d97b6c88e2d3a1a0087f45e3635270"}}]}) 23:11:57 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000011600)) [ 316.328090][ T6016] MINIX-fs: bad superblock or unable to read bitmaps 23:11:57 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 316.423988][ T124] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 316.663961][ T3688] usb 3-1: new high-speed USB device number 8 using dummy_hcd 23:11:57 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000011600)) [ 316.804509][ T124] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 316.903964][ T3688] usb 3-1: Using ep0 maxpacket: 8 [ 316.954625][ T3542] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 317.010235][ T6028] loop0: detected capacity change from 0 to 4 [ 317.053285][ T124] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 317.064923][ T124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.073482][ T124] usb 5-1: Product: syz [ 317.078897][ T124] usb 5-1: Manufacturer: syz [ 317.083939][ T124] usb 5-1: SerialNumber: syz [ 317.097566][ T3688] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 317.109617][ T3688] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.120538][ T3688] usb 3-1: config 0 has no interface number 0 [ 317.126856][ T3688] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 317.138632][ T3688] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 23:11:58 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0xe3e}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x7f, 0x7}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x34, 0x1f, 0x7, 0xff}, 0x37, &(0x7f00000000c0)={0x5, 0xf, 0x37, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "117126106f381d0a56597e62238b5872"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0x2b, 0x6e}, @ss_container_id={0x14, 0x10, 0x4, 0x3e, "70a4b8b4339d1396a6c15d3ae2502f10"}]}, 0x2, [{0x0, 0x0}, {0xa8, &(0x7f0000000180)=@string={0xa8, 0x3, "184e33e10ea1f11705bbdb65d07cc8477d5bbece6c5b385943addc29c6622807f1fdaa6786ee5394d8be0126dd6924568f931cc34f2a2f5638a3f1fc2826fb22b5cae74774cd6f2f87a755785f2726f42186db54bbb599cd1b3f15cbd6520cc149157ec947f5bc1fc67f85efdaa113e1b1da61abb862e5c9c452fe6d9d1b5fb265958a9dd043447f4feb0729c812c5052ce5623ef6d97b6c88e2d3a1a0087f45e3635270208a"}}]}) [ 317.151762][ T3688] usb 3-1: config 0 interface 52 has no altsetting 0 [ 317.159394][ T6028] MINIX-fs: bad superblock or unable to read bitmaps 23:11:58 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 317.262159][ T124] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 317.355837][ T3688] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 317.365792][ T3688] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 317.374845][ T3688] usb 3-1: Product: syz [ 317.379187][ T3688] usb 3-1: Manufacturer: syz [ 317.384335][ T3688] usb 3-1: SerialNumber: syz [ 317.459910][ T124] usb 5-1: USB disconnect, device number 5 [ 317.536168][ T3542] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.569913][ T3688] usb 3-1: config 0 descriptor?? [ 317.661427][ T6033] loop0: detected capacity change from 0 to 4 [ 317.713297][ T6033] MINIX-fs: bad superblock or unable to read bitmaps [ 317.744632][ T3542] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 317.754811][ T3542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.763332][ T3542] usb 6-1: Product: syz [ 317.767823][ T3542] usb 6-1: Manufacturer: 丘ꄎ៱묅旛ç³äŸˆå­½ìº¾å­¬å¤¸êµƒâ§œæ‹†Ü¨ï·±æžªîº†é‘“뻘â˜æ§å˜¤éŽìŒœâ©å˜¯êŒ¸ï³±â˜¨â‹»ìªµäŸ§ìµ´â½¯êž‡ç¡•âŸï¦è˜¡å“›ë–»ì¶™ã¼›ì¬•å‹–섌ᕉ쥾ᾼ翆ꇚꭡ抸짥勄淾á®ë‰Ÿé•¥é¶Šä罄î­â¤‡á‹ˆ×…㹢汻ꇓࢠ䕿æ£ç’ [ 317.794287][ T3542] usb 6-1: SerialNumber: syz [ 317.854268][ T3688] usb 3-1: Can not set alternate setting to 1, error: -71 [ 317.862006][ T3688] synaptics_usb: probe of 3-1:0.52 failed with error -71 [ 317.930871][ T3688] usb 3-1: USB disconnect, device number 8 [ 317.964301][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 318.175448][ T3542] usbhid 6-1:1.0: can't add hid device: -22 [ 318.182748][ T3542] usbhid: probe of 6-1:1.0 failed with error -22 [ 318.208964][ T3542] usb 6-1: USB disconnect, device number 4 23:11:59 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:11:59 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x8000, &(0x7f0000011600)) 23:11:59 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 318.354226][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 23:11:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x28}}, 0x0) 23:11:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), 0xffffffffffffffff) [ 318.499174][ T6040] loop1: detected capacity change from 0 to 4 [ 318.549619][ T6040] MINIX-fs: bad superblock or unable to read bitmaps [ 318.551466][ T6039] loop0: detected capacity change from 0 to 4 [ 318.614349][ T25] usb 4-1: string descriptor 0 read error: -22 [ 318.621426][ T25] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 318.631397][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 23:11:59 executing program 5: sysfs$2(0x2, 0x0, &(0x7f0000019040)=""/102384) [ 318.671405][ T6039] MINIX-fs: bad superblock or unable to read bitmaps 23:11:59 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x8000, &(0x7f0000011600)) 23:11:59 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:11:59 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000061c0)={0x0, 0x0, &(0x7f0000006180)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x0) recvfrom$x25(r1, &(0x7f0000000000)=""/2, 0x2, 0x0, 0x0, 0x0) [ 319.099076][ T6050] loop1: detected capacity change from 0 to 4 [ 319.106332][ T25] usbhid 4-1:1.0: can't add hid device: -71 [ 319.112708][ T25] usbhid: probe of 4-1:1.0 failed with error -71 [ 319.123086][ T6051] loop0: detected capacity change from 0 to 4 [ 319.147908][ T25] usb 4-1: USB disconnect, device number 4 23:12:00 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001e40)={0x0, 0x0, 0x10}, 0x10) [ 319.219587][ T6051] MINIX-fs: bad superblock or unable to read bitmaps [ 319.230026][ T6050] MINIX-fs: bad superblock or unable to read bitmaps 23:12:00 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x0, @sdr}) 23:12:00 executing program 4: add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffa) 23:12:00 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:00 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:00 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x8000, &(0x7f0000011600)) 23:12:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}}, 0x0) [ 319.707904][ T6061] loop0: detected capacity change from 0 to 4 23:12:00 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000440), 0x0, 0x0) [ 319.758058][ T6063] loop1: detected capacity change from 0 to 4 [ 319.790184][ T6061] MINIX-fs: bad superblock or unable to read bitmaps 23:12:00 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 319.894560][ T6063] MINIX-fs: bad superblock or unable to read bitmaps 23:12:01 executing program 3: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 23:12:01 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0}], 0x8000, &(0x7f0000011600)) 23:12:01 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), 0xffffffffffffffff) 23:12:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}}, 0x0) [ 320.162677][ T6070] loop0: detected capacity change from 0 to 4 [ 320.216465][ T6070] MINIX-fs: bad superblock or unable to read bitmaps 23:12:01 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:01 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) 23:12:01 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 320.536276][ T6076] loop1: detected capacity change from 0 to 4 23:12:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}}, 0x0) [ 320.656232][ T6076] MINIX-fs: bad superblock or unable to read bitmaps 23:12:01 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0}], 0x8000, &(0x7f0000011600)) 23:12:01 executing program 4: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_setup(0x185, &(0x7f0000000780)=0x0) io_submit(r0, 0x0, 0x0) 23:12:02 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e000)=ANY=[], 0x9e44}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) [ 320.926288][ T6086] loop0: detected capacity change from 0 to 4 [ 320.973503][ T6086] MINIX-fs: bad superblock or unable to read bitmaps 23:12:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}}, 0x0) 23:12:02 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:02 executing program 2: r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) [ 321.212843][ T6094] loop1: detected capacity change from 0 to 4 23:12:02 executing program 3: syz_open_dev$mouse(&(0x7f0000000080), 0x7f, 0x4002) 23:12:02 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, 0x0) [ 321.296542][ T6094] MINIX-fs: bad superblock or unable to read bitmaps 23:12:02 executing program 5: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x218, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000004c0)) 23:12:02 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0}], 0x8000, &(0x7f0000011600)) [ 321.482611][ T6099] loop0: detected capacity change from 0 to 4 [ 321.553044][ T6099] MINIX-fs: bad superblock or unable to read bitmaps 23:12:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f00000026c0)='./file0\x00', 0x0, 0x2, &(0x7f00000023c0)=[{&(0x7f0000000000)="ca13b81dcb846ce56494", 0xa, 0x7}, {0x0, 0x0, 0xffffffffffffffe1}], 0x8007, &(0x7f0000000280)) [ 321.672764][ T4268] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.683220][ T4268] Buffer I/O error on dev loop0, logical block 0, async page read 23:12:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a2cbd7000fcdbdf25050000000c00060003000000030000000c00060003000000030000000c0006000000000000000000080003"], 0x48}}, 0x0) 23:12:02 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 321.803272][ T6108] loop1: detected capacity change from 0 to 4 [ 321.817607][ T6107] loop5: detected capacity change from 0 to 1 [ 321.879838][ T6107] NILFS (loop5): unable to read superblock [ 321.899893][ T6108] MINIX-fs: bad superblock or unable to read bitmaps 23:12:03 executing program 5: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x218, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000004c0)) [ 321.955111][ T6110] loop0: detected capacity change from 0 to 4 [ 322.008287][ T6110] MINIX-fs: bad superblock or unable to read bitmaps [ 322.047341][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:12:03 executing program 2: r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) [ 322.066244][ T6114] loop3: detected capacity change from 0 to 264192 23:12:03 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:03 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:03 executing program 4: ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, 0x0) syz_clone(0x8004000, 0x0, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)="8fa37ecafdf5045d3e5f55d834a43b67e90a022b03fe3c68525aea1956064c9072a42a15330e40b9b7047722f658b532d319647a2b35187255b4feb80d57427c1ed8824b8b9b76ae48db14e3a0f76d32c240e0d829295d201f41584a5bed55b2") 23:12:03 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x0, 0x0}, 0x10) [ 322.312145][ T6116] loop5: detected capacity change from 0 to 1 [ 322.349576][ T6116] NILFS (loop5): unable to read superblock [ 322.427452][ T6122] loop1: detected capacity change from 0 to 8 [ 322.470121][ T6123] loop0: detected capacity change from 0 to 4 23:12:03 executing program 5: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x218, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000004c0)) 23:12:03 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) [ 322.535359][ T6123] MINIX-fs: bad superblock or unable to read bitmaps 23:12:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 23:12:03 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:03 executing program 4: request_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='\x00', 0xfffffffffffffffc) [ 322.799711][ T6129] loop5: detected capacity change from 0 to 1 [ 322.864230][ T6129] NILFS (loop5): unable to read superblock [ 322.877126][ T6133] loop1: detected capacity change from 0 to 8 23:12:04 executing program 2: r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:04 executing program 5: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x218, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000004c0)) 23:12:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) [ 322.989005][ T6136] loop0: detected capacity change from 0 to 4 23:12:04 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:04 executing program 4: socketpair(0x1, 0x802, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 323.094140][ T6136] MINIX-fs: bad superblock or unable to read bitmaps 23:12:04 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 323.317640][ T6144] loop5: detected capacity change from 0 to 1 23:12:04 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x40) [ 323.366378][ T6144] NILFS (loop5): unable to read superblock [ 323.408717][ T6147] loop1: detected capacity change from 0 to 8 23:12:04 executing program 4: request_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\x00', 0xfffffffffffffffd) 23:12:04 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) [ 323.727738][ T6152] loop0: detected capacity change from 0 to 4 23:12:04 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r1, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 23:12:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) [ 323.822408][ T6152] MINIX-fs: bad superblock or unable to read bitmaps 23:12:05 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:05 executing program 4: syz_open_dev$mouse(&(0x7f0000000000), 0x7f, 0x141d00) 23:12:05 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) [ 324.154004][ T6163] loop1: detected capacity change from 0 to 8 23:12:05 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty}}}}) 23:12:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@fat=@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) [ 324.333323][ T6168] loop0: detected capacity change from 0 to 4 [ 324.384883][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 324.387329][ T6168] MINIX-fs: bad superblock or unable to read bitmaps 23:12:05 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) [ 324.584643][ T25] usb 3-1: device descriptor read/64, error 18 23:12:05 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) 23:12:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) 23:12:05 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 324.728103][ T6176] loop1: detected capacity change from 0 to 8 [ 324.854073][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 324.971075][ T6180] loop0: detected capacity change from 0 to 4 [ 325.020268][ T6180] MINIX-fs: bad superblock or unable to read bitmaps [ 325.044117][ T25] usb 3-1: device descriptor read/64, error 18 [ 325.164664][ T25] usb usb3-port1: attempt power cycle [ 325.594131][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 325.784810][ T25] usb 3-1: device descriptor read/8, error -61 [ 326.064202][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 326.245044][ T25] usb 3-1: device descriptor read/8, error -61 [ 326.370564][ T25] usb usb3-port1: unable to enumerate USB device 23:12:08 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x0, @local}], 0x10) 23:12:08 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:08 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendto$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:12:08 executing program 5: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r0, 0x0, 0x0) 23:12:08 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 327.206414][ T6190] loop1: detected capacity change from 0 to 8 [ 327.237172][ T6189] loop0: detected capacity change from 0 to 4 23:12:08 executing program 3: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) 23:12:08 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/block/nbd6', 0x0, 0x0) [ 327.384567][ T6189] MINIX-fs: bad superblock or unable to read bitmaps 23:12:08 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:08 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 327.794423][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd 23:12:08 executing program 3: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0) 23:12:08 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x181800, 0x0) [ 327.995562][ T25] usb 3-1: device descriptor read/64, error 18 [ 328.080478][ T6201] loop1: detected capacity change from 0 to 8 [ 328.121488][ T6202] loop0: detected capacity change from 0 to 4 [ 328.211943][ T6202] MINIX-fs: bad superblock or unable to read bitmaps [ 328.278965][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 328.308014][ T4268] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 328.318658][ T4268] Buffer I/O error on dev loop0, logical block 0, async page read [ 328.484174][ T25] usb 3-1: device descriptor read/64, error 18 [ 328.609655][ T25] usb usb3-port1: attempt power cycle [ 329.075420][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 329.274091][ T25] usb 3-1: device descriptor read/8, error -61 [ 329.548607][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 329.744091][ T25] usb 3-1: device descriptor read/8, error -61 [ 329.874322][ T25] usb usb3-port1: unable to enumerate USB device 23:12:11 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:11 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) 23:12:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) 23:12:11 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:11 executing program 3: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) [ 330.591567][ T6214] loop0: detected capacity change from 0 to 4 23:12:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) 23:12:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0x0) [ 330.637628][ T6216] loop1: detected capacity change from 0 to 8 [ 330.666153][ T1193] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.738626][ T6214] MINIX-fs: bad superblock or unable to read bitmaps 23:12:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 23:12:11 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 331.144182][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd 23:12:12 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={[{@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x4e]}}}}]}) [ 331.248734][ T6227] loop1: detected capacity change from 0 to 8 [ 331.333901][ T25] usb 3-1: device descriptor read/64, error 18 [ 331.358717][ T4268] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.368462][ T4268] Buffer I/O error on dev loop1, logical block 0, async page read [ 331.376665][ T4268] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.386088][ T4268] Buffer I/O error on dev loop1, logical block 2, async page read [ 331.388513][ T6228] loop0: detected capacity change from 0 to 4 [ 331.394382][ T4268] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.410011][ T4268] Buffer I/O error on dev loop1, logical block 3, async page read [ 331.470261][ T6228] MINIX-fs: bad superblock or unable to read bitmaps [ 331.571992][ T6230] tmpfs: Bad value for 'mpol' [ 331.614445][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 331.834329][ T25] usb 3-1: device descriptor read/64, error 18 [ 331.963934][ T25] usb usb3-port1: attempt power cycle [ 332.383990][ T25] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 332.574341][ T25] usb 3-1: device descriptor read/8, error -61 [ 332.853922][ T25] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 333.024337][ T25] usb 3-1: device descriptor read/8, error -61 [ 333.154437][ T25] usb usb3-port1: unable to enumerate USB device 23:12:14 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"], 0x10d0}}], 0x1, 0x0) 23:12:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x0, 0x1, 0x2, 0x200}, 0x48) 23:12:14 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005", 0x9, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:14 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x1206001, &(0x7f0000000400)) 23:12:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 333.926976][ T6234] loop1: detected capacity change from 0 to 8 [ 333.947775][ T6236] loop0: detected capacity change from 0 to 4 23:12:15 executing program 4: pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x4}, &(0x7f0000000280)={0x77359400}, 0x0) 23:12:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10040, 0x0, 0x0) [ 334.057742][ T6236] MINIX-fs: bad superblock or unable to read bitmaps 23:12:15 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005", 0x9, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:15 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@raw=[@ldst, @ldst={0x0, 0x0, 0x2}, @map_val], &(0x7f0000000080)='GPL\x00', 0x5, 0xa6, &(0x7f00000000c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:12:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:15 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x17, 0x0, 0x0) [ 334.454309][ T3544] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 334.502440][ T6248] loop1: detected capacity change from 0 to 8 [ 334.644959][ T3544] usb 3-1: device descriptor read/64, error 18 [ 334.721960][ T6253] loop0: detected capacity change from 0 to 4 [ 334.770412][ T6253] MINIX-fs: bad superblock or unable to read bitmaps [ 334.914260][ T3544] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 335.114269][ T3544] usb 3-1: device descriptor read/64, error 18 [ 335.234330][ T3544] usb usb3-port1: attempt power cycle [ 335.654018][ T3544] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 335.824076][ T3544] usb 3-1: device descriptor read/8, error -61 [ 336.094134][ T3544] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 336.264757][ T3544] usb 3-1: device descriptor read/8, error -61 [ 336.384427][ T3544] usb usb3-port1: unable to enumerate USB device 23:12:18 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:18 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005", 0x9, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:18 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0xc, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:12:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000001ac0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000f50000000018"], 0x20}}, 0x0) 23:12:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x103c01) write$evdev(r0, &(0x7f0000000280)=[{{0x77359400}}], 0x18) [ 337.228578][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 337.253512][ T6264] loop1: detected capacity change from 0 to 8 [ 337.276588][ T6261] loop0: detected capacity change from 0 to 4 23:12:18 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0) [ 337.324186][ T6261] MINIX-fs: bad superblock or unable to read bitmaps [ 337.379392][ T4268] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.389676][ T4268] Buffer I/O error on dev loop1, logical block 0, async page read [ 337.398065][ T4268] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.407646][ T4268] Buffer I/O error on dev loop1, logical block 2, async page read [ 337.416255][ T4268] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 23:12:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x103c01) write$evdev(r0, &(0x7f0000000280)=[{{}, 0x0, 0x2}], 0x18) 23:12:18 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@mpol={'mpol', 0x3d, {'local', '=relative'}}}]}) [ 337.425638][ T4268] Buffer I/O error on dev loop1, logical block 3, async page read 23:12:18 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffff", 0xe, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 337.725808][ T6270] tmpfs: Bad value for 'mpol' 23:12:18 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@size={'size', 0x3d, [0x67]}}]}) [ 337.805768][ T6273] loop1: detected capacity change from 0 to 8 [ 337.855258][ T3544] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 337.902074][ T4268] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.912743][ T4268] Buffer I/O error on dev loop1, logical block 0, async page read [ 337.921485][ T4268] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.930941][ T4268] Buffer I/O error on dev loop1, logical block 2, async page read [ 337.939659][ T4268] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.950555][ T4268] Buffer I/O error on dev loop1, logical block 3, async page read [ 338.060661][ T6276] loop0: detected capacity change from 0 to 4 [ 338.067984][ T3544] usb 3-1: device descriptor read/64, error 18 [ 338.128486][ T6276] MINIX-fs: bad superblock or unable to read bitmaps [ 338.344652][ T3544] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 338.535379][ T3544] usb 3-1: device descriptor read/64, error 18 [ 338.654371][ T3544] usb usb3-port1: attempt power cycle [ 339.064054][ T3544] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 339.234167][ T3544] usb 3-1: device descriptor read/8, error -61 [ 339.504032][ T3544] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 339.674179][ T3544] usb 3-1: device descriptor read/8, error -61 [ 339.796316][ T3544] usb usb3-port1: unable to enumerate USB device 23:12:21 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x38}}, 0x0) 23:12:21 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffff", 0xe, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000002280)=[@hoplimit={{0x14}}, @dontfrag={{0x14}}], 0x30}}], 0x1, 0x0) 23:12:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0x3, 0x4) [ 340.609469][ T6285] loop1: detected capacity change from 0 to 8 [ 340.624775][ T6284] loop0: detected capacity change from 0 to 4 [ 340.647777][ T6284] MINIX-fs: bad superblock or unable to read bitmaps 23:12:21 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) r0 = fanotify_init(0x0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1001020, &(0x7f0000000700)=ANY=[]) fanotify_mark(r0, 0x9, 0x1, r1, &(0x7f0000000780)='./file0\x00') [ 340.732855][ T4268] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 340.737801][ T4315] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 340.743901][ T4268] Buffer I/O error on dev loop1, logical block 0, async page read [ 340.759008][ T4315] Buffer I/O error on dev loop0, logical block 0, async page read [ 340.764067][ T4268] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 23:12:21 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23:12:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004980)=[{{&(0x7f0000000580)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000700)={0xa, 0x4e20, 0x0, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000004b40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8374}}], 0x18}}], 0x2, 0x0) [ 340.764185][ T4268] Buffer I/O error on dev loop1, logical block 2, async page read [ 340.764322][ T4268] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 340.764429][ T4268] Buffer I/O error on dev loop1, logical block 3, async page read 23:12:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:21 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffff", 0xe, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) [ 341.114022][ T3544] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 341.198226][ T6298] loop1: detected capacity change from 0 to 8 [ 341.226848][ T6300] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 341.251455][ T6299] loop0: detected capacity change from 0 to 4 23:12:22 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x11, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 341.304427][ T3544] usb 3-1: device descriptor read/64, error 18 [ 341.399439][ T6299] MINIX-fs: bad superblock or unable to read bitmaps [ 341.574415][ T3544] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 341.764213][ T3544] usb 3-1: device descriptor read/64, error 18 [ 341.886983][ T3544] usb usb3-port1: attempt power cycle [ 342.293856][ T3544] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 342.464399][ T3544] usb 3-1: device descriptor read/8, error -61 [ 342.734128][ T3544] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 342.904188][ T3544] usb 3-1: device descriptor read/8, error -61 [ 343.024236][ T3544] usb usb3-port1: unable to enumerate USB device 23:12:24 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000015c0)={'HL\x00'}, &(0x7f0000001600)=0x1e) 23:12:24 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f", 0x10, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:24 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x2, 0x0, 0x100000) 23:12:24 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x400445a0, 0x0) 23:12:24 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@ldst, @ldst={0x0, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0x5, 0xa6, &(0x7f00000000c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 343.816271][ T6309] loop1: detected capacity change from 0 to 8 [ 343.830285][ T6310] loop0: detected capacity change from 0 to 4 [ 343.876481][ T6310] MINIX-fs: bad superblock or unable to read bitmaps 23:12:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000009b80)=[{{&(0x7f0000000080)={0xa, 0x0, 0xfffffff8, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000000c0)="b6", 0x1}], 0x1}}], 0x1, 0x0) 23:12:25 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f", 0x10, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000009b80)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x9}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000000c0)="b69478988e6326ef4ec87cfcce2f79a7abd4", 0x12}, {&(0x7f0000000100)="fd2c8cf5fd9c08459667bb13d67663636acda7ed06ad80aecec66c0dc6cf060ddada0debbd5e58e0987a4e769b97d2335e0a4b2fa37e1c32a70b8e961edbec30dfceb326c1884f3ac894a642b64c8e6e196e57c1ca7e74b0c11d5911a1c86fe30cc976e93394f714ef00adbbcb830ef45da7604e995284951698bae519cd9198d54678348978fb6cdd9fdd96d0c9eff4d2d0d4e50dc55af8ce35350e3b88371afc693df26fda8599be3ad91a8397585c350f8e962f712c7048c806935f0698001896e0ff46b83d901110a0f957", 0xcd}, {&(0x7f00000003c0)}, {&(0x7f00000004c0)="9482e245268453a5273c69b11d379499750973a85fb8444713dbd08dcbee0ee37d22f1dba6adaa36375ef4a35acd09d573d9cd14b454727755206341a9f31ce8a3612d2452caa86fba48a21c9ea09ed2e68b7c63f91e7593aec1e691de4e5be8d9921d2ddee7cecb778ede252e04b2c8354b6ee6294bd0dd386ddaf5003385bf301e", 0x82}, {&(0x7f0000000580)}], 0x5, &(0x7f0000000740)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x18}}], 0x1, 0x0) 23:12:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:25 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@size={'size', 0x3d, [0x4b]}}]}) [ 344.244047][ T25] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 344.280202][ T6320] loop1: detected capacity change from 0 to 8 [ 344.423353][ T6324] loop0: detected capacity change from 0 to 4 [ 344.483972][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 344.532681][ T6324] MINIX-fs: bad superblock or unable to read bitmaps [ 344.604188][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.614822][ T25] usb 3-1: config 0 has no interfaces? [ 344.794835][ T25] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 344.804452][ T25] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 344.814106][ T25] usb 3-1: Product: syz [ 344.818450][ T25] usb 3-1: Manufacturer: syz [ 344.823850][ T25] usb 3-1: SerialNumber: syz [ 344.882927][ T25] usb 3-1: config 0 descriptor?? 23:12:27 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:28 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x10, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:12:28 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f", 0x10, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:28 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@raw=[@ldst, @ldst={0x3}, @map_val], &(0x7f0000000080)='GPL\x00', 0x5, 0xa6, &(0x7f00000000c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:12:28 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23:12:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) [ 346.934963][ T3544] usb 3-1: USB disconnect, device number 33 [ 347.035119][ T6336] loop1: detected capacity change from 0 to 8 23:12:28 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x400a0, &(0x7f00000005c0)) [ 347.120934][ T6335] loop0: detected capacity change from 0 to 4 23:12:28 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23:12:28 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f68", 0x11, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000001ac0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000f5000000001806000007"], 0x20}}, 0x0) 23:12:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:28 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1001020, &(0x7f0000000700)=ANY=[]) [ 347.554839][ T114] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 347.592877][ T6346] loop1: detected capacity change from 0 to 8 [ 347.752701][ T6349] loop0: detected capacity change from 0 to 4 [ 347.804191][ T114] usb 3-1: Using ep0 maxpacket: 8 [ 347.925744][ T114] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.936549][ T114] usb 3-1: config 0 has no interfaces? [ 348.095221][ T114] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 348.105016][ T114] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 348.113930][ T114] usb 3-1: Product: syz [ 348.118384][ T114] usb 3-1: Manufacturer: syz [ 348.123120][ T114] usb 3-1: SerialNumber: syz [ 348.168299][ T114] usb 3-1: config 0 descriptor?? 23:12:31 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) 23:12:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:31 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_DIRENT(r0, &(0x7f00000032c0)=ANY=[], 0x90) 23:12:31 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f68", 0x11, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:31 executing program 5: bpf$MAP_CREATE(0xd, &(0x7f00000001c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 350.226496][ T25] usb 3-1: USB disconnect, device number 34 [ 350.336304][ T6359] loop1: detected capacity change from 0 to 8 [ 350.379212][ T6361] loop0: detected capacity change from 0 to 4 23:12:31 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) write$FUSE_OPEN(r2, &(0x7f0000002240)={0x20, 0x0, r1}, 0x20) write$FUSE_ENTRY(r2, &(0x7f00000042c0)={0x90, 0x0, r1}, 0x90) 23:12:31 executing program 4: syz_io_uring_setup(0x7d7e, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0xe04, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 23:12:31 executing program 3: syz_clone(0x2c6dd9f561a6f569, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x890) 23:12:31 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f68", 0x11, 0x400}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:31 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)) [ 350.881059][ T6372] loop1: detected capacity change from 0 to 8 [ 350.895170][ T114] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 351.123111][ T6376] loop0: detected capacity change from 0 to 4 [ 351.134262][ T114] usb 3-1: Using ep0 maxpacket: 8 [ 351.255059][ T114] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.265899][ T114] usb 3-1: config 0 has no interfaces? [ 351.424892][ T114] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 351.434336][ T114] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 351.442837][ T114] usb 3-1: Product: syz [ 351.447440][ T114] usb 3-1: Manufacturer: syz [ 351.452810][ T114] usb 3-1: SerialNumber: syz [ 351.539586][ T114] usb 3-1: config 0 descriptor?? 23:12:34 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e0009043401"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000180), 0xc) 23:12:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 23:12:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:34 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x0, 0x0, 0x0, 0x1000}, 0x48) [ 353.577279][ T25] usb 3-1: USB disconnect, device number 35 23:12:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1402, 0x4}, 0x10}}, 0x0) [ 353.718579][ T6389] loop1: detected capacity change from 0 to 8 [ 353.728581][ T6388] loop0: detected capacity change from 0 to 4 23:12:34 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x5460, 0x0) 23:12:34 executing program 5: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x1, &(0x7f0000000100)) [ 353.837897][ T4315] blk_print_req_error: 3 callbacks suppressed [ 353.837953][ T4315] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 23:12:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000011600)) 23:12:35 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) [ 354.146892][ T6395] VFS: Can't find a romfs filesystem on dev loop5. [ 354.146892][ T6395] 23:12:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private2, @in=@multicast2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@dev, @in6=@mcast1}}]}, 0x90}}, 0x0) [ 354.214912][ T114] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 354.289943][ T6399] loop0: detected capacity change from 0 to 4 [ 354.340935][ T6401] loop1: detected capacity change from 0 to 8 [ 354.454277][ T114] usb 3-1: Using ep0 maxpacket: 8 [ 354.576874][ T114] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 354.587023][ T114] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.598955][ T114] usb 3-1: config 0 has no interface number 0 [ 354.605568][ T114] usb 3-1: config 0 interface 52 has no altsetting 0 [ 354.774179][ T114] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 354.785710][ T114] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 354.794563][ T114] usb 3-1: Product: syz [ 354.798899][ T114] usb 3-1: Manufacturer: syz [ 354.805094][ T114] usb 3-1: SerialNumber: syz [ 354.836569][ T114] usb 3-1: config 0 descriptor?? [ 355.311140][ T114] usb 3-1: USB disconnect, device number 36 23:12:36 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e0009043401"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:36 executing program 4: pselect6(0x40, &(0x7f0000001280)={0x1fffc000000000}, &(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)={0x77359400}, &(0x7f00000013c0)={&(0x7f0000001380)={[0x3]}, 0x8}) 23:12:36 executing program 5: socket(0x3, 0x0, 0x10001) 23:12:36 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12}, {0x0, 0x0, 0x808}], 0x8000, &(0x7f0000011600)) 23:12:36 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011600)) 23:12:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000140)="0c46627f21b4c7da91210fe9034a7aed", 0x10}], 0x1}}], 0x1, 0x0) [ 355.921357][ T6409] loop1: detected capacity change from 0 to 8 23:12:37 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000004740)={&(0x7f00000021c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000046c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 23:12:37 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000640), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000680)={0x0, 0x0, 0x0, 'queue0\x00'}) 23:12:37 executing program 5: syz_clone(0x2c6dd9f561a6f569, 0x0, 0x0, 0x0, 0x0, 0x0) 23:12:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011600)) 23:12:37 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0, 0x0, 0x808}], 0x0, &(0x7f0000011600)) 23:12:37 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) read$FUSE(r0, 0x0, 0x0) [ 356.417839][ T6426] loop1: detected capacity change from 0 to 8 [ 356.443985][ T25] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 356.538979][ T6426] Unable to read inode block [ 356.544328][ T6426] MINIX-fs: get root inode failed [ 356.704839][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 356.844840][ T25] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 356.853326][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.865300][ T25] usb 3-1: config 0 has no interface number 0 [ 356.871615][ T25] usb 3-1: config 0 interface 52 has no altsetting 0 [ 357.115136][ T25] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 357.124977][ T25] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 357.134242][ T25] usb 3-1: Product: syz [ 357.138547][ T25] usb 3-1: Manufacturer: syz [ 357.147117][ T25] usb 3-1: SerialNumber: syz [ 357.165605][ T25] usb 3-1: config 0 descriptor?? [ 357.630608][ T25] usb 3-1: USB disconnect, device number 37 23:12:39 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e0009043401"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:39 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, &(0x7f0000000200)={'wlan1\x00'}) 23:12:39 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011600)) 23:12:39 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0, 0x0, 0x808}], 0x0, &(0x7f0000011600)) 23:12:39 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'vlan0\x00'}) 23:12:39 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000800)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'ip_vti0\x00', {}, 0xfff8}) [ 358.297312][ T6436] loop1: detected capacity change from 0 to 8 23:12:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5}]}, 0x24}}, 0x0) [ 358.435777][ T6436] Unable to read inode block [ 358.440909][ T6436] MINIX-fs: get root inode failed 23:12:39 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89b0, &(0x7f0000000200)={'wlan1\x00'}) 23:12:39 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000011600)) 23:12:39 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xc, 0x0, 0x0) 23:12:39 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0, 0x0, 0x808}], 0x0, &(0x7f0000011600)) 23:12:39 executing program 3: socket(0x1d, 0x0, 0x40) [ 358.824101][ T3688] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 359.016176][ T6449] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 359.064464][ T6451] loop1: detected capacity change from 0 to 8 [ 359.094921][ T3688] usb 3-1: Using ep0 maxpacket: 8 [ 359.115255][ T6451] Unable to read inode block [ 359.120497][ T6451] MINIX-fs: get root inode failed [ 359.235348][ T3688] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 359.244450][ T3688] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.256638][ T3688] usb 3-1: config 0 has no interface number 0 [ 359.262953][ T3688] usb 3-1: config 0 interface 52 has no altsetting 0 [ 359.494905][ T3688] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 359.504762][ T3688] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 359.514181][ T3688] usb 3-1: Product: syz [ 359.518493][ T3688] usb 3-1: Manufacturer: syz [ 359.523226][ T3688] usb 3-1: SerialNumber: syz [ 359.539657][ T3688] usb 3-1: config 0 descriptor?? [ 360.016188][ T3544] usb 3-1: USB disconnect, device number 38 23:12:41 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e700"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:41 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1010"], 0x1010}}], 0x1, 0x0) 23:12:41 executing program 4: pselect6(0x0, 0x0, 0x0, &(0x7f0000001300), 0x0, 0x0) 23:12:41 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000011600)) 23:12:41 executing program 3: pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) fsetxattr(r0, &(0x7f0000000080)=@random={'system.', 'ext4_discard_blocks\x00'}, 0x0, 0x0, 0x0) 23:12:41 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0, 0x0, 0x808}], 0x8000, 0x0) [ 360.615708][ T6462] loop1: detected capacity change from 0 to 8 23:12:41 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xf, 0x0, 0x0) [ 360.668960][ T6460] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 23:12:41 executing program 5: pselect6(0x40, &(0x7f0000001280), &(0x7f00000012c0)={0x1}, 0x0, 0x0, 0x0) 23:12:41 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000011600)) 23:12:41 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0, 0x0, 0x808}], 0x8000, 0x0) 23:12:42 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1406, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) [ 361.177533][ T6473] loop1: detected capacity change from 0 to 8 [ 361.205584][ T6471] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 361.215031][ T3544] usb 3-1: new high-speed USB device number 39 using dummy_hcd 23:12:42 executing program 1: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}, {0x0, 0x0, 0x808}], 0x8000, 0x0) [ 361.455494][ T3544] usb 3-1: Using ep0 maxpacket: 8 [ 361.574417][ T3544] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 361.582994][ T3544] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.594331][ T3544] usb 3-1: config 0 has no interface number 0 [ 361.601992][ T3544] usb 3-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 361.616152][ T3544] usb 3-1: config 0 interface 52 has no altsetting 0 [ 361.722461][ T6477] loop1: detected capacity change from 0 to 8 [ 361.897532][ T3544] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 361.907072][ T3544] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 361.916217][ T3544] usb 3-1: Product: syz [ 361.920701][ T3544] usb 3-1: Manufacturer: syz [ 361.926182][ T3544] usb 3-1: SerialNumber: syz [ 362.062162][ T3544] usb 3-1: config 0 descriptor?? [ 362.137773][ T4268] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 362.521412][ T3688] usb 3-1: USB disconnect, device number 39 23:12:44 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e700"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:44 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000011600)) 23:12:44 executing program 4: pselect6(0x40, &(0x7f0000001280), &(0x7f00000012c0)={0x1}, &(0x7f0000001300)={0x2}, &(0x7f0000001340)={0x77359400}, 0x0) 23:12:44 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0189436, &(0x7f0000000200)={'wlan1\x00'}) 23:12:44 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8912, &(0x7f0000000200)={'wlan1\x00'}) 23:12:44 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{0x8}, 'port0\x00'}) 23:12:44 executing program 5: syz_io_uring_setup(0x5fe, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000180)) 23:12:44 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000240)={0x0, "8e6c26df6a221effee00004d00"}) [ 363.226139][ T6486] loop0: detected capacity change from 0 to 4 23:12:44 executing program 3: pselect6(0x40, &(0x7f0000001280)={0x1fffc000000000}, &(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)={0x77359400}, 0x0) [ 363.366682][ T6486] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 23:12:44 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0x8, 0x0, 0x0) 23:12:44 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000011600)) 23:12:44 executing program 1: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xa44957d9ed9bd3b2}, 0x18) [ 363.714261][ T3544] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 363.964496][ T3544] usb 3-1: Using ep0 maxpacket: 8 [ 364.017099][ T6501] loop0: detected capacity change from 0 to 4 [ 364.085048][ T6501] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 364.085116][ T3544] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 364.105585][ T3544] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.117737][ T3544] usb 3-1: config 0 has no interface number 0 [ 364.124173][ T3544] usb 3-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 364.138549][ T3544] usb 3-1: config 0 interface 52 has no altsetting 0 [ 364.445537][ T3544] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 364.455431][ T3544] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 364.464247][ T3544] usb 3-1: Product: syz [ 364.468578][ T3544] usb 3-1: Manufacturer: syz [ 364.473393][ T3544] usb 3-1: SerialNumber: syz [ 364.508755][ T3544] usb 3-1: config 0 descriptor?? [ 364.968015][ T3544] usb 3-1: USB disconnect, device number 40 23:12:46 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e700"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:46 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8929, &(0x7f0000000200)={'wlan1\x00'}) 23:12:46 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/197, 0xc5}], 0x1, 0x0) 23:12:46 executing program 1: socket(0x11, 0x3, 0xde) 23:12:46 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000002100)={0x23, 0x3, 0x0, {0x0, 0x2, 0x0, '^('}}, 0x23) 23:12:46 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000011600)) [ 365.573396][ T6507] loop0: detected capacity change from 0 to 4 23:12:46 executing program 5: socket$inet(0x2, 0xa, 0x2) [ 365.631262][ T6507] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 23:12:46 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r0, 0x6, 0x0, 0x0, 0x0) 23:12:46 executing program 4: pipe(&(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup(r0, &(0x7f0000002240)='syz1\x00', 0x1ff) 23:12:46 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}], 0x0, &(0x7f0000011600)) 23:12:46 executing program 1: syz_clone(0x89000000, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100)="7f") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:12:47 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r0, 0x0, 0x0, 0x0, 0xfffffd31) [ 366.124424][ T3544] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 366.191877][ T6523] loop0: detected capacity change from 0 to 4 [ 366.232060][ T6523] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 366.364940][ T3544] usb 3-1: Using ep0 maxpacket: 8 [ 366.397735][ T4315] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 366.408314][ T4315] buffer_io_error: 3 callbacks suppressed [ 366.408387][ T4315] Buffer I/O error on dev loop0, logical block 0, async page read [ 366.499519][ T3544] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 366.508531][ T3544] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.519065][ T3544] usb 3-1: config 0 has no interface number 0 [ 366.525528][ T3544] usb 3-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 366.538883][ T3544] usb 3-1: config 0 interface 52 has no altsetting 0 [ 366.804629][ T3544] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 366.813968][ T3544] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 366.822455][ T3544] usb 3-1: Product: syz [ 366.826822][ T3544] usb 3-1: Manufacturer: syz [ 366.831531][ T3544] usb 3-1: SerialNumber: syz [ 366.848848][ T3544] usb 3-1: config 0 descriptor?? [ 367.317748][ T3688] usb 3-1: USB disconnect, device number 41 23:12:48 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:48 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt(r0, 0x0, 0x0, 0x0, 0xc) 23:12:48 executing program 4: r0 = eventfd(0x8d0) read$eventfd(r0, 0x0, 0x4c) 23:12:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000340)=@buf) 23:12:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}], 0x0, &(0x7f0000011600)) 23:12:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x30}}, 0x0) [ 367.946623][ T6535] loop0: detected capacity change from 0 to 4 23:12:49 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) write(r0, &(0x7f00000001c0)="82fc0300", 0x5dc) 23:12:49 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) close(r0) 23:12:49 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4b182280, 0x0, 0x0, 0x0, 0x0, 0x0) 23:12:49 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0'}, 0xb) [ 368.085673][ T6535] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 23:12:49 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}], 0x0, &(0x7f0000011600)) 23:12:49 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000100)={&(0x7f0000000640)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000aa"], 0x1c}, 0x0) [ 368.414538][ T3544] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 368.684156][ T3544] usb 3-1: Using ep0 maxpacket: 8 [ 368.786750][ T6554] loop0: detected capacity change from 0 to 4 [ 368.804363][ T3544] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 368.814083][ T3544] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.825580][ T3544] usb 3-1: config 0 has no interface number 0 [ 368.832691][ T3544] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 368.843712][ T3544] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.857246][ T3544] usb 3-1: config 0 interface 52 has no altsetting 0 [ 368.885647][ T6554] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 369.234869][ T3544] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 369.244502][ T3544] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 369.255016][ T3544] usb 3-1: Product: syz [ 369.259718][ T3544] usb 3-1: Manufacturer: syz [ 369.264651][ T3544] usb 3-1: SerialNumber: syz [ 369.278281][ T3544] usb 3-1: config 0 descriptor?? [ 369.751574][ T3544] usb 3-1: USB disconnect, device number 42 23:12:51 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:51 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x81, &(0x7f0000000080)={0x1c, 0x1c, 0x1}, 0x1c) 23:12:51 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) write(r0, &(0x7f00000001c0)="82fc0300", 0x5dc) 23:12:51 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xfffffffffffffedb, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x1}, 0x1c) 23:12:51 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005", 0x9, 0x400}], 0x0, &(0x7f0000011600)) 23:12:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x98) [ 370.384074][ T6563] loop0: detected capacity change from 0 to 4 23:12:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000280)=ANY=[], &(0x7f00000000c0)=0x8) [ 370.430576][ T6563] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 23:12:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, &(0x7f00000001c0)) [ 370.596321][ T4268] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 370.605882][ T4268] Buffer I/O error on dev loop0, logical block 0, async page read 23:12:51 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005", 0x9, 0x400}], 0x0, &(0x7f0000011600)) 23:12:51 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@un=@abs={0x8}, 0x8) 23:12:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 23:12:52 executing program 4: openat$ptmx(0xffffff9c, 0x0, 0x0, 0x0) [ 370.983915][ T114] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 371.047342][ T6576] loop0: detected capacity change from 0 to 4 [ 371.123195][ T6576] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 371.224026][ T114] usb 3-1: Using ep0 maxpacket: 8 [ 371.344559][ T114] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 371.354666][ T114] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.365135][ T114] usb 3-1: config 0 has no interface number 0 [ 371.372214][ T114] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 371.384307][ T114] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.397652][ T114] usb 3-1: config 0 interface 52 has no altsetting 0 [ 371.624506][ T114] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 371.634233][ T114] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 371.642736][ T114] usb 3-1: Product: syz [ 371.647249][ T114] usb 3-1: Manufacturer: syz [ 371.651987][ T114] usb 3-1: SerialNumber: syz [ 371.715201][ T114] usb 3-1: config 0 descriptor?? [ 372.193850][ T3688] usb 3-1: USB disconnect, device number 43 23:12:53 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@dstaddrv6={0x1c, 0x84, 0xa, @ipv4}], 0x1c}, 0x0) 23:12:53 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) 23:12:53 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="03", 0x1, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="80", 0x1, 0x0, 0x0, 0x0) 23:12:53 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005", 0x9, 0x400}], 0x0, &(0x7f0000011600)) 23:12:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f0000000000)="eea0e5136bb38f43d97a1dd0970ae2a1921178f55fbfe36c933f1e8a63b4bb7fd057a227bee41de1e5faa8fafa07955f", 0x30, 0x20000004, &(0x7f0000000040)={0x2, 0x4e22}, 0x10) [ 372.866273][ T6596] loop0: detected capacity change from 0 to 4 23:12:53 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) 23:12:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000140), &(0x7f0000000040)=0x98) [ 372.922876][ T6596] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 23:12:54 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffff", 0xe, 0x400}], 0x0, &(0x7f0000011600)) 23:12:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$unix(r0, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0)=[@rights], 0x10}, 0x0) 23:12:54 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000380)={0x0, 0x2}, 0x8) [ 373.273873][ T25] usb 3-1: new high-speed USB device number 44 using dummy_hcd 23:12:54 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), &(0x7f00000001c0)=0x98) [ 373.491203][ T6606] loop0: detected capacity change from 0 to 4 [ 373.534962][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 373.575092][ T6606] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 373.654276][ T25] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 373.662565][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.673076][ T25] usb 3-1: config 0 has no interface number 0 [ 373.679642][ T25] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 373.689743][ T25] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.704459][ T25] usb 3-1: config 0 interface 52 has no altsetting 0 [ 373.715821][ T4268] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 373.725544][ T4268] Buffer I/O error on dev loop0, logical block 0, async page read [ 373.938330][ T25] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 373.947993][ T25] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 373.956980][ T25] usb 3-1: Product: syz [ 373.961294][ T25] usb 3-1: Manufacturer: syz [ 373.966227][ T25] usb 3-1: SerialNumber: syz [ 374.060070][ T25] usb 3-1: config 0 descriptor?? [ 374.530727][ T25] usb 3-1: USB disconnect, device number 44 23:12:56 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acf"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:56 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) 23:12:56 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='J', 0x1, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c) 23:12:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000300), &(0x7f00000003c0)=0xb0) 23:12:56 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000180)='cdg\x00', 0x4) 23:12:56 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffff", 0xe, 0x400}], 0x0, &(0x7f0000011600)) 23:12:56 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) [ 375.167332][ T6619] loop0: detected capacity change from 0 to 4 [ 375.254819][ T6619] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 23:12:56 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffff", 0xe, 0x400}], 0x0, &(0x7f0000011600)) 23:12:56 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 23:12:56 executing program 5: getpid() syz_clone(0x4a048200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='\r') 23:12:56 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x7, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/221, 0x39, 0xdd, 0x1}, 0x20) [ 375.814404][ T114] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 375.880418][ T6638] loop0: detected capacity change from 0 to 4 23:12:57 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x17, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 376.031762][ T6638] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 376.054593][ T114] usb 3-1: Using ep0 maxpacket: 8 [ 376.175290][ T114] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 376.184394][ T114] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.195012][ T114] usb 3-1: config 0 has no interface number 0 [ 376.201255][ T114] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 376.212720][ T114] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 376.222880][ T114] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.236134][ T114] usb 3-1: config 0 interface 52 has no altsetting 0 [ 376.574809][ T114] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 376.585328][ T114] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 376.594119][ T114] usb 3-1: Product: syz [ 376.598850][ T114] usb 3-1: Manufacturer: syz [ 376.603730][ T114] usb 3-1: SerialNumber: syz [ 376.633466][ T114] usb 3-1: config 0 descriptor?? [ 376.897332][ T114] input: syz syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input11 [ 376.913047][ T2824] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 376.926710][ T2824] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 377.061634][ T4315] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 377.120746][ T6629] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 377.140676][ T25] usb 3-1: USB disconnect, device number 45 23:12:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000019b80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000019e40)={0x0, 0x0, &(0x7f0000019dc0)=[{0x0}, {0x0}], 0x2}, 0x40) 23:12:58 executing program 4: getpid() syz_clone(0x40000080, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="e3e7065a6a1c580074cb409e434350549bd13b3ddbb9ed1d1617ea10809f60e24de7ea2f2dd8aa71da153d1de5a67b9dafc8dc0182245aeb2e30b49dfc0c30a8d4aff1760816de695dfd3eb3100cdf44ff84e2319ad5c39fc2e10a57152d670336db0b813c684bbb3b295551067599283e9a797a6ae91c1d81c79d5707a7b93e327291aeb46795ab372edc0e2db00fdc72e6ba87b5485e7e5ebd19953f58d66cd66691059f32b7b39ba5d7b261dd61029f8c427228e995f3be3fe59ba5c384ebd62d419567e7f6a99aa3c5c0f5ec7bfd") 23:12:58 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f", 0x10, 0x400}], 0x0, &(0x7f0000011600)) 23:12:58 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x5452, &(0x7f0000001180)) 23:12:58 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acf"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:12:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x17, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 377.788747][ T6653] loop0: detected capacity change from 0 to 4 23:12:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x17, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x71}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:12:58 executing program 1: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) mkdir(&(0x7f0000000700)='./file0\x00', 0x0) [ 377.899742][ T6653] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 23:12:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x53}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xad, &(0x7f0000000200)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66}, 0x48) 23:12:59 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f", 0x10, 0x400}], 0x0, &(0x7f0000011600)) 23:12:59 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000580)={&(0x7f00000000c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/52, 0x34}, {&(0x7f00000001c0)=""/3, 0x3}], 0x2, &(0x7f0000000540)=""/18, 0x12}, 0x0) sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)="0bcb0eeb6a9931ef1d822e48779254bc48b7ee459a5a5b642f8cf093cc413c83a73d0df28436e23e745db81a4e847696d1b665f7c9", 0x35}], 0x1}, 0x0) 23:12:59 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000580)={&(0x7f00000000c0)=@ieee802154={0x24, @short}, 0x80, 0x0, 0x0, &(0x7f0000000540)=""/18, 0x12}, 0x0) sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)='\v', 0x1}], 0x1}, 0x0) [ 378.356403][ T25] usb 3-1: new high-speed USB device number 46 using dummy_hcd 23:12:59 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x9, &(0x7f00000000c0)=@framed={{}, [@exit, @exit, @cb_func, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 378.480349][ T6666] loop0: detected capacity change from 0 to 4 [ 378.567863][ T6666] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 378.625176][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 378.764365][ T25] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 378.772730][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.783233][ T25] usb 3-1: config 0 has no interface number 0 [ 378.789781][ T25] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 378.801948][ T25] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 23:12:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x8) 23:12:59 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000001480)) [ 378.812484][ T25] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.826111][ T25] usb 3-1: config 0 interface 52 has no altsetting 0 [ 379.034621][ T25] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 379.044378][ T25] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 379.057297][ T25] usb 3-1: Product: syz [ 379.062708][ T25] usb 3-1: Manufacturer: syz [ 379.067635][ T25] usb 3-1: SerialNumber: syz [ 379.185393][ T25] usb 3-1: config 0 descriptor?? [ 379.467111][ T25] input: syz syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input12 [ 379.481509][ T2824] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 379.502849][ T2824] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 379.696187][ T6658] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 379.741201][ T25] usb 3-1: USB disconnect, device number 46 23:13:01 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acf"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:13:01 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x17, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x67}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:13:01 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f", 0x10, 0x400}], 0x0, &(0x7f0000011600)) 23:13:01 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x4800, 0x0) 23:13:01 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x10, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:13:01 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x10, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:13:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$setown(r0, 0x6, 0xffffffffffffffff) [ 380.431652][ T6685] loop0: detected capacity change from 0 to 4 23:13:01 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) connect$inet(r0, 0x0, 0xffffffffffffff57) 23:13:01 executing program 1: setrlimit(0x2, &(0x7f0000000240)={0x60000000, 0x3e4000000000}) 23:13:01 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f0000000000)) [ 380.556479][ T6685] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 23:13:01 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f68", 0x11, 0x400}], 0x0, &(0x7f0000011600)) [ 380.934484][ T25] usb 3-1: new high-speed USB device number 47 using dummy_hcd 23:13:02 executing program 1: r0 = open$dir(&(0x7f00000028c0)='./file0\x00', 0x200, 0x0) fcntl$setown(r0, 0x6, 0xffffffffffffffff) [ 381.131653][ T6703] loop0: detected capacity change from 0 to 4 [ 381.195467][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 381.217729][ T6703] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 381.315046][ T25] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 381.325846][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.337237][ T25] usb 3-1: config 0 has no interface number 0 [ 381.343750][ T25] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 381.356929][ T25] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 381.367002][ T25] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.380304][ T25] usb 3-1: config 0 interface 52 has no altsetting 0 [ 381.764191][ T25] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 381.773883][ T25] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 381.782631][ T25] usb 3-1: Product: syz [ 381.787105][ T25] usb 3-1: Manufacturer: syz [ 381.791851][ T25] usb 3-1: SerialNumber: syz [ 381.801462][ T25] usb 3-1: config 0 descriptor?? [ 382.076956][ T25] input: syz syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input13 [ 382.092162][ T2824] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 382.114504][ T2824] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 382.250761][ T4315] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 382.285704][ T6690] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 382.308005][ T114] usb 3-1: USB disconnect, device number 47 23:13:03 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acff0"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:13:03 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, 0x0, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000980)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000c40)='./file7\x00', 0x0) 23:13:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}}, 0x0) 23:13:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_SRC_VNI={0x8}]}, 0x30}}, 0x0) 23:13:03 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f68", 0x11, 0x400}], 0x0, &(0x7f0000011600)) 23:13:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) [ 382.919452][ T6708] process 'syz-executor.3' launched './file2' with NULL argv: empty string added [ 383.000219][ T6712] loop0: detected capacity change from 0 to 4 23:13:04 executing program 4: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 23:13:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80084504, &(0x7f0000000140)={0x0, 0x0, 0x0}) 23:13:04 executing program 5: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@map}, 0x10) [ 383.110890][ T6712] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 23:13:04 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000020c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 23:13:04 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f68", 0x11, 0x400}], 0x0, &(0x7f0000011600)) [ 383.454221][ T25] usb 3-1: new high-speed USB device number 48 using dummy_hcd 23:13:04 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) [ 383.705447][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 383.825019][ T6729] loop0: detected capacity change from 0 to 4 [ 383.864444][ T25] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 383.875772][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.886674][ T25] usb 3-1: config 0 has no interface number 0 [ 383.893136][ T25] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 383.904584][ T25] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 383.918386][ T25] usb 3-1: config 0 interface 52 has no altsetting 0 [ 383.988475][ T6729] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 384.124606][ T25] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 384.134153][ T25] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 384.142744][ T25] usb 3-1: Product: syz [ 384.147542][ T25] usb 3-1: Manufacturer: syz [ 384.152271][ T25] usb 3-1: SerialNumber: syz [ 384.180048][ T25] usb 3-1: config 0 descriptor?? [ 384.444231][ T25] usb 3-1: Can not set alternate setting to 1, error: -71 [ 384.451850][ T25] synaptics_usb: probe of 3-1:0.52 failed with error -71 [ 384.477507][ T25] usb 3-1: USB disconnect, device number 48 23:13:06 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acff0"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:13:06 executing program 1: keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 23:13:06 executing program 5: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0) 23:13:06 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) 23:13:06 executing program 4: r0 = socket(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffdbd) 23:13:06 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12}], 0x0, &(0x7f0000011600)) 23:13:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="b6", 0x1}, {&(0x7f0000000040)="7bb86d", 0x3}, {&(0x7f0000000080)="26ef13f3d52040cd4908e72f5d47fb1d6c77eb5578c7363f28f3a5b9b57fb3412b473238fd2e74caeca2c1ddbed7a31044bbdca7b44853c8a0b8ed57d4a17ba624d76c760f7e6f9faca5d0502d077272cc04b489f9323d5019b92fedc1b402e8e4cd383b3840b5eaf6f6f141cc1cfbb93bc10ce91daf27d6aa5755094108", 0x7e}, {&(0x7f0000000240)="6128d9d0f7ff8da4769dbf684adee58f105ac05ba8069daed93e902c0c666c935298ca030cea70107f7424da8ab585a5b92d30c0e92beef1bd8658f588a01e092c357539cf25fbac3b0f2f3e41d529d6d1ef84f66fb96d0b3e95f9f3d7cf5176ed7ee2a00a449f8e433ffbda73ab50da7d0a215e4d343f8ef7e100747331058a1957b9e6cf7ed0e80bfad51d0cfef92df30dea8f186c08b2c4c7c2108c4d54e0288f5fdfead52855b1b3a6b0a129655dd36ce8300b248d5a4718b59e07b7ef4e14310dce2906a49b53dad2a1fd03f613c2", 0xd1}, {&(0x7f0000000340)="a3ae092ab8946ce14ad7ad510ef0730542fd7ab8bb9cd53541a8e8096bdb", 0x1e}], 0x5}, 0x0) 23:13:06 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @local, @val, {@ipv4}}, 0x0) [ 385.134418][ T6741] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 23:13:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x9}]}) 23:13:06 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12}], 0x0, &(0x7f0000011600)) 23:13:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'vlan0\x00', 0x400}) 23:13:06 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) [ 385.575456][ T25] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 385.730705][ T6751] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 385.844425][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 385.964800][ T25] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 385.973235][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.984569][ T25] usb 3-1: config 0 has no interface number 0 [ 385.990815][ T25] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 386.002821][ T25] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.019224][ T25] usb 3-1: config 0 interface 52 has no altsetting 0 [ 386.354182][ T25] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 386.363431][ T25] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 386.372176][ T25] usb 3-1: Product: syz [ 386.376655][ T25] usb 3-1: Manufacturer: syz [ 386.381397][ T25] usb 3-1: SerialNumber: syz [ 386.393986][ T25] usb 3-1: config 0 descriptor?? [ 386.664550][ T25] usb 3-1: Can not set alternate setting to 1, error: -71 [ 386.671845][ T25] synaptics_usb: probe of 3-1:0.52 failed with error -71 [ 386.695460][ T25] usb 3-1: USB disconnect, device number 49 23:13:08 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acff0"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 23:13:08 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12}], 0x0, &(0x7f0000011600)) 23:13:08 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x49a09d1f0178fa0b, 0x0) 23:13:08 executing program 1: symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00') open$dir(&(0x7f00000005c0)='./file1\x00', 0x0, 0x0) 23:13:08 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x19, 0x0, 0x0) 23:13:08 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', r0, &(0x7f0000000140)='./file0\x00') linkat(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0/file0/file0\x00', 0x0) [ 387.335225][ T6762] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 23:13:08 executing program 4: getrlimit(0x0, &(0x7f0000000100)) 23:13:08 executing program 3: pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) symlinkat(&(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file0/file0\x00') 23:13:08 executing program 1: fchmodat(0xffffffffffffffff, 0x0, 0x0) 23:13:08 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, 0x0) 23:13:08 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x100c, &(0x7f0000000000)={0x3}, 0x10) [ 387.764154][ T25] usb 3-1: new high-speed USB device number 50 using dummy_hcd 23:13:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) [ 388.007700][ T6778] loop0: detected capacity change from 0 to 4 [ 388.024337][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 388.144879][ T25] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 388.157729][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.170188][ T25] usb 3-1: config 0 has no interface number 0 [ 388.178952][ T25] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 388.190904][ T25] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.204675][ T25] usb 3-1: config 0 interface 52 has no altsetting 0 [ 388.554427][ T25] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 388.564852][ T25] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 388.574258][ T25] usb 3-1: Product: syz [ 388.581792][ T25] usb 3-1: Manufacturer: syz [ 388.587212][ T25] usb 3-1: SerialNumber: syz [ 388.601370][ T25] usb 3-1: config 0 descriptor?? [ 388.864054][ T25] usb 3-1: Can not set alternate setting to 1, error: -71 [ 388.871779][ T25] synaptics_usb: probe of 3-1:0.52 failed with error -71 [ 388.893524][ T25] usb 3-1: USB disconnect, device number 50 23:13:10 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acff0"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) 23:13:10 executing program 3: shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) 23:13:10 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x2, 0x77, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x20000000}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x20000000, 0x2}, 0x20) 23:13:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000180)=""/250, 0x26, 0xfa, 0x1}, 0x20) 23:13:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, 0x0) 23:13:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) 23:13:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080), r1, 0x0, 0x2, 0x4}}, 0x20) 23:13:10 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x5411, &(0x7f0000000400)=@null) 23:13:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) [ 389.548639][ T6792] loop0: detected capacity change from 0 to 4 23:13:10 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 23:13:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="100000000100010005000000ffffff7f6824", 0x12, 0x400}], 0x0, 0x0) 23:13:11 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x403, 0x0) [ 390.025188][ T25] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 390.160581][ T6806] loop0: detected capacity change from 0 to 4 [ 390.303832][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 390.434779][ T25] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 390.443125][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.454895][ T25] usb 3-1: config 0 has no interface number 0 [ 390.461657][ T25] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 390.473511][ T25] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 390.487803][ T25] usb 3-1: config 0 interface 52 has no altsetting 0 [ 390.834555][ T25] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 390.843910][ T25] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 390.852408][ T25] usb 3-1: Product: syz [ 390.856892][ T25] usb 3-1: Manufacturer: syz [ 390.861631][ T25] usb 3-1: SerialNumber: syz [ 390.926253][ T25] usb 3-1: config 0 descriptor?? [ 391.196869][ T25] input: syz syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input14 [ 391.406210][ T25] usb 3-1: USB disconnect, device number 51 23:13:12 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acff0"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) 23:13:12 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x40045108) 23:13:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001280)={0x16, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 23:13:12 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000000)) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000080)=""/55) 23:13:12 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x401, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000003c0)) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000140)) 23:13:12 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000001580)) 23:13:13 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) [ 392.102066][ T1193] ieee802154 phy1 wpan1: encryption failed: -22 23:13:13 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000340)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file1', [{0x20, '[*.N%'}], 0xa, "08cdc4fb14bc5c7d4bc1227e4d2cacaded47bb6e6922fccdec4678c683e966dc678f060d35993d9fc66876c238e698e5"}, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:13:13 executing program 4: r0 = io_uring_setup(0x4dda, &(0x7f0000000280)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:13:13 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, @in, @in={0x2, 0x0, @local}, @xdp}) 23:13:13 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x8602, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "db6ff39848b71e5a"}) write$UHID_INPUT(r0, &(0x7f0000001140)={0xd, {"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", 0x1000}}, 0x1006) 23:13:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x32, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) [ 392.545259][ T6832] loop0: detected capacity change from 0 to 87 [ 392.583875][ T124] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 392.725206][ T6835] [U] [ 392.728062][ T6835] [U] Ó®‹“Ù²¤ìÉ<ÜyHÿl¦µ_^3â‚ëZ†ÛÂÂúËqùþ]+2T` ŸnIwXñó–¬Èr+\>¶Ïõ¢£”{Ð#¨eîɧ×U!È»tNÕG–RvOáP>hlrÄð¯@ÆYôø¸ö¸o&muTSBõ­êhÂzîDOtz©iõ[zàñ™>¦§œLðÔžYÓx$Ïô Ï2)±ï•84imË‹ß¿š ƒAñ¬`þÀ [ 392.747054][ T6835] [U] ½šnAÞõ÷‘&gà‰ó/†NZ?¤(£Ý©SþYîýZÕÙ [ 392.752655][ T6835] [U] èðK:D™Ÿ[ó¨Br¤zëæ÷©jvFvLÖ6 Ž’ÑÂ{ %Äí¼mGÓóΧ [ 392.761070][ T6835] [U] 3ý®;Ød¢;ÒöâÁµ)ó¢œb?Ù¢s|'eñEÈí¼~ÌØÌ]ºÁ¦çñ5JÉxW:ø|¬ÚˆÆ€üZ_+÷™ÕíŠHÚ´ו<+¹!¨ [ 392.771947][ T6835] [U] U[,F-ä7nà85%î#N±±E>T¶—c•{á¦2/]TŠâ*ÝtÄ¿sÔ§3ú:ãð¡‘ëþÕ´ÍGP=žÕäãv [ 392.782744][ T6835] [U] U›øZèÀ•}ž „Ãs­¨Íy!ŒYñ¡µy3j¨zûŒqyf#癉»ûøæ`M/ã_“´À6ÒÞó:—Â7Që¾RU.©:²{Žûx<® [ 392.792993][ T6835] [U] I³º€´¥¬eÑåiвíª+yÉ”%Hê»åËÁP-jij±F¢ÍR¹ìÙÌ@.U [ 392.800338][ T6835] [U] õ³‡2©Ð°]3d…ÀC…‡}‡Z\ÞÈ—ÜžÝ\æˆoÛŽ†&³[rM’b»[iüƒ9Á˜Û¢ƒ8zI [ 392.808702][ T6835] [U] Ä œwk„Õ‹Y—ÔP¶@ŒÌÕöÝôðn„u»4TÓ [ 392.814269][ T6835] [U] þu4¢–)6 ã9ÑQ]ÅÅÜ;F¥fýb¸Cå‘¥Q)°Çh$•ô“,¸\\ÈØOä o [ 392.822680][ T6835] [U] `¿Ô9Ùo#,s£{¨¨!ùÈk~~ö©ò&´;{G0¹)³_¿ÉÉ’Æ™£o )÷°7T‹MΠɯB{DhÏ(*ém‡ÊxßäqW«½´¢0ýí"Q"œ‘ï8¡&Á¥TÂjJ9ûŠô°õÿt‡7 “ bàùh+¨©xañl05ˆ¼io•UGcÿ —`æ [ 392.838271][ T6835] [U] 09ÃBÎTëûöÖÐh-™ßøFäÓá.=.–ã×ÑÞ¶¥çB/3P—_'x›Tû×aBQˆ3 [ 392.846096][ T6835] [U] „¬³pJ¥tVŒa쥭K#¨²ð¼:ß«÷!LÆ’U9µ:µÛëÏ?Õ2h§O3oÎí€ðLRBMîEò&†ù³‡ŸÓÔÇs3j¨¥‚:¤7\ $ [ 392.856924][ T6835] [U] oúÓôOÍÓó|"@EÕö­mû:¡¢›Î1åxë[’wï[dlo+¼{³“@ÅÚ†CëÇ4T6©¾ ((} åtüSDþ‰‡‰ÈšÐ,_9…¬#ÏóXl*¹9{Ôkn?Uœdü.×råš%»GÑéÑö¯9쫬ÝTøqÞZòWµòŒêœ]þF®…ƒ]Û”s•ÿ [ 392.873416][ T6835] [U] …nj³D~zß8˜[µ‘©h‚Yé»xŠü=¨›Ð„Ð˜æ “á¢tCì¯Â1 [ 392.934179][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 392.934524][ T6835] [U] j/¯#VãszºèB@ʇÉîç‡vœ¹8m²OÓœ·+å3Ä%ÇäâT8õ_à ¢©#nlî|g†]lˆÍQ D»ÕçÕ¢DûêòA¶ÄúÇ7Ið‚ޅ좛Ùܽâñ+K?ä€ Éä÷¦KS/:öˆ±5#E¨[ [ 392.953729][ T6835] [U] @AHTKæ šÂÕÈE>-«á—ô¬~1.šþz¡…=!èQ©·Úýè¢ÈÿAð¼*dŸðsjèM [ 392.962198][ T6835] [U] ,Ìø¶íœïõsñüýq¹Øc„¨oÿÓ.°„^„.ùÝTè]É=H³ë®'òÚü61¾ù® zðžqI·ˆöjÔ³50ë»èÛ1‡ïXíè~b÷_xþ„Hø;]­ÆÒÜA¹”Mš5WÒÅΞõçÚÓÍÖðþsçÚvêÍň´Áݼú•ò­ANW$¶ºëÜVºÑüIè:ï3âîxÞ¯w¤ðÎÝ:j´˜(`À‘Úz¼þ'ê,ÝĚвS&9¼qtÉ‹[(%çd„SRؾÙÿÓ›,œÚÌ;An2 [ 392.985434][ T6835] [U] ®¡´Ü¥8û|ßÕ2z)U©c3pIæC¬_:[aóÌWøš?:‚+ÿéˆV×(Ü6 vN>¸NyÕLûI¨ ƒ¡‡*PôRP/Ù¹|ýä| vaX8êYúéPÜ8gñ.hpÓyìîæÀé  ê\´Ò×v#¹—BÍ1_‡§lÅë¬À®€#îÎñ0a'ÒÆ42=_y“s¯É•1dË °¿`ŒeåCŽpr|Ø=Xùs·I@öUØåí [ 393.005142][ T6835] [U] ÞQæÛÃ}Ûßã‡ðêáY“õu‘~·|Tßd÷û:ù*þî²*q‡jTWTªÓÂæÏXö*HŒz,ÅÕ° [ 393.013581][ T6835] [U] Ü(‡>– [ 393.017129][ T6835] [U] WãÑjÀ’°=ï_F²r¢QÔn¼¶›6­1Öo½_¬@Ð^ˆ8©q›)^ž½[în#V/Â>@Á)•˜´Êɳ±/G€üçËÆx8¤_š$Ukú§ÿ9LK%…jA [ 393.057760][ T6835] [U] içÜ[ú±Šx1¸-µ\CºÞå´™!Óµ‚ªÌÇ •Í伊€žñ—Cñ­W]€¦áì`™º@Ü;›@+“‡ÿK2uw­ô}ÇÁ1j”ª¾‹‘ç¸D¦ÅK…ëË1~Tf?¥ÈH,ñz{J©îŒxQòrpß9óÒ‘Ïçܵ8J`|Ähr:X‚ï¡nï@Â’lÄqŒ³L+Æ(6ë8*QGD«¯ÏûmÝItí4†8´Ù\„sF;QSj € µ “+íÜÚºƒ6z¤)y+¢ëF÷¼ëxE·vnZl¬#‡(`¹p¢äÛZÛ$Xü>s Õ9ËûïbWç×ÅÕëYÖ1‘0U£â#§;òÿpDZ¾kƧoeõí [ 393.087488][ T6835] [U] BW-C‡ [ 393.090762][ T6835] [U] ¢€ÆRM-™ùLõÏl/ßYN–(ÃâT¬´L›çê¼®Ž#ק-u%Á„óR-S8É{k},P"óIÿüHÄ.ºÃ:Çz3©!& ¼$Xå„å7:¤}µ˜íN­z:ìV*6Ã4Á©Å±ñ f³k3̳˜+ÊbqaMƒLÓ•½8f淪M-òéµ°'ð+™î'7¢F¢)í¦ê>7@%öa'{ÜÑMOÔý£­èŽïæšVLGÍͺÚ:(I•ÁÅyƒ`ÞÝŸ©Ì&Sóï–y¯ïBF"huáË´ [ 393.232609][ T6833] [U] ¥`ˆ>bð³¼(e`©5”SܧÔUNr÷sXÛ«ˆÐý©·Öö]‹=âeß ¢7»ÒŽ–[ÕÞ¸k²ç.¾O·ðwli,¥s“콈þ%hbíg‘¯¤Œp0†…Ð/Œs »sG2©ú5ß}Ù€ [ 393.264329][ T124] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 393.272832][ T124] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.283742][ T124] usb 3-1: config 0 has no interface number 0 [ 393.290595][ T124] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 393.302566][ T124] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.316882][ T124] usb 3-1: config 0 interface 52 has no altsetting 0 [ 393.544620][ T124] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 393.554477][ T124] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 393.563084][ T124] usb 3-1: Product: syz [ 393.567540][ T124] usb 3-1: Manufacturer: syz [ 393.572499][ T124] usb 3-1: SerialNumber: syz [ 393.624674][ T124] usb 3-1: config 0 descriptor?? [ 393.876884][ T124] input: syz syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input15 [ 394.089472][ T3544] usb 3-1: USB disconnect, device number 52 23:13:15 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acff0"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) 23:13:15 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) bind$inet6(r0, &(0x7f00000001c0)={0x1c, 0x1c, 0x1}, 0x1c) 23:13:15 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) 23:13:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0xff00, 0xf0ff1f, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0x10}, 0x1c) 23:13:15 executing program 3: r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r0}) 23:13:15 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r0, 0x29, 0x1e, 0x0, 0x300) 23:13:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f00000000c0)) 23:13:15 executing program 5: unshare(0x48000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, 0x0, 0x4000c00) 23:13:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) 23:13:15 executing program 1: unshare(0x48000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) 23:13:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1={0xff, 0x3b}, 0x6}, 0x20) [ 395.221482][ T6862] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 395.288137][ T124] usb 3-1: new high-speed USB device number 53 using dummy_hcd 23:13:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) [ 395.555008][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 395.674633][ T124] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 395.683371][ T124] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.694748][ T124] usb 3-1: config 0 has no interface number 0 [ 395.701163][ T124] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 395.712676][ T124] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.726508][ T124] usb 3-1: config 0 interface 52 has no altsetting 0 [ 395.739487][ T6871] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 396.058042][ T124] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 396.068134][ T124] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 396.077166][ T124] usb 3-1: Product: syz [ 396.082303][ T124] usb 3-1: Manufacturer: syz [ 396.087576][ T124] usb 3-1: SerialNumber: syz [ 396.106240][ T124] usb 3-1: config 0 descriptor?? [ 396.356835][ T124] input: syz syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input16 [ 396.585834][ T114] usb 3-1: USB disconnect, device number 53 23:13:18 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acff0"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) 23:13:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@remote, @private=0x5}, 0x8) 23:13:18 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r0, 0x29, 0x13, 0x0, 0x300) 23:13:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) 23:13:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x19, 0x0, &(0x7f0000000240)) 23:13:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) [ 397.260922][ T6880] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 23:13:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="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", 0x5a3, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x5}, 0x1c) 23:13:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00'}) 23:13:18 executing program 4: unshare(0x48000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 23:13:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x23, &(0x7f0000000040), 0x8) 23:13:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) [ 397.714138][ T124] usb 3-1: new high-speed USB device number 54 using dummy_hcd 23:13:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) [ 397.848461][ T6894] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 397.985298][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 398.114913][ T124] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 398.123342][ T124] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.133942][ T124] usb 3-1: config 0 has no interface number 0 [ 398.140202][ T124] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 398.151793][ T124] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.165139][ T124] usb 3-1: config 0 interface 52 has no altsetting 0 [ 398.434995][ T124] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 398.446851][ T124] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 398.456278][ T124] usb 3-1: Product: syz [ 398.461398][ T124] usb 3-1: Manufacturer: syz [ 398.466219][ T124] usb 3-1: SerialNumber: syz [ 398.487748][ T124] usb 3-1: config 0 descriptor?? [ 398.737412][ T124] input: syz syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input17 [ 398.961605][ T124] usb 3-1: USB disconnect, device number 54 [ 398.984964][ T4315] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -19 23:13:20 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acff0"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) 23:13:20 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x7, 0x4, 0x0, 0x2, @vifc_lcl_addr=@local, @local}, 0x10) 23:13:20 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x5480b840}, 0x20) 23:13:20 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) 23:13:20 executing program 4: r0 = socket(0x28, 0x5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 23:13:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect(r0, &(0x7f0000000140)=@nl, 0xb) 23:13:20 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000340)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='q', 0x1}], 0x1}}], 0x1, 0x0) 23:13:20 executing program 3: unshare(0x48000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)="9218328a7a8d9a21be86b286a224fc292e345be316f3e238efacf51b214ec1e0a5b78fcd59faf2988fd5b48209904a214e9edc8d371f71c3a99e03c7f2b126e3054547ffafb5f7b1c9cbf05bf3f0340d7bf1b2cc3755017fa2a9bd4b0defdcc2c331ed114b1b50fa9b9bf50fa6465d8c4291c2fec19d5b5bed3bb8ff94f3bea17abe72b5bcc8a02182a0661c23ceb1ca40cc33a42571205b8d8aa7afe13a8700b85a2cc730636a053e0171ba0caf086545ffffa0758ce9e9", 0xb8) r0 = socket(0x1f, 0x800, 0x3f) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x28100480}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x140b, 0x304, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x4000c00) 23:13:20 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) 23:13:20 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='rxrpc_client\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x8c00, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0xf8, 0x8, 0x9}}) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200), 0x175d900f) lseek(r5, 0x0, 0x0) write(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x9e, 0xde, &(0x7f0000000340)=""/222, 0x41000, 0x1, '\x00', r4, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x10}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0xbb8) 23:13:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r2, &(0x7f0000000680)=""/156, 0x9c) bind(r2, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x4, @local, 'vxcan1\x00'}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 23:13:21 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) [ 400.153252][ T124] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 400.176785][ T6915] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 400.261824][ T6924] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 400.319343][ T6915] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 400.340151][ T6915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 400.349458][ T6915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 400.414160][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 400.554730][ T124] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 400.566047][ T124] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.577308][ T124] usb 3-1: config 0 has no interface number 0 [ 400.583863][ T124] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 400.595632][ T124] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.609911][ T124] usb 3-1: config 0 interface 52 has no altsetting 0 [ 400.925464][ T124] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 400.934989][ T124] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 400.943533][ T124] usb 3-1: Product: syz [ 400.948214][ T124] usb 3-1: Manufacturer: syz [ 400.952935][ T124] usb 3-1: SerialNumber: syz [ 401.105257][ T124] usb 3-1: config 0 descriptor?? [ 401.387621][ T124] input: syz syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input18 [ 401.599150][ T124] usb 3-1: USB disconnect, device number 55 23:13:23 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c92301090224000100007e000904340102d469e70009058acff0"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) 23:13:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r2, &(0x7f0000000680)=""/156, 0x9c) bind(r2, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x4, @local, 'vxcan1\x00'}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 23:13:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c4600000000ffffffff0000000002003e002000000000000000000000004000000000000000000000000000000000000000fcff38000200000000000000f300"/825], 0x341) r3 = socket(0x1e, 0x1, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x2, 0x0, 0x3}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x6, &(0x7f0000000280)=[{0xc2eb, 0x7f, 0x6, 0x1c000000}, {0x8000, 0x40, 0xac, 0x80}, {0x8, 0x9, 0x5, 0x7ff}, {0x1b50, 0x40, 0x20, 0x400}, {0x401, 0x0, 0x9, 0x80000000}, {0x104, 0x9, 0x6, 0x8}]}, 0x10) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRESOCT], 0x2000011a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x4d, 0xe3, 0x2}}) 23:13:23 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) 23:13:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x8942, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) 23:13:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {r1}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000100)={0x0, r3+60000000}, &(0x7f0000000180)) timer_settime(r2, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x0, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) 23:13:23 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) 23:13:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r2, &(0x7f0000000680)=""/156, 0x9c) bind(r2, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x4, @local, 'vxcan1\x00'}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 23:13:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x8942, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) [ 402.834058][ T25] usb 3-1: new high-speed USB device number 56 using dummy_hcd 23:13:24 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) 23:13:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r2, &(0x7f0000000680)=""/156, 0x9c) bind(r2, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x4, @local, 'vxcan1\x00'}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) [ 403.074104][ T25] usb 3-1: Using ep0 maxpacket: 8 23:13:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={@rand_addr, @rand_addr, 0x2f, 0x9}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4) pipe2(&(0x7f0000000840)={0xffffffffffffffff}, 0x84000) openat$cgroup_int(r3, &(0x7f0000000880)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0xc, 0x1, 0x4, 0x4, 0x1310, 0xffffffffffffffff, 0x7d77, '\x00', r2, r3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x29, 0x7, 0x0, 0x40, 0x2, @mcast1, @private1, 0x8000, 0x700, 0xfffffe01}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x890b, 0x0) [ 403.204480][ T25] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 403.213086][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.226666][ T25] usb 3-1: config 0 has no interface number 0 [ 403.233131][ T25] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 403.245773][ T25] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 403.259927][ T25] usb 3-1: config 0 interface 52 has no altsetting 0 [ 403.674568][ T25] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 403.684640][ T25] usb 3-1: New USB device strings: Mfr=22, Product=201, SerialNumber=35 [ 403.694876][ T25] usb 3-1: Product: syz [ 403.699807][ T25] usb 3-1: Manufacturer: syz [ 403.705413][ T25] usb 3-1: SerialNumber: syz [ 403.799552][ T6942] not chained 70000 origins [ 403.805139][ T6942] CPU: 0 PID: 6942 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 403.815869][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.826663][ T6942] Call Trace: [ 403.830857][ T6942] [ 403.833968][ T6942] dump_stack_lvl+0x1c8/0x256 [ 403.838886][ T6942] dump_stack+0x1a/0x1c [ 403.843188][ T6942] kmsan_internal_chain_origin+0x78/0x120 [ 403.849629][ T6942] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 403.856466][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 403.861641][ T6942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 403.867953][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 403.873272][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 403.879158][ T6942] ? __get_compat_msghdr+0x5b/0x750 [ 403.884629][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 403.889928][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 403.895801][ T6942] ? should_fail+0x3f/0x7e0 [ 403.901091][ T6942] ? __stack_depot_save+0x21/0x4b0 [ 403.906296][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 403.911469][ T6942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 403.917792][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 403.922959][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 403.929575][ T6942] __msan_chain_origin+0xbd/0x140 [ 403.934667][ T6942] __get_compat_msghdr+0x514/0x750 [ 403.940038][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 403.944958][ T6942] ? ___sys_recvmsg+0xa9/0x870 [ 403.949854][ T6942] ? do_recvmmsg+0x63a/0x10a0 [ 403.954585][ T6942] ___sys_recvmsg+0x19d/0x870 [ 403.959315][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 403.964834][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 403.970731][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 403.980560][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 403.986424][ T6942] do_recvmmsg+0x63a/0x10a0 [ 403.991117][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 403.996303][ T6942] ? __sys_recvmmsg+0x52/0x450 [ 404.001309][ T6942] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 404.007938][ T6942] __sys_recvmmsg+0x113/0x450 [ 404.012692][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 404.017913][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 404.024705][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 404.029809][ T6942] ? exit_to_user_mode_prepare+0x119/0x220 [ 404.035811][ T6942] do_fast_syscall_32+0x33/0x70 [ 404.040731][ T6942] do_SYSENTER_32+0x1b/0x20 [ 404.046377][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 404.053270][ T6942] RIP: 0023:0xf7faf549 [ 404.058237][ T6942] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 404.078242][ T6942] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 404.087163][ T6942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 404.095597][ T6942] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 404.104201][ T6942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 404.112552][ T6942] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 404.120786][ T6942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 404.129301][ T6942] [ 404.135401][ T6942] Uninit was stored to memory at: [ 404.142324][ T6942] __get_compat_msghdr+0x514/0x750 [ 404.147958][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 404.153381][ T6942] ___sys_recvmsg+0x19d/0x870 [ 404.159446][ T6942] do_recvmmsg+0x63a/0x10a0 [ 404.164874][ T6942] __sys_recvmmsg+0x113/0x450 [ 404.170759][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 404.177362][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 404.182739][ T6942] do_fast_syscall_32+0x33/0x70 [ 404.187846][ T6942] do_SYSENTER_32+0x1b/0x20 [ 404.192726][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 404.199972][ T6942] [ 404.202404][ T6942] Uninit was stored to memory at: [ 404.208430][ T6942] __get_compat_msghdr+0x514/0x750 [ 404.211839][ T25] usb 3-1: config 0 descriptor?? [ 404.214182][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 404.214249][ T6942] ___sys_recvmsg+0x19d/0x870 [ 404.231801][ T6942] do_recvmmsg+0x63a/0x10a0 [ 404.237081][ T6942] __sys_recvmmsg+0x113/0x450 [ 404.242057][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 404.249321][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 404.254908][ T6942] do_fast_syscall_32+0x33/0x70 [ 404.259835][ T6942] do_SYSENTER_32+0x1b/0x20 [ 404.264696][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 404.271308][ T6942] [ 404.273806][ T6942] Uninit was stored to memory at: [ 404.279569][ T6942] __get_compat_msghdr+0x514/0x750 [ 404.285634][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 404.291298][ T6942] ___sys_recvmsg+0x19d/0x870 [ 404.296300][ T6942] do_recvmmsg+0x63a/0x10a0 [ 404.301132][ T6942] __sys_recvmmsg+0x113/0x450 [ 404.306124][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 404.312523][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 404.318352][ T6942] do_fast_syscall_32+0x33/0x70 [ 404.323443][ T6942] do_SYSENTER_32+0x1b/0x20 [ 404.329164][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 404.335945][ T6942] [ 404.338294][ T6942] Uninit was stored to memory at: [ 404.343453][ T6942] __get_compat_msghdr+0x514/0x750 [ 404.350062][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 404.356459][ T6942] ___sys_recvmsg+0x19d/0x870 [ 404.361307][ T6942] do_recvmmsg+0x63a/0x10a0 [ 404.366159][ T6942] __sys_recvmmsg+0x113/0x450 [ 404.371021][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 404.377912][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 404.383298][ T6942] do_fast_syscall_32+0x33/0x70 [ 404.390369][ T6942] do_SYSENTER_32+0x1b/0x20 [ 404.395125][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 404.401919][ T6942] [ 404.404495][ T6942] Uninit was stored to memory at: [ 404.409974][ T6942] __get_compat_msghdr+0x514/0x750 [ 404.415364][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 404.420662][ T6942] ___sys_recvmsg+0x19d/0x870 [ 404.425985][ T6942] do_recvmmsg+0x63a/0x10a0 [ 404.430570][ T6942] __sys_recvmmsg+0x113/0x450 [ 404.435663][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 404.442127][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 404.447434][ T6942] do_fast_syscall_32+0x33/0x70 [ 404.452761][ T6942] do_SYSENTER_32+0x1b/0x20 [ 404.458136][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 404.464764][ T6942] [ 404.467111][ T6942] Uninit was stored to memory at: [ 404.472404][ T6942] __get_compat_msghdr+0x514/0x750 [ 404.477086][ T25] input: syz syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input19 [ 404.477765][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 404.495841][ T6942] ___sys_recvmsg+0x19d/0x870 [ 404.500619][ T6942] do_recvmmsg+0x63a/0x10a0 [ 404.505462][ T6942] __sys_recvmmsg+0x113/0x450 [ 404.510234][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 404.517009][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 404.522108][ T6942] do_fast_syscall_32+0x33/0x70 [ 404.527221][ T6942] do_SYSENTER_32+0x1b/0x20 [ 404.531781][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 404.538896][ T6942] [ 404.541239][ T6942] Uninit was stored to memory at: [ 404.546528][ T6942] __get_compat_msghdr+0x514/0x750 [ 404.552490][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 404.558490][ T6942] ___sys_recvmsg+0x19d/0x870 [ 404.564172][ T6942] do_recvmmsg+0x63a/0x10a0 [ 404.568842][ T6942] __sys_recvmmsg+0x113/0x450 [ 404.573777][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 404.580753][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 404.585996][ T6942] do_fast_syscall_32+0x33/0x70 [ 404.592073][ T6942] do_SYSENTER_32+0x1b/0x20 [ 404.596796][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 404.603878][ T6942] [ 404.606276][ T6942] Local variable msg_sys created at: [ 404.611573][ T6942] do_recvmmsg+0x5f/0x10a0 [ 404.616643][ T6942] __sys_recvmmsg+0x113/0x450 [ 404.708184][ T114] usb 3-1: USB disconnect, device number 56 [ 404.715748][ T2824] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -19 23:13:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './bus\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002800)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000003000000000000000010000b5641e8891b15c9c5597962fba4496ac3541b20856537fe1e3f75c811eadd14e1e15a84281dfabefc7c34650e43d670046e6ac0f3916b31283", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32], 0x70}}, {{0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1, 0x0, 0x38, 0x8000}}, {{&(0x7f00000021c0)=@file={0x0, './bus\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x8010) creat(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r2}, 0x10) syz_clone(0x40900280, &(0x7f0000000980), 0x0, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="24f1d5342107c074da50a1777db81c5303d020be216562a5640325019495efccb44d5102bedbeccfd97ad8676264babd4cfb01bd1fe1480db1b671889917d11cb89103807c02fb58c86080028e82505a7bc46b5b5d97692d231b4109613e33bd1808d167026f02242ecb6860fac7fbe0d21b0d550cfa5fd546e906411d398be6b19d4e9d4b0a9430e3d64e7205d8c3e5b61fba5002c52ee550b2f306f930a4f932966e6f71d1c3dd31c8a8417972c67791128b9ba7ff073dc3d19ef8ab09d0959e1caec41c58093d37de9d7c82816d8519e3a47a0fbfdd964cd9f76895c589") r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) getpeername$unix(r3, &(0x7f0000000400)=@abs, &(0x7f0000000000)=0x6e) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000480)={@rand_addr, @rand_addr, 0x2f, 0x7f}}) 23:13:26 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r1, &(0x7f0000000680)=""/156, 0x9c) bind(r1, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x4, @local, 'vxcan1\x00'}}, 0x80) [ 405.360038][ T6942] not chained 80000 origins [ 405.364977][ T6942] CPU: 0 PID: 6942 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 405.375094][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.385625][ T6942] Call Trace: [ 405.388933][ T6942] [ 405.391995][ T6942] dump_stack_lvl+0x1c8/0x256 [ 405.396984][ T6942] dump_stack+0x1a/0x1c [ 405.401417][ T6942] kmsan_internal_chain_origin+0x78/0x120 [ 405.407825][ T6942] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 405.415856][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 405.421659][ T6942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 405.428887][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 405.434075][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 405.441556][ T6942] ? __get_compat_msghdr+0x5b/0x750 [ 405.446927][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 405.453153][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 405.460277][ T6942] ? should_fail+0x3f/0x7e0 [ 405.465469][ T6942] ? __stack_depot_save+0x21/0x4b0 [ 405.471873][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 405.477233][ T6942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 405.484092][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 405.489532][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 405.495722][ T6942] __msan_chain_origin+0xbd/0x140 [ 405.501093][ T6942] __get_compat_msghdr+0x514/0x750 [ 405.507275][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 405.512717][ T6942] ? ___sys_recvmsg+0xa9/0x870 [ 405.517794][ T6942] ? do_recvmmsg+0x63a/0x10a0 [ 405.522925][ T6942] ___sys_recvmsg+0x19d/0x870 [ 405.527854][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 405.533116][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 405.541346][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 405.546878][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 405.554446][ T6942] do_recvmmsg+0x63a/0x10a0 [ 405.559772][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 405.566138][ T6942] ? __sys_recvmmsg+0x52/0x450 [ 405.571315][ T6942] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 405.578528][ T6942] __sys_recvmmsg+0x113/0x450 [ 405.583414][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 405.588915][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 405.599006][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 405.605727][ T6942] ? exit_to_user_mode_prepare+0x119/0x220 [ 405.612952][ T6942] do_fast_syscall_32+0x33/0x70 [ 405.617900][ T6942] do_SYSENTER_32+0x1b/0x20 [ 405.623011][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 405.631120][ T6942] RIP: 0023:0xf7faf549 [ 405.635245][ T6942] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 405.655637][ T6942] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 405.664293][ T6942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 405.672845][ T6942] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 405.680953][ T6942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 405.689830][ T6942] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 405.698094][ T6942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 405.706783][ T6942] [ 405.714295][ T6942] Uninit was stored to memory at: [ 405.719531][ T6942] __get_compat_msghdr+0x514/0x750 [ 405.726169][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 405.731534][ T6942] ___sys_recvmsg+0x19d/0x870 [ 405.736833][ T6942] do_recvmmsg+0x63a/0x10a0 [ 405.741587][ T6942] __sys_recvmmsg+0x113/0x450 [ 405.746813][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 405.753908][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 405.759606][ T6942] do_fast_syscall_32+0x33/0x70 [ 405.764711][ T6942] do_SYSENTER_32+0x1b/0x20 [ 405.769361][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 405.776053][ T6942] [ 405.778395][ T6942] Uninit was stored to memory at: [ 405.784039][ T6942] __get_compat_msghdr+0x514/0x750 [ 405.789394][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 405.794581][ T6942] ___sys_recvmsg+0x19d/0x870 [ 405.799717][ T6942] do_recvmmsg+0x63a/0x10a0 [ 405.804655][ T6942] __sys_recvmmsg+0x113/0x450 [ 405.810106][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 405.816765][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 405.822772][ T6942] do_fast_syscall_32+0x33/0x70 [ 405.828042][ T6942] do_SYSENTER_32+0x1b/0x20 [ 405.832703][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 405.840706][ T6942] [ 405.843054][ T6942] Uninit was stored to memory at: [ 405.850135][ T6942] __get_compat_msghdr+0x514/0x750 [ 405.857290][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 405.863184][ T6942] ___sys_recvmsg+0x19d/0x870 [ 405.869302][ T6942] do_recvmmsg+0x63a/0x10a0 [ 405.876393][ T6942] __sys_recvmmsg+0x113/0x450 [ 405.881142][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 405.888121][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 405.893695][ T6942] do_fast_syscall_32+0x33/0x70 [ 405.902702][ T6942] do_SYSENTER_32+0x1b/0x20 [ 405.908453][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 405.914961][ T6942] [ 405.917596][ T6942] Uninit was stored to memory at: [ 405.922715][ T6942] __get_compat_msghdr+0x514/0x750 [ 405.928448][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 405.934384][ T6942] ___sys_recvmsg+0x19d/0x870 [ 405.939549][ T6942] do_recvmmsg+0x63a/0x10a0 [ 405.945355][ T6942] __sys_recvmmsg+0x113/0x450 [ 405.950097][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 405.957445][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 405.963077][ T6942] do_fast_syscall_32+0x33/0x70 [ 405.968182][ T6942] do_SYSENTER_32+0x1b/0x20 [ 405.972966][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 405.979675][ T6942] [ 405.982140][ T6942] Uninit was stored to memory at: [ 405.987884][ T6942] __get_compat_msghdr+0x514/0x750 [ 405.993079][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 405.998223][ T6942] ___sys_recvmsg+0x19d/0x870 [ 406.003395][ T6942] do_recvmmsg+0x63a/0x10a0 [ 406.008496][ T6942] __sys_recvmmsg+0x113/0x450 [ 406.013878][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 406.020559][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 406.025976][ T6942] do_fast_syscall_32+0x33/0x70 [ 406.031277][ T6942] do_SYSENTER_32+0x1b/0x20 [ 406.037659][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 406.044980][ T6942] [ 406.047511][ T6942] Uninit was stored to memory at: [ 406.053147][ T6942] __get_compat_msghdr+0x514/0x750 [ 406.059534][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 406.064946][ T6942] ___sys_recvmsg+0x19d/0x870 [ 406.069709][ T6942] do_recvmmsg+0x63a/0x10a0 [ 406.074496][ T6942] __sys_recvmmsg+0x113/0x450 [ 406.079241][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 406.086327][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 406.092414][ T6942] do_fast_syscall_32+0x33/0x70 [ 406.097803][ T6942] do_SYSENTER_32+0x1b/0x20 [ 406.103027][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 406.111306][ T6942] [ 406.113944][ T6942] Uninit was stored to memory at: [ 406.119220][ T6942] __get_compat_msghdr+0x514/0x750 [ 406.124622][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 406.131648][ T6942] ___sys_recvmsg+0x19d/0x870 [ 406.136773][ T6942] do_recvmmsg+0x63a/0x10a0 [ 406.141519][ T6942] __sys_recvmmsg+0x113/0x450 [ 406.149162][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 406.157115][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 406.163082][ T6942] do_fast_syscall_32+0x33/0x70 [ 406.168891][ T6942] do_SYSENTER_32+0x1b/0x20 [ 406.174173][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 406.180939][ T6942] [ 406.183284][ T6942] Local variable msg_sys created at: [ 406.188915][ T6942] do_recvmmsg+0x5f/0x10a0 [ 406.193891][ T6942] __sys_recvmmsg+0x113/0x450 [ 406.996942][ T6942] not chained 90000 origins [ 407.001534][ T6942] CPU: 0 PID: 6942 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 407.012122][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.022601][ T6942] Call Trace: [ 407.026000][ T6942] [ 407.028953][ T6942] dump_stack_lvl+0x1c8/0x256 [ 407.034038][ T6942] dump_stack+0x1a/0x1c [ 407.038260][ T6942] kmsan_internal_chain_origin+0x78/0x120 [ 407.044042][ T6942] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 407.050197][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 407.055421][ T6942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 407.062452][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 407.067720][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 407.073589][ T6942] ? __get_compat_msghdr+0x5b/0x750 [ 407.079032][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 407.084220][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 407.090263][ T6942] ? should_fail+0x3f/0x7e0 [ 407.094858][ T6942] ? __stack_depot_save+0x21/0x4b0 [ 407.100411][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 407.106892][ T6942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 407.113421][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 407.118717][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 407.125092][ T6942] __msan_chain_origin+0xbd/0x140 [ 407.130316][ T6942] __get_compat_msghdr+0x514/0x750 [ 407.136746][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 407.141796][ T6942] ? ___sys_recvmsg+0xa9/0x870 [ 407.147068][ T6942] ? do_recvmmsg+0x63a/0x10a0 [ 407.151907][ T6942] ___sys_recvmsg+0x19d/0x870 [ 407.156647][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 407.161902][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 407.167773][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 407.173868][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 407.180343][ T6942] do_recvmmsg+0x63a/0x10a0 [ 407.185114][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 407.190375][ T6942] ? __sys_recvmmsg+0x52/0x450 [ 407.195322][ T6942] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 407.202460][ T6942] __sys_recvmmsg+0x113/0x450 [ 407.208095][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 407.213378][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 407.219841][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 407.225729][ T6942] ? exit_to_user_mode_prepare+0x119/0x220 [ 407.231714][ T6942] do_fast_syscall_32+0x33/0x70 [ 407.236713][ T6942] do_SYSENTER_32+0x1b/0x20 [ 407.241394][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 407.249306][ T6942] RIP: 0023:0xf7faf549 [ 407.253759][ T6942] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 407.274799][ T6942] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 407.283680][ T6942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 407.291809][ T6942] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 407.300133][ T6942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 407.309492][ T6942] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 407.319715][ T6942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 407.329292][ T6942] [ 407.336062][ T6942] Uninit was stored to memory at: [ 407.341649][ T6942] __get_compat_msghdr+0x514/0x750 [ 407.347526][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 407.354061][ T6942] ___sys_recvmsg+0x19d/0x870 [ 407.359574][ T6942] do_recvmmsg+0x63a/0x10a0 [ 407.364878][ T6942] __sys_recvmmsg+0x113/0x450 [ 407.369829][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 407.376375][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 407.381465][ T6942] do_fast_syscall_32+0x33/0x70 [ 407.386731][ T6942] do_SYSENTER_32+0x1b/0x20 [ 407.392389][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 407.400836][ T6942] [ 407.403186][ T6942] Uninit was stored to memory at: [ 407.407506][ T6967] not chained 100000 origins [ 407.408585][ T6942] __get_compat_msghdr+0x514/0x750 [ 407.413287][ T6967] CPU: 1 PID: 6967 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 407.418489][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 407.430179][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.430211][ T6967] Call Trace: [ 407.430225][ T6967] [ 407.430240][ T6967] dump_stack_lvl+0x1c8/0x256 [ 407.430300][ T6967] dump_stack+0x1a/0x1c [ 407.430342][ T6967] kmsan_internal_chain_origin+0x78/0x120 [ 407.436157][ T6942] ___sys_recvmsg+0x19d/0x870 [ 407.446709][ T6967] ? propagate_entity_load_avg+0x32/0x1450 [ 407.450267][ T6942] do_recvmmsg+0x63a/0x10a0 [ 407.453509][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 407.458714][ T6942] __sys_recvmmsg+0x113/0x450 [ 407.463237][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 407.469720][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 407.475004][ T6967] ? update_load_avg+0x7dd/0xf70 [ 407.475072][ T6967] ? __get_compat_msghdr+0x5b/0x750 [ 407.475131][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 407.481188][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 407.486149][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 407.486232][ T6967] ? should_fail+0x3f/0x7e0 [ 407.486273][ T6967] ? __stack_depot_save+0x21/0x4b0 [ 407.491511][ T6942] do_fast_syscall_32+0x33/0x70 [ 407.497606][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 407.497683][ T6967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 407.497749][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 407.504239][ T6942] do_SYSENTER_32+0x1b/0x20 [ 407.511146][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 407.516360][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 407.521386][ T6967] __msan_chain_origin+0xbd/0x140 [ 407.527045][ T6942] [ 407.532948][ T6967] __get_compat_msghdr+0x514/0x750 [ 407.539087][ T6942] Uninit was stored to memory at: [ 407.543554][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 407.549074][ T6942] __get_compat_msghdr+0x514/0x750 [ 407.553958][ T6967] ? ___sys_recvmsg+0xa9/0x870 [ 407.554030][ T6967] ? do_recvmmsg+0x63a/0x10a0 [ 407.554089][ T6967] ___sys_recvmsg+0x19d/0x870 [ 407.559419][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 407.565697][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 407.565768][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 407.565831][ T6967] ? __cond_resched+0x1f/0x40 [ 407.571404][ T6942] ___sys_recvmsg+0x19d/0x870 [ 407.576051][ T6967] ? preempt_schedule_common+0x117/0x180 [ 407.576130][ T6967] do_recvmmsg+0x63a/0x10a0 [ 407.576197][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 407.582106][ T6942] do_recvmmsg+0x63a/0x10a0 [ 407.588987][ T6967] ? __sys_recvmmsg+0x52/0x450 [ 407.589059][ T6967] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 407.589130][ T6967] __sys_recvmmsg+0x113/0x450 [ 407.594352][ T6942] __sys_recvmmsg+0x113/0x450 [ 407.596821][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 407.601954][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 407.608815][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 407.608893][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 407.608949][ T6967] ? exit_to_user_mode_prepare+0x119/0x220 [ 407.614790][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 407.619855][ T6967] do_fast_syscall_32+0x33/0x70 [ 407.625601][ T6942] do_fast_syscall_32+0x33/0x70 [ 407.630224][ T6967] do_SYSENTER_32+0x1b/0x20 [ 407.635286][ T6942] do_SYSENTER_32+0x1b/0x20 [ 407.640021][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 407.646432][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 407.652190][ T6967] RIP: 0023:0xf7fc6549 [ 407.657028][ T6942] [ 407.661977][ T6967] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 407.668004][ T6942] Uninit was stored to memory at: [ 407.672329][ T6967] RSP: 002b:00000000f7fa05cc EFLAGS: 00000296 [ 407.677612][ T6942] __get_compat_msghdr+0x514/0x750 [ 407.681920][ T6967] ORIG_RAX: 0000000000000151 [ 407.681937][ T6967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 407.687552][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 407.693863][ T6967] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 407.693897][ T6967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 407.693923][ T6967] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 407.693948][ T6967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 407.693987][ T6967] [ 407.698227][ T6967] Uninit was stored to memory at: [ 407.699357][ T6942] ___sys_recvmsg+0x19d/0x870 [ 407.704791][ T6967] __get_compat_msghdr+0x514/0x750 [ 407.709320][ T6942] do_recvmmsg+0x63a/0x10a0 [ 407.716164][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 407.723554][ T6942] __sys_recvmmsg+0x113/0x450 [ 407.730157][ T6967] ___sys_recvmsg+0x19d/0x870 [ 407.735978][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 407.741045][ T6967] do_recvmmsg+0x63a/0x10a0 [ 407.746037][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 407.752796][ T6967] __sys_recvmmsg+0x113/0x450 [ 407.757558][ T6942] do_fast_syscall_32+0x33/0x70 [ 407.762840][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 407.770346][ T6942] do_SYSENTER_32+0x1b/0x20 [ 407.776848][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 407.781014][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 407.783460][ T6967] do_fast_syscall_32+0x33/0x70 [ 407.804028][ T6942] [ 407.804042][ T6942] Uninit was stored to memory at: [ 407.804120][ T6942] __get_compat_msghdr+0x514/0x750 [ 407.809993][ T6967] do_SYSENTER_32+0x1b/0x20 [ 407.817233][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 407.822832][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 407.827634][ T6942] ___sys_recvmsg+0x19d/0x870 [ 407.836880][ T6967] [ 407.836893][ T6967] Uninit was stored to memory at: [ 407.836976][ T6967] __get_compat_msghdr+0x514/0x750 [ 407.842096][ T6942] do_recvmmsg+0x63a/0x10a0 [ 407.850226][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 407.858589][ T6942] __sys_recvmmsg+0x113/0x450 [ 407.866692][ T6967] ___sys_recvmsg+0x19d/0x870 [ 407.875029][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 407.878061][ T6967] do_recvmmsg+0x63a/0x10a0 [ 407.883310][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 407.888418][ T6967] __sys_recvmmsg+0x113/0x450 [ 407.893976][ T6942] do_fast_syscall_32+0x33/0x70 [ 407.898906][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 407.904086][ T6942] do_SYSENTER_32+0x1b/0x20 [ 407.908772][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 407.914125][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 407.921943][ T6967] do_fast_syscall_32+0x33/0x70 [ 407.927544][ T6942] [ 407.927554][ T6942] Uninit was stored to memory at: [ 407.933463][ T6967] do_SYSENTER_32+0x1b/0x20 [ 407.938375][ T6942] __get_compat_msghdr+0x514/0x750 [ 407.943462][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 407.949961][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 407.954597][ T6967] [ 407.954609][ T6967] Uninit was stored to memory at: [ 407.959883][ T6942] ___sys_recvmsg+0x19d/0x870 [ 407.966620][ T6967] __get_compat_msghdr+0x514/0x750 [ 407.971918][ T6942] do_recvmmsg+0x63a/0x10a0 [ 407.974447][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 407.979476][ T6942] __sys_recvmmsg+0x113/0x450 [ 407.984727][ T6967] ___sys_recvmsg+0x19d/0x870 [ 407.989228][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 407.994926][ T6967] do_recvmmsg+0x63a/0x10a0 [ 408.003388][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 408.008204][ T6967] __sys_recvmmsg+0x113/0x450 [ 408.010587][ T6942] do_fast_syscall_32+0x33/0x70 [ 408.016628][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 408.022720][ T6942] do_SYSENTER_32+0x1b/0x20 [ 408.027349][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 408.032187][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 408.036934][ T6967] do_fast_syscall_32+0x33/0x70 [ 408.041967][ T6942] [ 408.041982][ T6942] Uninit was stored to memory at: [ 408.042063][ T6942] __get_compat_msghdr+0x514/0x750 [ 408.048603][ T6967] do_SYSENTER_32+0x1b/0x20 [ 408.053094][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 408.058232][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 408.062924][ T6942] ___sys_recvmsg+0x19d/0x870 [ 408.068089][ T6967] [ 408.068099][ T6967] Uninit was stored to memory at: [ 408.068175][ T6967] __get_compat_msghdr+0x514/0x750 [ 408.074419][ T6942] do_recvmmsg+0x63a/0x10a0 [ 408.074478][ T6942] __sys_recvmmsg+0x113/0x450 [ 408.079280][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 408.085086][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 408.091446][ T6967] ___sys_recvmsg+0x19d/0x870 [ 408.096495][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 408.098838][ T6967] do_recvmmsg+0x63a/0x10a0 [ 408.104280][ T6942] do_fast_syscall_32+0x33/0x70 [ 408.109479][ T6967] __sys_recvmmsg+0x113/0x450 [ 408.115019][ T6942] do_SYSENTER_32+0x1b/0x20 [ 408.122966][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 408.128150][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 408.130910][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 408.136529][ T6942] [ 408.136546][ T6942] Local variable msg_sys created at: [ 408.141940][ T6967] do_fast_syscall_32+0x33/0x70 [ 408.147206][ T6942] do_recvmmsg+0x5f/0x10a0 [ 408.151841][ T6967] do_SYSENTER_32+0x1b/0x20 [ 408.158484][ T6942] __sys_recvmmsg+0x113/0x450 [ 408.163191][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 408.382316][ T6967] [ 408.385929][ T6967] Uninit was stored to memory at: [ 408.391083][ T6967] __get_compat_msghdr+0x514/0x750 [ 408.396895][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 408.401991][ T6967] ___sys_recvmsg+0x19d/0x870 [ 408.407189][ T6967] do_recvmmsg+0x63a/0x10a0 [ 408.412029][ T6967] __sys_recvmmsg+0x113/0x450 [ 408.417126][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 408.423762][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 408.429435][ T6967] do_fast_syscall_32+0x33/0x70 [ 408.434584][ T6967] do_SYSENTER_32+0x1b/0x20 [ 408.439769][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 408.446536][ T6967] [ 408.448884][ T6967] Uninit was stored to memory at: [ 408.454179][ T6967] __get_compat_msghdr+0x514/0x750 [ 408.459785][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 408.464893][ T6967] ___sys_recvmsg+0x19d/0x870 [ 408.469661][ T6967] do_recvmmsg+0x63a/0x10a0 [ 408.475465][ T6967] __sys_recvmmsg+0x113/0x450 [ 408.480260][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 408.487882][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 408.493519][ T6967] do_fast_syscall_32+0x33/0x70 [ 408.498618][ T6967] do_SYSENTER_32+0x1b/0x20 [ 408.504015][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 408.510695][ T6967] [ 408.513039][ T6967] Uninit was stored to memory at: [ 408.518447][ T6967] __get_compat_msghdr+0x514/0x750 [ 408.524598][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 408.530981][ T6967] ___sys_recvmsg+0x19d/0x870 [ 408.536604][ T6967] do_recvmmsg+0x63a/0x10a0 [ 408.541448][ T6967] __sys_recvmmsg+0x113/0x450 [ 408.546984][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 408.553356][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 408.558886][ T6967] do_fast_syscall_32+0x33/0x70 [ 408.563888][ T6967] do_SYSENTER_32+0x1b/0x20 [ 408.569079][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 408.575782][ T6967] [ 408.578185][ T6967] Local variable msg_sys created at: [ 408.584469][ T6967] do_recvmmsg+0x5f/0x10a0 [ 408.589078][ T6967] __sys_recvmmsg+0x113/0x450 [ 408.694361][ T6967] not chained 110000 origins [ 408.700145][ T6967] CPU: 1 PID: 6967 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 408.711713][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.722682][ T6967] Call Trace: [ 408.725992][ T6967] [ 408.729968][ T6967] dump_stack_lvl+0x1c8/0x256 [ 408.734750][ T6967] dump_stack+0x1a/0x1c [ 408.739925][ T6967] kmsan_internal_chain_origin+0x78/0x120 [ 408.746817][ T6967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 408.753231][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 408.758587][ T6967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 408.765951][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 408.771134][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 408.777729][ T6967] ? __get_compat_msghdr+0x5b/0x750 [ 408.784401][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 408.790474][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 408.796793][ T6967] ? should_fail+0x3f/0x7e0 [ 408.802173][ T6967] ? __stack_depot_save+0x21/0x4b0 [ 408.807385][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 408.813674][ T6967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 408.822184][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 408.828804][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 408.838231][ T6967] __msan_chain_origin+0xbd/0x140 [ 408.843960][ T6967] __get_compat_msghdr+0x514/0x750 [ 408.850286][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 408.855743][ T6967] ? ___sys_recvmsg+0xa9/0x870 [ 408.860788][ T6967] ? do_recvmmsg+0x63a/0x10a0 [ 408.865896][ T6967] ___sys_recvmsg+0x19d/0x870 [ 408.871542][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 408.877822][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 408.886446][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 408.892889][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 408.900965][ T6967] do_recvmmsg+0x63a/0x10a0 [ 408.906289][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 408.913950][ T6967] ? __sys_recvmmsg+0x52/0x450 [ 408.919636][ T6967] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 408.926539][ T6967] __sys_recvmmsg+0x113/0x450 [ 408.932150][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 408.939095][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 408.946241][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 408.951358][ T6967] ? exit_to_user_mode_prepare+0x119/0x220 [ 408.958459][ T6967] do_fast_syscall_32+0x33/0x70 [ 408.963788][ T6967] do_SYSENTER_32+0x1b/0x20 [ 408.968364][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 408.974870][ T6967] RIP: 0023:0xf7fc6549 [ 408.979161][ T6967] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 409.003666][ T6967] RSP: 002b:00000000f7fa05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 409.012949][ T6967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 409.022276][ T6967] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 409.030987][ T6967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 409.041161][ T6967] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 409.049710][ T6967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 409.058742][ T6967] [ 409.067209][ T6967] Uninit was stored to memory at: [ 409.072713][ T6967] __get_compat_msghdr+0x514/0x750 [ 409.079014][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 409.084037][ T6967] ___sys_recvmsg+0x19d/0x870 [ 409.088784][ T6967] do_recvmmsg+0x63a/0x10a0 [ 409.094180][ T6967] __sys_recvmmsg+0x113/0x450 [ 409.101251][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 409.108624][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 409.114227][ T6967] do_fast_syscall_32+0x33/0x70 [ 409.119843][ T6967] do_SYSENTER_32+0x1b/0x20 [ 409.124899][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.132134][ T6967] [ 409.135366][ T6967] Uninit was stored to memory at: [ 409.140495][ T6967] __get_compat_msghdr+0x514/0x750 [ 409.145824][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 409.150732][ T6967] ___sys_recvmsg+0x19d/0x870 [ 409.155934][ T6967] do_recvmmsg+0x63a/0x10a0 [ 409.160638][ T6967] __sys_recvmmsg+0x113/0x450 [ 409.166723][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 409.169694][ T6942] not chained 120000 origins [ 409.173511][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 409.178530][ T6942] CPU: 0 PID: 6942 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 409.185344][ T6967] do_fast_syscall_32+0x33/0x70 [ 409.195624][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.195656][ T6942] Call Trace: [ 409.195670][ T6942] [ 409.195683][ T6942] dump_stack_lvl+0x1c8/0x256 [ 409.195744][ T6942] dump_stack+0x1a/0x1c [ 409.201602][ T6967] do_SYSENTER_32+0x1b/0x20 [ 409.213516][ T6942] kmsan_internal_chain_origin+0x78/0x120 [ 409.213602][ T6942] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 409.213672][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 409.213737][ T6942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 409.217627][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.220580][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 409.225698][ T6967] [ 409.230547][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 409.236463][ T6967] Uninit was stored to memory at: [ 409.242578][ T6942] ? __get_compat_msghdr+0x5b/0x750 [ 409.249310][ T6967] __get_compat_msghdr+0x514/0x750 [ 409.255000][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 409.255076][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 409.255144][ T6942] ? should_fail+0x3f/0x7e0 [ 409.261377][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 409.268424][ T6942] ? __stack_depot_save+0x21/0x4b0 [ 409.268494][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 409.268556][ T6942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 409.274877][ T6967] ___sys_recvmsg+0x19d/0x870 [ 409.277390][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 409.283190][ T6967] do_recvmmsg+0x63a/0x10a0 [ 409.288574][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 409.288647][ T6942] __msan_chain_origin+0xbd/0x140 [ 409.288706][ T6942] __get_compat_msghdr+0x514/0x750 [ 409.294234][ T6967] __sys_recvmmsg+0x113/0x450 [ 409.300102][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 409.305381][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 409.312777][ T6942] ? ___sys_recvmsg+0xa9/0x870 [ 409.319339][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 409.326158][ T6942] ? do_recvmmsg+0x63a/0x10a0 [ 409.326238][ T6942] ___sys_recvmsg+0x19d/0x870 [ 409.326310][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 409.333095][ T6967] do_fast_syscall_32+0x33/0x70 [ 409.338211][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 409.338281][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 409.338337][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 409.345023][ T6967] do_SYSENTER_32+0x1b/0x20 [ 409.349588][ T6942] do_recvmmsg+0x63a/0x10a0 [ 409.355272][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.359907][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 409.365946][ T6967] [ 409.370874][ T6942] ? __sys_recvmmsg+0x52/0x450 [ 409.376143][ T6967] Uninit was stored to memory at: [ 409.381676][ T6942] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 409.386771][ T6967] __get_compat_msghdr+0x514/0x750 [ 409.394250][ T6942] __sys_recvmmsg+0x113/0x450 [ 409.394333][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 409.394401][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 409.399584][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 409.404797][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 409.404856][ T6942] ? exit_to_user_mode_prepare+0x119/0x220 [ 409.404923][ T6942] do_fast_syscall_32+0x33/0x70 [ 409.409824][ T6967] ___sys_recvmsg+0x19d/0x870 [ 409.414591][ T6942] do_SYSENTER_32+0x1b/0x20 [ 409.414652][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.414711][ T6942] RIP: 0023:0xf7faf549 [ 409.420796][ T6967] do_recvmmsg+0x63a/0x10a0 [ 409.426316][ T6942] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 409.426375][ T6942] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 409.426419][ T6942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 409.426452][ T6942] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 409.426478][ T6942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 409.432470][ T6967] __sys_recvmmsg+0x113/0x450 [ 409.437892][ T6942] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 409.437937][ T6942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 409.437974][ T6942] [ 409.440401][ T6942] Uninit was stored to memory at: [ 409.445607][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 409.445685][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 409.445733][ T6967] do_fast_syscall_32+0x33/0x70 [ 409.445781][ T6967] do_SYSENTER_32+0x1b/0x20 [ 409.445826][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.445881][ T6967] [ 409.445888][ T6967] Uninit was stored to memory at: [ 409.445958][ T6967] __get_compat_msghdr+0x514/0x750 [ 409.450549][ T6942] __get_compat_msghdr+0x514/0x750 [ 409.456184][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 409.462738][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 409.467975][ T6967] ___sys_recvmsg+0x19d/0x870 [ 409.470516][ T6942] ___sys_recvmsg+0x19d/0x870 [ 409.475654][ T6967] do_recvmmsg+0x63a/0x10a0 [ 409.481126][ T6942] do_recvmmsg+0x63a/0x10a0 [ 409.487666][ T6967] __sys_recvmmsg+0x113/0x450 [ 409.492788][ T6942] __sys_recvmmsg+0x113/0x450 [ 409.499186][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 409.504940][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 409.511357][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 409.516590][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 409.521629][ T6967] do_fast_syscall_32+0x33/0x70 [ 409.528377][ T6942] do_fast_syscall_32+0x33/0x70 [ 409.533824][ T6967] do_SYSENTER_32+0x1b/0x20 [ 409.538531][ T6942] do_SYSENTER_32+0x1b/0x20 [ 409.543153][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.549651][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.554589][ T6967] [ 409.554600][ T6967] Uninit was stored to memory at: [ 409.554682][ T6967] __get_compat_msghdr+0x514/0x750 [ 409.559623][ T6942] [ 409.559637][ T6942] Uninit was stored to memory at: [ 409.559721][ T6942] __get_compat_msghdr+0x514/0x750 [ 409.582560][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 409.592371][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 409.603093][ T6967] ___sys_recvmsg+0x19d/0x870 [ 409.611901][ T6942] ___sys_recvmsg+0x19d/0x870 [ 409.620390][ T6967] do_recvmmsg+0x63a/0x10a0 [ 409.625565][ T6942] do_recvmmsg+0x63a/0x10a0 [ 409.633970][ T6967] __sys_recvmmsg+0x113/0x450 [ 409.642289][ T6942] __sys_recvmmsg+0x113/0x450 [ 409.645434][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 409.650841][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 409.657301][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 409.663140][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 409.668516][ T6967] do_fast_syscall_32+0x33/0x70 [ 409.673107][ T6942] do_fast_syscall_32+0x33/0x70 [ 409.680020][ T6967] do_SYSENTER_32+0x1b/0x20 [ 409.682363][ T6942] do_SYSENTER_32+0x1b/0x20 [ 409.688457][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.693744][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.700102][ T6967] [ 409.700116][ T6967] Uninit was stored to memory at: [ 409.700196][ T6967] __get_compat_msghdr+0x514/0x750 [ 409.706309][ T6942] [ 409.706316][ T6942] Uninit was stored to memory at: [ 409.711157][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 409.716632][ T6942] __get_compat_msghdr+0x514/0x750 [ 409.721235][ T6967] ___sys_recvmsg+0x19d/0x870 [ 409.726324][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 409.731536][ T6967] do_recvmmsg+0x63a/0x10a0 [ 409.736987][ T6942] ___sys_recvmsg+0x19d/0x870 [ 409.741851][ T6967] __sys_recvmmsg+0x113/0x450 [ 409.748328][ T6942] do_recvmmsg+0x63a/0x10a0 [ 409.755536][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 409.760826][ T6942] __sys_recvmmsg+0x113/0x450 [ 409.765969][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 409.771255][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 409.776263][ T6967] do_fast_syscall_32+0x33/0x70 [ 409.781246][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 409.785874][ T6967] do_SYSENTER_32+0x1b/0x20 [ 409.792315][ T6942] do_fast_syscall_32+0x33/0x70 [ 409.800006][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.802406][ T6942] do_SYSENTER_32+0x1b/0x20 [ 409.808528][ T6967] [ 409.808541][ T6967] Local variable msg_sys created at: [ 409.808555][ T6967] do_recvmmsg+0x5f/0x10a0 [ 409.815140][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.817478][ T6967] __sys_recvmmsg+0x113/0x450 [ 409.823493][ T6942] [ 409.823508][ T6942] Uninit was stored to memory at: [ 410.101722][ T6942] __get_compat_msghdr+0x514/0x750 [ 410.107854][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 410.113211][ T6942] ___sys_recvmsg+0x19d/0x870 [ 410.118851][ T6942] do_recvmmsg+0x63a/0x10a0 [ 410.124706][ T6942] __sys_recvmmsg+0x113/0x450 [ 410.129476][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 410.136548][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 410.141639][ T6942] do_fast_syscall_32+0x33/0x70 [ 410.146718][ T6942] do_SYSENTER_32+0x1b/0x20 [ 410.152330][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.158893][ T6942] [ 410.161235][ T6942] Uninit was stored to memory at: [ 410.166550][ T6942] __get_compat_msghdr+0x514/0x750 [ 410.172027][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 410.177789][ T6942] ___sys_recvmsg+0x19d/0x870 [ 410.182534][ T6942] do_recvmmsg+0x63a/0x10a0 [ 410.187796][ T6942] __sys_recvmmsg+0x113/0x450 [ 410.192575][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 410.199321][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 410.205354][ T6942] do_fast_syscall_32+0x33/0x70 [ 410.211865][ T6942] do_SYSENTER_32+0x1b/0x20 [ 410.216570][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.223351][ T6942] [ 410.225847][ T6942] Uninit was stored to memory at: [ 410.230986][ T6942] __get_compat_msghdr+0x514/0x750 [ 410.236415][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 410.241525][ T6942] ___sys_recvmsg+0x19d/0x870 [ 410.246552][ T6942] do_recvmmsg+0x63a/0x10a0 [ 410.251131][ T6942] __sys_recvmmsg+0x113/0x450 [ 410.256475][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 410.262896][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 410.268436][ T6942] do_fast_syscall_32+0x33/0x70 [ 410.273380][ T6942] do_SYSENTER_32+0x1b/0x20 [ 410.278118][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.285244][ T6942] [ 410.287601][ T6942] Uninit was stored to memory at: [ 410.293122][ T6942] __get_compat_msghdr+0x514/0x750 [ 410.299504][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 410.304891][ T6942] ___sys_recvmsg+0x19d/0x870 [ 410.309651][ T6942] do_recvmmsg+0x63a/0x10a0 [ 410.314330][ T6942] __sys_recvmmsg+0x113/0x450 [ 410.319065][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 410.325768][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 410.331646][ T6942] do_fast_syscall_32+0x33/0x70 [ 410.336723][ T6942] do_SYSENTER_32+0x1b/0x20 [ 410.341279][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.348514][ T6942] [ 410.351035][ T6942] Local variable msg_sys created at: [ 410.356895][ T6942] do_recvmmsg+0x5f/0x10a0 [ 410.361400][ T6942] __sys_recvmmsg+0x113/0x450 [ 410.408041][ T6942] not chained 130000 origins [ 410.414282][ T6942] CPU: 0 PID: 6942 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 410.424776][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.437762][ T6942] Call Trace: [ 410.441095][ T6942] [ 410.444060][ T6942] dump_stack_lvl+0x1c8/0x256 [ 410.450757][ T6942] dump_stack+0x1a/0x1c [ 410.454996][ T6942] kmsan_internal_chain_origin+0x78/0x120 [ 410.461140][ T6942] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 410.467603][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 410.473405][ T6942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 410.479844][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 410.485272][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 410.491558][ T6942] ? __get_compat_msghdr+0x5b/0x750 [ 410.497421][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 410.503997][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 410.510938][ T6942] ? should_fail+0x3f/0x7e0 [ 410.515845][ T6942] ? __stack_depot_save+0x21/0x4b0 [ 410.521423][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 410.526745][ T6942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 410.533193][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 410.539791][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 410.545677][ T6942] __msan_chain_origin+0xbd/0x140 [ 410.550762][ T6942] __get_compat_msghdr+0x514/0x750 [ 410.556749][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 410.561970][ T6942] ? ___sys_recvmsg+0xa9/0x870 [ 410.567538][ T6942] ? do_recvmmsg+0x63a/0x10a0 [ 410.572502][ T6942] ___sys_recvmsg+0x19d/0x870 [ 410.577613][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 410.583153][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 410.589128][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 410.594675][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 410.600976][ T6942] do_recvmmsg+0x63a/0x10a0 [ 410.605558][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 410.611363][ T6942] ? __sys_recvmmsg+0x52/0x450 [ 410.616440][ T6942] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 410.623297][ T6942] __sys_recvmmsg+0x113/0x450 [ 410.628573][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 410.633757][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 410.641047][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 410.646481][ T6942] ? exit_to_user_mode_prepare+0x119/0x220 [ 410.652902][ T6942] do_fast_syscall_32+0x33/0x70 [ 410.659123][ T6942] do_SYSENTER_32+0x1b/0x20 [ 410.663698][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.670212][ T6942] RIP: 0023:0xf7faf549 [ 410.675613][ T6942] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 410.701007][ T6942] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 410.709654][ T6942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 410.718424][ T6942] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 410.727299][ T6942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 410.737666][ T6942] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 410.745810][ T6942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 410.754096][ T6942] [ 410.760381][ T6942] Uninit was stored to memory at: [ 410.766312][ T6942] __get_compat_msghdr+0x514/0x750 [ 410.771677][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 410.775676][ T6967] not chained 140000 origins [ 410.778279][ T6942] ___sys_recvmsg+0x19d/0x870 [ 410.782935][ T6967] CPU: 1 PID: 6967 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 410.788038][ T6942] do_recvmmsg+0x63a/0x10a0 [ 410.800504][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.800538][ T6967] Call Trace: [ 410.800552][ T6967] [ 410.800565][ T6967] dump_stack_lvl+0x1c8/0x256 [ 410.800627][ T6967] dump_stack+0x1a/0x1c [ 410.800669][ T6967] kmsan_internal_chain_origin+0x78/0x120 [ 410.805439][ T6942] __sys_recvmmsg+0x113/0x450 [ 410.816023][ T6967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 410.816104][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 410.816162][ T6967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 410.820928][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 410.823966][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 410.824031][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 410.824098][ T6967] ? __get_compat_msghdr+0x5b/0x750 [ 410.828873][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 410.833571][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 410.833643][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 410.833711][ T6967] ? should_fail+0x3f/0x7e0 [ 410.833754][ T6967] ? __stack_depot_save+0x21/0x4b0 [ 410.839775][ T6942] do_fast_syscall_32+0x33/0x70 [ 410.844548][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 410.844612][ T6967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 410.844673][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 410.850845][ T6942] do_SYSENTER_32+0x1b/0x20 [ 410.856258][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 410.856333][ T6967] __msan_chain_origin+0xbd/0x140 [ 410.856392][ T6967] __get_compat_msghdr+0x514/0x750 [ 410.863277][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.869625][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 410.869692][ T6967] ? ___sys_recvmsg+0xa9/0x870 [ 410.869752][ T6967] ? do_recvmmsg+0x63a/0x10a0 [ 410.875332][ T6942] [ 410.882684][ T6967] ___sys_recvmsg+0x19d/0x870 [ 410.888783][ T6942] Uninit was stored to memory at: [ 410.894034][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 410.894121][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 410.894182][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 410.899832][ T6942] __get_compat_msghdr+0x514/0x750 [ 410.905690][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 410.905760][ T6967] do_recvmmsg+0x63a/0x10a0 [ 410.905827][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 410.910765][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 410.916500][ T6967] ? __sys_recvmmsg+0x52/0x450 [ 410.916570][ T6967] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 410.916638][ T6967] __sys_recvmmsg+0x113/0x450 [ 410.921510][ T6942] ___sys_recvmsg+0x19d/0x870 [ 410.926714][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 410.926786][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 410.926855][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 410.933918][ T6942] do_recvmmsg+0x63a/0x10a0 [ 410.939375][ T6967] ? exit_to_user_mode_prepare+0x119/0x220 [ 410.944041][ T6942] __sys_recvmmsg+0x113/0x450 [ 410.950032][ T6967] do_fast_syscall_32+0x33/0x70 [ 410.955543][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 410.960518][ T6967] do_SYSENTER_32+0x1b/0x20 [ 410.967135][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 410.971859][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.976787][ T6942] do_fast_syscall_32+0x33/0x70 [ 410.981406][ T6967] RIP: 0023:0xf7fc6549 [ 410.983883][ T6942] do_SYSENTER_32+0x1b/0x20 [ 410.988417][ T6967] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 410.993899][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.999320][ T6967] RSP: 002b:00000000f7fa05cc EFLAGS: 00000296 [ 411.005571][ T6942] [ 411.010805][ T6967] ORIG_RAX: 0000000000000151 [ 411.010824][ T6967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 411.016174][ T6942] Uninit was stored to memory at: [ 411.022196][ T6967] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 411.027189][ T6942] __get_compat_msghdr+0x514/0x750 [ 411.032705][ T6967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.038409][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 411.043091][ T6967] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 411.049686][ T6942] ___sys_recvmsg+0x19d/0x870 [ 411.054762][ T6967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.054814][ T6967] [ 411.058451][ T6967] Uninit was stored to memory at: [ 411.059608][ T6942] do_recvmmsg+0x63a/0x10a0 [ 411.066251][ T6967] __get_compat_msghdr+0x514/0x750 [ 411.074056][ T6942] __sys_recvmmsg+0x113/0x450 [ 411.079350][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 411.084330][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 411.090310][ T6967] ___sys_recvmsg+0x19d/0x870 [ 411.095862][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 411.101812][ T6967] do_recvmmsg+0x63a/0x10a0 [ 411.108182][ T6942] do_fast_syscall_32+0x33/0x70 [ 411.113223][ T6967] __sys_recvmmsg+0x113/0x450 [ 411.119154][ T6942] do_SYSENTER_32+0x1b/0x20 [ 411.125569][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 411.130520][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.134755][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 411.139431][ T6942] [ 411.139441][ T6942] Uninit was stored to memory at: [ 411.139518][ T6942] __get_compat_msghdr+0x514/0x750 [ 411.165949][ T6967] do_fast_syscall_32+0x33/0x70 [ 411.172614][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 411.178962][ T6967] do_SYSENTER_32+0x1b/0x20 [ 411.182767][ T6942] ___sys_recvmsg+0x19d/0x870 [ 411.187740][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.197017][ T6942] do_recvmmsg+0x63a/0x10a0 [ 411.203117][ T6967] [ 411.203132][ T6967] Uninit was stored to memory at: [ 411.203215][ T6967] __get_compat_msghdr+0x514/0x750 [ 411.212670][ T6942] __sys_recvmmsg+0x113/0x450 [ 411.218034][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 411.226867][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 411.231903][ T6967] ___sys_recvmsg+0x19d/0x870 [ 411.243207][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 411.248792][ T6967] do_recvmmsg+0x63a/0x10a0 [ 411.257623][ T6942] do_fast_syscall_32+0x33/0x70 [ 411.260835][ T6967] __sys_recvmmsg+0x113/0x450 [ 411.265993][ T6942] do_SYSENTER_32+0x1b/0x20 [ 411.270535][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 411.276557][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.282209][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 411.287503][ T6942] [ 411.287515][ T6942] Uninit was stored to memory at: [ 411.287597][ T6942] __get_compat_msghdr+0x514/0x750 [ 411.294752][ T6967] do_fast_syscall_32+0x33/0x70 [ 411.300437][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 411.310271][ T6967] do_SYSENTER_32+0x1b/0x20 [ 411.315296][ T6942] ___sys_recvmsg+0x19d/0x870 [ 411.321182][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.326094][ T6942] do_recvmmsg+0x63a/0x10a0 [ 411.331204][ T6967] [ 411.331213][ T6967] Uninit was stored to memory at: [ 411.331293][ T6967] __get_compat_msghdr+0x514/0x750 [ 411.337674][ T6942] __sys_recvmmsg+0x113/0x450 [ 411.344246][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 411.349393][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 411.351889][ T6967] ___sys_recvmsg+0x19d/0x870 [ 411.357137][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 411.362439][ T6967] do_recvmmsg+0x63a/0x10a0 [ 411.367506][ T6942] do_fast_syscall_32+0x33/0x70 [ 411.372434][ T6967] __sys_recvmmsg+0x113/0x450 [ 411.377209][ T6942] do_SYSENTER_32+0x1b/0x20 [ 411.381853][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 411.388554][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.393302][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 411.395752][ T6942] [ 411.395763][ T6942] Uninit was stored to memory at: [ 411.395843][ T6942] __get_compat_msghdr+0x514/0x750 [ 411.401507][ T6967] do_fast_syscall_32+0x33/0x70 [ 411.406965][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 411.412055][ T6967] do_SYSENTER_32+0x1b/0x20 [ 411.417215][ T6942] ___sys_recvmsg+0x19d/0x870 [ 411.424073][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.429046][ T6942] do_recvmmsg+0x63a/0x10a0 [ 411.434162][ T6967] [ 411.434171][ T6967] Uninit was stored to memory at: [ 411.434251][ T6967] __get_compat_msghdr+0x514/0x750 [ 411.439955][ T6942] __sys_recvmmsg+0x113/0x450 [ 411.445022][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 411.449751][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 411.455086][ T6967] ___sys_recvmsg+0x19d/0x870 [ 411.462563][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 411.469019][ T6967] do_recvmmsg+0x63a/0x10a0 [ 411.474219][ T6942] do_fast_syscall_32+0x33/0x70 [ 411.476698][ T6967] __sys_recvmmsg+0x113/0x450 [ 411.481755][ T6942] do_SYSENTER_32+0x1b/0x20 [ 411.487102][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 411.491957][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.496883][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 411.501398][ T6942] [ 411.501406][ T6942] Uninit was stored to memory at: [ 411.501481][ T6942] __get_compat_msghdr+0x514/0x750 [ 411.506224][ T6967] do_fast_syscall_32+0x33/0x70 [ 411.513460][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 411.518347][ T6967] do_SYSENTER_32+0x1b/0x20 [ 411.520772][ T6942] ___sys_recvmsg+0x19d/0x870 [ 411.526900][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.532065][ T6942] do_recvmmsg+0x63a/0x10a0 [ 411.539329][ T6967] [ 411.539343][ T6967] Uninit was stored to memory at: [ 411.539422][ T6967] __get_compat_msghdr+0x514/0x750 [ 411.544835][ T6942] __sys_recvmmsg+0x113/0x450 [ 411.551391][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 411.556231][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 411.561570][ T6967] ___sys_recvmsg+0x19d/0x870 [ 411.566549][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 411.571737][ T6967] do_recvmmsg+0x63a/0x10a0 [ 411.578371][ T6942] do_fast_syscall_32+0x33/0x70 [ 411.583891][ T6967] __sys_recvmmsg+0x113/0x450 [ 411.590327][ T6942] do_SYSENTER_32+0x1b/0x20 [ 411.597319][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 411.603088][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.605556][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 411.610841][ T6942] [ 411.610860][ T6942] Local variable msg_sys created at: [ 411.616128][ T6967] do_fast_syscall_32+0x33/0x70 [ 411.621017][ T6942] do_recvmmsg+0x5f/0x10a0 [ 411.626811][ T6967] do_SYSENTER_32+0x1b/0x20 [ 411.631454][ T6942] __sys_recvmmsg+0x113/0x450 [ 411.637020][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.887638][ T6967] [ 411.889986][ T6967] Uninit was stored to memory at: [ 411.895376][ T6967] __get_compat_msghdr+0x514/0x750 [ 411.900896][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 411.907100][ T6967] ___sys_recvmsg+0x19d/0x870 [ 411.911863][ T6967] do_recvmmsg+0x63a/0x10a0 [ 411.917126][ T6967] __sys_recvmmsg+0x113/0x450 [ 411.921989][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 411.928647][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 411.934060][ T6967] do_fast_syscall_32+0x33/0x70 [ 411.939701][ T6967] do_SYSENTER_32+0x1b/0x20 [ 411.945209][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.951913][ T6967] [ 411.954560][ T6967] Uninit was stored to memory at: [ 411.960176][ T6967] __get_compat_msghdr+0x514/0x750 [ 411.965622][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 411.970766][ T6967] ___sys_recvmsg+0x19d/0x870 [ 411.975982][ T6967] do_recvmmsg+0x63a/0x10a0 [ 411.980757][ T6967] __sys_recvmmsg+0x113/0x450 [ 411.985693][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 411.992030][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 411.998134][ T6967] do_fast_syscall_32+0x33/0x70 [ 412.003966][ T6967] do_SYSENTER_32+0x1b/0x20 [ 412.009949][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 412.016577][ T6967] [ 412.018927][ T6967] Local variable msg_sys created at: [ 412.025109][ T6967] do_recvmmsg+0x5f/0x10a0 [ 412.029612][ T6967] __sys_recvmmsg+0x113/0x450 [ 412.150738][ T6967] not chained 150000 origins [ 412.155876][ T6967] CPU: 0 PID: 6967 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 412.166088][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.176529][ T6967] Call Trace: [ 412.179936][ T6967] [ 412.182914][ T6967] dump_stack_lvl+0x1c8/0x256 [ 412.187706][ T6967] dump_stack+0x1a/0x1c [ 412.191905][ T6967] kmsan_internal_chain_origin+0x78/0x120 [ 412.197798][ T6967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 412.204252][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 412.209432][ T6967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 412.216075][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 412.221266][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 412.227149][ T6967] ? __get_compat_msghdr+0x5b/0x750 [ 412.232411][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 412.237604][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 412.243632][ T6967] ? should_fail+0x3f/0x7e0 [ 412.249142][ T6967] ? __stack_depot_save+0x21/0x4b0 [ 412.254322][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 412.259719][ T6967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 412.266155][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 412.271334][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 412.277272][ T6967] __msan_chain_origin+0xbd/0x140 [ 412.282712][ T6967] __get_compat_msghdr+0x514/0x750 [ 412.288454][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 412.293383][ T6967] ? ___sys_recvmsg+0xa9/0x870 [ 412.299367][ T6967] ? do_recvmmsg+0x63a/0x10a0 [ 412.304570][ T6967] ___sys_recvmsg+0x19d/0x870 [ 412.309965][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 412.317185][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 412.325466][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 412.331888][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 412.338438][ T6967] do_recvmmsg+0x63a/0x10a0 [ 412.343584][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 412.349518][ T6967] ? __sys_recvmmsg+0x52/0x450 [ 412.355590][ T6967] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 412.364542][ T6967] __sys_recvmmsg+0x113/0x450 [ 412.371738][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 412.378212][ T6942] not chained 160000 origins [ 412.378514][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 412.390162][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 412.396291][ T6967] ? exit_to_user_mode_prepare+0x119/0x220 [ 412.402959][ T6967] do_fast_syscall_32+0x33/0x70 [ 412.408073][ T6967] do_SYSENTER_32+0x1b/0x20 [ 412.413258][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 412.419847][ T6967] RIP: 0023:0xf7fc6549 [ 412.425062][ T6967] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 412.446777][ T6967] RSP: 002b:00000000f7fa05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 412.455341][ T6967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 412.463620][ T6967] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 412.472675][ T6967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 412.480787][ T6967] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 412.488886][ T6967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 412.497652][ T6967] [ 412.500746][ T6942] CPU: 1 PID: 6942 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 412.504111][ T6967] Uninit was stored to memory at: [ 412.511158][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.517460][ T6967] __get_compat_msghdr+0x514/0x750 [ 412.527362][ T6942] Call Trace: [ 412.527385][ T6942] [ 412.527404][ T6942] dump_stack_lvl+0x1c8/0x256 [ 412.527468][ T6942] dump_stack+0x1a/0x1c [ 412.527512][ T6942] kmsan_internal_chain_origin+0x78/0x120 [ 412.532749][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 412.536023][ T6942] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 412.536085][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 412.536143][ T6942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 412.539333][ T6967] ___sys_recvmsg+0x19d/0x870 [ 412.545545][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 412.545607][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 412.545676][ T6942] ? __get_compat_msghdr+0x5b/0x750 [ 412.550109][ T6967] do_recvmmsg+0x63a/0x10a0 [ 412.556188][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 412.556276][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 412.556340][ T6942] ? should_fail+0x3f/0x7e0 [ 412.556381][ T6942] ? __stack_depot_save+0x21/0x4b0 [ 412.561829][ T6967] __sys_recvmmsg+0x113/0x450 [ 412.570265][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 412.570362][ T6942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 412.570427][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 412.570497][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 412.576382][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 412.582896][ T6942] __msan_chain_origin+0xbd/0x140 [ 412.588269][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 412.593939][ T6942] __get_compat_msghdr+0x514/0x750 [ 412.594025][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 412.594083][ T6942] ? ___sys_recvmsg+0xa9/0x870 [ 412.600505][ T6967] do_fast_syscall_32+0x33/0x70 [ 412.606053][ T6942] ? do_recvmmsg+0x63a/0x10a0 [ 412.606125][ T6942] ___sys_recvmsg+0x19d/0x870 [ 412.606193][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 412.610884][ T6967] do_SYSENTER_32+0x1b/0x20 [ 412.617033][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 412.617117][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 412.617176][ T6942] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 412.623286][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 412.627836][ T6942] do_recvmmsg+0x63a/0x10a0 [ 412.627912][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 412.627981][ T6942] ? __sys_recvmmsg+0x52/0x450 [ 412.633490][ T6967] [ 412.633505][ T6967] Uninit was stored to memory at: [ 412.633734][ T6967] __get_compat_msghdr+0x514/0x750 [ 412.638267][ T6942] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 412.643889][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 412.652370][ T6942] __sys_recvmmsg+0x113/0x450 [ 412.659441][ T6967] ___sys_recvmsg+0x19d/0x870 [ 412.665890][ T6942] ? kmsan_get_metadata+0x33/0x220 [ 412.665972][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 412.672430][ T6967] do_recvmmsg+0x63a/0x10a0 [ 412.677640][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 412.677711][ T6942] ? exit_to_user_mode_prepare+0x119/0x220 [ 412.677777][ T6942] do_fast_syscall_32+0x33/0x70 [ 412.683191][ T6967] __sys_recvmmsg+0x113/0x450 [ 412.688674][ T6942] do_SYSENTER_32+0x1b/0x20 [ 412.688732][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 412.688791][ T6942] RIP: 0023:0xf7faf549 [ 412.688821][ T6942] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 412.693882][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 412.698534][ T6942] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 [ 412.705024][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 412.709741][ T6942] ORIG_RAX: 0000000000000151 [ 412.709758][ T6942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 412.714809][ T6967] do_fast_syscall_32+0x33/0x70 [ 412.719857][ T6942] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 412.724787][ T6967] do_SYSENTER_32+0x1b/0x20 [ 412.731413][ T6942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 412.736632][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 412.742507][ T6942] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 412.749168][ T6967] [ 412.753496][ T6942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 412.759221][ T6967] Uninit was stored to memory at: [ 412.764178][ T6942] [ 412.764302][ T6942] Uninit was stored to memory at: [ 412.764385][ T6942] __get_compat_msghdr+0x514/0x750 [ 412.766824][ T6967] __get_compat_msghdr+0x514/0x750 [ 412.771747][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 412.777606][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 412.784403][ T6942] ___sys_recvmsg+0x19d/0x870 [ 412.789363][ T6967] ___sys_recvmsg+0x19d/0x870 [ 412.794452][ T6942] do_recvmmsg+0x63a/0x10a0 [ 412.799184][ T6967] do_recvmmsg+0x63a/0x10a0 [ 412.805242][ T6942] __sys_recvmmsg+0x113/0x450 [ 412.812014][ T6967] __sys_recvmmsg+0x113/0x450 [ 412.817442][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 412.823565][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 412.830377][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 412.836712][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 412.842787][ T6942] do_fast_syscall_32+0x33/0x70 [ 412.848136][ T6967] do_fast_syscall_32+0x33/0x70 [ 412.854862][ T6942] do_SYSENTER_32+0x1b/0x20 [ 412.859109][ T6967] do_SYSENTER_32+0x1b/0x20 [ 412.879807][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 412.886527][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 412.894264][ T6942] [ 412.894281][ T6942] Uninit was stored to memory at: [ 412.894368][ T6942] __get_compat_msghdr+0x514/0x750 [ 412.899587][ T6967] [ 412.899603][ T6967] Uninit was stored to memory at: [ 412.899692][ T6967] __get_compat_msghdr+0x514/0x750 [ 412.906350][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 412.914830][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 412.920718][ T6942] ___sys_recvmsg+0x19d/0x870 [ 412.931539][ T6967] ___sys_recvmsg+0x19d/0x870 [ 412.937261][ T6942] do_recvmmsg+0x63a/0x10a0 [ 412.946843][ T6967] do_recvmmsg+0x63a/0x10a0 [ 412.953449][ T6942] __sys_recvmmsg+0x113/0x450 [ 412.962380][ T6967] __sys_recvmmsg+0x113/0x450 [ 412.965519][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 412.973735][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 412.978781][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 412.982222][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 412.987496][ T6942] do_fast_syscall_32+0x33/0x70 [ 412.992726][ T6967] do_fast_syscall_32+0x33/0x70 [ 412.998346][ T6942] do_SYSENTER_32+0x1b/0x20 [ 413.004295][ T6967] do_SYSENTER_32+0x1b/0x20 [ 413.009265][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.015004][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.019933][ T6942] [ 413.019948][ T6942] Uninit was stored to memory at: [ 413.020033][ T6942] __get_compat_msghdr+0x514/0x750 [ 413.024578][ T6967] [ 413.024589][ T6967] Uninit was stored to memory at: [ 413.030440][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 413.035423][ T6967] __get_compat_msghdr+0x514/0x750 [ 413.040419][ T6942] ___sys_recvmsg+0x19d/0x870 [ 413.047238][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 413.053460][ T6942] do_recvmmsg+0x63a/0x10a0 [ 413.059066][ T6967] ___sys_recvmsg+0x19d/0x870 [ 413.065089][ T6942] __sys_recvmmsg+0x113/0x450 [ 413.070026][ T6967] do_recvmmsg+0x63a/0x10a0 [ 413.075886][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 413.080416][ T6967] __sys_recvmmsg+0x113/0x450 [ 413.085477][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 413.092005][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 413.098820][ T6942] do_fast_syscall_32+0x33/0x70 [ 413.101760][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 413.107014][ T6942] do_SYSENTER_32+0x1b/0x20 [ 413.113443][ T6967] do_fast_syscall_32+0x33/0x70 [ 413.115848][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.122602][ T6967] do_SYSENTER_32+0x1b/0x20 [ 413.127863][ T6942] [ 413.127872][ T6942] Uninit was stored to memory at: [ 413.127967][ T6942] __get_compat_msghdr+0x514/0x750 [ 413.132827][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.140373][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 413.145412][ T6967] [ 413.145420][ T6967] Uninit was stored to memory at: [ 413.151133][ T6942] ___sys_recvmsg+0x19d/0x870 [ 413.156299][ T6967] __get_compat_msghdr+0x514/0x750 [ 413.160900][ T6942] do_recvmmsg+0x63a/0x10a0 [ 413.166661][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 413.171739][ T6942] __sys_recvmmsg+0x113/0x450 [ 413.178821][ T6967] ___sys_recvmsg+0x19d/0x870 [ 413.186357][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 413.191442][ T6967] do_recvmmsg+0x63a/0x10a0 [ 413.197840][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 413.203897][ T6967] __sys_recvmmsg+0x113/0x450 [ 413.209107][ T6942] do_fast_syscall_32+0x33/0x70 [ 413.214968][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 413.221163][ T6942] do_SYSENTER_32+0x1b/0x20 [ 413.228195][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 413.236077][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.238499][ T6967] do_fast_syscall_32+0x33/0x70 [ 413.243961][ T6942] [ 413.243974][ T6942] Uninit was stored to memory at: [ 413.244054][ T6942] __get_compat_msghdr+0x514/0x750 [ 413.250297][ T6967] do_SYSENTER_32+0x1b/0x20 [ 413.252797][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 413.258576][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.264366][ T6942] ___sys_recvmsg+0x19d/0x870 [ 413.269760][ T6967] [ 413.269768][ T6967] Uninit was stored to memory at: [ 413.275220][ T6942] do_recvmmsg+0x63a/0x10a0 [ 413.280965][ T6967] __get_compat_msghdr+0x514/0x750 [ 413.286222][ T6942] __sys_recvmmsg+0x113/0x450 [ 413.291803][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 413.297784][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 413.303021][ T6967] ___sys_recvmsg+0x19d/0x870 [ 413.310813][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 413.316178][ T6967] do_recvmmsg+0x63a/0x10a0 [ 413.323068][ T6942] do_fast_syscall_32+0x33/0x70 [ 413.329991][ T6967] __sys_recvmmsg+0x113/0x450 [ 413.335485][ T6942] do_SYSENTER_32+0x1b/0x20 [ 413.341833][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 413.347339][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.352525][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 413.359856][ T6942] [ 413.359870][ T6942] Uninit was stored to memory at: [ 413.359947][ T6942] __get_compat_msghdr+0x514/0x750 [ 413.365455][ T6967] do_fast_syscall_32+0x33/0x70 [ 413.368054][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 413.373460][ T6967] do_SYSENTER_32+0x1b/0x20 [ 413.379603][ T6942] ___sys_recvmsg+0x19d/0x870 [ 413.389260][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.394772][ T6942] do_recvmmsg+0x63a/0x10a0 [ 413.398130][ T6967] [ 413.398139][ T6967] Local variable msg_sys created at: [ 413.398153][ T6967] do_recvmmsg+0x5f/0x10a0 [ 413.404641][ T6942] __sys_recvmmsg+0x113/0x450 [ 413.412617][ T6967] __sys_recvmmsg+0x113/0x450 [ 413.419747][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 413.763221][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 413.771203][ T6942] do_fast_syscall_32+0x33/0x70 [ 413.776389][ T6942] do_SYSENTER_32+0x1b/0x20 [ 413.781069][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.788651][ T6942] [ 413.791244][ T6942] Uninit was stored to memory at: [ 413.799031][ T6942] __get_compat_msghdr+0x514/0x750 [ 413.804779][ T6942] get_compat_msghdr+0x8c/0x1c0 [ 413.810271][ T6942] ___sys_recvmsg+0x19d/0x870 [ 413.816394][ T6942] do_recvmmsg+0x63a/0x10a0 [ 413.822067][ T6942] __sys_recvmmsg+0x113/0x450 [ 413.827003][ T6942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 413.834362][ T6942] __do_fast_syscall_32+0x95/0xf0 [ 413.840454][ T6942] do_fast_syscall_32+0x33/0x70 [ 413.847632][ T6942] do_SYSENTER_32+0x1b/0x20 [ 413.852415][ T6942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.859866][ T6942] [ 413.863190][ T6942] Local variable msg_sys created at: [ 413.868787][ T6942] do_recvmmsg+0x5f/0x10a0 [ 413.874174][ T6942] __sys_recvmmsg+0x113/0x450 [ 413.952779][ T6967] not chained 170000 origins [ 413.958621][ T6967] CPU: 0 PID: 6967 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 413.970617][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.982488][ T6967] Call Trace: [ 413.986191][ T6967] [ 413.989590][ T6967] dump_stack_lvl+0x1c8/0x256 [ 413.994517][ T6967] dump_stack+0x1a/0x1c [ 413.998852][ T6967] kmsan_internal_chain_origin+0x78/0x120 [ 414.005637][ T6967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 414.012398][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 414.017774][ T6967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 414.024373][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 414.029570][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 414.035855][ T6967] ? __get_compat_msghdr+0x5b/0x750 [ 414.041308][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 414.046756][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 414.052729][ T6967] ? should_fail+0x3f/0x7e0 [ 414.057320][ T6967] ? __stack_depot_save+0x21/0x4b0 [ 414.062682][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 414.068242][ T6967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 414.075076][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 414.080771][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 414.087324][ T6967] __msan_chain_origin+0xbd/0x140 [ 414.093091][ T6967] __get_compat_msghdr+0x514/0x750 [ 414.098417][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 414.103753][ T6967] ? ___sys_recvmsg+0xa9/0x870 [ 414.109960][ T6967] ? do_recvmmsg+0x63a/0x10a0 [ 414.115365][ T6967] ___sys_recvmsg+0x19d/0x870 [ 414.120738][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 414.126872][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 414.133740][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 414.139036][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 414.146178][ T6967] do_recvmmsg+0x63a/0x10a0 [ 414.151452][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 414.157374][ T6967] ? __sys_recvmmsg+0x52/0x450 [ 414.162371][ T6967] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 414.169742][ T6967] __sys_recvmmsg+0x113/0x450 [ 414.175411][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 414.181852][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 414.188541][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 414.194058][ T6967] ? exit_to_user_mode_prepare+0x119/0x220 [ 414.201783][ T6967] do_fast_syscall_32+0x33/0x70 [ 414.206832][ T6967] do_SYSENTER_32+0x1b/0x20 [ 414.211491][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.218088][ T6967] RIP: 0023:0xf7fc6549 [ 414.222244][ T6967] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 414.242810][ T6967] RSP: 002b:00000000f7fa05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 414.251465][ T6967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 414.260746][ T6967] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 414.268783][ T6967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 414.276916][ T6967] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 414.285652][ T6967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.293846][ T6967] [ 414.299864][ T6967] Uninit was stored to memory at: 23:13:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3d04, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x45, 0x6, 0x0, @rand_addr=' \x01\x00', @remote, 0x0, 0x80, 0x8001, 0x80}}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) open(0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="618f0381643271eff807f327c76260052603c06c5eedb5aa2c4364e090876ef9c16e2d766dafd701a4c7bfb25bad8dcac4d4", 0x32, 0x0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) syz_io_uring_setup(0x1efd, &(0x7f0000000380)={0x0, 0x202, 0x2, 0x3, 0x2e4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000400)) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 23:13:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 23:13:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="688c62eeb29cf5ac541d8bdcd213a01d67ef828270261d1f01e33eaa8c2460fea50064300b000000000000"], 0x208e24b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x5c, 0x160, 0x208, 0x3e0, 0x208, 0x228, 0x228, 0x208, 0x228, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x52020000, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x8}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @local, [], [], 'veth1_vlan\x00', 'wg2\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x20, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80, 0x8, 0x7bc, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000500)={'sit0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r3, &(0x7f0000000100)=""/228, 0xe4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 23:13:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000340)=0x7f) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000001f40)={0x201101500, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000300), {0xf}, &(0x7f0000000400)=""/4096, 0x1000, &(0x7f0000001e40)=""/229, &(0x7f0000000380)=[r0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, {r3}}, 0x58) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000280)={@rand_addr, @rand_addr, 0x2f, 0x7f}}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) [ 414.305637][ T6967] __get_compat_msghdr+0x514/0x750 [ 414.310820][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 414.316689][ T6967] ___sys_recvmsg+0x19d/0x870 [ 414.321458][ T6967] do_recvmmsg+0x63a/0x10a0 [ 414.326189][ T6967] __sys_recvmmsg+0x113/0x450 [ 414.330932][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 414.338254][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 414.343848][ T6967] do_fast_syscall_32+0x33/0x70 [ 414.349145][ T6967] do_SYSENTER_32+0x1b/0x20 23:13:35 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r1, &(0x7f0000000680)=""/156, 0x9c) [ 414.354017][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.360789][ T6967] [ 414.363136][ T6967] Uninit was stored to memory at: [ 414.368491][ T6967] __get_compat_msghdr+0x514/0x750 [ 414.373884][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 414.378812][ T6967] ___sys_recvmsg+0x19d/0x870 [ 414.383712][ T6967] do_recvmmsg+0x63a/0x10a0 [ 414.388451][ T6967] __sys_recvmmsg+0x113/0x450 [ 414.393838][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 414.400550][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 414.405877][ T6967] do_fast_syscall_32+0x33/0x70 [ 414.410796][ T6967] do_SYSENTER_32+0x1b/0x20 [ 414.416022][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.422636][ T6967] [ 414.425178][ T6967] Uninit was stored to memory at: [ 414.430290][ T6967] __get_compat_msghdr+0x514/0x750 [ 414.436093][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 414.441209][ T6967] ___sys_recvmsg+0x19d/0x870 [ 414.446185][ T6967] do_recvmmsg+0x63a/0x10a0 [ 414.451132][ T6967] __sys_recvmmsg+0x113/0x450 [ 414.456158][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 414.462589][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 414.468017][ T6967] do_fast_syscall_32+0x33/0x70 [ 414.472936][ T6967] do_SYSENTER_32+0x1b/0x20 [ 414.478427][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.484956][ T6967] [ 414.487382][ T6967] Uninit was stored to memory at: [ 414.492553][ T6967] __get_compat_msghdr+0x514/0x750 [ 414.498115][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 414.503124][ T6967] ___sys_recvmsg+0x19d/0x870 [ 414.508678][ T6967] do_recvmmsg+0x63a/0x10a0 [ 414.513429][ T6967] __sys_recvmmsg+0x113/0x450 [ 414.518498][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 414.525979][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 414.531284][ T6967] do_fast_syscall_32+0x33/0x70 [ 414.536337][ T6967] do_SYSENTER_32+0x1b/0x20 [ 414.541370][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.548228][ T6967] [ 414.551071][ T6967] Uninit was stored to memory at: [ 414.559551][ T6967] __get_compat_msghdr+0x514/0x750 [ 414.565202][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 414.570847][ T6967] ___sys_recvmsg+0x19d/0x870 [ 414.575925][ T6967] do_recvmmsg+0x63a/0x10a0 [ 414.580992][ T6967] __sys_recvmmsg+0x113/0x450 [ 414.586859][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 414.593787][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 414.598877][ T6967] do_fast_syscall_32+0x33/0x70 [ 414.605292][ T6967] do_SYSENTER_32+0x1b/0x20 [ 414.609859][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.618448][ T6967] [ 414.621078][ T6967] Uninit was stored to memory at: [ 414.626661][ T6967] __get_compat_msghdr+0x514/0x750 [ 414.632402][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 414.637550][ T6967] ___sys_recvmsg+0x19d/0x870 [ 414.642502][ T6967] do_recvmmsg+0x63a/0x10a0 [ 414.647324][ T6967] __sys_recvmmsg+0x113/0x450 [ 414.652056][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 414.659302][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 414.664722][ T6967] do_fast_syscall_32+0x33/0x70 [ 414.669911][ T6967] do_SYSENTER_32+0x1b/0x20 [ 414.675314][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.681720][ T6967] [ 414.685081][ T6967] Uninit was stored to memory at: [ 414.690978][ T6967] __get_compat_msghdr+0x514/0x750 [ 414.697168][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 414.702473][ T6967] ___sys_recvmsg+0x19d/0x870 [ 414.707454][ T6967] do_recvmmsg+0x63a/0x10a0 [ 414.712146][ T6967] __sys_recvmmsg+0x113/0x450 [ 414.717537][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 414.724360][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 414.729999][ T6967] do_fast_syscall_32+0x33/0x70 [ 414.735431][ T6967] do_SYSENTER_32+0x1b/0x20 [ 414.740320][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.746884][ T6967] [ 414.749312][ T6967] Local variable msg_sys created at: [ 414.754997][ T6967] do_recvmmsg+0x5f/0x10a0 [ 414.759938][ T6967] __sys_recvmmsg+0x113/0x450 23:13:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 23:13:35 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r1, &(0x7f0000000680)=""/156, 0x9c) 23:13:36 executing program 4: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@rand_addr, @rand_addr, 0x29, 0x4}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x6c060000) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x1000000}], 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000a7c000/0x2000)=nil, 0x2000, 0x2000004, 0x4010, r3, 0x2bd02000) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044050}, 0x20004180) r4 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) kexec_load(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_IRQCHIP(r1, 0xae49, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x81, 0x100, 0x40, 0x13, 0x1c, 0x4, 0x81, 0x5, 0x3, 0x7, 0x6, 0x6, 0x6}, {0x7fff, 0x6, 0x1b, 0x2, 0x9, 0xfa, 0x3, 0x5, 0x20, 0x1, 0x2, 0xff, 0x6}, {0x3, 0x4, 0x81, 0x7f, 0xff, 0x0, 0x6, 0x3, 0x1, 0xff, 0xfc, 0x9, 0x3bfe}], 0x1}) [ 415.221706][ T6967] not chained 180000 origins [ 415.227564][ T6967] CPU: 1 PID: 6967 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 415.238492][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.249646][ T6967] Call Trace: [ 415.253203][ T6967] [ 415.257429][ T6967] dump_stack_lvl+0x1c8/0x256 [ 415.262533][ T6967] dump_stack+0x1a/0x1c [ 415.267216][ T6967] kmsan_internal_chain_origin+0x78/0x120 [ 415.274914][ T6967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 415.283900][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 415.290084][ T6967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 415.298281][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 415.304610][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 415.312112][ T6967] ? __get_compat_msghdr+0x5b/0x750 [ 415.319135][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 415.325199][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 415.331682][ T6967] ? should_fail+0x3f/0x7e0 [ 415.336497][ T6967] ? __stack_depot_save+0x21/0x4b0 [ 415.342677][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 415.348856][ T6967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 415.356150][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 415.361754][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 415.367996][ T6967] __msan_chain_origin+0xbd/0x140 [ 415.373630][ T6967] __get_compat_msghdr+0x514/0x750 [ 415.379020][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 415.384057][ T6967] ? ___sys_recvmsg+0xa9/0x870 [ 415.388936][ T6967] ? do_recvmmsg+0x63a/0x10a0 [ 415.394182][ T6967] ___sys_recvmsg+0x19d/0x870 [ 415.399368][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 415.404647][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 415.410858][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 415.416509][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 415.422660][ T6967] do_recvmmsg+0x63a/0x10a0 [ 415.427802][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 415.433413][ T6967] ? __sys_recvmmsg+0x52/0x450 [ 415.438488][ T6967] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 415.446130][ T6967] __sys_recvmmsg+0x113/0x450 [ 415.452000][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 415.462207][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 415.469119][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 415.474441][ T6967] ? exit_to_user_mode_prepare+0x119/0x220 [ 415.481121][ T6967] do_fast_syscall_32+0x33/0x70 [ 415.487913][ T6967] do_SYSENTER_32+0x1b/0x20 [ 415.493518][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.501838][ T6967] RIP: 0023:0xf7fc6549 [ 415.506341][ T6967] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 415.530119][ T6967] RSP: 002b:00000000f7fa05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 415.539365][ T6967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 415.548026][ T6967] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 415.557213][ T6967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 415.566092][ T6967] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 415.574948][ T6967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 415.583046][ T6967] [ 415.591112][ T6967] Uninit was stored to memory at: [ 415.597913][ T6967] __get_compat_msghdr+0x514/0x750 [ 415.603264][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 415.608662][ T6967] ___sys_recvmsg+0x19d/0x870 [ 415.614809][ T6967] do_recvmmsg+0x63a/0x10a0 [ 415.619556][ T6967] __sys_recvmmsg+0x113/0x450 [ 415.624503][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 415.631066][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 415.637612][ T6967] do_fast_syscall_32+0x33/0x70 [ 415.642657][ T6967] do_SYSENTER_32+0x1b/0x20 [ 415.647880][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.655316][ T6967] [ 415.657679][ T6967] Uninit was stored to memory at: [ 415.663008][ T6967] __get_compat_msghdr+0x514/0x750 [ 415.669493][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 415.675510][ T6967] ___sys_recvmsg+0x19d/0x870 [ 415.680752][ T6967] do_recvmmsg+0x63a/0x10a0 [ 415.685398][ T6967] __sys_recvmmsg+0x113/0x450 [ 415.690237][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 415.697133][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 415.703409][ T6967] do_fast_syscall_32+0x33/0x70 [ 415.709047][ T6967] do_SYSENTER_32+0x1b/0x20 [ 415.713702][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.720974][ T6967] [ 415.723418][ T6967] Uninit was stored to memory at: [ 415.728763][ T6967] __get_compat_msghdr+0x514/0x750 [ 415.735197][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 415.740578][ T6967] ___sys_recvmsg+0x19d/0x870 [ 415.746263][ T6967] do_recvmmsg+0x63a/0x10a0 [ 415.752722][ T6967] __sys_recvmmsg+0x113/0x450 [ 415.757661][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 415.764525][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 415.769674][ T6967] do_fast_syscall_32+0x33/0x70 [ 415.775325][ T6967] do_SYSENTER_32+0x1b/0x20 [ 415.779971][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.787146][ T6967] [ 415.790247][ T6967] Uninit was stored to memory at: [ 415.795909][ T6967] __get_compat_msghdr+0x514/0x750 [ 415.801752][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 415.806886][ T6967] ___sys_recvmsg+0x19d/0x870 [ 415.811905][ T6967] do_recvmmsg+0x63a/0x10a0 [ 415.817833][ T6967] __sys_recvmmsg+0x113/0x450 [ 415.823470][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 415.831242][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 415.837487][ T6967] do_fast_syscall_32+0x33/0x70 [ 415.844218][ T6967] do_SYSENTER_32+0x1b/0x20 [ 415.851310][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.859966][ T6967] [ 415.862600][ T6967] Uninit was stored to memory at: [ 415.869443][ T6967] __get_compat_msghdr+0x514/0x750 [ 415.874790][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 415.879982][ T6967] ___sys_recvmsg+0x19d/0x870 [ 415.884884][ T6967] do_recvmmsg+0x63a/0x10a0 [ 415.889428][ T6967] __sys_recvmmsg+0x113/0x450 [ 415.895223][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 415.902734][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 415.908186][ T6967] do_fast_syscall_32+0x33/0x70 [ 415.913374][ T6967] do_SYSENTER_32+0x1b/0x20 [ 415.918309][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.925788][ T6967] [ 415.928128][ T6967] Uninit was stored to memory at: [ 415.933569][ T6967] __get_compat_msghdr+0x514/0x750 [ 415.939231][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 415.944552][ T6967] ___sys_recvmsg+0x19d/0x870 [ 415.949609][ T6967] do_recvmmsg+0x63a/0x10a0 [ 415.954509][ T6967] __sys_recvmmsg+0x113/0x450 [ 415.959407][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 415.967826][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 415.973123][ T6967] do_fast_syscall_32+0x33/0x70 [ 415.978618][ T6967] do_SYSENTER_32+0x1b/0x20 [ 415.983852][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.991288][ T6967] [ 415.995565][ T6967] Uninit was stored to memory at: [ 416.000968][ T6967] __get_compat_msghdr+0x514/0x750 [ 416.006418][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 416.011763][ T6967] ___sys_recvmsg+0x19d/0x870 [ 416.016692][ T6967] do_recvmmsg+0x63a/0x10a0 [ 416.021235][ T6967] __sys_recvmmsg+0x113/0x450 [ 416.026035][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 416.032796][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 416.039929][ T6967] do_fast_syscall_32+0x33/0x70 [ 416.045129][ T6967] do_SYSENTER_32+0x1b/0x20 [ 416.049759][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 416.057949][ T6967] [ 416.060384][ T6967] Local variable msg_sys created at: [ 416.066340][ T6967] do_recvmmsg+0x5f/0x10a0 [ 416.070822][ T6967] __sys_recvmmsg+0x113/0x450 23:13:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 23:13:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 417.195171][ T6979] not chained 190000 origins [ 417.200417][ T6979] CPU: 1 PID: 6979 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 417.211262][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.221360][ T6979] Call Trace: [ 417.224725][ T6979] [ 417.227784][ T6979] dump_stack_lvl+0x1c8/0x256 [ 417.232878][ T6979] dump_stack+0x1a/0x1c [ 417.237201][ T6979] kmsan_internal_chain_origin+0x78/0x120 [ 417.243100][ T6979] ? propagate_entity_load_avg+0x32/0x1450 [ 417.248964][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 417.254134][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 417.260307][ T6979] ? update_load_avg+0x7dd/0xf70 [ 417.265462][ T6979] ? __get_compat_msghdr+0x5b/0x750 [ 417.270719][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 417.275904][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 417.281800][ T6979] ? should_fail+0x3f/0x7e0 [ 417.286351][ T6979] ? __stack_depot_save+0x21/0x4b0 [ 417.291620][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 417.296803][ T6979] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 417.303112][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 417.308311][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 417.314222][ T6979] __msan_chain_origin+0xbd/0x140 [ 417.319317][ T6979] __get_compat_msghdr+0x514/0x750 [ 417.324588][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 417.329855][ T6979] ? ___sys_recvmsg+0xa9/0x870 [ 417.335387][ T6979] ? do_recvmmsg+0x63a/0x10a0 [ 417.340680][ T6979] ___sys_recvmsg+0x19d/0x870 [ 417.347202][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 417.352481][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 417.358864][ T6979] ? __cond_resched+0x1f/0x40 [ 417.363626][ T6979] ? preempt_schedule_common+0x117/0x180 [ 417.369364][ T6979] do_recvmmsg+0x63a/0x10a0 [ 417.374545][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 417.379906][ T6979] ? __sys_recvmmsg+0x52/0x450 [ 417.384816][ T6979] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 417.391322][ T6979] __sys_recvmmsg+0x113/0x450 [ 417.396205][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 417.401476][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 417.408079][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 417.413685][ T6979] ? exit_to_user_mode_prepare+0x119/0x220 [ 417.420317][ T6979] do_fast_syscall_32+0x33/0x70 [ 417.425246][ T6979] do_SYSENTER_32+0x1b/0x20 [ 417.429793][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.436192][ T6979] RIP: 0023:0xf7fd6549 [ 417.440388][ T6979] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 417.460601][ T6979] RSP: 002b:00000000f7fb05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 417.469153][ T6979] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 417.477158][ T6979] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 417.485265][ T6979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 417.494316][ T6979] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 417.503628][ T6979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.511846][ T6979] [ 417.518742][ T6979] Uninit was stored to memory at: [ 417.524906][ T6979] __get_compat_msghdr+0x514/0x750 [ 417.530261][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 417.535290][ T6979] ___sys_recvmsg+0x19d/0x870 [ 417.540215][ T6979] do_recvmmsg+0x63a/0x10a0 [ 417.545524][ T6979] __sys_recvmmsg+0x113/0x450 [ 417.550840][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 417.557545][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 417.562640][ T6979] do_fast_syscall_32+0x33/0x70 [ 417.567681][ T6979] do_SYSENTER_32+0x1b/0x20 [ 417.572244][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.578927][ T6979] [ 417.581266][ T6979] Uninit was stored to memory at: [ 417.586639][ T6979] __get_compat_msghdr+0x514/0x750 [ 417.591907][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 417.597230][ T6979] ___sys_recvmsg+0x19d/0x870 [ 417.602334][ T6979] do_recvmmsg+0x63a/0x10a0 [ 417.608054][ T6979] __sys_recvmmsg+0x113/0x450 [ 417.613725][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 417.621589][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 417.627929][ T6979] do_fast_syscall_32+0x33/0x70 [ 417.633758][ T6979] do_SYSENTER_32+0x1b/0x20 [ 417.638871][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.646583][ T6979] [ 417.648950][ T6979] Uninit was stored to memory at: [ 417.654235][ T6979] __get_compat_msghdr+0x514/0x750 [ 417.659409][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 417.665023][ T6979] ___sys_recvmsg+0x19d/0x870 [ 417.669763][ T6979] do_recvmmsg+0x63a/0x10a0 [ 417.674765][ T6979] __sys_recvmmsg+0x113/0x450 [ 417.679705][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 417.686186][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 417.691494][ T6979] do_fast_syscall_32+0x33/0x70 [ 417.696895][ T6979] do_SYSENTER_32+0x1b/0x20 [ 417.701631][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.708378][ T6979] [ 417.710730][ T6979] Uninit was stored to memory at: [ 417.717431][ T6979] __get_compat_msghdr+0x514/0x750 [ 417.722622][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 417.727748][ T6979] ___sys_recvmsg+0x19d/0x870 [ 417.732630][ T6979] do_recvmmsg+0x63a/0x10a0 [ 417.737316][ T6979] __sys_recvmmsg+0x113/0x450 [ 417.744292][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 417.750813][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 417.756537][ T6979] do_fast_syscall_32+0x33/0x70 [ 417.761490][ T6979] do_SYSENTER_32+0x1b/0x20 [ 417.766191][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.772602][ T6979] [ 417.775060][ T6979] Uninit was stored to memory at: [ 417.780429][ T6979] __get_compat_msghdr+0x514/0x750 [ 417.785817][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 417.790985][ T6979] ___sys_recvmsg+0x19d/0x870 [ 417.796422][ T6979] do_recvmmsg+0x63a/0x10a0 [ 417.801157][ T6979] __sys_recvmmsg+0x113/0x450 [ 417.806277][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 417.812700][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 417.818135][ T6979] do_fast_syscall_32+0x33/0x70 [ 417.823318][ T6979] do_SYSENTER_32+0x1b/0x20 [ 417.828074][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.834580][ T6979] [ 417.839970][ T6979] Uninit was stored to memory at: [ 417.845652][ T6979] __get_compat_msghdr+0x514/0x750 [ 417.851807][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 417.856861][ T6979] ___sys_recvmsg+0x19d/0x870 [ 417.862281][ T6979] do_recvmmsg+0x63a/0x10a0 [ 417.867405][ T6979] __sys_recvmmsg+0x113/0x450 [ 417.872257][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 417.879037][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 417.884536][ T6979] do_fast_syscall_32+0x33/0x70 [ 417.890180][ T6979] do_SYSENTER_32+0x1b/0x20 [ 417.895340][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.901758][ T6979] [ 417.904426][ T6979] Uninit was stored to memory at: [ 417.909603][ T6979] __get_compat_msghdr+0x514/0x750 [ 417.915485][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 417.920510][ T6979] ___sys_recvmsg+0x19d/0x870 [ 417.925692][ T6979] do_recvmmsg+0x63a/0x10a0 [ 417.930273][ T6979] __sys_recvmmsg+0x113/0x450 [ 417.935386][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 417.942823][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 417.948282][ T6979] do_fast_syscall_32+0x33/0x70 [ 417.955665][ T6979] do_SYSENTER_32+0x1b/0x20 [ 417.960411][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.967535][ T6979] [ 417.970038][ T6979] Local variable msg_sys created at: [ 417.975885][ T6979] do_recvmmsg+0x5f/0x10a0 [ 417.980710][ T6979] __sys_recvmmsg+0x113/0x450 [ 418.248399][ T6967] not chained 200000 origins [ 418.253507][ T6967] CPU: 1 PID: 6967 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 418.264523][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.274707][ T6967] Call Trace: [ 418.278038][ T6967] [ 418.281360][ T6967] dump_stack_lvl+0x1c8/0x256 [ 418.286308][ T6967] dump_stack+0x1a/0x1c [ 418.291246][ T6967] kmsan_internal_chain_origin+0x78/0x120 [ 418.299197][ T6967] ? up_read+0x36/0x1b0 [ 418.303449][ T6967] ? do_user_addr_fault+0xfef/0x1710 [ 418.309505][ T6967] ? exc_page_fault+0x6d/0x140 [ 418.314445][ T6967] ? asm_exc_page_fault+0x1e/0x30 [ 418.320981][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 418.326578][ T6967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 418.333166][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 418.338507][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 418.344620][ T6967] __msan_chain_origin+0xbd/0x140 [ 418.352268][ T6967] __get_compat_msghdr+0x514/0x750 [ 418.358427][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 418.363783][ T6967] ? ___sys_recvmsg+0xa9/0x870 [ 418.369368][ T6967] ? do_recvmmsg+0x63a/0x10a0 [ 418.375855][ T6967] ___sys_recvmsg+0x19d/0x870 [ 418.381302][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 418.386590][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 418.392566][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 418.398302][ T6967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 418.405084][ T6967] do_recvmmsg+0x63a/0x10a0 [ 418.409660][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 418.415259][ T6967] ? __sys_recvmmsg+0x52/0x450 [ 418.420793][ T6967] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 418.427396][ T6967] __sys_recvmmsg+0x113/0x450 [ 418.433621][ T6967] ? kmsan_get_metadata+0x33/0x220 [ 418.439893][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 418.446492][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 418.453595][ T6967] ? exit_to_user_mode_prepare+0x119/0x220 [ 418.461156][ T6967] do_fast_syscall_32+0x33/0x70 [ 418.466629][ T6967] do_SYSENTER_32+0x1b/0x20 [ 418.471949][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.479890][ T6967] RIP: 0023:0xf7fc6549 [ 418.486200][ T6967] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 418.509759][ T6967] RSP: 002b:00000000f7fa05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 418.520667][ T6967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 418.530336][ T6967] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 418.539358][ T6967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 418.549113][ T6967] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 418.557584][ T6967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 418.566327][ T6967] [ 418.575271][ T6967] Uninit was stored to memory at: [ 418.585139][ T6967] __get_compat_msghdr+0x514/0x750 [ 418.591015][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 418.596046][ T6967] ___sys_recvmsg+0x19d/0x870 [ 418.602277][ T6967] do_recvmmsg+0x63a/0x10a0 [ 418.607225][ T6967] __sys_recvmmsg+0x113/0x450 [ 418.613005][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 418.619470][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 418.625922][ T6967] do_fast_syscall_32+0x33/0x70 [ 418.630837][ T6967] do_SYSENTER_32+0x1b/0x20 [ 418.635656][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.643080][ T6967] [ 418.645530][ T6967] Uninit was stored to memory at: [ 418.650912][ T6967] __get_compat_msghdr+0x514/0x750 [ 418.658147][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 418.663720][ T6967] ___sys_recvmsg+0x19d/0x870 [ 418.668475][ T6967] do_recvmmsg+0x63a/0x10a0 [ 418.675853][ T6967] __sys_recvmmsg+0x113/0x450 [ 418.680779][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 418.687285][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 418.693266][ T6967] do_fast_syscall_32+0x33/0x70 [ 418.698511][ T6967] do_SYSENTER_32+0x1b/0x20 [ 418.704461][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.711312][ T6967] [ 418.713945][ T6967] Uninit was stored to memory at: [ 418.719091][ T6967] __get_compat_msghdr+0x514/0x750 [ 418.724512][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 418.730240][ T6967] ___sys_recvmsg+0x19d/0x870 [ 418.735081][ T6967] do_recvmmsg+0x63a/0x10a0 [ 418.740365][ T6967] __sys_recvmmsg+0x113/0x450 [ 418.745276][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 418.752025][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 418.757852][ T6967] do_fast_syscall_32+0x33/0x70 [ 418.762765][ T6967] do_SYSENTER_32+0x1b/0x20 [ 418.768153][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.775226][ T6967] [ 418.777573][ T6967] Uninit was stored to memory at: [ 418.782824][ T6967] __get_compat_msghdr+0x514/0x750 [ 418.788600][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 418.793838][ T6967] ___sys_recvmsg+0x19d/0x870 [ 418.798659][ T6967] do_recvmmsg+0x63a/0x10a0 [ 418.803229][ T6967] __sys_recvmmsg+0x113/0x450 [ 418.808146][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 418.814667][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 418.820617][ T6967] do_fast_syscall_32+0x33/0x70 [ 418.825704][ T6967] do_SYSENTER_32+0x1b/0x20 [ 418.830830][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.838257][ T6967] [ 418.840628][ T6967] Uninit was stored to memory at: [ 418.846003][ T6967] __get_compat_msghdr+0x514/0x750 [ 418.851301][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 418.856895][ T6967] ___sys_recvmsg+0x19d/0x870 [ 418.861727][ T6967] do_recvmmsg+0x63a/0x10a0 [ 418.867126][ T6967] __sys_recvmmsg+0x113/0x450 [ 418.872723][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 418.880308][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 418.885608][ T6967] do_fast_syscall_32+0x33/0x70 [ 418.890598][ T6967] do_SYSENTER_32+0x1b/0x20 [ 418.896647][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.903173][ T6967] [ 418.905695][ T6967] Uninit was stored to memory at: [ 418.910858][ T6967] __get_compat_msghdr+0x514/0x750 [ 418.916291][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 418.921290][ T6967] ___sys_recvmsg+0x19d/0x870 [ 418.926193][ T6967] do_recvmmsg+0x63a/0x10a0 [ 418.930750][ T6967] __sys_recvmmsg+0x113/0x450 [ 418.935570][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 418.942124][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 418.948044][ T6967] do_fast_syscall_32+0x33/0x70 [ 418.952992][ T6967] do_SYSENTER_32+0x1b/0x20 [ 418.957713][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.965080][ T6967] [ 418.967417][ T6967] Uninit was stored to memory at: [ 418.972765][ T6967] __get_compat_msghdr+0x514/0x750 [ 418.978529][ T6967] get_compat_msghdr+0x8c/0x1c0 [ 418.983565][ T6967] ___sys_recvmsg+0x19d/0x870 [ 418.988491][ T6967] do_recvmmsg+0x63a/0x10a0 [ 418.993808][ T6967] __sys_recvmmsg+0x113/0x450 [ 418.998647][ T6967] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 419.006209][ T6967] __do_fast_syscall_32+0x95/0xf0 [ 419.011661][ T6967] do_fast_syscall_32+0x33/0x70 [ 419.017462][ T6967] do_SYSENTER_32+0x1b/0x20 [ 419.023091][ T6967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.029792][ T6967] [ 419.032130][ T6967] Local variable msg_sys created at: [ 419.038517][ T6967] do_recvmmsg+0x5f/0x10a0 [ 419.043373][ T6967] __sys_recvmmsg+0x113/0x450 [ 419.253560][ T6979] not chained 210000 origins [ 419.258731][ T6979] CPU: 0 PID: 6979 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 419.269561][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.279784][ T6979] Call Trace: [ 419.283085][ T6979] [ 419.286028][ T6979] dump_stack_lvl+0x1c8/0x256 [ 419.290841][ T6979] dump_stack+0x1a/0x1c [ 419.295120][ T6979] kmsan_internal_chain_origin+0x78/0x120 [ 419.302163][ T6979] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 419.308399][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 419.313580][ T6979] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 419.320458][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 419.325757][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 419.331784][ T6979] ? __get_compat_msghdr+0x5b/0x750 [ 419.337036][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 419.342992][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 419.349002][ T6979] ? should_fail+0x3f/0x7e0 [ 419.353677][ T6979] ? __stack_depot_save+0x21/0x4b0 [ 419.358982][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 419.364832][ T6979] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 419.372559][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 419.377756][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 419.384166][ T6979] __msan_chain_origin+0xbd/0x140 [ 419.389270][ T6979] __get_compat_msghdr+0x514/0x750 [ 419.394499][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 419.399958][ T6979] ? ___sys_recvmsg+0xa9/0x870 [ 419.404808][ T6979] ? do_recvmmsg+0x63a/0x10a0 [ 419.409687][ T6979] ___sys_recvmsg+0x19d/0x870 [ 419.414470][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 419.419753][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 419.425929][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 419.431156][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 419.437746][ T6979] do_recvmmsg+0x63a/0x10a0 [ 419.442501][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 419.448478][ T6979] ? __sys_recvmmsg+0x52/0x450 23:13:40 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000004"], &(0x7f0000000240)=""/134, 0x38, 0x86, 0x1}, 0x20) 23:13:40 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40080) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000950000d9000000000600000001591a67216779"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='9p_client_req\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) mmap(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x1000002, 0x2013, 0xffffffffffffffff, 0xa3d86000) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x8, 0xaf, 0x0, @dev}, 0x10) socket$inet6(0xa, 0x2, 0x203) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="c1c800008042eacb06e68a9eb412ff7f000000000000bcaada0bdf0f9759a441914f3fb7cd2878a6515c4bd065a1b55a13a259afc6d40b3cb49476ef6973e74ea9bbfe017962b14b9d7d69aca5836da5ee04652d670e63a7e2d8", @ANYRES32=0x0], &(0x7f0000000540)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='block_bio_remap\x00', r3}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r2, &(0x7f00000002c0)={&(0x7f0000000100)=@rc={0x1f, @none}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000680)=""/164, 0xa4}], 0x1, &(0x7f0000000740)=""/4104, 0x1008}, 0x40000002) 23:13:40 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) read(r1, &(0x7f0000000680)=""/156, 0x9c) 23:13:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 23:13:40 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f00000000c0)="7bcca1f88a452e07906e8e6604cd5702374ed3432a4f2ee67988227575f9644da95729576a7051eba7bbf8aeacbcbee1c6d57e1286e767460681f741936b2c07d9911370e206a6d7bf48af8606d24ced2ae270326e83bab7b968d73fafe4cef0159014cbfbaa5c31eb130853f63eeb3020c00a909b47efd1dc1e715f8922d331bdcf0427d2f6cd178098b08edfe085f93caa2e2a16e85b6b499c5685e00cd360c9be77eb13e725a670e35fb200d1", 0xae}, {0x0}, {&(0x7f00000002c0)="80c172153247f0986d6ad28cf9e45fdf3b2a4bfcb6cd429a0975111e16dd8cf5053a7c0000008000000000cb9e4bcaf2d0fddf452f751f9d4ab9fccecd7ddd690ef60b30ef7d92deaef271db89a833a99e56e05cfa1af811f0f952894de076", 0x5f}], 0x3, 0x8001, 0x0) close(0xffffffffffffffff) socket(0x10, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0xadc688d28a799772, 0x2, 0x0, 0x0, 0x5, @private2, @mcast1, 0x40, 0x0, 0x2}}) [ 419.453849][ T6979] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 419.460517][ T6979] __sys_recvmmsg+0x113/0x450 [ 419.465872][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 419.471266][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 419.477667][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 419.482755][ T6979] ? exit_to_user_mode_prepare+0x119/0x220 [ 419.488805][ T6979] do_fast_syscall_32+0x33/0x70 [ 419.495502][ T6979] do_SYSENTER_32+0x1b/0x20 [ 419.500744][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.507428][ T6979] RIP: 0023:0xf7fd6549 [ 419.512606][ T6979] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 419.533789][ T6979] RSP: 002b:00000000f7fb05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 419.542285][ T6979] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 419.550394][ T6979] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 419.558566][ T6979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 419.567314][ T6979] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 419.575423][ T6979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 419.583974][ T6979] [ 419.589158][ T6979] Uninit was stored to memory at: [ 419.594735][ T6979] __get_compat_msghdr+0x514/0x750 [ 419.599909][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 419.605223][ T6979] ___sys_recvmsg+0x19d/0x870 [ 419.609973][ T6979] do_recvmmsg+0x63a/0x10a0 [ 419.614768][ T6979] __sys_recvmmsg+0x113/0x450 [ 419.619623][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 419.627349][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 419.632500][ T6979] do_fast_syscall_32+0x33/0x70 [ 419.637828][ T6979] do_SYSENTER_32+0x1b/0x20 [ 419.642397][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.649193][ T6979] [ 419.652067][ T6979] Uninit was stored to memory at: [ 419.657321][ T6979] __get_compat_msghdr+0x514/0x750 [ 419.662579][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 419.667727][ T6979] ___sys_recvmsg+0x19d/0x870 [ 419.672468][ T6979] do_recvmmsg+0x63a/0x10a0 [ 419.677189][ T6979] __sys_recvmmsg+0x113/0x450 [ 419.681932][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 419.688445][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 419.693536][ T6979] do_fast_syscall_32+0x33/0x70 [ 419.699151][ T6979] do_SYSENTER_32+0x1b/0x20 [ 419.703839][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.710239][ T6979] [ 419.712719][ T6979] Uninit was stored to memory at: [ 419.718160][ T6979] __get_compat_msghdr+0x514/0x750 [ 419.723827][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 419.728847][ T6979] ___sys_recvmsg+0x19d/0x870 [ 419.733844][ T6979] do_recvmmsg+0x63a/0x10a0 [ 419.738525][ T6979] __sys_recvmmsg+0x113/0x450 [ 419.743446][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 419.749902][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 419.755233][ T6979] do_fast_syscall_32+0x33/0x70 [ 419.760546][ T6979] do_SYSENTER_32+0x1b/0x20 [ 419.765554][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.772253][ T6979] [ 419.774755][ T6979] Uninit was stored to memory at: [ 419.780759][ T6979] __get_compat_msghdr+0x514/0x750 [ 419.786259][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 419.792979][ T6979] ___sys_recvmsg+0x19d/0x870 [ 419.798315][ T6979] do_recvmmsg+0x63a/0x10a0 [ 419.802911][ T6979] __sys_recvmmsg+0x113/0x450 [ 419.807804][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 419.814818][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 419.820001][ T6979] do_fast_syscall_32+0x33/0x70 [ 419.825357][ T6979] do_SYSENTER_32+0x1b/0x20 [ 419.830024][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.836547][ T6979] [ 419.838960][ T6979] Uninit was stored to memory at: [ 419.844614][ T6979] __get_compat_msghdr+0x514/0x750 [ 419.849879][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 419.855370][ T6979] ___sys_recvmsg+0x19d/0x870 [ 419.860130][ T6979] do_recvmmsg+0x63a/0x10a0 [ 419.864911][ T6979] __sys_recvmmsg+0x113/0x450 [ 419.870046][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 419.876510][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 419.881731][ T6979] do_fast_syscall_32+0x33/0x70 [ 419.887042][ T6979] do_SYSENTER_32+0x1b/0x20 [ 419.892051][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.898598][ T6979] [ 419.900956][ T6979] Uninit was stored to memory at: [ 419.906289][ T6979] __get_compat_msghdr+0x514/0x750 [ 419.911860][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 419.917752][ T6979] ___sys_recvmsg+0x19d/0x870 [ 419.923293][ T6979] do_recvmmsg+0x63a/0x10a0 [ 419.928022][ T6979] __sys_recvmmsg+0x113/0x450 [ 419.932866][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 419.939580][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 419.945005][ T6979] do_fast_syscall_32+0x33/0x70 [ 419.950299][ T6979] do_SYSENTER_32+0x1b/0x20 [ 419.955544][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.962595][ T6979] [ 419.965296][ T6979] Uninit was stored to memory at: [ 419.970625][ T6979] __get_compat_msghdr+0x514/0x750 [ 419.977005][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 419.982253][ T6979] ___sys_recvmsg+0x19d/0x870 [ 419.987775][ T6979] do_recvmmsg+0x63a/0x10a0 [ 419.992622][ T6979] __sys_recvmmsg+0x113/0x450 [ 419.997857][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 420.005100][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 420.010373][ T6979] do_fast_syscall_32+0x33/0x70 [ 420.016330][ T6979] do_SYSENTER_32+0x1b/0x20 [ 420.021287][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 420.027937][ T6979] [ 420.030299][ T6979] Local variable msg_sys created at: [ 420.036062][ T6979] do_recvmmsg+0x5f/0x10a0 [ 420.040659][ T6979] __sys_recvmmsg+0x113/0x450 [ 420.330164][ T6979] not chained 220000 origins [ 420.335129][ T6979] CPU: 0 PID: 6979 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 420.345509][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.356738][ T6979] Call Trace: [ 420.360745][ T6979] [ 420.363748][ T6979] dump_stack_lvl+0x1c8/0x256 [ 420.369072][ T6979] dump_stack+0x1a/0x1c [ 420.373425][ T6979] kmsan_internal_chain_origin+0x78/0x120 [ 420.379484][ T6979] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 420.385807][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 420.391741][ T6979] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 420.399322][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 420.404523][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 420.410519][ T6979] ? __get_compat_msghdr+0x5b/0x750 [ 420.416475][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 420.421885][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 420.428007][ T6979] ? should_fail+0x3f/0x7e0 [ 420.432991][ T6979] ? __stack_depot_save+0x21/0x4b0 [ 420.438440][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 420.443806][ T6979] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 420.450304][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 420.455668][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 420.462246][ T6979] __msan_chain_origin+0xbd/0x140 [ 420.468803][ T6979] __get_compat_msghdr+0x514/0x750 [ 420.474623][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 420.479727][ T6979] ? ___sys_recvmsg+0xa9/0x870 [ 420.484745][ T6979] ? do_recvmmsg+0x63a/0x10a0 [ 420.489595][ T6979] ___sys_recvmsg+0x19d/0x870 [ 420.495401][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 420.501180][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 420.507070][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 420.513286][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 420.520397][ T6979] do_recvmmsg+0x63a/0x10a0 [ 420.525428][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 420.531666][ T6979] ? __sys_recvmmsg+0x52/0x450 [ 420.536680][ T6979] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 420.543339][ T6979] __sys_recvmmsg+0x113/0x450 [ 420.548245][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 420.553555][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 420.560229][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 420.566185][ T6979] ? exit_to_user_mode_prepare+0x119/0x220 [ 420.572156][ T6979] do_fast_syscall_32+0x33/0x70 [ 420.578113][ T6979] do_SYSENTER_32+0x1b/0x20 [ 420.583257][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 420.591621][ T6979] RIP: 0023:0xf7fd6549 [ 420.595983][ T6979] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 420.625802][ T6979] RSP: 002b:00000000f7fb05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 420.636918][ T6979] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 420.648570][ T6979] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 420.658612][ T6979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 420.669234][ T6979] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 420.678569][ T6979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 420.687989][ T6979] [ 420.693496][ T6979] Uninit was stored to memory at: [ 420.699441][ T6979] __get_compat_msghdr+0x514/0x750 [ 420.706505][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 420.712514][ T6979] ___sys_recvmsg+0x19d/0x870 [ 420.718283][ T6979] do_recvmmsg+0x63a/0x10a0 [ 420.724262][ T6979] __sys_recvmmsg+0x113/0x450 [ 420.730083][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 420.737765][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 420.742961][ T6979] do_fast_syscall_32+0x33/0x70 [ 420.749868][ T6979] do_SYSENTER_32+0x1b/0x20 [ 420.754961][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 420.761755][ T6979] [ 420.764433][ T6979] Uninit was stored to memory at: [ 420.769812][ T6979] __get_compat_msghdr+0x514/0x750 [ 420.775927][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 420.782320][ T6979] ___sys_recvmsg+0x19d/0x870 [ 420.788115][ T6979] do_recvmmsg+0x63a/0x10a0 [ 420.793145][ T6979] __sys_recvmmsg+0x113/0x450 [ 420.798518][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 420.806026][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 420.812082][ T6979] do_fast_syscall_32+0x33/0x70 [ 420.817579][ T6979] do_SYSENTER_32+0x1b/0x20 [ 420.823085][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 420.830274][ T6979] [ 420.832712][ T6979] Uninit was stored to memory at: [ 420.838258][ T6979] __get_compat_msghdr+0x514/0x750 [ 420.844276][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 420.849464][ T6979] ___sys_recvmsg+0x19d/0x870 [ 420.854633][ T6979] do_recvmmsg+0x63a/0x10a0 [ 420.860265][ T6979] __sys_recvmmsg+0x113/0x450 [ 420.865436][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 420.872674][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 420.878826][ T6979] do_fast_syscall_32+0x33/0x70 [ 420.885317][ T6979] do_SYSENTER_32+0x1b/0x20 [ 420.889914][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 420.897502][ T6979] [ 420.900933][ T6979] Uninit was stored to memory at: [ 420.907697][ T6979] __get_compat_msghdr+0x514/0x750 [ 420.914145][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 420.920371][ T6979] ___sys_recvmsg+0x19d/0x870 [ 420.925669][ T6979] do_recvmmsg+0x63a/0x10a0 [ 420.931359][ T6979] __sys_recvmmsg+0x113/0x450 [ 420.936514][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 420.943278][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 420.949494][ T6979] do_fast_syscall_32+0x33/0x70 [ 420.955588][ T6979] do_SYSENTER_32+0x1b/0x20 [ 420.961358][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 420.969457][ T6979] [ 420.972707][ T6979] Uninit was stored to memory at: [ 420.978350][ T6979] __get_compat_msghdr+0x514/0x750 [ 420.985600][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 420.991012][ T6979] ___sys_recvmsg+0x19d/0x870 [ 420.996091][ T6979] do_recvmmsg+0x63a/0x10a0 [ 421.002447][ T6979] __sys_recvmmsg+0x113/0x450 [ 421.007808][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 421.014475][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 421.021804][ T6979] do_fast_syscall_32+0x33/0x70 [ 421.027125][ T6979] do_SYSENTER_32+0x1b/0x20 [ 421.031707][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 421.039215][ T6979] [ 421.041771][ T6979] Uninit was stored to memory at: [ 421.047679][ T6979] __get_compat_msghdr+0x514/0x750 [ 421.052865][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 421.058777][ T6979] ___sys_recvmsg+0x19d/0x870 [ 421.064193][ T6979] do_recvmmsg+0x63a/0x10a0 [ 421.070006][ T6979] __sys_recvmmsg+0x113/0x450 [ 421.076042][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 421.085059][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 421.091377][ T6979] do_fast_syscall_32+0x33/0x70 [ 421.096742][ T6979] do_SYSENTER_32+0x1b/0x20 [ 421.104789][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 421.113287][ T6979] [ 421.116556][ T6979] Uninit was stored to memory at: [ 421.123477][ T6979] __get_compat_msghdr+0x514/0x750 [ 421.129103][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 421.135818][ T6979] ___sys_recvmsg+0x19d/0x870 [ 421.141125][ T6979] do_recvmmsg+0x63a/0x10a0 [ 421.152548][ T6979] __sys_recvmmsg+0x113/0x450 [ 421.157474][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 421.164245][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 421.169715][ T6979] do_fast_syscall_32+0x33/0x70 [ 421.174799][ T6979] do_SYSENTER_32+0x1b/0x20 [ 421.179361][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 421.185920][ T6979] [ 421.188262][ T6979] Local variable msg_sys created at: [ 421.193924][ T6979] do_recvmmsg+0x5f/0x10a0 [ 421.198447][ T6979] __sys_recvmmsg+0x113/0x450 [ 421.587085][ T6979] not chained 230000 origins [ 421.592292][ T6979] CPU: 0 PID: 6979 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 421.602653][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.613401][ T6979] Call Trace: [ 421.616927][ T6979] [ 421.620547][ T6979] dump_stack_lvl+0x1c8/0x256 [ 421.625376][ T6979] dump_stack+0x1a/0x1c [ 421.630969][ T6979] kmsan_internal_chain_origin+0x78/0x120 [ 421.636773][ T6979] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 421.643080][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 421.648436][ T6979] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 421.655884][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 421.661273][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 421.667176][ T6979] ? __get_compat_msghdr+0x5b/0x750 [ 421.672449][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 421.677624][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 421.683507][ T6979] ? should_fail+0x3f/0x7e0 [ 421.688076][ T6979] ? __stack_depot_save+0x21/0x4b0 [ 421.693456][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 421.698638][ T6979] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 421.705091][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 421.710494][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 421.716894][ T6979] __msan_chain_origin+0xbd/0x140 [ 421.722571][ T6979] __get_compat_msghdr+0x514/0x750 [ 421.729605][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 421.734521][ T6979] ? ___sys_recvmsg+0xa9/0x870 [ 421.739641][ T6979] ? do_recvmmsg+0x63a/0x10a0 [ 421.744684][ T6979] ___sys_recvmsg+0x19d/0x870 [ 421.749520][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 421.754909][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 421.761870][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 421.767521][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 421.774408][ T6979] do_recvmmsg+0x63a/0x10a0 [ 421.779404][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 421.785984][ T6979] ? __sys_recvmmsg+0x52/0x450 [ 421.791089][ T6979] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 421.800049][ T6979] __sys_recvmmsg+0x113/0x450 [ 421.807068][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 421.815148][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 421.822633][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 421.828656][ T6979] ? exit_to_user_mode_prepare+0x119/0x220 [ 421.834812][ T6979] do_fast_syscall_32+0x33/0x70 [ 421.842629][ T6979] do_SYSENTER_32+0x1b/0x20 [ 421.848556][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 421.856380][ T6979] RIP: 0023:0xf7fd6549 [ 421.860659][ T6979] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 421.881447][ T6979] RSP: 002b:00000000f7fb05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 421.890163][ T6979] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 421.898361][ T6979] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 421.906582][ T6979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 421.915104][ T6979] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 421.923544][ T6979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.931817][ T6979] [ 421.937252][ T6979] Uninit was stored to memory at: [ 421.942497][ T6979] __get_compat_msghdr+0x514/0x750 [ 421.948575][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 421.954111][ T6979] ___sys_recvmsg+0x19d/0x870 [ 421.959343][ T6979] do_recvmmsg+0x63a/0x10a0 [ 421.965041][ T6979] __sys_recvmmsg+0x113/0x450 [ 421.969806][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 421.976405][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 421.981677][ T6979] do_fast_syscall_32+0x33/0x70 [ 421.986753][ T6979] do_SYSENTER_32+0x1b/0x20 [ 421.991596][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 421.998237][ T6979] [ 422.000767][ T6979] Uninit was stored to memory at: [ 422.006074][ T6979] __get_compat_msghdr+0x514/0x750 [ 422.011272][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 422.016416][ T6979] ___sys_recvmsg+0x19d/0x870 [ 422.021219][ T6979] do_recvmmsg+0x63a/0x10a0 [ 422.026130][ T6979] __sys_recvmmsg+0x113/0x450 [ 422.031069][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 422.037619][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 422.042825][ T6979] do_fast_syscall_32+0x33/0x70 [ 422.048023][ T6979] do_SYSENTER_32+0x1b/0x20 [ 422.052615][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 422.059247][ T6979] [ 422.064206][ T6979] Uninit was stored to memory at: [ 422.069466][ T6979] __get_compat_msghdr+0x514/0x750 [ 422.074851][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 422.080066][ T6979] ___sys_recvmsg+0x19d/0x870 [ 422.085710][ T6979] do_recvmmsg+0x63a/0x10a0 [ 422.091127][ T6979] __sys_recvmmsg+0x113/0x450 [ 422.096268][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 422.103789][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 422.108913][ T6979] do_fast_syscall_32+0x33/0x70 [ 422.114086][ T6979] do_SYSENTER_32+0x1b/0x20 [ 422.119018][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 422.125985][ T6979] [ 422.128336][ T6979] Uninit was stored to memory at: [ 422.133798][ T6979] __get_compat_msghdr+0x514/0x750 [ 422.139642][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 422.144803][ T6979] ___sys_recvmsg+0x19d/0x870 [ 422.149671][ T6979] do_recvmmsg+0x63a/0x10a0 [ 422.155131][ T6979] __sys_recvmmsg+0x113/0x450 [ 422.160357][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 422.167372][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 422.173430][ T6979] do_fast_syscall_32+0x33/0x70 [ 422.178674][ T6979] do_SYSENTER_32+0x1b/0x20 [ 422.183473][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 422.190278][ T6979] [ 422.192722][ T6979] Uninit was stored to memory at: [ 422.198876][ T6979] __get_compat_msghdr+0x514/0x750 [ 422.204360][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 422.209297][ T6979] ___sys_recvmsg+0x19d/0x870 [ 422.214174][ T6979] do_recvmmsg+0x63a/0x10a0 [ 422.218870][ T6979] __sys_recvmmsg+0x113/0x450 [ 422.223747][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 422.230231][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 422.235851][ T6979] do_fast_syscall_32+0x33/0x70 [ 422.241228][ T6979] do_SYSENTER_32+0x1b/0x20 [ 422.247107][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 422.254409][ T6979] [ 422.256764][ T6979] Uninit was stored to memory at: [ 422.261878][ T6979] __get_compat_msghdr+0x514/0x750 [ 422.267395][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 422.272856][ T6979] ___sys_recvmsg+0x19d/0x870 [ 422.279201][ T6979] do_recvmmsg+0x63a/0x10a0 [ 422.286469][ T6979] __sys_recvmmsg+0x113/0x450 [ 422.291852][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 422.299790][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 422.305466][ T6979] do_fast_syscall_32+0x33/0x70 [ 422.311089][ T6979] do_SYSENTER_32+0x1b/0x20 [ 422.316364][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 422.323309][ T6979] [ 422.326044][ T6979] Uninit was stored to memory at: [ 422.331434][ T6979] __get_compat_msghdr+0x514/0x750 [ 422.337929][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 422.343691][ T6979] ___sys_recvmsg+0x19d/0x870 [ 422.348619][ T6979] do_recvmmsg+0x63a/0x10a0 [ 422.354950][ T6979] __sys_recvmmsg+0x113/0x450 [ 422.360817][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 422.368135][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 422.373439][ T6979] do_fast_syscall_32+0x33/0x70 [ 422.378519][ T6979] do_SYSENTER_32+0x1b/0x20 [ 422.383078][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 422.389772][ T6979] [ 422.392130][ T6979] Local variable msg_sys created at: [ 422.398122][ T6979] do_recvmmsg+0x5f/0x10a0 [ 422.402666][ T6979] __sys_recvmmsg+0x113/0x450 [ 422.760401][ T6979] not chained 240000 origins [ 422.765414][ T6979] CPU: 0 PID: 6979 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 422.775714][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.786159][ T6979] Call Trace: [ 422.789859][ T6979] [ 422.792840][ T6979] dump_stack_lvl+0x1c8/0x256 [ 422.798038][ T6979] dump_stack+0x1a/0x1c [ 422.802590][ T6979] kmsan_internal_chain_origin+0x78/0x120 [ 422.811173][ T6979] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 422.818068][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 422.823723][ T6979] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 422.830506][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 422.836038][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 422.842187][ T6979] ? __get_compat_msghdr+0x5b/0x750 [ 422.847624][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 422.853339][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 422.859587][ T6979] ? should_fail+0x3f/0x7e0 [ 422.864400][ T6979] ? __stack_depot_save+0x21/0x4b0 [ 422.869591][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 422.874850][ T6979] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 422.881425][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 422.887165][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 422.893061][ T6979] __msan_chain_origin+0xbd/0x140 [ 422.898235][ T6979] __get_compat_msghdr+0x514/0x750 [ 422.903590][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 422.908837][ T6979] ? ___sys_recvmsg+0xa9/0x870 [ 422.913696][ T6979] ? do_recvmmsg+0x63a/0x10a0 [ 422.918976][ T6979] ___sys_recvmsg+0x19d/0x870 [ 422.923832][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 422.929111][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 422.936130][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 422.941333][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 422.948052][ T6979] do_recvmmsg+0x63a/0x10a0 [ 422.952886][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 422.959070][ T6979] ? __sys_recvmmsg+0x52/0x450 [ 422.964095][ T6979] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 422.970684][ T6979] __sys_recvmmsg+0x113/0x450 [ 422.975435][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 422.980613][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 422.987275][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 422.992367][ T6979] ? exit_to_user_mode_prepare+0x119/0x220 [ 422.998291][ T6979] do_fast_syscall_32+0x33/0x70 [ 423.003305][ T6979] do_SYSENTER_32+0x1b/0x20 [ 423.008094][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.014490][ T6979] RIP: 0023:0xf7fd6549 [ 423.018599][ T6979] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 423.038946][ T6979] RSP: 002b:00000000f7fb05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 423.047591][ T6979] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 423.056290][ T6979] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 423.065695][ T6979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 423.074952][ T6979] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 423.085027][ T6979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 423.094073][ T6979] [ 423.105596][ T6979] Uninit was stored to memory at: [ 423.111188][ T6979] __get_compat_msghdr+0x514/0x750 [ 423.119186][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 423.124435][ T6979] ___sys_recvmsg+0x19d/0x870 [ 423.129492][ T6979] do_recvmmsg+0x63a/0x10a0 [ 423.135000][ T6979] __sys_recvmmsg+0x113/0x450 [ 423.140402][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 423.146987][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 423.152259][ T6979] do_fast_syscall_32+0x33/0x70 [ 423.160140][ T6979] do_SYSENTER_32+0x1b/0x20 [ 423.165793][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.172652][ T6979] [ 423.175201][ T6979] Uninit was stored to memory at: [ 423.180534][ T6979] __get_compat_msghdr+0x514/0x750 [ 423.185985][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 423.191993][ T6979] ___sys_recvmsg+0x19d/0x870 [ 423.198417][ T6979] do_recvmmsg+0x63a/0x10a0 [ 423.203184][ T6979] __sys_recvmmsg+0x113/0x450 [ 423.209064][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 423.216925][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 423.222463][ T6979] do_fast_syscall_32+0x33/0x70 [ 423.227710][ T6979] do_SYSENTER_32+0x1b/0x20 [ 423.233056][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.240471][ T6979] [ 423.243960][ T6979] Uninit was stored to memory at: [ 423.249620][ T6979] __get_compat_msghdr+0x514/0x750 [ 423.256247][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 423.262319][ T6979] ___sys_recvmsg+0x19d/0x870 [ 423.267629][ T6979] do_recvmmsg+0x63a/0x10a0 [ 423.272552][ T6979] __sys_recvmmsg+0x113/0x450 [ 423.278017][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 423.285787][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 423.291597][ T6979] do_fast_syscall_32+0x33/0x70 [ 423.299217][ T6979] do_SYSENTER_32+0x1b/0x20 [ 423.304434][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.312064][ T6979] [ 423.314785][ T6979] Uninit was stored to memory at: [ 423.320994][ T6979] __get_compat_msghdr+0x514/0x750 [ 423.328067][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 423.333098][ T6979] ___sys_recvmsg+0x19d/0x870 [ 423.338428][ T6979] do_recvmmsg+0x63a/0x10a0 [ 423.344489][ T6979] __sys_recvmmsg+0x113/0x450 [ 423.349783][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 423.357028][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 423.364352][ T6979] do_fast_syscall_32+0x33/0x70 [ 423.369975][ T6979] do_SYSENTER_32+0x1b/0x20 [ 423.375651][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.382989][ T6979] [ 423.385862][ T6979] Uninit was stored to memory at: [ 423.391673][ T6979] __get_compat_msghdr+0x514/0x750 [ 423.397383][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 423.402472][ T6979] ___sys_recvmsg+0x19d/0x870 [ 423.408334][ T6979] do_recvmmsg+0x63a/0x10a0 [ 423.415164][ T6979] __sys_recvmmsg+0x113/0x450 [ 423.420344][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 423.427952][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 423.434018][ T6979] do_fast_syscall_32+0x33/0x70 [ 423.438936][ T6979] do_SYSENTER_32+0x1b/0x20 [ 423.444600][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.452387][ T6979] [ 423.455133][ T6979] Uninit was stored to memory at: [ 423.460595][ T6979] __get_compat_msghdr+0x514/0x750 [ 423.468870][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 423.474206][ T6979] ___sys_recvmsg+0x19d/0x870 [ 423.479575][ T6979] do_recvmmsg+0x63a/0x10a0 [ 423.484561][ T6979] __sys_recvmmsg+0x113/0x450 [ 423.489866][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 423.496995][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 423.503412][ T6979] do_fast_syscall_32+0x33/0x70 [ 423.508694][ T6979] do_SYSENTER_32+0x1b/0x20 [ 423.513260][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.520367][ T6979] [ 423.523007][ T6979] Uninit was stored to memory at: [ 423.528610][ T6979] __get_compat_msghdr+0x514/0x750 [ 423.537240][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 423.544033][ T6979] ___sys_recvmsg+0x19d/0x870 [ 423.548972][ T6979] do_recvmmsg+0x63a/0x10a0 [ 423.553806][ T6979] __sys_recvmmsg+0x113/0x450 [ 423.558632][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 423.565295][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 423.570758][ T6979] do_fast_syscall_32+0x33/0x70 [ 423.577190][ T6979] do_SYSENTER_32+0x1b/0x20 [ 423.582327][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.592801][ T6979] [ 423.596278][ T6979] Local variable msg_sys created at: [ 423.602447][ T6979] do_recvmmsg+0x5f/0x10a0 [ 423.607253][ T6979] __sys_recvmmsg+0x113/0x450 [ 423.909625][ T6979] not chained 250000 origins [ 423.915466][ T6979] CPU: 1 PID: 6979 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 423.926503][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.937586][ T6979] Call Trace: [ 423.941423][ T6979] [ 423.944388][ T6979] dump_stack_lvl+0x1c8/0x256 [ 423.949228][ T6979] dump_stack+0x1a/0x1c [ 423.954743][ T6979] kmsan_internal_chain_origin+0x78/0x120 [ 423.960573][ T6979] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 423.966903][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 423.972316][ T6979] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 423.978608][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 423.984071][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 423.990551][ T6979] ? __get_compat_msghdr+0x5b/0x750 [ 423.996435][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 424.001748][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 424.007984][ T6979] ? should_fail+0x3f/0x7e0 [ 424.013313][ T6979] ? __stack_depot_save+0x21/0x4b0 [ 424.018484][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 424.024294][ T6979] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 424.030750][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 424.036044][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 424.042581][ T6979] __msan_chain_origin+0xbd/0x140 [ 424.048243][ T6979] __get_compat_msghdr+0x514/0x750 [ 424.053715][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 424.059098][ T6979] ? ___sys_recvmsg+0xa9/0x870 [ 424.064068][ T6979] ? do_recvmmsg+0x63a/0x10a0 [ 424.069425][ T6979] ___sys_recvmsg+0x19d/0x870 [ 424.074823][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 424.080604][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 424.087089][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 424.092261][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 424.098370][ T6979] do_recvmmsg+0x63a/0x10a0 [ 424.103302][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 424.108732][ T6979] ? __sys_recvmmsg+0x52/0x450 [ 424.114027][ T6979] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 424.121851][ T6979] __sys_recvmmsg+0x113/0x450 [ 424.126602][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 424.131786][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 424.138230][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 424.143925][ T6979] ? exit_to_user_mode_prepare+0x119/0x220 [ 424.150750][ T6979] do_fast_syscall_32+0x33/0x70 [ 424.156970][ T6979] do_SYSENTER_32+0x1b/0x20 [ 424.161562][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.167940][ T6979] RIP: 0023:0xf7fd6549 [ 424.172039][ T6979] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 424.192153][ T6979] RSP: 002b:00000000f7fb05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 424.201316][ T6979] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 424.211974][ T6979] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 424.222312][ T6979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 424.232483][ T6979] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 424.241706][ T6979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 424.250105][ T6979] [ 424.253825][ T6979] Uninit was stored to memory at: [ 424.260265][ T6979] __get_compat_msghdr+0x514/0x750 [ 424.266019][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 424.271028][ T6979] ___sys_recvmsg+0x19d/0x870 [ 424.276279][ T6979] do_recvmmsg+0x63a/0x10a0 [ 424.280956][ T6979] __sys_recvmmsg+0x113/0x450 [ 424.286074][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 424.292843][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 424.298782][ T6979] do_fast_syscall_32+0x33/0x70 [ 424.304338][ T6979] do_SYSENTER_32+0x1b/0x20 [ 424.309899][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.317778][ T6979] [ 424.320915][ T6979] Uninit was stored to memory at: [ 424.326712][ T6979] __get_compat_msghdr+0x514/0x750 [ 424.334005][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 424.339445][ T6979] ___sys_recvmsg+0x19d/0x870 [ 424.344964][ T6979] do_recvmmsg+0x63a/0x10a0 [ 424.350190][ T6979] __sys_recvmmsg+0x113/0x450 [ 424.355358][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 424.362126][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 424.367670][ T6979] do_fast_syscall_32+0x33/0x70 [ 424.373079][ T6979] do_SYSENTER_32+0x1b/0x20 [ 424.378166][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.385354][ T6979] [ 424.387970][ T6979] Uninit was stored to memory at: [ 424.394400][ T6979] __get_compat_msghdr+0x514/0x750 [ 424.399589][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 424.405137][ T6979] ___sys_recvmsg+0x19d/0x870 [ 424.410089][ T6979] do_recvmmsg+0x63a/0x10a0 [ 424.415277][ T6979] __sys_recvmmsg+0x113/0x450 [ 424.420122][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 424.426655][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 424.433810][ T6979] do_fast_syscall_32+0x33/0x70 [ 424.439794][ T6979] do_SYSENTER_32+0x1b/0x20 [ 424.444989][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.452428][ T6979] [ 424.454972][ T6979] Uninit was stored to memory at: [ 424.460248][ T6979] __get_compat_msghdr+0x514/0x750 [ 424.465703][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 424.470701][ T6979] ___sys_recvmsg+0x19d/0x870 [ 424.476035][ T6979] do_recvmmsg+0x63a/0x10a0 [ 424.480666][ T6979] __sys_recvmmsg+0x113/0x450 [ 424.486192][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 424.493040][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 424.499051][ T6979] do_fast_syscall_32+0x33/0x70 [ 424.504819][ T6979] do_SYSENTER_32+0x1b/0x20 [ 424.509454][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.516299][ T6979] [ 424.519031][ T6979] Uninit was stored to memory at: [ 424.524480][ T6979] __get_compat_msghdr+0x514/0x750 [ 424.530212][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 424.535453][ T6979] ___sys_recvmsg+0x19d/0x870 [ 424.540745][ T6979] do_recvmmsg+0x63a/0x10a0 [ 424.545674][ T6979] __sys_recvmmsg+0x113/0x450 [ 424.551002][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 424.558709][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 424.564465][ T6979] do_fast_syscall_32+0x33/0x70 [ 424.569466][ T6979] do_SYSENTER_32+0x1b/0x20 [ 424.574313][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.581558][ T6979] [ 424.584230][ T6979] Uninit was stored to memory at: [ 424.589362][ T6979] __get_compat_msghdr+0x514/0x750 [ 424.595422][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 424.600792][ T6979] ___sys_recvmsg+0x19d/0x870 [ 424.606094][ T6979] do_recvmmsg+0x63a/0x10a0 [ 424.610678][ T6979] __sys_recvmmsg+0x113/0x450 [ 424.615783][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 424.622519][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 424.627863][ T6979] do_fast_syscall_32+0x33/0x70 [ 424.633810][ T6979] do_SYSENTER_32+0x1b/0x20 [ 424.638889][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.646016][ T6979] [ 424.648556][ T6979] Uninit was stored to memory at: [ 424.656450][ T6979] __get_compat_msghdr+0x514/0x750 [ 424.662051][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 424.667437][ T6979] ___sys_recvmsg+0x19d/0x870 [ 424.672622][ T6979] do_recvmmsg+0x63a/0x10a0 [ 424.677368][ T6979] __sys_recvmmsg+0x113/0x450 [ 424.683989][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 424.691033][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 424.696529][ T6979] do_fast_syscall_32+0x33/0x70 [ 424.702309][ T6979] do_SYSENTER_32+0x1b/0x20 [ 424.707592][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.715929][ T6979] [ 424.718380][ T6979] Local variable msg_sys created at: [ 424.724744][ T6979] do_recvmmsg+0x5f/0x10a0 [ 424.729594][ T6979] __sys_recvmmsg+0x113/0x450 [ 424.921791][ T6979] not chained 260000 origins [ 424.926888][ T6979] CPU: 1 PID: 6979 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 424.937611][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.950236][ T6979] Call Trace: [ 424.953908][ T6979] [ 424.958003][ T6979] dump_stack_lvl+0x1c8/0x256 [ 424.966594][ T6979] dump_stack+0x1a/0x1c [ 424.971293][ T6979] kmsan_internal_chain_origin+0x78/0x120 [ 424.978180][ T6979] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 424.986443][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 424.992495][ T6979] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 425.000298][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 425.007239][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 425.014409][ T6979] ? __get_compat_msghdr+0x5b/0x750 [ 425.021457][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 425.030502][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 425.036761][ T6979] ? should_fail+0x3f/0x7e0 [ 425.041762][ T6979] ? __stack_depot_save+0x21/0x4b0 [ 425.047644][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 425.053728][ T6979] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 425.060459][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 425.066245][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 425.073443][ T6979] __msan_chain_origin+0xbd/0x140 [ 425.078786][ T6979] __get_compat_msghdr+0x514/0x750 [ 425.085318][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 425.090441][ T6979] ? ___sys_recvmsg+0xa9/0x870 [ 425.095458][ T6979] ? do_recvmmsg+0x63a/0x10a0 [ 425.100800][ T6979] ___sys_recvmsg+0x19d/0x870 [ 425.106561][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 425.112859][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 425.119163][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 425.125335][ T6979] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 425.133568][ T6979] do_recvmmsg+0x63a/0x10a0 [ 425.140472][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 425.145924][ T6979] ? __sys_recvmmsg+0x52/0x450 [ 425.151312][ T6979] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 425.160104][ T6979] __sys_recvmmsg+0x113/0x450 [ 425.165723][ T6979] ? kmsan_get_metadata+0x33/0x220 [ 425.171702][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 425.178477][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 425.184755][ T6979] ? exit_to_user_mode_prepare+0x119/0x220 [ 425.192292][ T6979] do_fast_syscall_32+0x33/0x70 [ 425.201411][ T6979] do_SYSENTER_32+0x1b/0x20 [ 425.206441][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.219067][ T6979] RIP: 0023:0xf7fd6549 [ 425.224194][ T6979] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 425.247158][ T6979] RSP: 002b:00000000f7fb05cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 425.257446][ T6979] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 425.267003][ T6979] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 425.276230][ T6979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 425.285945][ T6979] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 425.296860][ T6979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 425.307359][ T6979] [ 425.319362][ T6979] Uninit was stored to memory at: [ 425.325570][ T6979] __get_compat_msghdr+0x514/0x750 [ 425.331820][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 425.337139][ T6979] ___sys_recvmsg+0x19d/0x870 [ 425.343066][ T6979] do_recvmmsg+0x63a/0x10a0 [ 425.348850][ T6979] __sys_recvmmsg+0x113/0x450 [ 425.355232][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 425.362792][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 425.369833][ T6979] do_fast_syscall_32+0x33/0x70 [ 425.375494][ T6979] do_SYSENTER_32+0x1b/0x20 [ 425.381365][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.388075][ T6979] [ 425.390946][ T6979] Uninit was stored to memory at: [ 425.396337][ T6979] __get_compat_msghdr+0x514/0x750 [ 425.401882][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 425.407144][ T6979] ___sys_recvmsg+0x19d/0x870 [ 425.412621][ T6979] do_recvmmsg+0x63a/0x10a0 [ 425.418211][ T6979] __sys_recvmmsg+0x113/0x450 [ 425.423164][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 425.430896][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 425.439779][ T6979] do_fast_syscall_32+0x33/0x70 [ 425.446745][ T6979] do_SYSENTER_32+0x1b/0x20 [ 425.453179][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.462999][ T6979] [ 425.465739][ T6979] Uninit was stored to memory at: [ 425.472725][ T6979] __get_compat_msghdr+0x514/0x750 [ 425.479187][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 425.486069][ T6979] ___sys_recvmsg+0x19d/0x870 [ 425.491879][ T6979] do_recvmmsg+0x63a/0x10a0 [ 425.497964][ T6979] __sys_recvmmsg+0x113/0x450 [ 425.504104][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 425.511080][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 425.518354][ T6979] do_fast_syscall_32+0x33/0x70 [ 425.525160][ T6979] do_SYSENTER_32+0x1b/0x20 [ 425.530306][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.539741][ T6979] [ 425.542952][ T6979] Uninit was stored to memory at: [ 425.548658][ T6979] __get_compat_msghdr+0x514/0x750 [ 425.555005][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 425.562282][ T6979] ___sys_recvmsg+0x19d/0x870 [ 425.567702][ T6979] do_recvmmsg+0x63a/0x10a0 [ 425.574838][ T6979] __sys_recvmmsg+0x113/0x450 [ 425.582459][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 425.589387][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 425.596991][ T6979] do_fast_syscall_32+0x33/0x70 [ 425.602788][ T6979] do_SYSENTER_32+0x1b/0x20 [ 425.608515][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.615457][ T6979] [ 425.617967][ T6979] Uninit was stored to memory at: [ 425.623280][ T6979] __get_compat_msghdr+0x514/0x750 [ 425.628921][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 425.635102][ T6979] ___sys_recvmsg+0x19d/0x870 [ 425.639940][ T6979] do_recvmmsg+0x63a/0x10a0 [ 425.645421][ T6979] __sys_recvmmsg+0x113/0x450 [ 425.650439][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 425.658486][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 425.664160][ T6979] do_fast_syscall_32+0x33/0x70 [ 425.669580][ T6979] do_SYSENTER_32+0x1b/0x20 [ 425.675125][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.682438][ T6979] [ 425.684968][ T6979] Uninit was stored to memory at: [ 425.693198][ T6979] __get_compat_msghdr+0x514/0x750 [ 425.698994][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 425.704922][ T6979] ___sys_recvmsg+0x19d/0x870 [ 425.710315][ T6979] do_recvmmsg+0x63a/0x10a0 [ 425.716646][ T6979] __sys_recvmmsg+0x113/0x450 [ 425.721402][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 425.728075][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 425.733271][ T6979] do_fast_syscall_32+0x33/0x70 [ 425.738420][ T6979] do_SYSENTER_32+0x1b/0x20 [ 425.745185][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.755195][ T6979] [ 425.757753][ T6979] Uninit was stored to memory at: [ 425.764059][ T6979] __get_compat_msghdr+0x514/0x750 [ 425.770358][ T6979] get_compat_msghdr+0x8c/0x1c0 [ 425.775868][ T6979] ___sys_recvmsg+0x19d/0x870 [ 425.781272][ T6979] do_recvmmsg+0x63a/0x10a0 [ 425.786096][ T6979] __sys_recvmmsg+0x113/0x450 [ 425.791023][ T6979] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 425.799003][ T6979] __do_fast_syscall_32+0x95/0xf0 [ 425.805200][ T6979] do_fast_syscall_32+0x33/0x70 [ 425.811018][ T6979] do_SYSENTER_32+0x1b/0x20 [ 425.816114][ T6979] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.824590][ T6979] [ 425.827200][ T6979] Local variable msg_sys created at: [ 425.833070][ T6979] do_recvmmsg+0x5f/0x10a0 [ 425.837945][ T6979] __sys_recvmmsg+0x113/0x450 23:13:47 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000540)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth1\x00', {}, 0x400}) 23:13:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 23:13:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}], 0x20}, 0x0) pipe(&(0x7f0000006c00)={0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0x0) pipe(&(0x7f0000006c00)={0xffffffffffffffff}) write$binfmt_elf32(r2, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f00000004c0)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000440)={0x0, 'vlan0\x00', {}, 0x5}) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xfe, 0x7, 0x7, 0xfffffffffffffffd, 0x2, 0x3, 0x8, 0x40, 0x38, 0x3e1, 0x7388, 0x5, 0x20, 0x2, 0x2ff, 0xfffe, 0x3ff}, [], "65b0f44c50dd3872af12fc8f15b8fddb581a51aba9c3aee919ba3c3fc945c64dd2906755bfeb34613977076c9a79b826a58533575d43ee2e8ee44deb4240d16ce6436615f109a4012cf7d02fe12eeb5beee498567f2512848d38720f5457caac754ed4f67e605fcdf0d37651142c2579516e2f83c69c872300a1f85300a504dd0ff78caa912ff2037201c3e5dfa4eddfae49d0691dea667d7948d5186577bb9d00ef0d3f771839d505b28aa18df67e54e4547fc0cebf5a7136ec6f0eb42b40", ['\x00', '\x00', '\x00']}, 0x3f7) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0', [{0x20, '-\x81'}, {0x20, '\x00'}, {0x20, '\x00'}], 0xa, "958c7db6ed14f6e064c03434252929a31d35fbdb643cfc3c9f398ac37793197564c3c55c7a259d024f03d1b180"}, 0x3f) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000400)={0x0, 0x10001}, 0x8) 23:13:47 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 23:13:47 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) read(r1, &(0x7f0000000680)=""/156, 0x9c) 23:13:47 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40080) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000950000d9000000000600000001591a67216779"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='9p_client_req\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) mmap(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x1000002, 0x2013, 0xffffffffffffffff, 0xa3d86000) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x8, 0xaf, 0x0, @dev}, 0x10) socket$inet6(0xa, 0x2, 0x203) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="c1c800008042eacb06e68a9eb412ff7f000000000000bcaada0bdf0f9759a441914f3fb7cd2878a6515c4bd065a1b55a13a259afc6d40b3cb49476ef6973e74ea9bbfe017962b14b9d7d69aca5836da5ee04652d670e63a7e2d8", @ANYRES32=0x0], &(0x7f0000000540)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='block_bio_remap\x00', r3}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r2, &(0x7f00000002c0)={&(0x7f0000000100)=@rc={0x1f, @none}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000680)=""/164, 0xa4}], 0x1, &(0x7f0000000740)=""/4104, 0x1008}, 0x40000002) 23:13:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 23:13:47 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x2d, &(0x7f0000001480), 0x4) 23:13:47 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) read(r1, &(0x7f0000000680)=""/156, 0x9c) 23:13:47 executing program 5: r0 = socket$inet(0x2, 0x2, 0x1) sendmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d95ac0b8b6efb0d2", 0x8}], 0x1}}], 0x1, 0x0) 23:13:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0xfff, 0x5, 0x200, 0x0, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 23:13:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x9, 0x110}, 0x98) 23:13:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 23:13:47 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r1, &(0x7f0000000680)=""/156, 0x9c) 23:13:47 executing program 5: syz_emit_ethernet(0x3f, &(0x7f0000000040)={@random="3bdde8b6e9d3", @remote, @val, {@ipv6}}, 0x0) 23:13:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80084503, 0x0) 23:13:48 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x6010000}, 0x6000}], 0x400000000000107, 0x0) 23:13:48 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40080) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000950000d9000000000600000001591a67216779"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='9p_client_req\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) mmap(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x1000002, 0x2013, 0xffffffffffffffff, 0xa3d86000) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x8, 0xaf, 0x0, @dev}, 0x10) socket$inet6(0xa, 0x2, 0x203) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="c1c800008042eacb06e68a9eb412ff7f000000000000bcaada0bdf0f9759a441914f3fb7cd2878a6515c4bd065a1b55a13a259afc6d40b3cb49476ef6973e74ea9bbfe017962b14b9d7d69aca5836da5ee04652d670e63a7e2d8", @ANYRES32=0x0], &(0x7f0000000540)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='block_bio_remap\x00', r3}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r2, &(0x7f00000002c0)={&(0x7f0000000100)=@rc={0x1f, @none}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000680)=""/164, 0xa4}], 0x1, &(0x7f0000000740)=""/4104, 0x1008}, 0x40000002) 23:13:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 23:13:48 executing program 5: r0 = openat$vsock(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) process_mrelease(r0, 0x0) 23:13:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000012c0)='map_files\x00') getdents64(r0, 0x0, 0x0) 23:13:49 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r1, &(0x7f0000000680)=""/156, 0x9c) 23:13:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'ip6_vti0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x0, 0x0}) 23:13:49 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fsync_mode=posixi']) 23:13:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [], {0x14, 0x10}}, 0x28}}, 0x0) 23:13:49 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x6010000}, 0x6000}], 0x400000000000107, 0x0) [ 428.727164][ T7082] loop2: detected capacity change from 0 to 4 23:13:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [], {0x14, 0x10}}, 0x28}}, 0x0) [ 428.774638][ T7082] F2FS-fs (loop2): Unable to read 1th superblock [ 428.782145][ T7082] F2FS-fs (loop2): Unable to read 2th superblock 23:13:49 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1, 0x0, 0x0) 23:13:49 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c}, 0x1c) 23:13:51 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40080) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000950000d9000000000600000001591a67216779"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='9p_client_req\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) mmap(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x1000002, 0x2013, 0xffffffffffffffff, 0xa3d86000) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x8, 0xaf, 0x0, @dev}, 0x10) socket$inet6(0xa, 0x2, 0x203) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="c1c800008042eacb06e68a9eb412ff7f000000000000bcaada0bdf0f9759a441914f3fb7cd2878a6515c4bd065a1b55a13a259afc6d40b3cb49476ef6973e74ea9bbfe017962b14b9d7d69aca5836da5ee04652d670e63a7e2d8", @ANYRES32=0x0], &(0x7f0000000540)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='block_bio_remap\x00', r3}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r2, &(0x7f00000002c0)={&(0x7f0000000100)=@rc={0x1f, @none}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000680)=""/164, 0xa4}], 0x1, &(0x7f0000000740)=""/4104, 0x1008}, 0x40000002) 23:13:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [], {0x14, 0x10}}, 0x28}}, 0x0) 23:13:51 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r1, &(0x7f0000000680)=""/156, 0x9c) 23:13:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc, 0x16, "984ff6bb2479f9ae5bd9c0e381cdd4d6a6d2d0d04a63dabc2d5940de2953871826856a34928ad722f40017c49277466039d8f8948a8a8260bf84234329f385e0", "62c077b2dff600cc02a43b2e52498b665c0f96bb25d70e7bcb2a0358500e1ea087d2ae5000b9770b60bce4d7d3ba015f2d2d9e42e7c026669eab374763f9044e", "3a707950601ba029b39ae94d7875f8098f7e1ce0710114f33b9ed8c7281209fe", [0x4, 0x8]}) 23:13:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000005c0)={0x5c, 0x12, 0x203, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "0008c872e1d55d8a0a"}]}, 0x5c}}, 0x0) 23:13:51 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x6010000}, 0x6000}], 0x400000000000107, 0x0) 23:13:51 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000001c0)={0x0}) 23:13:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) 23:13:51 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 23:13:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) 23:13:51 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000380)={@remote, @multicast, @void, {@ipv4={0x8906, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast2}}}}}, 0x0) 23:13:51 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) 23:13:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) 23:13:52 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r1, &(0x7f0000000680)=""/156, 0x9c) 23:13:52 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x6010000}, 0x6000}], 0x400000000000107, 0x0) 23:13:52 executing program 2: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 23:13:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x1, 0x0, 0x0}]}) 23:13:52 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 23:13:53 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x7006, 0x0) 23:13:53 executing program 5: select(0x40, &(0x7f0000002240), 0xffffffffffffffff, 0x0, 0x0) 23:13:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}]}], {0x14, 0x10}}, 0x64}}, 0x0) 23:13:53 executing program 3: r0 = socket(0x11, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fd9000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:13:53 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:13:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:13:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}]}], {0x14, 0x10}}, 0x64}}, 0x0) 23:13:53 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r1, &(0x7f0000000680)=""/156, 0x9c) 23:13:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}]}], {0x14, 0x10}}, 0x64}}, 0x0) 23:13:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 23:13:54 executing program 2: socketpair(0x2, 0x6, 0x0, &(0x7f00000004c0)) 23:13:54 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x7004, 0x0) 23:13:54 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fgetxattr(r0, &(0x7f0000000100)=@random={'system.', '+\x00'}, &(0x7f0000000200)=""/131, 0xffffffffffffffc0) 23:13:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10}}, 0x68}}, 0x0) 23:13:54 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fgetxattr(r0, &(0x7f0000000100)=@random={'system.', '+\x00'}, &(0x7f0000000200)=""/131, 0xffffffffffffffc0) 23:13:54 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r3 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x9, 0x401, 0x2, 0x2, 0x40, 0x400, 0xc0ab, 0x2}, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x7fffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) setrlimit(0x7, &(0x7f0000000300)={0x3ff, 0x1}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) 23:13:54 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8406}], 0x1, 0x0, 0x0, 0x0) 23:13:54 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, &(0x7f0000000380)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "381c169e", "e4681bef"}}, 0x0}, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 23:13:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10}}, 0x68}}, 0x0) 23:13:55 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r1, &(0x7f0000000680)=""/156, 0x9c) 23:13:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fgetxattr(r0, &(0x7f0000000100)=@random={'system.', '+\x00'}, &(0x7f0000000200)=""/131, 0xffffffffffffffc0) 23:13:55 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 23:13:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10}}, 0x68}}, 0x0) [ 434.346770][ T7193] loop5: detected capacity change from 0 to 4096 23:13:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fgetxattr(r0, &(0x7f0000000100)=@random={'system.', '+\x00'}, &(0x7f0000000200)=""/131, 0xffffffffffffffc0) [ 434.443882][ T3688] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 434.483214][ T7193] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. 23:13:55 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0x4004af61, 0x0) [ 434.727141][ T3688] usb 3-1: Using ep0 maxpacket: 16 23:13:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 434.854279][ T3688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.870627][ T3688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.881431][ T3688] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 434.891551][ T3688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.975181][ T7187] not chained 270000 origins [ 434.980816][ T7187] CPU: 1 PID: 7187 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 434.993538][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.007126][ T7187] Call Trace: [ 435.010879][ T7187] [ 435.014093][ T7187] dump_stack_lvl+0x1c8/0x256 [ 435.019103][ T7187] dump_stack+0x1a/0x1c [ 435.023398][ T7187] kmsan_internal_chain_origin+0x78/0x120 [ 435.029457][ T7187] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 435.036133][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 435.042312][ T7187] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 435.050399][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 435.056384][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 435.062362][ T7187] ? __get_compat_msghdr+0x5b/0x750 [ 435.067808][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 435.074586][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 435.080785][ T7187] ? should_fail+0x3f/0x7e0 [ 435.085360][ T7187] ? __stack_depot_save+0x21/0x4b0 [ 435.090555][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 435.096089][ T7187] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 435.102482][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 435.107825][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 435.114081][ T7187] __msan_chain_origin+0xbd/0x140 [ 435.119182][ T7187] __get_compat_msghdr+0x514/0x750 [ 435.124771][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 435.129690][ T7187] ? ___sys_recvmsg+0xa9/0x870 [ 435.134511][ T7187] ? do_recvmmsg+0x63a/0x10a0 [ 435.139254][ T7187] ___sys_recvmsg+0x19d/0x870 [ 435.144215][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 435.154086][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 435.159960][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 435.165234][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 435.171831][ T7187] do_recvmmsg+0x63a/0x10a0 [ 435.176412][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 435.181611][ T7187] ? __sys_recvmmsg+0x52/0x450 [ 435.186798][ T7187] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.193358][ T7187] __sys_recvmmsg+0x113/0x450 [ 435.198177][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 435.203708][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.210376][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 435.215712][ T7187] ? exit_to_user_mode_prepare+0x119/0x220 [ 435.221765][ T7187] do_fast_syscall_32+0x33/0x70 [ 435.227354][ T7187] do_SYSENTER_32+0x1b/0x20 [ 435.232872][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 435.239352][ T7187] RIP: 0023:0xf7faf549 [ 435.243632][ T7187] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 435.265384][ T7187] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 435.274292][ T7187] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 435.282407][ T7187] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 435.290499][ T7187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 435.298494][ T7187] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 435.306746][ T7187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.315194][ T7187] [ 435.324276][ T7187] Uninit was stored to memory at: [ 435.329546][ T7187] __get_compat_msghdr+0x514/0x750 [ 435.336042][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 435.341070][ T7187] ___sys_recvmsg+0x19d/0x870 [ 435.346070][ T7187] do_recvmmsg+0x63a/0x10a0 [ 435.350642][ T7187] __sys_recvmmsg+0x113/0x450 [ 435.355498][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.362188][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 435.367833][ T7187] do_fast_syscall_32+0x33/0x70 [ 435.372775][ T7187] do_SYSENTER_32+0x1b/0x20 [ 435.379115][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 435.385588][ T7187] [ 435.387989][ T7187] Uninit was stored to memory at: [ 435.393314][ T7187] __get_compat_msghdr+0x514/0x750 [ 435.399070][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 435.404266][ T7187] ___sys_recvmsg+0x19d/0x870 [ 435.409030][ T7187] do_recvmmsg+0x63a/0x10a0 [ 435.413707][ T7187] __sys_recvmmsg+0x113/0x450 [ 435.418465][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.425507][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 435.430611][ T7187] do_fast_syscall_32+0x33/0x70 [ 435.435983][ T7187] do_SYSENTER_32+0x1b/0x20 [ 435.440552][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 435.447030][ T7187] [ 435.449515][ T7187] Uninit was stored to memory at: [ 435.454718][ T7187] __get_compat_msghdr+0x514/0x750 [ 435.459990][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 435.464978][ T7187] ___sys_recvmsg+0x19d/0x870 [ 435.469731][ T7187] do_recvmmsg+0x63a/0x10a0 23:13:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) [ 435.474427][ T7187] __sys_recvmmsg+0x113/0x450 [ 435.479524][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.486159][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 435.491960][ T7187] do_fast_syscall_32+0x33/0x70 [ 435.498997][ T7187] do_SYSENTER_32+0x1b/0x20 [ 435.504176][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 435.511331][ T7187] [ 435.513784][ T7187] Uninit was stored to memory at: [ 435.518933][ T7187] __get_compat_msghdr+0x514/0x750 [ 435.524568][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 435.529497][ T7187] ___sys_recvmsg+0x19d/0x870 [ 435.534320][ T7187] do_recvmmsg+0x63a/0x10a0 [ 435.538999][ T7187] __sys_recvmmsg+0x113/0x450 [ 435.543937][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.550264][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 435.555459][ T7187] do_fast_syscall_32+0x33/0x70 [ 435.560997][ T7187] do_SYSENTER_32+0x1b/0x20 [ 435.565783][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 435.572279][ T7187] [ 435.574721][ T7187] Uninit was stored to memory at: [ 435.579827][ T7187] __get_compat_msghdr+0x514/0x750 [ 435.585073][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 435.590010][ T7187] ___sys_recvmsg+0x19d/0x870 [ 435.594954][ T7187] do_recvmmsg+0x63a/0x10a0 [ 435.599546][ T7187] __sys_recvmmsg+0x113/0x450 [ 435.604356][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.611277][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 435.616536][ T7187] do_fast_syscall_32+0x33/0x70 [ 435.621601][ T7187] do_SYSENTER_32+0x1b/0x20 [ 435.626245][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 435.632637][ T7187] [ 435.635120][ T7187] Uninit was stored to memory at: [ 435.640807][ T7187] __get_compat_msghdr+0x514/0x750 [ 435.646114][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 435.651029][ T7187] ___sys_recvmsg+0x19d/0x870 [ 435.656010][ T7187] do_recvmmsg+0x63a/0x10a0 [ 435.660690][ T7187] __sys_recvmmsg+0x113/0x450 [ 435.665774][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.672095][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 435.677343][ T7187] do_fast_syscall_32+0x33/0x70 [ 435.682249][ T7187] do_SYSENTER_32+0x1b/0x20 [ 435.686889][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 435.693298][ T7187] [ 435.695858][ T7187] Uninit was stored to memory at: [ 435.700958][ T7187] __get_compat_msghdr+0x514/0x750 [ 435.706309][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 435.711501][ T7187] ___sys_recvmsg+0x19d/0x870 [ 435.716565][ T7187] do_recvmmsg+0x63a/0x10a0 [ 435.721568][ T7187] __sys_recvmmsg+0x113/0x450 [ 435.726451][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 435.732765][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 435.738005][ T7187] do_fast_syscall_32+0x33/0x70 [ 435.742939][ T7187] do_SYSENTER_32+0x1b/0x20 [ 435.747673][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 435.754163][ T7187] [ 435.756678][ T7187] Local variable msg_sys created at: [ 435.762002][ T7187] do_recvmmsg+0x5f/0x10a0 [ 435.766636][ T7187] __sys_recvmmsg+0x113/0x450 [ 435.814387][ T3688] usb 3-1: config 0 descriptor?? [ 436.276362][ T7189] UDC core: couldn't find an available UDC or it's busy: -16 [ 436.284485][ T7189] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 436.326124][ T7189] UDC core: couldn't find an available UDC or it's busy: -16 [ 436.334250][ T7189] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 436.436470][ T3688] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0001/input/input20 [ 436.520149][ T3688] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0001/input/input21 [ 436.557825][ T7187] not chained 280000 origins [ 436.562762][ T7187] CPU: 1 PID: 7187 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 436.572981][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.583592][ T7187] Call Trace: [ 436.586987][ T7187] [ 436.589949][ T7187] dump_stack_lvl+0x1c8/0x256 [ 436.594775][ T7187] dump_stack+0x1a/0x1c [ 436.599356][ T7187] kmsan_internal_chain_origin+0x78/0x120 [ 436.605412][ T7187] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 436.612264][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 436.617851][ T7187] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 436.624364][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 436.629996][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 436.635895][ T7187] ? __get_compat_msghdr+0x5b/0x750 [ 436.641155][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 436.647112][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 436.653063][ T7187] ? should_fail+0x3f/0x7e0 [ 436.657645][ T7187] ? __stack_depot_save+0x21/0x4b0 [ 436.663925][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 436.669503][ T7187] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 436.676375][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 436.682350][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 436.688428][ T7187] __msan_chain_origin+0xbd/0x140 [ 436.693562][ T7187] __get_compat_msghdr+0x514/0x750 [ 436.699554][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 436.704481][ T7187] ? ___sys_recvmsg+0xa9/0x870 [ 436.709602][ T7187] ? do_recvmmsg+0x63a/0x10a0 [ 436.714349][ T7187] ___sys_recvmsg+0x19d/0x870 [ 436.720067][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 436.725449][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 436.731428][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 436.736803][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 436.742857][ T7187] do_recvmmsg+0x63a/0x10a0 [ 436.747495][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 436.752710][ T7187] ? __sys_recvmmsg+0x52/0x450 [ 436.757660][ T7187] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 436.764162][ T7187] __sys_recvmmsg+0x113/0x450 [ 436.768920][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 436.774101][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 436.781419][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 436.786513][ T7187] ? exit_to_user_mode_prepare+0x119/0x220 [ 436.792681][ T7187] do_fast_syscall_32+0x33/0x70 [ 436.798655][ T7187] do_SYSENTER_32+0x1b/0x20 [ 436.803365][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 436.809946][ T7187] RIP: 0023:0xf7faf549 [ 436.814054][ T7187] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 436.835491][ T7187] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 436.844356][ T7187] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 436.853521][ T7187] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 436.861774][ T7187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 436.869798][ T7187] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 436.878548][ T7187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 436.887401][ T7187] [ 436.894787][ T7187] Uninit was stored to memory at: [ 436.900096][ T7187] __get_compat_msghdr+0x514/0x750 [ 436.906241][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 436.912114][ T7187] ___sys_recvmsg+0x19d/0x870 [ 436.917170][ T7187] do_recvmmsg+0x63a/0x10a0 [ 436.921970][ T7187] __sys_recvmmsg+0x113/0x450 [ 436.927307][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 436.934000][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 436.939101][ T7187] do_fast_syscall_32+0x33/0x70 [ 436.944112][ T7187] do_SYSENTER_32+0x1b/0x20 [ 436.948892][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 436.956978][ T7187] [ 436.959363][ T7187] Uninit was stored to memory at: [ 436.964892][ T7187] __get_compat_msghdr+0x514/0x750 [ 436.970435][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 436.975878][ T7187] ___sys_recvmsg+0x19d/0x870 [ 436.981690][ T7187] do_recvmmsg+0x63a/0x10a0 [ 436.986810][ T7187] __sys_recvmmsg+0x113/0x450 [ 436.991868][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 436.999217][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 437.004956][ T7187] do_fast_syscall_32+0x33/0x70 [ 437.010309][ T7187] do_SYSENTER_32+0x1b/0x20 [ 437.015188][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 437.021758][ T7187] [ 437.024241][ T7187] Uninit was stored to memory at: [ 437.029465][ T7187] __get_compat_msghdr+0x514/0x750 [ 437.036076][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 437.041272][ T7187] ___sys_recvmsg+0x19d/0x870 [ 437.046804][ T7187] do_recvmmsg+0x63a/0x10a0 [ 437.051470][ T7187] __sys_recvmmsg+0x113/0x450 [ 437.057024][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 437.063693][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 437.069266][ T7187] do_fast_syscall_32+0x33/0x70 [ 437.076462][ T7187] do_SYSENTER_32+0x1b/0x20 [ 437.081828][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 437.088674][ T7187] [ 437.091830][ T7187] Uninit was stored to memory at: [ 437.097185][ T7187] __get_compat_msghdr+0x514/0x750 [ 437.102381][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 437.107470][ T7187] ___sys_recvmsg+0x19d/0x870 [ 437.112876][ T7187] do_recvmmsg+0x63a/0x10a0 [ 437.118097][ T7187] __sys_recvmmsg+0x113/0x450 [ 437.123446][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 437.129915][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 437.135112][ T7187] do_fast_syscall_32+0x33/0x70 [ 437.140224][ T7187] do_SYSENTER_32+0x1b/0x20 [ 437.145523][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 437.152090][ T7187] [ 437.154599][ T7187] Uninit was stored to memory at: [ 437.159733][ T7187] __get_compat_msghdr+0x514/0x750 [ 437.165109][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 437.170126][ T7187] ___sys_recvmsg+0x19d/0x870 [ 437.175110][ T7187] do_recvmmsg+0x63a/0x10a0 [ 437.179761][ T7187] __sys_recvmmsg+0x113/0x450 [ 437.184938][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 437.191256][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 437.197212][ T7187] do_fast_syscall_32+0x33/0x70 [ 437.202133][ T7187] do_SYSENTER_32+0x1b/0x20 [ 437.206860][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 437.213510][ T7187] [ 437.216826][ T7187] Uninit was stored to memory at: [ 437.222069][ T7187] __get_compat_msghdr+0x514/0x750 [ 437.227583][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 437.232773][ T7187] ___sys_recvmsg+0x19d/0x870 [ 437.238261][ T7187] do_recvmmsg+0x63a/0x10a0 [ 437.243280][ T7187] __sys_recvmmsg+0x113/0x450 [ 437.248201][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 437.254715][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 437.260327][ T7187] do_fast_syscall_32+0x33/0x70 [ 437.265567][ T7187] do_SYSENTER_32+0x1b/0x20 [ 437.270214][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 437.276749][ T7187] [ 437.279183][ T7187] Uninit was stored to memory at: [ 437.284474][ T7187] __get_compat_msghdr+0x514/0x750 [ 437.289752][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 437.294867][ T7187] ___sys_recvmsg+0x19d/0x870 [ 437.299602][ T7187] do_recvmmsg+0x63a/0x10a0 [ 437.304451][ T7187] __sys_recvmmsg+0x113/0x450 [ 437.309211][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 437.315850][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 437.321136][ T7187] do_fast_syscall_32+0x33/0x70 [ 437.326487][ T7187] do_SYSENTER_32+0x1b/0x20 [ 437.331145][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 437.337744][ T7187] [ 437.340104][ T7187] Local variable msg_sys created at: [ 437.345549][ T7187] do_recvmmsg+0x5f/0x10a0 [ 437.350168][ T7187] __sys_recvmmsg+0x113/0x450 [ 437.428229][ T3688] kye 0003:0458:5019.0001: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 437.447874][ T3688] usb 3-1: USB disconnect, device number 57 [ 437.971256][ T7187] not chained 290000 origins [ 437.977584][ T7187] CPU: 0 PID: 7187 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 437.988466][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.998838][ T7187] Call Trace: [ 438.002595][ T7187] [ 438.005560][ T7187] dump_stack_lvl+0x1c8/0x256 [ 438.010820][ T7187] dump_stack+0x1a/0x1c [ 438.015130][ T7187] kmsan_internal_chain_origin+0x78/0x120 [ 438.021531][ T7187] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 438.027770][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 438.033431][ T7187] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 438.040199][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 438.045643][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 438.051988][ T7187] ? __get_compat_msghdr+0x5b/0x750 [ 438.058692][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 438.064061][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 438.070243][ T7187] ? should_fail+0x3f/0x7e0 [ 438.075145][ T7187] ? __stack_depot_save+0x21/0x4b0 [ 438.080583][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 438.086447][ T7187] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 438.093194][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 438.099079][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 438.105866][ T7187] __msan_chain_origin+0xbd/0x140 [ 438.111069][ T7187] __get_compat_msghdr+0x514/0x750 [ 438.118004][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 438.123457][ T7187] ? ___sys_recvmsg+0xa9/0x870 [ 438.128295][ T7187] ? do_recvmmsg+0x63a/0x10a0 [ 438.133059][ T7187] ___sys_recvmsg+0x19d/0x870 [ 438.138563][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 438.143761][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 438.149827][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 438.155036][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 438.161798][ T7187] do_recvmmsg+0x63a/0x10a0 [ 438.166456][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 438.171645][ T7187] ? __sys_recvmmsg+0x52/0x450 [ 438.176751][ T7187] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.183394][ T7187] __sys_recvmmsg+0x113/0x450 [ 438.188142][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 438.193410][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.200606][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 438.205703][ T7187] ? exit_to_user_mode_prepare+0x119/0x220 [ 438.215073][ T7187] do_fast_syscall_32+0x33/0x70 [ 438.220306][ T7187] do_SYSENTER_32+0x1b/0x20 [ 438.224875][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.231872][ T7187] RIP: 0023:0xf7faf549 [ 438.235976][ T7187] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 438.255825][ T7187] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 438.264580][ T7187] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 438.272770][ T7187] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 438.281671][ T7187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.291117][ T7187] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 438.299226][ T7187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.307843][ T7187] [ 438.321106][ T7187] Uninit was stored to memory at: [ 438.328581][ T7187] __get_compat_msghdr+0x514/0x750 [ 438.334109][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 438.339195][ T7187] ___sys_recvmsg+0x19d/0x870 [ 438.344252][ T7187] do_recvmmsg+0x63a/0x10a0 [ 438.349043][ T7187] __sys_recvmmsg+0x113/0x450 [ 438.356380][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.363120][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 438.369217][ T7187] do_fast_syscall_32+0x33/0x70 [ 438.374523][ T7187] do_SYSENTER_32+0x1b/0x20 [ 438.379083][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.385999][ T7187] [ 438.388334][ T7187] Uninit was stored to memory at: [ 438.393875][ T7187] __get_compat_msghdr+0x514/0x750 [ 438.399214][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 438.404268][ T7187] ___sys_recvmsg+0x19d/0x870 [ 438.409108][ T7187] do_recvmmsg+0x63a/0x10a0 [ 438.413861][ T7187] __sys_recvmmsg+0x113/0x450 [ 438.418611][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.425152][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 438.430768][ T7187] do_fast_syscall_32+0x33/0x70 [ 438.435903][ T7187] do_SYSENTER_32+0x1b/0x20 [ 438.440469][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.447066][ T7187] [ 438.449408][ T7187] Uninit was stored to memory at: [ 438.454607][ T7187] __get_compat_msghdr+0x514/0x750 [ 438.459778][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 438.464920][ T7187] ___sys_recvmsg+0x19d/0x870 [ 438.469647][ T7187] do_recvmmsg+0x63a/0x10a0 [ 438.474378][ T7187] __sys_recvmmsg+0x113/0x450 [ 438.479114][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.485569][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 438.490718][ T7187] do_fast_syscall_32+0x33/0x70 [ 438.496223][ T7187] do_SYSENTER_32+0x1b/0x20 [ 438.501106][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.507958][ T7187] [ 438.512388][ T7187] Uninit was stored to memory at: [ 438.517702][ T7187] __get_compat_msghdr+0x514/0x750 [ 438.522869][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 438.528037][ T7187] ___sys_recvmsg+0x19d/0x870 [ 438.532778][ T7187] do_recvmmsg+0x63a/0x10a0 [ 438.537676][ T7187] __sys_recvmmsg+0x113/0x450 [ 438.542524][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.549422][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 438.554663][ T7187] do_fast_syscall_32+0x33/0x70 [ 438.559758][ T7187] do_SYSENTER_32+0x1b/0x20 [ 438.565023][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.571418][ T7187] [ 438.574177][ T7187] Uninit was stored to memory at: [ 438.579394][ T7187] __get_compat_msghdr+0x514/0x750 [ 438.585318][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 438.590469][ T7187] ___sys_recvmsg+0x19d/0x870 [ 438.596153][ T7187] do_recvmmsg+0x63a/0x10a0 [ 438.601911][ T7187] __sys_recvmmsg+0x113/0x450 [ 438.606766][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.613216][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 438.618500][ T7187] do_fast_syscall_32+0x33/0x70 [ 438.623405][ T7187] do_SYSENTER_32+0x1b/0x20 [ 438.628358][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.634836][ T7187] [ 438.637371][ T7187] Uninit was stored to memory at: [ 438.642577][ T7187] __get_compat_msghdr+0x514/0x750 [ 438.647816][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 438.652704][ T7187] ___sys_recvmsg+0x19d/0x870 [ 438.658011][ T7187] do_recvmmsg+0x63a/0x10a0 [ 438.662729][ T7187] __sys_recvmmsg+0x113/0x450 [ 438.668319][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.675069][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 438.680154][ T7187] do_fast_syscall_32+0x33/0x70 [ 438.685394][ T7187] do_SYSENTER_32+0x1b/0x20 [ 438.689975][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.696520][ T7187] [ 438.698861][ T7187] Uninit was stored to memory at: [ 438.705408][ T7187] __get_compat_msghdr+0x514/0x750 [ 438.710631][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 438.715742][ T7187] ___sys_recvmsg+0x19d/0x870 [ 438.720680][ T7187] do_recvmmsg+0x63a/0x10a0 [ 438.725498][ T7187] __sys_recvmmsg+0x113/0x450 [ 438.730242][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 438.736723][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 438.741803][ T7187] do_fast_syscall_32+0x33/0x70 [ 438.746899][ T7187] do_SYSENTER_32+0x1b/0x20 [ 438.751478][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.758049][ T7187] [ 438.760389][ T7187] Local variable msg_sys created at: [ 438.766239][ T7187] do_recvmmsg+0x5f/0x10a0 [ 438.770952][ T7187] __sys_recvmmsg+0x113/0x450 [ 439.029886][ T7187] not chained 300000 origins [ 439.034848][ T7187] CPU: 1 PID: 7187 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 439.045808][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.057340][ T7187] Call Trace: [ 439.061205][ T7187] [ 439.064193][ T7187] dump_stack_lvl+0x1c8/0x256 [ 439.069038][ T7187] dump_stack+0x1a/0x1c [ 439.073512][ T7187] kmsan_internal_chain_origin+0x78/0x120 [ 439.079302][ T7187] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 439.085955][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 439.091597][ T7187] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 439.098085][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 439.103450][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 439.110336][ T7187] ? __get_compat_msghdr+0x5b/0x750 [ 439.115738][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 439.121877][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 439.128300][ T7187] ? should_fail+0x3f/0x7e0 [ 439.133207][ T7187] ? __stack_depot_save+0x21/0x4b0 [ 439.138903][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 439.144354][ T7187] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 439.151069][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 439.156869][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 439.163097][ T7187] __msan_chain_origin+0xbd/0x140 [ 439.168299][ T7187] __get_compat_msghdr+0x514/0x750 [ 439.174122][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 439.179058][ T7187] ? ___sys_recvmsg+0xa9/0x870 [ 439.184077][ T7187] ? do_recvmmsg+0x63a/0x10a0 [ 439.189276][ T7187] ___sys_recvmsg+0x19d/0x870 [ 439.195926][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 439.204602][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 439.211753][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 439.219828][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 439.226016][ T7187] do_recvmmsg+0x63a/0x10a0 [ 439.230623][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 439.236799][ T7187] ? __sys_recvmmsg+0x52/0x450 [ 439.241769][ T7187] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.248351][ T7187] __sys_recvmmsg+0x113/0x450 [ 439.253318][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 439.258487][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.265081][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 439.270175][ T7187] ? exit_to_user_mode_prepare+0x119/0x220 [ 439.276058][ T7187] do_fast_syscall_32+0x33/0x70 [ 439.281289][ T7187] do_SYSENTER_32+0x1b/0x20 [ 439.285870][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.292269][ T7187] RIP: 0023:0xf7faf549 [ 439.296402][ T7187] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 439.320128][ T7187] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 439.329249][ T7187] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 439.338385][ T7187] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 439.347280][ T7187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.355632][ T7187] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 439.365405][ T7187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.374702][ T7187] [ 439.381020][ T7187] Uninit was stored to memory at: [ 439.387023][ T7187] __get_compat_msghdr+0x514/0x750 [ 439.392658][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 439.398019][ T7187] ___sys_recvmsg+0x19d/0x870 [ 439.403050][ T7187] do_recvmmsg+0x63a/0x10a0 [ 439.412221][ T7187] __sys_recvmmsg+0x113/0x450 [ 439.417364][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.423869][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 439.429169][ T7187] do_fast_syscall_32+0x33/0x70 [ 439.434533][ T7187] do_SYSENTER_32+0x1b/0x20 [ 439.439291][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.446533][ T7187] [ 439.448883][ T7187] Uninit was stored to memory at: [ 439.455611][ T7187] __get_compat_msghdr+0x514/0x750 [ 439.462185][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 439.467532][ T7187] ___sys_recvmsg+0x19d/0x870 [ 439.473520][ T7187] do_recvmmsg+0x63a/0x10a0 [ 439.478851][ T7187] __sys_recvmmsg+0x113/0x450 [ 439.485220][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.493685][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 439.499205][ T7187] do_fast_syscall_32+0x33/0x70 [ 439.505884][ T7187] do_SYSENTER_32+0x1b/0x20 [ 439.510889][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.518657][ T7187] [ 439.521236][ T7187] Uninit was stored to memory at: [ 439.527479][ T7187] __get_compat_msghdr+0x514/0x750 [ 439.534084][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 439.539539][ T7187] ___sys_recvmsg+0x19d/0x870 [ 439.546059][ T7187] do_recvmmsg+0x63a/0x10a0 [ 439.551764][ T7187] __sys_recvmmsg+0x113/0x450 [ 439.557577][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.564889][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 439.571531][ T7187] do_fast_syscall_32+0x33/0x70 [ 439.576705][ T7187] do_SYSENTER_32+0x1b/0x20 [ 439.581825][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.588830][ T7187] [ 439.591454][ T7187] Uninit was stored to memory at: [ 439.596904][ T7187] __get_compat_msghdr+0x514/0x750 [ 439.603071][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 439.608976][ T7187] ___sys_recvmsg+0x19d/0x870 [ 439.614015][ T7187] do_recvmmsg+0x63a/0x10a0 [ 439.619679][ T7187] __sys_recvmmsg+0x113/0x450 [ 439.626148][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.634182][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 439.639309][ T7187] do_fast_syscall_32+0x33/0x70 [ 439.646673][ T7187] do_SYSENTER_32+0x1b/0x20 [ 439.651461][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.658672][ T7187] [ 439.662185][ T7187] Uninit was stored to memory at: [ 439.668877][ T7187] __get_compat_msghdr+0x514/0x750 [ 439.674598][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 439.680864][ T7187] ___sys_recvmsg+0x19d/0x870 [ 439.686035][ T7187] do_recvmmsg+0x63a/0x10a0 [ 439.692253][ T7187] __sys_recvmmsg+0x113/0x450 [ 439.698641][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.705838][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 439.712199][ T7187] do_fast_syscall_32+0x33/0x70 [ 439.718795][ T7187] do_SYSENTER_32+0x1b/0x20 [ 439.723933][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.731781][ T7187] [ 439.735264][ T7187] Uninit was stored to memory at: [ 439.740462][ T7187] __get_compat_msghdr+0x514/0x750 [ 439.746432][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 439.752879][ T7187] ___sys_recvmsg+0x19d/0x870 [ 439.757897][ T7187] do_recvmmsg+0x63a/0x10a0 [ 439.763396][ T7187] __sys_recvmmsg+0x113/0x450 [ 439.768540][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.775991][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 439.781544][ T7187] do_fast_syscall_32+0x33/0x70 [ 439.787008][ T7187] do_SYSENTER_32+0x1b/0x20 [ 439.792221][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.800208][ T7187] [ 439.802738][ T7187] Uninit was stored to memory at: [ 439.808700][ T7187] __get_compat_msghdr+0x514/0x750 [ 439.814100][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 439.819689][ T7187] ___sys_recvmsg+0x19d/0x870 [ 439.824898][ T7187] do_recvmmsg+0x63a/0x10a0 [ 439.829580][ T7187] __sys_recvmmsg+0x113/0x450 [ 439.836247][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 439.845003][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 439.851566][ T7187] do_fast_syscall_32+0x33/0x70 [ 439.857590][ T7187] do_SYSENTER_32+0x1b/0x20 [ 439.863176][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.870344][ T7187] [ 439.872702][ T7187] Local variable msg_sys created at: [ 439.879222][ T7187] do_recvmmsg+0x5f/0x10a0 [ 439.883980][ T7187] __sys_recvmmsg+0x113/0x450 [ 440.060960][ T7187] not chained 310000 origins [ 440.067047][ T7187] CPU: 0 PID: 7187 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 440.077780][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.088660][ T7187] Call Trace: [ 440.092083][ T7187] [ 440.095257][ T7187] dump_stack_lvl+0x1c8/0x256 [ 440.099992][ T7187] dump_stack+0x1a/0x1c [ 440.105575][ T7187] kmsan_internal_chain_origin+0x78/0x120 [ 440.111358][ T7187] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 440.117495][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 440.123007][ T7187] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 440.130524][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 440.136440][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 440.143166][ T7187] ? __get_compat_msghdr+0x5b/0x750 [ 440.148415][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 440.154510][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 440.160713][ T7187] ? should_fail+0x3f/0x7e0 [ 440.165768][ T7187] ? __stack_depot_save+0x21/0x4b0 [ 440.171837][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 440.177067][ T7187] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 440.183439][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 440.188944][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 440.195306][ T7187] __msan_chain_origin+0xbd/0x140 [ 440.201766][ T7187] __get_compat_msghdr+0x514/0x750 [ 440.207492][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 440.212509][ T7187] ? ___sys_recvmsg+0xa9/0x870 [ 440.219529][ T7187] ? do_recvmmsg+0x63a/0x10a0 [ 440.225729][ T7187] ___sys_recvmsg+0x19d/0x870 [ 440.230775][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 440.237709][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 440.244629][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 440.249903][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 440.255917][ T7187] do_recvmmsg+0x63a/0x10a0 [ 440.260803][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 440.266194][ T7187] ? __sys_recvmmsg+0x52/0x450 [ 440.271409][ T7187] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.278767][ T7187] __sys_recvmmsg+0x113/0x450 [ 440.283544][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 440.289156][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.296313][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 440.301683][ T7187] ? exit_to_user_mode_prepare+0x119/0x220 [ 440.308856][ T7187] do_fast_syscall_32+0x33/0x70 [ 440.314422][ T7187] do_SYSENTER_32+0x1b/0x20 [ 440.319074][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.326446][ T7187] RIP: 0023:0xf7faf549 [ 440.330666][ T7187] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 440.352129][ T7187] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 440.360869][ T7187] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 440.368864][ T7187] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 440.377097][ T7187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 440.385377][ T7187] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 440.393549][ T7187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 440.401647][ T7187] [ 440.409260][ T7187] Uninit was stored to memory at: [ 440.415302][ T7187] __get_compat_msghdr+0x514/0x750 [ 440.422155][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 440.427195][ T7187] ___sys_recvmsg+0x19d/0x870 [ 440.431936][ T7187] do_recvmmsg+0x63a/0x10a0 [ 440.436606][ T7187] __sys_recvmmsg+0x113/0x450 [ 440.441346][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.447785][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 440.453507][ T7187] do_fast_syscall_32+0x33/0x70 [ 440.458656][ T7187] do_SYSENTER_32+0x1b/0x20 [ 440.463350][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.469998][ T7187] [ 440.472350][ T7187] Uninit was stored to memory at: [ 440.478248][ T7187] __get_compat_msghdr+0x514/0x750 [ 440.483829][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 440.488770][ T7187] ___sys_recvmsg+0x19d/0x870 [ 440.495984][ T7187] do_recvmmsg+0x63a/0x10a0 [ 440.501172][ T7187] __sys_recvmmsg+0x113/0x450 [ 440.506886][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.513935][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 440.519812][ T7187] do_fast_syscall_32+0x33/0x70 [ 440.525040][ T7187] do_SYSENTER_32+0x1b/0x20 [ 440.529691][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.536361][ T7187] [ 440.539432][ T7187] Uninit was stored to memory at: [ 440.545723][ T7187] __get_compat_msghdr+0x514/0x750 [ 440.551035][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 440.556683][ T7187] ___sys_recvmsg+0x19d/0x870 [ 440.561720][ T7187] do_recvmmsg+0x63a/0x10a0 [ 440.566421][ T7187] __sys_recvmmsg+0x113/0x450 [ 440.571970][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.578994][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 440.584352][ T7187] do_fast_syscall_32+0x33/0x70 [ 440.589474][ T7187] do_SYSENTER_32+0x1b/0x20 [ 440.594194][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.600625][ T7187] [ 440.603314][ T7187] Uninit was stored to memory at: [ 440.608561][ T7187] __get_compat_msghdr+0x514/0x750 [ 440.614178][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 440.619123][ T7187] ___sys_recvmsg+0x19d/0x870 [ 440.624144][ T7187] do_recvmmsg+0x63a/0x10a0 [ 440.628712][ T7187] __sys_recvmmsg+0x113/0x450 [ 440.633560][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.640112][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 440.645420][ T7187] do_fast_syscall_32+0x33/0x70 [ 440.650491][ T7187] do_SYSENTER_32+0x1b/0x20 [ 440.655210][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.661701][ T7187] [ 440.664220][ T7187] Uninit was stored to memory at: [ 440.669314][ T7187] __get_compat_msghdr+0x514/0x750 [ 440.675016][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 440.680101][ T7187] ___sys_recvmsg+0x19d/0x870 [ 440.685189][ T7187] do_recvmmsg+0x63a/0x10a0 [ 440.689770][ T7187] __sys_recvmmsg+0x113/0x450 [ 440.694628][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.700975][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 440.706313][ T7187] do_fast_syscall_32+0x33/0x70 [ 440.711452][ T7187] do_SYSENTER_32+0x1b/0x20 [ 440.716924][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.725509][ T7187] [ 440.727853][ T7187] Uninit was stored to memory at: [ 440.733375][ T7187] __get_compat_msghdr+0x514/0x750 [ 440.739108][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 440.744901][ T7187] ___sys_recvmsg+0x19d/0x870 [ 440.749994][ T7187] do_recvmmsg+0x63a/0x10a0 [ 440.754745][ T7187] __sys_recvmmsg+0x113/0x450 [ 440.759599][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.766197][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 440.771483][ T7187] do_fast_syscall_32+0x33/0x70 [ 440.776600][ T7187] do_SYSENTER_32+0x1b/0x20 [ 440.781369][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.787980][ T7187] [ 440.790322][ T7187] Uninit was stored to memory at: [ 440.795941][ T7187] __get_compat_msghdr+0x514/0x750 [ 440.801229][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 440.806581][ T7187] ___sys_recvmsg+0x19d/0x870 [ 440.811359][ T7187] do_recvmmsg+0x63a/0x10a0 [ 440.816447][ T7187] __sys_recvmmsg+0x113/0x450 [ 440.821411][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 440.828217][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 440.834973][ T7187] do_fast_syscall_32+0x33/0x70 [ 440.840074][ T7187] do_SYSENTER_32+0x1b/0x20 [ 440.845546][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.852006][ T7187] [ 440.854465][ T7187] Local variable msg_sys created at: [ 440.859766][ T7187] do_recvmmsg+0x5f/0x10a0 [ 440.864520][ T7187] __sys_recvmmsg+0x113/0x450 [ 441.091984][ T7187] not chained 320000 origins [ 441.097024][ T7187] CPU: 1 PID: 7187 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 441.107175][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.118099][ T7187] Call Trace: [ 441.121412][ T7187] [ 441.124523][ T7187] dump_stack_lvl+0x1c8/0x256 [ 441.129679][ T7187] dump_stack+0x1a/0x1c [ 441.134008][ T7187] kmsan_internal_chain_origin+0x78/0x120 [ 441.140086][ T7187] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 441.146411][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 441.151710][ T7187] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 441.158160][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 441.164115][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 441.170291][ T7187] ? __get_compat_msghdr+0x5b/0x750 [ 441.175795][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 441.180994][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 441.186982][ T7187] ? should_fail+0x3f/0x7e0 [ 441.191646][ T7187] ? __stack_depot_save+0x21/0x4b0 [ 441.197130][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 441.203214][ T7187] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 441.209820][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 441.215105][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 441.221003][ T7187] __msan_chain_origin+0xbd/0x140 [ 441.226658][ T7187] __get_compat_msghdr+0x514/0x750 [ 441.232870][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 441.237885][ T7187] ? ___sys_recvmsg+0xa9/0x870 [ 441.242719][ T7187] ? do_recvmmsg+0x63a/0x10a0 [ 441.247686][ T7187] ___sys_recvmsg+0x19d/0x870 [ 441.253024][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 441.258194][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 441.264241][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 441.270634][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 441.277202][ T7187] do_recvmmsg+0x63a/0x10a0 [ 441.284507][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 441.289897][ T7187] ? __sys_recvmmsg+0x52/0x450 [ 441.294895][ T7187] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.301621][ T7187] __sys_recvmmsg+0x113/0x450 [ 441.306351][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 441.311983][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.318489][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 441.323580][ T7187] ? exit_to_user_mode_prepare+0x119/0x220 [ 441.329718][ T7187] do_fast_syscall_32+0x33/0x70 [ 441.334604][ T7187] do_SYSENTER_32+0x1b/0x20 [ 441.339150][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.345529][ T7187] RIP: 0023:0xf7faf549 [ 441.349729][ T7187] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 441.370371][ T7187] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 441.378835][ T7187] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 441.387348][ T7187] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 441.395631][ T7187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 441.404877][ T7187] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 441.412994][ T7187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.421115][ T7187] [ 441.427415][ T7187] Uninit was stored to memory at: [ 441.432536][ T7187] __get_compat_msghdr+0x514/0x750 [ 441.438307][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 441.443245][ T7187] ___sys_recvmsg+0x19d/0x870 [ 441.448589][ T7187] do_recvmmsg+0x63a/0x10a0 [ 441.454199][ T7187] __sys_recvmmsg+0x113/0x450 [ 441.459201][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.465890][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 441.470980][ T7187] do_fast_syscall_32+0x33/0x70 [ 441.476254][ T7187] do_SYSENTER_32+0x1b/0x20 [ 441.480811][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.487805][ T7187] [ 441.490322][ T7187] Uninit was stored to memory at: [ 441.495840][ T7187] __get_compat_msghdr+0x514/0x750 [ 441.501579][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 441.506780][ T7187] ___sys_recvmsg+0x19d/0x870 [ 441.512272][ T7187] do_recvmmsg+0x63a/0x10a0 [ 441.517515][ T7187] __sys_recvmmsg+0x113/0x450 [ 441.522365][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.529207][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 441.534385][ T7187] do_fast_syscall_32+0x33/0x70 [ 441.539374][ T7187] do_SYSENTER_32+0x1b/0x20 [ 441.544085][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.550724][ T7187] [ 441.553438][ T7187] Uninit was stored to memory at: [ 441.558801][ T7187] __get_compat_msghdr+0x514/0x750 [ 441.564163][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 441.569230][ T7187] ___sys_recvmsg+0x19d/0x870 [ 441.574553][ T7187] do_recvmmsg+0x63a/0x10a0 [ 441.579120][ T7187] __sys_recvmmsg+0x113/0x450 [ 441.584207][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.590711][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 441.596064][ T7187] do_fast_syscall_32+0x33/0x70 [ 441.601197][ T7187] do_SYSENTER_32+0x1b/0x20 [ 441.605938][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.612875][ T7187] [ 441.615356][ T7187] Uninit was stored to memory at: [ 441.620547][ T7187] __get_compat_msghdr+0x514/0x750 [ 441.625872][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 441.630784][ T7187] ___sys_recvmsg+0x19d/0x870 [ 441.636464][ T7187] do_recvmmsg+0x63a/0x10a0 [ 441.641048][ T7187] __sys_recvmmsg+0x113/0x450 [ 441.646345][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.652745][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 441.658036][ T7187] do_fast_syscall_32+0x33/0x70 [ 441.663020][ T7187] do_SYSENTER_32+0x1b/0x20 [ 441.667731][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.674201][ T7187] [ 441.676538][ T7187] Uninit was stored to memory at: [ 441.681674][ T7187] __get_compat_msghdr+0x514/0x750 [ 441.686965][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 441.692005][ T7187] ___sys_recvmsg+0x19d/0x870 [ 441.696938][ T7187] do_recvmmsg+0x63a/0x10a0 [ 441.701789][ T7187] __sys_recvmmsg+0x113/0x450 [ 441.706847][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.713188][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 441.719438][ T7187] do_fast_syscall_32+0x33/0x70 [ 441.724627][ T7187] do_SYSENTER_32+0x1b/0x20 [ 441.729624][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.736479][ T7187] [ 441.738840][ T7187] Uninit was stored to memory at: [ 441.744069][ T7187] __get_compat_msghdr+0x514/0x750 [ 441.749544][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 441.754593][ T7187] ___sys_recvmsg+0x19d/0x870 [ 441.759609][ T7187] do_recvmmsg+0x63a/0x10a0 [ 441.764427][ T7187] __sys_recvmmsg+0x113/0x450 [ 441.769257][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.775932][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 441.781101][ T7187] do_fast_syscall_32+0x33/0x70 [ 441.786127][ T7187] do_SYSENTER_32+0x1b/0x20 [ 441.790684][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.797209][ T7187] [ 441.799553][ T7187] Uninit was stored to memory at: [ 441.805036][ T7187] __get_compat_msghdr+0x514/0x750 [ 441.810317][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 441.815421][ T7187] ___sys_recvmsg+0x19d/0x870 [ 441.820247][ T7187] do_recvmmsg+0x63a/0x10a0 [ 441.824921][ T7187] __sys_recvmmsg+0x113/0x450 [ 441.829649][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 441.836106][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 441.841189][ T7187] do_fast_syscall_32+0x33/0x70 [ 441.846308][ T7187] do_SYSENTER_32+0x1b/0x20 [ 441.850853][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.857883][ T7187] [ 441.860489][ T7187] Local variable msg_sys created at: [ 441.866163][ T7187] do_recvmmsg+0x5f/0x10a0 [ 441.870743][ T7187] __sys_recvmmsg+0x113/0x450 [ 442.061527][ T7187] not chained 330000 origins [ 442.066563][ T7187] CPU: 1 PID: 7187 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 442.077616][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.087911][ T7187] Call Trace: [ 442.092500][ T7187] [ 442.095464][ T7187] dump_stack_lvl+0x1c8/0x256 [ 442.102225][ T7187] dump_stack+0x1a/0x1c [ 442.106690][ T7187] kmsan_internal_chain_origin+0x78/0x120 [ 442.112464][ T7187] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 442.119386][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 442.124668][ T7187] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 442.131218][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 442.136605][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 442.143718][ T7187] ? __get_compat_msghdr+0x5b/0x750 [ 442.149088][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 442.155436][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 442.161329][ T7187] ? should_fail+0x3f/0x7e0 [ 442.166128][ T7187] ? __stack_depot_save+0x21/0x4b0 [ 442.171337][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 442.176520][ T7187] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 442.183193][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 442.188647][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 442.194774][ T7187] __msan_chain_origin+0xbd/0x140 [ 442.200264][ T7187] __get_compat_msghdr+0x514/0x750 [ 442.205758][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 442.210800][ T7187] ? ___sys_recvmsg+0xa9/0x870 [ 442.216545][ T7187] ? do_recvmmsg+0x63a/0x10a0 [ 442.221327][ T7187] ___sys_recvmsg+0x19d/0x870 [ 442.226109][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 442.231832][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 442.237891][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 442.243349][ T7187] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 442.249482][ T7187] do_recvmmsg+0x63a/0x10a0 [ 442.254295][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 442.259486][ T7187] ? __sys_recvmmsg+0x52/0x450 [ 442.264970][ T7187] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.271982][ T7187] __sys_recvmmsg+0x113/0x450 [ 442.276726][ T7187] ? kmsan_get_metadata+0x33/0x220 [ 442.282588][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.289202][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 442.294643][ T7187] ? exit_to_user_mode_prepare+0x119/0x220 [ 442.303619][ T7187] do_fast_syscall_32+0x33/0x70 [ 442.309439][ T7187] do_SYSENTER_32+0x1b/0x20 [ 442.314001][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.320403][ T7187] RIP: 0023:0xf7faf549 [ 442.324611][ T7187] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 442.356404][ T7187] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 442.366173][ T7187] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 442.375549][ T7187] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 442.384462][ T7187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.393726][ T7187] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 442.402580][ T7187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.412327][ T7187] [ 442.418691][ T7187] Uninit was stored to memory at: [ 442.424549][ T7187] __get_compat_msghdr+0x514/0x750 [ 442.431425][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 442.437240][ T7187] ___sys_recvmsg+0x19d/0x870 [ 442.442917][ T7187] do_recvmmsg+0x63a/0x10a0 [ 442.448286][ T7187] __sys_recvmmsg+0x113/0x450 [ 442.454531][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.461483][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 442.467769][ T7187] do_fast_syscall_32+0x33/0x70 [ 442.473853][ T7187] do_SYSENTER_32+0x1b/0x20 [ 442.478465][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.486265][ T7187] [ 442.488624][ T7187] Uninit was stored to memory at: [ 442.495819][ T7187] __get_compat_msghdr+0x514/0x750 [ 442.501832][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 442.507170][ T7187] ___sys_recvmsg+0x19d/0x870 [ 442.514099][ T7187] do_recvmmsg+0x63a/0x10a0 [ 442.520328][ T7187] __sys_recvmmsg+0x113/0x450 [ 442.525637][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.532134][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 442.537997][ T7187] do_fast_syscall_32+0x33/0x70 [ 442.543335][ T7187] do_SYSENTER_32+0x1b/0x20 [ 442.549418][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.556821][ T7187] [ 442.559322][ T7187] Uninit was stored to memory at: [ 442.565152][ T7187] __get_compat_msghdr+0x514/0x750 [ 442.570871][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 442.576906][ T7187] ___sys_recvmsg+0x19d/0x870 [ 442.582325][ T7187] do_recvmmsg+0x63a/0x10a0 [ 442.587131][ T7187] __sys_recvmmsg+0x113/0x450 [ 442.593312][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.600804][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 442.606130][ T7187] do_fast_syscall_32+0x33/0x70 [ 442.611979][ T7187] do_SYSENTER_32+0x1b/0x20 [ 442.617074][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.624405][ T7187] [ 442.626862][ T7187] Uninit was stored to memory at: [ 442.632673][ T7187] __get_compat_msghdr+0x514/0x750 [ 442.639041][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 442.644787][ T7187] ___sys_recvmsg+0x19d/0x870 [ 442.650535][ T7187] do_recvmmsg+0x63a/0x10a0 [ 442.656250][ T7187] __sys_recvmmsg+0x113/0x450 [ 442.661014][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.667957][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 442.673524][ T7187] do_fast_syscall_32+0x33/0x70 [ 442.678593][ T7187] do_SYSENTER_32+0x1b/0x20 [ 442.683394][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.690237][ T7187] [ 442.693458][ T7187] Uninit was stored to memory at: [ 442.699405][ T7187] __get_compat_msghdr+0x514/0x750 [ 442.704787][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 442.710443][ T7187] ___sys_recvmsg+0x19d/0x870 [ 442.715596][ T7187] do_recvmmsg+0x63a/0x10a0 [ 442.720941][ T7187] __sys_recvmmsg+0x113/0x450 [ 442.726043][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.733079][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 442.738965][ T7187] do_fast_syscall_32+0x33/0x70 [ 442.744411][ T7187] do_SYSENTER_32+0x1b/0x20 [ 442.749319][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.756913][ T7187] [ 442.759277][ T7187] Uninit was stored to memory at: [ 442.765215][ T7187] __get_compat_msghdr+0x514/0x750 [ 442.770420][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 442.776135][ T7187] ___sys_recvmsg+0x19d/0x870 [ 442.781322][ T7187] do_recvmmsg+0x63a/0x10a0 [ 442.786595][ T7187] __sys_recvmmsg+0x113/0x450 [ 442.793079][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.800494][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 442.806040][ T7187] do_fast_syscall_32+0x33/0x70 [ 442.812117][ T7187] do_SYSENTER_32+0x1b/0x20 [ 442.817147][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.824959][ T7187] [ 442.828052][ T7187] Uninit was stored to memory at: [ 442.833512][ T7187] __get_compat_msghdr+0x514/0x750 [ 442.839410][ T7187] get_compat_msghdr+0x8c/0x1c0 [ 442.846551][ T7187] ___sys_recvmsg+0x19d/0x870 [ 442.851730][ T7187] do_recvmmsg+0x63a/0x10a0 [ 442.857598][ T7187] __sys_recvmmsg+0x113/0x450 [ 442.863704][ T7187] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 442.870060][ T7187] __do_fast_syscall_32+0x95/0xf0 [ 442.875990][ T7187] do_fast_syscall_32+0x33/0x70 [ 442.881990][ T7187] do_SYSENTER_32+0x1b/0x20 [ 442.887340][ T7187] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.895629][ T7187] [ 442.898065][ T7187] Local variable msg_sys created at: [ 442.903783][ T7187] do_recvmmsg+0x5f/0x10a0 [ 442.909199][ T7187] __sys_recvmmsg+0x113/0x450 23:14:04 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r3 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x9, 0x401, 0x2, 0x2, 0x40, 0x400, 0xc0ab, 0x2}, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x7fffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) setrlimit(0x7, &(0x7f0000000300)={0x3ff, 0x1}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) 23:14:04 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(0xffffffffffffffff, &(0x7f0000000680)=""/156, 0x9c) 23:14:04 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x541b, 0x0) 23:14:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 23:14:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 23:14:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, &(0x7f0000000380)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "381c169e", "e4681bef"}}, 0x0}, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 23:14:04 executing program 4: syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x40}}]}}}]}}]}}, 0x0) 23:14:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 23:14:04 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(0xffffffffffffffff, &(0x7f0000000680)=""/156, 0x9c) 23:14:04 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "381c169e", "e4681bef"}}, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xcd, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 443.384136][ T3688] usb 3-1: new high-speed USB device number 58 using dummy_hcd 23:14:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x70}}, 0x0) [ 443.748896][ T3688] usb 3-1: Using ep0 maxpacket: 16 [ 443.824893][ T124] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 443.895203][ T3688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.906692][ T3688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.917988][ T3688] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 443.927580][ T3688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.937955][ T3542] usb 6-1: new high-speed USB device number 5 using dummy_hcd 23:14:05 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x8f, 0x8001, 0x46, @private0, @mcast1, 0x20, 0x700, 0x5, 0x3d}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(0xffffffffffffffff, &(0x7f0000000680)=""/156, 0x9c) [ 444.091532][ T3688] usb 3-1: config 0 descriptor?? [ 444.194792][ T124] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 444.210508][ T3542] usb 6-1: Using ep0 maxpacket: 16 [ 444.345670][ T3542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.358587][ T3542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.368763][ T3542] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 444.378310][ T3542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.391585][ T124] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.40 [ 444.402682][ T124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.411285][ T124] usb 5-1: Product: syz [ 444.415704][ T124] usb 5-1: Manufacturer: syz [ 444.421626][ T124] usb 5-1: SerialNumber: syz [ 444.491919][ T3542] usb 6-1: config 0 descriptor?? [ 444.552069][ T124] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 444.581376][ T7221] UDC core: couldn't find an available UDC or it's busy: -16 [ 444.590812][ T7221] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 444.665206][ T7221] UDC core: couldn't find an available UDC or it's busy: -16 [ 444.673217][ T7221] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 444.745650][ T124] usb 5-1: USB disconnect, device number 6 [ 444.839867][ T3688] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0002/input/input22 [ 444.930724][ T3688] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0002/input/input23 [ 444.962510][ T7237] UDC core: couldn't find an available UDC or it's busy: -16 [ 444.970942][ T7237] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 445.013077][ T3688] kye 0003:0458:5019.0002: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 445.048345][ T7237] UDC core: couldn't find an available UDC or it's busy: -16 [ 445.051813][ T3688] usb 3-1: USB disconnect, device number 58 [ 445.056989][ T7237] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 445.155008][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5019.0003/input/input24 [ 445.351815][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5019.0003/input/input25 [ 445.458803][ T3542] kye 0003:0458:5019.0003: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.5-1/input0 [ 445.488484][ T7231] not chained 340000 origins [ 445.493317][ T7231] CPU: 1 PID: 7231 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 445.504492][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.515476][ T7231] Call Trace: [ 445.518870][ T7231] [ 445.521851][ T7231] dump_stack_lvl+0x1c8/0x256 [ 445.526961][ T7231] dump_stack+0x1a/0x1c [ 445.531170][ T7231] kmsan_internal_chain_origin+0x78/0x120 [ 445.537618][ T7231] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 445.544127][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 445.549306][ T7231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 445.555947][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 445.561287][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 445.567477][ T7231] ? __get_compat_msghdr+0x5b/0x750 [ 445.572773][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 445.577937][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 445.584463][ T7231] ? should_fail+0x3f/0x7e0 [ 445.589101][ T7231] ? __stack_depot_save+0x21/0x4b0 [ 445.594255][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 445.599523][ T7231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 445.605959][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 445.611852][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 445.618572][ T7231] __msan_chain_origin+0xbd/0x140 [ 445.624121][ T7231] __get_compat_msghdr+0x514/0x750 [ 445.629517][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 445.634855][ T7231] ? ___sys_recvmsg+0xa9/0x870 [ 445.639790][ T7231] ? do_recvmmsg+0x63a/0x10a0 [ 445.645298][ T7231] ___sys_recvmsg+0x19d/0x870 [ 445.650062][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 445.655338][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 445.662134][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 445.667504][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 445.675938][ T7231] do_recvmmsg+0x63a/0x10a0 [ 445.680963][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 445.686371][ T7231] ? __sys_recvmmsg+0x52/0x450 [ 445.691690][ T7231] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 445.699205][ T7231] __sys_recvmmsg+0x113/0x450 [ 445.704086][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 445.709542][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 445.715980][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 445.721945][ T7231] ? exit_to_user_mode_prepare+0x119/0x220 [ 445.729069][ T7231] do_fast_syscall_32+0x33/0x70 [ 445.734106][ T7231] do_SYSENTER_32+0x1b/0x20 [ 445.738648][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.746172][ T7231] RIP: 0023:0xf7faf549 [ 445.750578][ T7231] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 445.771905][ T7231] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 445.780671][ T7231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 445.789095][ T7231] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 445.797694][ T7231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.805880][ T7231] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 445.813948][ T7231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.822934][ T7231] [ 445.830756][ T7231] Uninit was stored to memory at: [ 445.837757][ T7231] __get_compat_msghdr+0x514/0x750 [ 445.843041][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 445.848360][ T7231] ___sys_recvmsg+0x19d/0x870 [ 445.856020][ T7231] do_recvmmsg+0x63a/0x10a0 [ 445.860884][ T7231] __sys_recvmmsg+0x113/0x450 [ 445.866103][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 445.873202][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 445.880766][ T7231] do_fast_syscall_32+0x33/0x70 [ 445.886191][ T7231] do_SYSENTER_32+0x1b/0x20 [ 445.892525][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.899504][ T7231] [ 445.902042][ T7231] Uninit was stored to memory at: [ 445.909754][ T7231] __get_compat_msghdr+0x514/0x750 [ 445.915141][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 445.920104][ T7231] ___sys_recvmsg+0x19d/0x870 [ 445.925753][ T7231] do_recvmmsg+0x63a/0x10a0 [ 445.930437][ T7231] __sys_recvmmsg+0x113/0x450 [ 445.935811][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 445.943369][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 445.949751][ T7231] do_fast_syscall_32+0x33/0x70 [ 445.955204][ T7231] do_SYSENTER_32+0x1b/0x20 [ 445.960555][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.967324][ T7231] [ 445.970447][ T7231] Uninit was stored to memory at: [ 445.975759][ T7231] __get_compat_msghdr+0x514/0x750 [ 445.981086][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 445.986187][ T7231] ___sys_recvmsg+0x19d/0x870 [ 445.991197][ T7231] do_recvmmsg+0x63a/0x10a0 [ 445.996173][ T7231] __sys_recvmmsg+0x113/0x450 [ 446.001118][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 446.007594][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 446.012773][ T7231] do_fast_syscall_32+0x33/0x70 [ 446.018220][ T7231] do_SYSENTER_32+0x1b/0x20 [ 446.022784][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.029344][ T7231] [ 446.031689][ T7231] Uninit was stored to memory at: [ 446.036964][ T7231] __get_compat_msghdr+0x514/0x750 [ 446.042139][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 446.047256][ T7231] ___sys_recvmsg+0x19d/0x870 [ 446.052286][ T7231] do_recvmmsg+0x63a/0x10a0 [ 446.057088][ T7231] __sys_recvmmsg+0x113/0x450 [ 446.061948][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 446.068655][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 446.073833][ T7231] do_fast_syscall_32+0x33/0x70 [ 446.079877][ T7231] do_SYSENTER_32+0x1b/0x20 [ 446.084604][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.091384][ T7231] [ 446.094685][ T7231] Uninit was stored to memory at: [ 446.099974][ T7231] __get_compat_msghdr+0x514/0x750 [ 446.105761][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 446.111413][ T7231] ___sys_recvmsg+0x19d/0x870 [ 446.116524][ T7231] do_recvmmsg+0x63a/0x10a0 [ 446.121111][ T7231] __sys_recvmmsg+0x113/0x450 [ 446.127947][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 446.135892][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 446.143166][ T7231] do_fast_syscall_32+0x33/0x70 [ 446.148385][ T7231] do_SYSENTER_32+0x1b/0x20 [ 446.154598][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.162509][ T7231] [ 446.165290][ T7231] Uninit was stored to memory at: [ 446.170853][ T7231] __get_compat_msghdr+0x514/0x750 [ 446.176484][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 446.181640][ T7231] ___sys_recvmsg+0x19d/0x870 [ 446.189324][ T7231] do_recvmmsg+0x63a/0x10a0 [ 446.194260][ T7231] __sys_recvmmsg+0x113/0x450 [ 446.199095][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 446.206409][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 446.211668][ T7231] do_fast_syscall_32+0x33/0x70 [ 446.217839][ T7231] do_SYSENTER_32+0x1b/0x20 [ 446.222411][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.229369][ T7231] [ 446.232084][ T7231] Uninit was stored to memory at: [ 446.237338][ T7231] __get_compat_msghdr+0x514/0x750 [ 446.242729][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 446.248062][ T7231] ___sys_recvmsg+0x19d/0x870 [ 446.252811][ T7231] do_recvmmsg+0x63a/0x10a0 [ 446.257964][ T7231] __sys_recvmmsg+0x113/0x450 [ 446.263099][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 446.269877][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 446.275408][ T7231] do_fast_syscall_32+0x33/0x70 [ 446.280420][ T7231] do_SYSENTER_32+0x1b/0x20 [ 446.285181][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.292010][ T7231] [ 446.295044][ T7231] Local variable msg_sys created at: [ 446.301227][ T7231] do_recvmmsg+0x5f/0x10a0 [ 446.306689][ T7231] __sys_recvmmsg+0x113/0x450 [ 446.410633][ T3542] usb 6-1: USB disconnect, device number 5 [ 447.340374][ T7231] not chained 350000 origins [ 447.347172][ T7231] CPU: 0 PID: 7231 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 447.359496][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.370654][ T7231] Call Trace: [ 447.374680][ T7231] [ 447.378141][ T7231] dump_stack_lvl+0x1c8/0x256 [ 447.383960][ T7231] dump_stack+0x1a/0x1c [ 447.390141][ T7231] kmsan_internal_chain_origin+0x78/0x120 [ 447.396886][ T7231] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 447.404353][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 447.409924][ T7231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 447.416989][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 447.422754][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 447.430908][ T7231] ? __get_compat_msghdr+0x5b/0x750 [ 447.437127][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 447.443187][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 447.450173][ T7231] ? should_fail+0x3f/0x7e0 [ 447.456218][ T7231] ? __stack_depot_save+0x21/0x4b0 [ 447.462469][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 447.468657][ T7231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 447.477363][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 447.488103][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 447.499685][ T7231] __msan_chain_origin+0xbd/0x140 [ 447.506071][ T7231] __get_compat_msghdr+0x514/0x750 [ 447.513193][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 447.519550][ T7231] ? ___sys_recvmsg+0xa9/0x870 [ 447.526718][ T7231] ? do_recvmmsg+0x63a/0x10a0 [ 447.532618][ T7231] ___sys_recvmsg+0x19d/0x870 [ 447.539404][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 447.545064][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 447.553886][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 447.559384][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 447.567410][ T7231] do_recvmmsg+0x63a/0x10a0 [ 447.576288][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 447.584960][ T7231] ? __sys_recvmmsg+0x52/0x450 [ 447.590268][ T7231] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 447.598589][ T7231] __sys_recvmmsg+0x113/0x450 [ 447.605394][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 447.612819][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 447.620928][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 447.626219][ T7231] ? exit_to_user_mode_prepare+0x119/0x220 [ 447.632980][ T7231] do_fast_syscall_32+0x33/0x70 [ 447.639148][ T7231] do_SYSENTER_32+0x1b/0x20 [ 447.645560][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.652463][ T7231] RIP: 0023:0xf7faf549 [ 447.657899][ T7231] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 447.682027][ T7231] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 447.692023][ T7231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 447.702274][ T7231] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 447.710687][ T7231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 447.719997][ T7231] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 447.729245][ T7231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 447.737976][ T7231] [ 447.743937][ T7231] Uninit was stored to memory at: [ 447.749285][ T7231] __get_compat_msghdr+0x514/0x750 [ 447.754608][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 447.761006][ T7231] ___sys_recvmsg+0x19d/0x870 [ 447.766028][ T7231] do_recvmmsg+0x63a/0x10a0 [ 447.771038][ T7231] __sys_recvmmsg+0x113/0x450 [ 447.775919][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 447.783859][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 447.790200][ T7231] do_fast_syscall_32+0x33/0x70 [ 447.796672][ T7231] do_SYSENTER_32+0x1b/0x20 [ 447.802294][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.809564][ T7231] [ 447.812203][ T7231] Uninit was stored to memory at: [ 447.817506][ T7231] __get_compat_msghdr+0x514/0x750 [ 447.823467][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 447.829454][ T7231] ___sys_recvmsg+0x19d/0x870 [ 447.834915][ T7231] do_recvmmsg+0x63a/0x10a0 [ 447.839749][ T7231] __sys_recvmmsg+0x113/0x450 [ 447.846432][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 447.854072][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 447.860000][ T7231] do_fast_syscall_32+0x33/0x70 [ 447.865216][ T7231] do_SYSENTER_32+0x1b/0x20 [ 447.869981][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.876946][ T7231] [ 447.879394][ T7231] Uninit was stored to memory at: [ 447.884883][ T7231] __get_compat_msghdr+0x514/0x750 [ 447.890064][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 447.895097][ T7231] ___sys_recvmsg+0x19d/0x870 [ 447.899952][ T7231] do_recvmmsg+0x63a/0x10a0 [ 447.904758][ T7231] __sys_recvmmsg+0x113/0x450 [ 447.910299][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 447.917017][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 447.922102][ T7231] do_fast_syscall_32+0x33/0x70 [ 447.927333][ T7231] do_SYSENTER_32+0x1b/0x20 [ 447.931909][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.939778][ T7231] [ 447.942254][ T7231] Uninit was stored to memory at: [ 447.947588][ T7231] __get_compat_msghdr+0x514/0x750 [ 447.953000][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 447.958225][ T7231] ___sys_recvmsg+0x19d/0x870 [ 447.963113][ T7231] do_recvmmsg+0x63a/0x10a0 [ 447.967926][ T7231] __sys_recvmmsg+0x113/0x450 [ 447.973060][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 447.979734][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 447.985075][ T7231] do_fast_syscall_32+0x33/0x70 [ 447.989990][ T7231] do_SYSENTER_32+0x1b/0x20 [ 447.994872][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.001534][ T7231] [ 448.004019][ T7231] Uninit was stored to memory at: [ 448.009247][ T7231] __get_compat_msghdr+0x514/0x750 [ 448.014700][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 448.019696][ T7231] ___sys_recvmsg+0x19d/0x870 [ 448.024914][ T7231] do_recvmmsg+0x63a/0x10a0 [ 448.029675][ T7231] __sys_recvmmsg+0x113/0x450 [ 448.034583][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 448.041179][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 448.046970][ T7231] do_fast_syscall_32+0x33/0x70 [ 448.052558][ T7231] do_SYSENTER_32+0x1b/0x20 [ 448.057333][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.064427][ T7231] [ 448.066772][ T7231] Uninit was stored to memory at: [ 448.072084][ T7231] __get_compat_msghdr+0x514/0x750 [ 448.077674][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 448.083075][ T7231] ___sys_recvmsg+0x19d/0x870 [ 448.088324][ T7231] do_recvmmsg+0x63a/0x10a0 [ 448.092979][ T7231] __sys_recvmmsg+0x113/0x450 [ 448.097897][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 448.104431][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 448.109964][ T7231] do_fast_syscall_32+0x33/0x70 [ 448.115352][ T7231] do_SYSENTER_32+0x1b/0x20 [ 448.120001][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.127151][ T7231] [ 448.129498][ T7231] Uninit was stored to memory at: [ 448.134802][ T7231] __get_compat_msghdr+0x514/0x750 [ 448.140988][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 448.146853][ T7231] ___sys_recvmsg+0x19d/0x870 [ 448.152172][ T7231] do_recvmmsg+0x63a/0x10a0 [ 448.159590][ T7231] __sys_recvmmsg+0x113/0x450 [ 448.166305][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 448.173975][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 448.179093][ T7231] do_fast_syscall_32+0x33/0x70 [ 448.185022][ T7231] do_SYSENTER_32+0x1b/0x20 [ 448.190401][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.197992][ T7231] [ 448.200445][ T7231] Local variable msg_sys created at: [ 448.205946][ T7231] do_recvmmsg+0x5f/0x10a0 [ 448.210824][ T7231] __sys_recvmmsg+0x113/0x450 [ 448.396109][ T7231] not chained 360000 origins [ 448.401859][ T7231] CPU: 1 PID: 7231 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 448.412102][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.422276][ T7231] Call Trace: [ 448.425601][ T7231] [ 448.428731][ T7231] dump_stack_lvl+0x1c8/0x256 [ 448.433474][ T7231] dump_stack+0x1a/0x1c [ 448.437700][ T7231] kmsan_internal_chain_origin+0x78/0x120 [ 448.443612][ T7231] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 448.449923][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 448.455462][ T7231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 448.462010][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 448.467287][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 448.473820][ T7231] ? __get_compat_msghdr+0x5b/0x750 [ 448.479595][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 448.485148][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 448.491958][ T7231] ? should_fail+0x3f/0x7e0 [ 448.496689][ T7231] ? __stack_depot_save+0x21/0x4b0 [ 448.502088][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 448.507523][ T7231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 448.513960][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 448.519628][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 448.525676][ T7231] __msan_chain_origin+0xbd/0x140 [ 448.530948][ T7231] __get_compat_msghdr+0x514/0x750 [ 448.537168][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 448.542286][ T7231] ? ___sys_recvmsg+0xa9/0x870 [ 448.548024][ T7231] ? do_recvmmsg+0x63a/0x10a0 [ 448.553388][ T7231] ___sys_recvmsg+0x19d/0x870 [ 448.558456][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 448.564277][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 448.570555][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 448.575719][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 448.581900][ T7231] do_recvmmsg+0x63a/0x10a0 [ 448.586981][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 448.593031][ T7231] ? __sys_recvmmsg+0x52/0x450 [ 448.597870][ T7231] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 448.604709][ T7231] __sys_recvmmsg+0x113/0x450 [ 448.609475][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 448.614924][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 448.621507][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 448.627111][ T7231] ? exit_to_user_mode_prepare+0x119/0x220 [ 448.633274][ T7231] do_fast_syscall_32+0x33/0x70 [ 448.638489][ T7231] do_SYSENTER_32+0x1b/0x20 [ 448.643392][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.649781][ T7231] RIP: 0023:0xf7faf549 [ 448.654251][ T7231] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 448.674491][ T7231] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 448.683695][ T7231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 448.692111][ T7231] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 448.700338][ T7231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.708337][ T7231] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 448.716737][ T7231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.725610][ T7231] [ 448.741943][ T7231] Uninit was stored to memory at: [ 448.751580][ T7231] __get_compat_msghdr+0x514/0x750 [ 448.757219][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 448.763794][ T7231] ___sys_recvmsg+0x19d/0x870 [ 448.768869][ T7231] do_recvmmsg+0x63a/0x10a0 [ 448.775230][ T7231] __sys_recvmmsg+0x113/0x450 [ 448.780302][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 448.787981][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 448.793488][ T7231] do_fast_syscall_32+0x33/0x70 [ 448.798698][ T7231] do_SYSENTER_32+0x1b/0x20 [ 448.803800][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.810986][ T7231] [ 448.813541][ T7231] Uninit was stored to memory at: [ 448.819258][ T7231] __get_compat_msghdr+0x514/0x750 [ 448.826220][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 448.831535][ T7231] ___sys_recvmsg+0x19d/0x870 [ 448.837756][ T7231] do_recvmmsg+0x63a/0x10a0 [ 448.843835][ T7231] __sys_recvmmsg+0x113/0x450 [ 448.849203][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 448.857058][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 448.864677][ T7231] do_fast_syscall_32+0x33/0x70 [ 448.871360][ T7231] do_SYSENTER_32+0x1b/0x20 [ 448.876655][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.884143][ T7231] [ 448.886763][ T7231] Uninit was stored to memory at: [ 448.892946][ T7231] __get_compat_msghdr+0x514/0x750 [ 448.899324][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 448.904571][ T7231] ___sys_recvmsg+0x19d/0x870 [ 448.910470][ T7231] do_recvmmsg+0x63a/0x10a0 [ 448.916491][ T7231] __sys_recvmmsg+0x113/0x450 [ 448.921706][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 448.928971][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 448.935157][ T7231] do_fast_syscall_32+0x33/0x70 [ 448.940152][ T7231] do_SYSENTER_32+0x1b/0x20 [ 448.945273][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.951842][ T7231] [ 448.954476][ T7231] Uninit was stored to memory at: [ 448.959820][ T7231] __get_compat_msghdr+0x514/0x750 [ 448.966679][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 448.973000][ T7231] ___sys_recvmsg+0x19d/0x870 [ 448.977999][ T7231] do_recvmmsg+0x63a/0x10a0 [ 448.982781][ T7231] __sys_recvmmsg+0x113/0x450 [ 448.989116][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 448.995668][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 449.001099][ T7231] do_fast_syscall_32+0x33/0x70 [ 449.006603][ T7231] do_SYSENTER_32+0x1b/0x20 [ 449.011281][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.018290][ T7231] [ 449.020745][ T7231] Uninit was stored to memory at: [ 449.026743][ T7231] __get_compat_msghdr+0x514/0x750 [ 449.032151][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 449.037442][ T7231] ___sys_recvmsg+0x19d/0x870 [ 449.043214][ T7231] do_recvmmsg+0x63a/0x10a0 [ 449.048071][ T7231] __sys_recvmmsg+0x113/0x450 [ 449.052981][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 449.059669][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 449.064978][ T7231] do_fast_syscall_32+0x33/0x70 [ 449.070089][ T7231] do_SYSENTER_32+0x1b/0x20 [ 449.074919][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.082253][ T7231] [ 449.084846][ T7231] Uninit was stored to memory at: [ 449.090669][ T7231] __get_compat_msghdr+0x514/0x750 [ 449.096544][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 449.101666][ T7231] ___sys_recvmsg+0x19d/0x870 [ 449.106990][ T7231] do_recvmmsg+0x63a/0x10a0 [ 449.111605][ T7231] __sys_recvmmsg+0x113/0x450 [ 449.117801][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 449.124750][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 449.130240][ T7231] do_fast_syscall_32+0x33/0x70 [ 449.136194][ T7231] do_SYSENTER_32+0x1b/0x20 [ 449.141301][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.148441][ T7231] [ 449.150970][ T7231] Uninit was stored to memory at: [ 449.156756][ T7231] __get_compat_msghdr+0x514/0x750 [ 449.163063][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 449.168164][ T7231] ___sys_recvmsg+0x19d/0x870 [ 449.172904][ T7231] do_recvmmsg+0x63a/0x10a0 [ 449.178733][ T7231] __sys_recvmmsg+0x113/0x450 [ 449.183696][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 449.190113][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 449.196432][ T7231] do_fast_syscall_32+0x33/0x70 [ 449.201823][ T7231] do_SYSENTER_32+0x1b/0x20 [ 449.208786][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.215638][ T7231] [ 449.217993][ T7231] Local variable msg_sys created at: [ 449.223962][ T7231] do_recvmmsg+0x5f/0x10a0 [ 449.228644][ T7231] __sys_recvmmsg+0x113/0x450 [ 449.421558][ T7231] not chained 370000 origins [ 449.427980][ T7231] CPU: 1 PID: 7231 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 449.439981][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.452450][ T7231] Call Trace: [ 449.456014][ T7231] [ 449.460578][ T7231] dump_stack_lvl+0x1c8/0x256 [ 449.467261][ T7231] dump_stack+0x1a/0x1c [ 449.472062][ T7231] kmsan_internal_chain_origin+0x78/0x120 [ 449.478801][ T7231] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 449.488084][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 449.494288][ T7231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 449.502904][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 449.510993][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 449.518987][ T7231] ? __get_compat_msghdr+0x5b/0x750 [ 449.527900][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 449.536889][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 449.542917][ T7231] ? should_fail+0x3f/0x7e0 [ 449.548220][ T7231] ? __stack_depot_save+0x21/0x4b0 [ 449.555553][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 449.562845][ T7231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 449.570489][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 449.575855][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 449.582873][ T7231] __msan_chain_origin+0xbd/0x140 [ 449.588695][ T7231] __get_compat_msghdr+0x514/0x750 [ 449.596746][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 449.602331][ T7231] ? ___sys_recvmsg+0xa9/0x870 [ 449.608241][ T7231] ? do_recvmmsg+0x63a/0x10a0 [ 449.615150][ T7231] ___sys_recvmsg+0x19d/0x870 [ 449.620993][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 449.627730][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 449.635123][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 449.643187][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 449.651146][ T7231] do_recvmmsg+0x63a/0x10a0 [ 449.656053][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 449.663029][ T7231] ? __sys_recvmmsg+0x52/0x450 [ 449.668866][ T7231] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 449.675695][ T7231] __sys_recvmmsg+0x113/0x450 [ 449.681865][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 449.688256][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 449.696032][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 449.701360][ T7231] ? exit_to_user_mode_prepare+0x119/0x220 [ 449.708457][ T7231] do_fast_syscall_32+0x33/0x70 [ 449.714133][ T7231] do_SYSENTER_32+0x1b/0x20 [ 449.719131][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.728410][ T7231] RIP: 0023:0xf7faf549 [ 449.734358][ T7231] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 449.762228][ T7231] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 449.772864][ T7231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 449.781821][ T7231] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 449.792877][ T7231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.802062][ T7231] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 449.813495][ T7231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.822646][ T7231] [ 449.828945][ T7231] Uninit was stored to memory at: [ 449.836120][ T7231] __get_compat_msghdr+0x514/0x750 [ 449.842872][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 449.853046][ T7231] ___sys_recvmsg+0x19d/0x870 [ 449.858670][ T7231] do_recvmmsg+0x63a/0x10a0 [ 449.864105][ T7231] __sys_recvmmsg+0x113/0x450 [ 449.870633][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 449.879023][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 449.885795][ T7231] do_fast_syscall_32+0x33/0x70 [ 449.891443][ T7231] do_SYSENTER_32+0x1b/0x20 [ 449.897958][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.905228][ T7231] [ 449.907803][ T7231] Uninit was stored to memory at: [ 449.914515][ T7231] __get_compat_msghdr+0x514/0x750 [ 449.920708][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 449.926593][ T7231] ___sys_recvmsg+0x19d/0x870 [ 449.931784][ T7231] do_recvmmsg+0x63a/0x10a0 [ 449.936517][ T7231] __sys_recvmmsg+0x113/0x450 [ 449.943261][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 449.951867][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 449.958554][ T7231] do_fast_syscall_32+0x33/0x70 [ 449.963975][ T7231] do_SYSENTER_32+0x1b/0x20 [ 449.970976][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.978900][ T7231] [ 449.981255][ T7231] Uninit was stored to memory at: [ 449.986621][ T7231] __get_compat_msghdr+0x514/0x750 [ 449.992034][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 449.998385][ T7231] ___sys_recvmsg+0x19d/0x870 [ 450.004252][ T7231] do_recvmmsg+0x63a/0x10a0 [ 450.009004][ T7231] __sys_recvmmsg+0x113/0x450 [ 450.014664][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 450.021644][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 450.026861][ T7231] do_fast_syscall_32+0x33/0x70 [ 450.032075][ T7231] do_SYSENTER_32+0x1b/0x20 [ 450.036794][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.046717][ T7231] [ 450.049684][ T7231] Uninit was stored to memory at: [ 450.055066][ T7231] __get_compat_msghdr+0x514/0x750 [ 450.061288][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 450.067127][ T7231] ___sys_recvmsg+0x19d/0x870 [ 450.071881][ T7231] do_recvmmsg+0x63a/0x10a0 [ 450.077067][ T7231] __sys_recvmmsg+0x113/0x450 [ 450.081916][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 450.090637][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 450.096977][ T7231] do_fast_syscall_32+0x33/0x70 [ 450.102718][ T7231] do_SYSENTER_32+0x1b/0x20 [ 450.107483][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.114295][ T7231] [ 450.116792][ T7231] Uninit was stored to memory at: [ 450.121922][ T7231] __get_compat_msghdr+0x514/0x750 [ 450.127275][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 450.132641][ T7231] ___sys_recvmsg+0x19d/0x870 [ 450.138046][ T7231] do_recvmmsg+0x63a/0x10a0 [ 450.142999][ T7231] __sys_recvmmsg+0x113/0x450 [ 450.147868][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 450.155077][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 450.161202][ T7231] do_fast_syscall_32+0x33/0x70 [ 450.167051][ T7231] do_SYSENTER_32+0x1b/0x20 [ 450.171744][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.178524][ T7231] [ 450.180872][ T7231] Uninit was stored to memory at: [ 450.186738][ T7231] __get_compat_msghdr+0x514/0x750 [ 450.192901][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 450.198067][ T7231] ___sys_recvmsg+0x19d/0x870 [ 450.203240][ T7231] do_recvmmsg+0x63a/0x10a0 [ 450.207977][ T7231] __sys_recvmmsg+0x113/0x450 [ 450.212724][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 450.220237][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 450.225591][ T7231] do_fast_syscall_32+0x33/0x70 [ 450.230582][ T7231] do_SYSENTER_32+0x1b/0x20 [ 450.235308][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.241979][ T7231] [ 450.244678][ T7231] Uninit was stored to memory at: [ 450.251010][ T7231] __get_compat_msghdr+0x514/0x750 [ 450.257097][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 450.262018][ T7231] ___sys_recvmsg+0x19d/0x870 [ 450.267682][ T7231] do_recvmmsg+0x63a/0x10a0 [ 450.272276][ T7231] __sys_recvmmsg+0x113/0x450 [ 450.278415][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 450.285125][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 450.290238][ T7231] do_fast_syscall_32+0x33/0x70 [ 450.296500][ T7231] do_SYSENTER_32+0x1b/0x20 [ 450.303124][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.309718][ T7231] [ 450.312167][ T7231] Local variable msg_sys created at: [ 450.317814][ T7231] do_recvmmsg+0x5f/0x10a0 [ 450.323292][ T7231] __sys_recvmmsg+0x113/0x450 [ 450.517879][ T7231] not chained 380000 origins [ 450.522745][ T7231] CPU: 1 PID: 7231 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 450.533115][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.543565][ T7231] Call Trace: [ 450.547401][ T7231] [ 450.550441][ T7231] dump_stack_lvl+0x1c8/0x256 [ 450.555771][ T7231] dump_stack+0x1a/0x1c [ 450.560115][ T7231] kmsan_internal_chain_origin+0x78/0x120 [ 450.566500][ T7231] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 450.574810][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 450.580144][ T7231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 450.587240][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 450.593128][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 450.599591][ T7231] ? __get_compat_msghdr+0x5b/0x750 [ 450.605459][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 450.611286][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 450.617420][ T7231] ? should_fail+0x3f/0x7e0 [ 450.622096][ T7231] ? __stack_depot_save+0x21/0x4b0 [ 450.628399][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 450.633559][ T7231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 450.640219][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 450.645877][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 450.653465][ T7231] __msan_chain_origin+0xbd/0x140 [ 450.661567][ T7231] __get_compat_msghdr+0x514/0x750 [ 450.667510][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 450.672802][ T7231] ? ___sys_recvmsg+0xa9/0x870 [ 450.677841][ T7231] ? do_recvmmsg+0x63a/0x10a0 [ 450.684999][ T7231] ___sys_recvmsg+0x19d/0x870 [ 450.692437][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 450.697757][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 450.704233][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 450.710404][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 450.716331][ T7231] do_recvmmsg+0x63a/0x10a0 [ 450.721629][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 450.728146][ T7231] ? __sys_recvmmsg+0x52/0x450 [ 450.733433][ T7231] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 450.740982][ T7231] __sys_recvmmsg+0x113/0x450 [ 450.746161][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 450.753205][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 450.761068][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 450.767838][ T7231] ? exit_to_user_mode_prepare+0x119/0x220 [ 450.774149][ T7231] do_fast_syscall_32+0x33/0x70 [ 450.779080][ T7231] do_SYSENTER_32+0x1b/0x20 [ 450.785257][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.792371][ T7231] RIP: 0023:0xf7faf549 [ 450.796486][ T7231] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 450.817507][ T7231] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 450.828200][ T7231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 450.837327][ T7231] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 450.845483][ T7231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 450.853930][ T7231] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 450.863238][ T7231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.872941][ T7231] [ 450.879594][ T7231] Uninit was stored to memory at: [ 450.887144][ T7231] __get_compat_msghdr+0x514/0x750 [ 450.894548][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 450.900090][ T7231] ___sys_recvmsg+0x19d/0x870 [ 450.905799][ T7231] do_recvmmsg+0x63a/0x10a0 [ 450.912019][ T7231] __sys_recvmmsg+0x113/0x450 [ 450.920524][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 450.930101][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 450.935669][ T7231] do_fast_syscall_32+0x33/0x70 [ 450.940608][ T7231] do_SYSENTER_32+0x1b/0x20 [ 450.947818][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.955891][ T7231] [ 450.958229][ T7231] Uninit was stored to memory at: [ 450.964917][ T7231] __get_compat_msghdr+0x514/0x750 [ 450.971050][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 450.978057][ T7231] ___sys_recvmsg+0x19d/0x870 [ 450.983782][ T7231] do_recvmmsg+0x63a/0x10a0 [ 450.988612][ T7231] __sys_recvmmsg+0x113/0x450 [ 450.993888][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 451.000957][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 451.006385][ T7231] do_fast_syscall_32+0x33/0x70 [ 451.012012][ T7231] do_SYSENTER_32+0x1b/0x20 [ 451.017695][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.024897][ T7231] [ 451.027507][ T7231] Uninit was stored to memory at: [ 451.032592][ T7231] __get_compat_msghdr+0x514/0x750 [ 451.039555][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 451.046086][ T7231] ___sys_recvmsg+0x19d/0x870 [ 451.051646][ T7231] do_recvmmsg+0x63a/0x10a0 [ 451.056603][ T7231] __sys_recvmmsg+0x113/0x450 [ 451.062039][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 451.069316][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 451.075030][ T7231] do_fast_syscall_32+0x33/0x70 [ 451.080212][ T7231] do_SYSENTER_32+0x1b/0x20 [ 451.085038][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.093876][ T7231] [ 451.096228][ T7231] Uninit was stored to memory at: [ 451.101703][ T7231] __get_compat_msghdr+0x514/0x750 [ 451.107915][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 451.113152][ T7231] ___sys_recvmsg+0x19d/0x870 [ 451.118945][ T7231] do_recvmmsg+0x63a/0x10a0 [ 451.123511][ T7231] __sys_recvmmsg+0x113/0x450 [ 451.130732][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 451.138389][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 451.143911][ T7231] do_fast_syscall_32+0x33/0x70 [ 451.149100][ T7231] do_SYSENTER_32+0x1b/0x20 [ 451.155542][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.162606][ T7231] [ 451.165241][ T7231] Uninit was stored to memory at: [ 451.170561][ T7231] __get_compat_msghdr+0x514/0x750 [ 451.176134][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 451.182204][ T7231] ___sys_recvmsg+0x19d/0x870 [ 451.187131][ T7231] do_recvmmsg+0x63a/0x10a0 [ 451.191880][ T7231] __sys_recvmmsg+0x113/0x450 [ 451.196772][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 451.204964][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 451.211356][ T7231] do_fast_syscall_32+0x33/0x70 [ 451.217731][ T7231] do_SYSENTER_32+0x1b/0x20 [ 451.222311][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.229815][ T7231] [ 451.232713][ T7231] Uninit was stored to memory at: [ 451.240016][ T7231] __get_compat_msghdr+0x514/0x750 [ 451.246398][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 451.252007][ T7231] ___sys_recvmsg+0x19d/0x870 [ 451.257404][ T7231] do_recvmmsg+0x63a/0x10a0 [ 451.263369][ T7231] __sys_recvmmsg+0x113/0x450 [ 451.268365][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 451.275209][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 451.280870][ T7231] do_fast_syscall_32+0x33/0x70 [ 451.286451][ T7231] do_SYSENTER_32+0x1b/0x20 [ 451.291579][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.298337][ T7231] [ 451.300943][ T7231] Uninit was stored to memory at: [ 451.306661][ T7231] __get_compat_msghdr+0x514/0x750 [ 451.311851][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 451.318031][ T7231] ___sys_recvmsg+0x19d/0x870 [ 451.323010][ T7231] do_recvmmsg+0x63a/0x10a0 [ 451.328991][ T7231] __sys_recvmmsg+0x113/0x450 [ 451.334756][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 451.341625][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 451.347891][ T7231] do_fast_syscall_32+0x33/0x70 [ 451.353333][ T7231] do_SYSENTER_32+0x1b/0x20 [ 451.358166][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.365481][ T7231] [ 451.367859][ T7231] Local variable msg_sys created at: [ 451.373479][ T7231] do_recvmmsg+0x5f/0x10a0 [ 451.378837][ T7231] __sys_recvmmsg+0x113/0x450 [ 451.568399][ T7231] not chained 390000 origins [ 451.573583][ T7231] CPU: 1 PID: 7231 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 451.583806][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.594725][ T7231] Call Trace: [ 451.598123][ T7231] [ 451.601068][ T7231] dump_stack_lvl+0x1c8/0x256 [ 451.605797][ T7231] dump_stack+0x1a/0x1c [ 451.610357][ T7231] kmsan_internal_chain_origin+0x78/0x120 [ 451.617071][ T7231] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 451.624860][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 451.630061][ T7231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 451.636789][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 451.644124][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 451.650235][ T7231] ? __get_compat_msghdr+0x5b/0x750 [ 451.655706][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 451.662560][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 451.668515][ T7231] ? should_fail+0x3f/0x7e0 [ 451.673918][ T7231] ? __stack_depot_save+0x21/0x4b0 [ 451.680764][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 451.686415][ T7231] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 451.693447][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 451.699237][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 451.706056][ T7231] __msan_chain_origin+0xbd/0x140 [ 451.711387][ T7231] __get_compat_msghdr+0x514/0x750 [ 451.717094][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 451.722775][ T7231] ? ___sys_recvmsg+0xa9/0x870 [ 451.727677][ T7231] ? do_recvmmsg+0x63a/0x10a0 [ 451.733310][ T7231] ___sys_recvmsg+0x19d/0x870 [ 451.738145][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 451.745448][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 451.753194][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 451.760563][ T7231] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 451.767269][ T7231] do_recvmmsg+0x63a/0x10a0 [ 451.772446][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 451.779891][ T7231] ? __sys_recvmmsg+0x52/0x450 [ 451.786016][ T7231] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 451.793322][ T7231] __sys_recvmmsg+0x113/0x450 [ 451.798487][ T7231] ? kmsan_get_metadata+0x33/0x220 [ 451.803792][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 451.812017][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 451.817528][ T7231] ? exit_to_user_mode_prepare+0x119/0x220 [ 451.825435][ T7231] do_fast_syscall_32+0x33/0x70 [ 451.830549][ T7231] do_SYSENTER_32+0x1b/0x20 [ 451.836419][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.843710][ T7231] RIP: 0023:0xf7faf549 [ 451.848073][ T7231] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 451.873669][ T7231] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 451.882347][ T7231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 451.890920][ T7231] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 451.900615][ T7231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.910277][ T7231] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 451.919409][ T7231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.927827][ T7231] [ 451.935075][ T7231] Uninit was stored to memory at: [ 451.940663][ T7231] __get_compat_msghdr+0x514/0x750 [ 451.946617][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 451.952289][ T7231] ___sys_recvmsg+0x19d/0x870 [ 451.957345][ T7231] do_recvmmsg+0x63a/0x10a0 [ 451.963541][ T7231] __sys_recvmmsg+0x113/0x450 [ 451.968953][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 451.975890][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 451.982352][ T7231] do_fast_syscall_32+0x33/0x70 [ 451.988644][ T7231] do_SYSENTER_32+0x1b/0x20 [ 451.993310][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.001080][ T7231] [ 452.003955][ T7231] Uninit was stored to memory at: [ 452.009157][ T7231] __get_compat_msghdr+0x514/0x750 [ 452.015476][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 452.020486][ T7231] ___sys_recvmsg+0x19d/0x870 [ 452.026192][ T7231] do_recvmmsg+0x63a/0x10a0 [ 452.031671][ T7231] __sys_recvmmsg+0x113/0x450 [ 452.036734][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 452.045226][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 452.051063][ T7231] do_fast_syscall_32+0x33/0x70 [ 452.056241][ T7231] do_SYSENTER_32+0x1b/0x20 [ 452.061450][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.068869][ T7231] [ 452.071292][ T7231] Uninit was stored to memory at: [ 452.079522][ T7231] __get_compat_msghdr+0x514/0x750 [ 452.086432][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 452.092124][ T7231] ___sys_recvmsg+0x19d/0x870 [ 452.097476][ T7231] do_recvmmsg+0x63a/0x10a0 [ 452.102135][ T7231] __sys_recvmmsg+0x113/0x450 [ 452.107851][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 452.115764][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 452.121925][ T7231] do_fast_syscall_32+0x33/0x70 [ 452.127106][ T7231] do_SYSENTER_32+0x1b/0x20 [ 452.133304][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.140340][ T7231] [ 452.142682][ T7231] Uninit was stored to memory at: [ 452.150648][ T7231] __get_compat_msghdr+0x514/0x750 [ 452.157432][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 452.163185][ T7231] ___sys_recvmsg+0x19d/0x870 [ 452.168372][ T7231] do_recvmmsg+0x63a/0x10a0 [ 452.173041][ T7231] __sys_recvmmsg+0x113/0x450 [ 452.179423][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 452.187225][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 452.192513][ T7231] do_fast_syscall_32+0x33/0x70 [ 452.197630][ T7231] do_SYSENTER_32+0x1b/0x20 [ 452.203708][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.210283][ T7231] [ 452.215024][ T7231] Uninit was stored to memory at: [ 452.220240][ T7231] __get_compat_msghdr+0x514/0x750 [ 452.226002][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 452.234215][ T7231] ___sys_recvmsg+0x19d/0x870 [ 452.240395][ T7231] do_recvmmsg+0x63a/0x10a0 [ 452.245267][ T7231] __sys_recvmmsg+0x113/0x450 [ 452.250706][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 452.257159][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 452.262400][ T7231] do_fast_syscall_32+0x33/0x70 [ 452.268722][ T7231] do_SYSENTER_32+0x1b/0x20 [ 452.273355][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.280215][ T7231] [ 452.282647][ T7231] Uninit was stored to memory at: [ 452.288699][ T7231] __get_compat_msghdr+0x514/0x750 [ 452.295678][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 452.300766][ T7231] ___sys_recvmsg+0x19d/0x870 [ 452.306081][ T7231] do_recvmmsg+0x63a/0x10a0 [ 452.311614][ T7231] __sys_recvmmsg+0x113/0x450 [ 452.316526][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 452.324450][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 452.331784][ T7231] do_fast_syscall_32+0x33/0x70 [ 452.337815][ T7231] do_SYSENTER_32+0x1b/0x20 [ 452.344616][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.352904][ T7231] [ 452.355574][ T7231] Uninit was stored to memory at: [ 452.361720][ T7231] __get_compat_msghdr+0x514/0x750 [ 452.369035][ T7231] get_compat_msghdr+0x8c/0x1c0 [ 452.376028][ T7231] ___sys_recvmsg+0x19d/0x870 [ 452.380776][ T7231] do_recvmmsg+0x63a/0x10a0 [ 452.386166][ T7231] __sys_recvmmsg+0x113/0x450 [ 452.391671][ T7231] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 452.399529][ T7231] __do_fast_syscall_32+0x95/0xf0 [ 452.406604][ T7231] do_fast_syscall_32+0x33/0x70 [ 452.412126][ T7231] do_SYSENTER_32+0x1b/0x20 [ 452.417454][ T7231] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.426424][ T7231] [ 452.428952][ T7231] Local variable msg_sys created at: [ 452.435568][ T7231] do_recvmmsg+0x5f/0x10a0 [ 452.444637][ T7231] __sys_recvmmsg+0x113/0x450 23:14:13 executing program 3: syz_open_dev$evdev(&(0x7f0000001140), 0x0, 0x101000) 23:14:13 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r0, &(0x7f0000000680)=""/156, 0x9c) 23:14:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x70}}, 0x0) 23:14:13 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)={0x3, 0x0, [{0x10000, 0xe5, &(0x7f0000000040)=""/229}, {0x0, 0x0, 0x0}, {0x1, 0x0, 0x0}]}) 23:14:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, &(0x7f0000000380)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "381c169e", "e4681bef"}}, 0x0}, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 23:14:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x80000008, 0x6, 0x3}]}) 23:14:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x70}}, 0x0) 23:14:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) syz_usb_disconnect(r0) 23:14:14 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r0, &(0x7f0000000680)=""/156, 0x9c) [ 453.044256][ T3544] usb 3-1: new high-speed USB device number 59 using dummy_hcd 23:14:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x80000008, 0x6, 0x3}]}) 23:14:14 executing program 3: syz_usb_connect(0x5, 0x58, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x50, 0x3, 0x47, 0x8, 0x2019, 0x4901, 0x20f6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x0, 0x0, 0xc0, 0x3f, [{{0x9, 0x4, 0x36, 0x1, 0x5, 0x8c, 0xdb, 0x59, 0x0, [], [{}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x40, 0x7f, 0x9}}, {}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x20, 0x2}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0x0, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x150, 0x0, 0x20, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, [{0x16, &(0x7f0000000100)=@string={0x16, 0x3, "a98f2ea5710ee24a966ef116bee09687f4305495"}}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0xc00000) syz_usb_connect$cdc_ecm(0x2, 0x66, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x4, 0xa0, 0x40, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x307b}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x3e92, 0x81}, [@obex={0x5, 0x24, 0x15, 0xfcd4}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @obex={0x5, 0x24, 0x15, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x66, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x7, 0x7f, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x7ff, 0x9f, 0x6, 0xe2}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x4, 0x0, 0x1, 0x0, 0x40}, 0x25, &(0x7f0000000300)={0x5, 0xf, 0x25, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x0, 0x1, 0x0, 0xdf}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x4, 0x8, 0xffff}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x0, 0x0, 0x9, 0x9}]}, 0x5, [{0xc5, &(0x7f00000005c0)=ANY=[]}, {0x2, &(0x7f0000000500)=@string={0x2}}, {0x37, &(0x7f0000000340)=@string={0x37, 0x3, "d6d9d0f25e9114fb69d6974136e94c8ca465f6cd441a94d32ed18829df76052a6fcc0366a43e8d7092e8ce1bab61878ea6c8266002"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x0, 0x0}]}) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000080)=""/49) [ 453.295105][ T3544] usb 3-1: Using ep0 maxpacket: 16 [ 453.415261][ T3544] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.428794][ T3544] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.441168][ T3544] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 453.451046][ T3544] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:14:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0x70}}, 0x0) 23:14:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r0, &(0x7f0000000680)=""/156, 0x9c) [ 453.562503][ T1193] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.683016][ T3544] usb 3-1: config 0 descriptor?? 23:14:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x80000008, 0x6, 0x3}]}) 23:14:15 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000080)=0x398, 0x4) read(r0, &(0x7f0000000680)=""/156, 0x9c) [ 453.913967][ T3542] usb 4-1: new high-speed USB device number 5 using dummy_hcd 23:14:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0x70}}, 0x0) [ 454.138563][ T7258] UDC core: couldn't find an available UDC or it's busy: -16 [ 454.146735][ T7258] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 454.164048][ T3542] usb 4-1: Using ep0 maxpacket: 8 [ 454.238783][ T7258] UDC core: couldn't find an available UDC or it's busy: -16 [ 454.246874][ T7258] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 454.285978][ T3542] usb 4-1: config 0 has an invalid interface number: 54 but max is 0 [ 454.294894][ T3542] usb 4-1: config 0 has no interface number 0 [ 454.301501][ T3542] usb 4-1: config 0 interface 54 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 454.313150][ T3542] usb 4-1: config 0 interface 54 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.328968][ T3542] usb 4-1: config 0 interface 54 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 454.341718][ T3542] usb 4-1: config 0 interface 54 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 454.351989][ T3542] usb 4-1: config 0 interface 54 has no altsetting 0 [ 454.456490][ T3544] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0004/input/input26 [ 454.561828][ T3544] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0004/input/input27 [ 454.737764][ T3544] kye 0003:0458:5019.0004: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 454.765245][ T3542] usb 4-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=20.f6 [ 454.775145][ T3542] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.783481][ T3542] usb 4-1: Product: syz [ 454.788580][ T3542] usb 4-1: Manufacturer: syz [ 454.794246][ T3542] usb 4-1: SerialNumber: syz [ 454.855034][ T3544] usb 3-1: USB disconnect, device number 59 [ 454.900202][ T3542] usb 4-1: config 0 descriptor?? [ 454.959936][ T3542] r8712u: register rtl8712_netdev_ops to netdev_ops [ 454.967400][ T3542] usb 4-1: r8712u: USB_SPEED_HIGH with 3 endpoints [ 455.150266][ T7278] UDC core: couldn't find an available UDC or it's busy: -16 [ 455.159615][ T7278] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 455.214437][ T3542] ===================================================== [ 455.222273][ T3542] BUG: KMSAN: uninit-value in r871xu_drv_init+0x1735/0x3050 [ 455.231440][ T3542] r871xu_drv_init+0x1735/0x3050 [ 455.236712][ T3542] usb_probe_interface+0xc4b/0x11f0 [ 455.242307][ T3542] really_probe+0x4b7/0xea0 [ 455.247416][ T3542] __driver_probe_device+0x2fa/0x3d0 [ 455.252813][ T3542] driver_probe_device+0x72/0x7a0 [ 455.258163][ T3542] __device_attach_driver+0x5d2/0x800 [ 455.263776][ T3542] bus_for_each_drv+0x1fc/0x360 [ 455.268808][ T3542] __device_attach+0x433/0x6d0 [ 455.273928][ T3542] device_initial_probe+0x2e/0x40 [ 455.279199][ T3542] bus_probe_device+0x13c/0x3b0 [ 455.284563][ T3542] device_add+0x1d4b/0x26c0 [ 455.289205][ T3542] usb_set_configuration+0x30f8/0x37e0 [ 455.295519][ T3542] usb_generic_driver_probe+0x105/0x290 [ 455.301836][ T3542] usb_probe_device+0x288/0x490 [ 455.307107][ T3542] really_probe+0x4b7/0xea0 [ 455.312047][ T3542] __driver_probe_device+0x2fa/0x3d0 [ 455.317937][ T3542] driver_probe_device+0x72/0x7a0 [ 455.323049][ T3542] __device_attach_driver+0x5d2/0x800 [ 455.329270][ T3542] bus_for_each_drv+0x1fc/0x360 [ 455.334362][ T3542] __device_attach+0x433/0x6d0 [ 455.340060][ T3542] device_initial_probe+0x2e/0x40 [ 455.345692][ T3542] bus_probe_device+0x13c/0x3b0 [ 455.350618][ T3542] device_add+0x1d4b/0x26c0 [ 455.355273][ T3542] usb_new_device+0x17a1/0x2360 [ 455.360364][ T3542] hub_event+0x5556/0x8030 [ 455.365192][ T3542] process_one_work+0xb27/0x13e0 [ 455.370278][ T3542] worker_thread+0x1076/0x1d60 [ 455.375627][ T3542] kthread+0x31b/0x430 [ 455.379828][ T3542] ret_from_fork+0x1f/0x30 [ 455.384595][ T3542] [ 455.387061][ T3542] Local variable data created at: [ 455.392204][ T3542] usb_read8+0x44/0xe0 [ 455.396516][ T3542] r8712_read8+0x74/0xa0 [ 455.401042][ T3542] [ 455.403433][ T3542] CPU: 1 PID: 3542 Comm: kworker/1:4 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 455.413486][ T3542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.423659][ T3542] Workqueue: usb_hub_wq hub_event [ 455.429394][ T3542] ===================================================== [ 455.436450][ T3542] Disabling lock debugging due to kernel taint [ 455.442627][ T3542] Kernel panic - not syncing: kmsan.panic set ... [ 455.449084][ T3542] CPU: 1 PID: 3542 Comm: kworker/1:4 Tainted: G B 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 455.460427][ T3542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.471009][ T3542] Workqueue: usb_hub_wq hub_event [ 455.476096][ T3542] Call Trace: [ 455.479530][ T3542] [ 455.482485][ T3542] dump_stack_lvl+0x1c8/0x256 [ 455.487404][ T3542] dump_stack+0x1a/0x1c [ 455.491610][ T3542] panic+0x4d3/0xc69 [ 455.495639][ T3542] ? get_taint+0x1/0x50 [ 455.500642][ T3542] ? add_taint+0x104/0x1a0 [ 455.505112][ T3542] ? console_unlock+0x1c70/0x20c0 [ 455.510261][ T3542] kmsan_report+0x2cc/0x2d0 [ 455.514846][ T3542] ? memcg_slab_free_hook+0x252/0x9c0 [ 455.520573][ T3542] ? __msan_warning+0x92/0x110 [ 455.525497][ T3542] ? r871xu_drv_init+0x1735/0x3050 [ 455.531122][ T3542] ? usb_probe_interface+0xc4b/0x11f0 [ 455.536735][ T3542] ? really_probe+0x4b7/0xea0 [ 455.541501][ T3542] ? __driver_probe_device+0x2fa/0x3d0 [ 455.547027][ T3542] ? driver_probe_device+0x72/0x7a0 [ 455.552275][ T3542] ? __device_attach_driver+0x5d2/0x800 [ 455.558131][ T3542] ? bus_for_each_drv+0x1fc/0x360 [ 455.563220][ T3542] ? __device_attach+0x433/0x6d0 [ 455.568303][ T3542] ? device_initial_probe+0x2e/0x40 [ 455.573846][ T3542] ? bus_probe_device+0x13c/0x3b0 [ 455.578935][ T3542] ? device_add+0x1d4b/0x26c0 [ 455.583645][ T3542] ? usb_set_configuration+0x30f8/0x37e0 [ 455.589325][ T3542] ? usb_generic_driver_probe+0x105/0x290 [ 455.595387][ T3542] ? usb_probe_device+0x288/0x490 [ 455.600723][ T3542] ? really_probe+0x4b7/0xea0 [ 455.605492][ T3542] ? __driver_probe_device+0x2fa/0x3d0 [ 455.611119][ T3542] ? driver_probe_device+0x72/0x7a0 [ 455.616502][ T3542] ? __device_attach_driver+0x5d2/0x800 [ 455.623132][ T3542] ? bus_for_each_drv+0x1fc/0x360 [ 455.628721][ T3542] ? __device_attach+0x433/0x6d0 [ 455.633734][ T3542] ? device_initial_probe+0x2e/0x40 [ 455.640913][ T3542] ? bus_probe_device+0x13c/0x3b0 [ 455.646121][ T3542] ? device_add+0x1d4b/0x26c0 [ 455.650864][ T3542] ? usb_new_device+0x17a1/0x2360 [ 455.656283][ T3542] ? hub_event+0x5556/0x8030 [ 455.660928][ T3542] ? process_one_work+0xb27/0x13e0 [ 455.666552][ T3542] ? worker_thread+0x1076/0x1d60 [ 455.671548][ T3542] ? kthread+0x31b/0x430 [ 455.675834][ T3542] ? ret_from_fork+0x1f/0x30 [ 455.680495][ T3542] ? r8712_usbctrl_vendorreq+0x34c/0x3d0 [ 455.686450][ T3542] ? kmsan_get_metadata+0x33/0x220 [ 455.692223][ T3542] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 455.698185][ T3542] ? usb_read8+0x99/0xe0 [ 455.702654][ T3542] ? r8712_usb_set_intf_ops+0x120/0x120 [ 455.708629][ T3542] __msan_warning+0x92/0x110 [ 455.713463][ T3542] r871xu_drv_init+0x1735/0x3050 [ 455.718470][ T3542] ? __pm_runtime_set_status+0x1868/0x1bc0 [ 455.724448][ T3542] ? kmsan_get_metadata+0x33/0x220 [ 455.729651][ T3542] ? r871x_dev_unload+0x1f0/0x1f0 [ 455.734909][ T3542] ? r871x_dev_unload+0x1f0/0x1f0 [ 455.739986][ T3542] usb_probe_interface+0xc4b/0x11f0 [ 455.745353][ T3542] ? usb_register_driver+0x5f0/0x5f0 [ 455.750945][ T3542] really_probe+0x4b7/0xea0 [ 455.755715][ T3542] ? kmsan_get_metadata+0x33/0x220 [ 455.760915][ T3542] __driver_probe_device+0x2fa/0x3d0 [ 455.766270][ T3542] driver_probe_device+0x72/0x7a0 [ 455.771482][ T3542] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 455.777386][ T3542] __device_attach_driver+0x5d2/0x800 [ 455.783493][ T3542] ? kmsan_get_metadata+0x33/0x220 [ 455.788722][ T3542] bus_for_each_drv+0x1fc/0x360 [ 455.793632][ T3542] ? deferred_probe_work_func+0x4d0/0x4d0 [ 455.799860][ T3542] __device_attach+0x433/0x6d0 [ 455.804700][ T3542] device_initial_probe+0x2e/0x40 [ 455.809872][ T3542] bus_probe_device+0x13c/0x3b0 [ 455.815003][ T3542] device_add+0x1d4b/0x26c0 [ 455.820106][ T3542] usb_set_configuration+0x30f8/0x37e0 [ 455.825754][ T3542] usb_generic_driver_probe+0x105/0x290 [ 455.831363][ T3542] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 455.837481][ T3542] ? usb_choose_configuration+0xdc0/0xdc0 [ 455.843339][ T3542] ? usb_choose_configuration+0xdc0/0xdc0 [ 455.849149][ T3542] usb_probe_device+0x288/0x490 [ 455.854308][ T3542] ? usb_register_device_driver+0x440/0x440 [ 455.860600][ T3542] really_probe+0x4b7/0xea0 [ 455.865282][ T3542] ? kmsan_get_metadata+0x33/0x220 [ 455.870635][ T3542] __driver_probe_device+0x2fa/0x3d0 [ 455.875992][ T3542] driver_probe_device+0x72/0x7a0 [ 455.881576][ T3542] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 455.887557][ T3542] __device_attach_driver+0x5d2/0x800 [ 455.893272][ T3542] ? kmsan_get_metadata+0x33/0x220 [ 455.898442][ T3542] bus_for_each_drv+0x1fc/0x360 [ 455.903438][ T3542] ? deferred_probe_work_func+0x4d0/0x4d0 [ 455.909456][ T3542] __device_attach+0x433/0x6d0 [ 455.914312][ T3542] device_initial_probe+0x2e/0x40 [ 455.920010][ T3542] bus_probe_device+0x13c/0x3b0 [ 455.925147][ T3542] device_add+0x1d4b/0x26c0 [ 455.929993][ T3542] usb_new_device+0x17a1/0x2360 [ 455.935016][ T3542] hub_event+0x5556/0x8030 [ 455.939517][ T3542] ? kmsan_get_metadata+0x33/0x220 [ 455.944702][ T3542] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 455.950652][ T3542] ? led_work+0x730/0x730 [ 455.955819][ T3542] ? led_work+0x730/0x730 [ 455.960189][ T3542] process_one_work+0xb27/0x13e0 [ 455.965540][ T3542] worker_thread+0x1076/0x1d60 [ 455.970385][ T3542] kthread+0x31b/0x430 [ 455.974507][ T3542] ? worker_clr_flags+0x2b0/0x2b0 [ 455.979618][ T3542] ? kthread_blkcg+0x120/0x120 [ 455.984453][ T3542] ret_from_fork+0x1f/0x30 [ 455.988960][ T3542] [ 455.992235][ T3542] Kernel Offset: disabled [ 455.996595][ T3542] Rebooting in 86400 seconds..